{
  "spdxVersion": "SPDX-2.3",
  "dataLicense": "CC0-1.0",
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "build/payload/openbao-v2.7.1-tpio.1",
  "documentNamespace": "http://trivy.dev/container_image/build/payload/openbao-v2.7.1-tpio.1-c6306bdf-6bc5-4b6e-ba1b-986596691008",
  "creationInfo": {
    "creators": [
      "Organization: aquasecurity",
      "Tool: trivy-0.75.0"
    ],
    "created": "2026-10-22T15:17:21Z"
  },
  "packages": [
    {
      "name": "usr/bin/bao",
      "SPDXID": "SPDXRef-Application-97956e214ca4d071",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "primaryPackagePurpose": "APPLICATION",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "Class: lang-pkgs"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "Type: gobinary"
        }
      ]
    },
    {
      "name": "build/payload/openbao-v2.7.1-tpio.1",
      "SPDXID": "SPDXRef-ContainerImage-9fa127ceb3db8304",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "primaryPackagePurpose": "CONTAINER",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "DiffID: sha256:1391b27f02ddac96279f97bcaf6589aeabccd31387596db53ab19b4c2d71c42b"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "DiffID: sha256:79ce3db7c2ecba1aeee3357a96b8347a67ee022013943ab38c0a2e8f7abf80af"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "DiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "DiffID: sha256:c31cc0ecd47f82cf9a8c77b50048d5eb3288325db33b9eba54860fe5bba85110"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "ImageID: sha256:72aa9d2f74a47a76a97cfd743380eae01c26ed0c74c66ad9ed5a667ddaf78c7c"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "Labels:io.buildah.version: 1.43.1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "Labels:io.thepeoples.hardened.ladder: b+minimize"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "Labels:io.thepeoples.hardened.source-status: upstream OpenBao release tarball plus this Containerfile, Ember UI rebuild, and recorded module changes"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "Labels:io.thepeoples.hardened.toolchain: docker.io/library/golang:1.27.3-alpine3.24@sha256:f2c872bcee949b7be9c490efd02b48a8a2fbf947cdf533f1c58525ec9d8170fd"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "Labels:io.thepeoples.hardened.ui-toolchain: docker.io/library/node:20.20.0-alpine3.23@sha256:09e2b3d9726018aecf269bd35325f46bf75046a643a66d28360ec71132750ec8"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "Labels:io.thepeoples.hardened.upstream: quay.io/openbao/openbao:2.7.1@sha256:6d2b93856e3fcf7b18ad855a0b51eaba474dc8b79cf554379ea32034797d2acf"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "Labels:org.opencontainers.image.licenses: MPL-2.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "Labels:org.opencontainers.image.revision: a5db72cef75c24b920ade02065b18dd8eb666bac"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "Labels:org.opencontainers.image.source: https://github.com/openbao/openbao"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "Labels:org.opencontainers.image.version: v2.7.1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "SchemaVersion: 2"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "Size: 132746240"
        }
      ]
    },
    {
      "name": "./api",
      "SPDXID": "SPDXRef-Package-395e71ab43878fa1",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: ./api"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "./api/auth/kubernetes",
      "SPDXID": "SPDXRef-Package-1a3a0c7b2d62b06d",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: ./api/auth/kubernetes"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "./internal/helper/stubbolt",
      "SPDXID": "SPDXRef-Package-8eba47af6bdf54ac",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: ./internal/helper/stubbolt"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "./sdk",
      "SPDXID": "SPDXRef-Package-3417c9d29fb93932",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: ./sdk"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "cel.dev/cel-go",
      "SPDXID": "SPDXRef-Package-e04b65a2d18fdb68",
      "versionInfo": "v0.32.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/cel.dev/cel-go@v0.32.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: cel.dev/cel-go@v0.32.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "cel.dev/expr",
      "SPDXID": "SPDXRef-Package-fb792e7cb02961f3",
      "versionInfo": "v0.25.2",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/cel.dev/expr@v0.25.2"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: cel.dev/expr@v0.25.2"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "cloud.google.com/go/auth",
      "SPDXID": "SPDXRef-Package-4c2a789862c069f9",
      "versionInfo": "v0.23.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/cloud.google.com/go/auth@v0.23.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: cloud.google.com/go/auth@v0.23.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "cloud.google.com/go/auth/oauth2adapt",
      "SPDXID": "SPDXRef-Package-b06c2dbcaffa90d0",
      "versionInfo": "v0.2.8",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/cloud.google.com/go/auth/oauth2adapt@v0.2.8"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: cloud.google.com/go/auth/oauth2adapt@v0.2.8"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "cloud.google.com/go/compute/metadata",
      "SPDXID": "SPDXRef-Package-4d8764d20eb21123",
      "versionInfo": "v0.9.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/cloud.google.com/go/compute/metadata@v0.9.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: cloud.google.com/go/compute/metadata@v0.9.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "cloud.google.com/go/monitoring",
      "SPDXID": "SPDXRef-Package-f8ac7e130051d494",
      "versionInfo": "v1.30.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/cloud.google.com/go/monitoring@v1.30.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: cloud.google.com/go/monitoring@v1.30.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "filippo.io/edwards25519",
      "SPDXID": "SPDXRef-Package-940d985732366422",
      "versionInfo": "v1.2.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/filippo.io/edwards25519@v1.2.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: filippo.io/edwards25519@v1.2.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/Azure/azure-sdk-for-go/sdk/azcore",
      "SPDXID": "SPDXRef-Package-e819502bca73782",
      "versionInfo": "v1.21.1",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/azcore@v1.21.1"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/Azure/azure-sdk-for-go/sdk/azcore@v1.21.1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/Azure/azure-sdk-for-go/sdk/azidentity",
      "SPDXID": "SPDXRef-Package-f1d57513b3239d4c",
      "versionInfo": "v1.13.1",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/azidentity@v1.13.1"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.13.1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/Azure/azure-sdk-for-go/sdk/internal",
      "SPDXID": "SPDXRef-Package-afbb65487a188a25",
      "versionInfo": "v1.12.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/internal@v1.12.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/Azure/azure-sdk-for-go/sdk/internal@v1.12.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork",
      "SPDXID": "SPDXRef-Package-428a280cd7bb6ab7",
      "versionInfo": "v1.1.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork@v1.1.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork@v1.1.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/AzureAD/microsoft-authentication-library-for-go",
      "SPDXID": "SPDXRef-Package-224e7fd9ca2056a5",
      "versionInfo": "v1.6.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/azuread/microsoft-authentication-library-for-go@v1.6.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/AzureAD/microsoft-authentication-library-for-go@v1.6.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/BurntSushi/toml",
      "SPDXID": "SPDXRef-Package-ac7e98aed7fe440a",
      "versionInfo": "v1.5.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/burntsushi/toml@v1.5.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/BurntSushi/toml@v1.5.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/DataDog/datadog-go",
      "SPDXID": "SPDXRef-Package-c93a00e557091f23",
      "versionInfo": "v4.8.3+incompatible",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/datadog/datadog-go@v4.8.3%2Bincompatible"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/DataDog/datadog-go@v4.8.3+incompatible"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/Masterminds/goutils",
      "SPDXID": "SPDXRef-Package-9d356f051059982e",
      "versionInfo": "v1.1.1",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/masterminds/goutils@v1.1.1"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/Masterminds/goutils@v1.1.1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/Masterminds/semver/v3",
      "SPDXID": "SPDXRef-Package-a5efbbaf1cb53b52",
      "versionInfo": "v3.4.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/masterminds/semver/v3@v3.4.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/Masterminds/semver/v3@v3.4.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/Masterminds/sprig/v3",
      "SPDXID": "SPDXRef-Package-af8b7de1e496f4d8",
      "versionInfo": "v3.2.3",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/masterminds/sprig/v3@v3.2.3"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/Masterminds/sprig/v3@v3.2.3"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/ProtonMail/go-crypto",
      "SPDXID": "SPDXRef-Package-f4f428fa7e964477",
      "versionInfo": "v1.4.1",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/protonmail/go-crypto@v1.4.1"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/ProtonMail/go-crypto@v1.4.1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/TritonDataCenter/triton-go/v2",
      "SPDXID": "SPDXRef-Package-b41aa3274e69968b",
      "versionInfo": "v2.0.0-pre4",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/tritondatacenter/triton-go/v2@v2.0.0-pre4"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/TritonDataCenter/triton-go/v2@v2.0.0-pre4"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/agext/levenshtein",
      "SPDXID": "SPDXRef-Package-3a0e3c347fabdaad",
      "versionInfo": "v1.2.1",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/agext/levenshtein@v1.2.1"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/agext/levenshtein@v1.2.1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/antlr4-go/antlr/v4",
      "SPDXID": "SPDXRef-Package-cb47159ac837bed3",
      "versionInfo": "v4.13.1",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/antlr4-go/antlr/v4@v4.13.1"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/antlr4-go/antlr/v4@v4.13.1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/apparentlymart/go-textseg/v15",
      "SPDXID": "SPDXRef-Package-b1b2a6546b8f13a3",
      "versionInfo": "v15.0.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/apparentlymart/go-textseg/v15@v15.0.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/apparentlymart/go-textseg/v15@v15.0.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/armon/go-metrics",
      "SPDXID": "SPDXRef-Package-49124ec2c6097e91",
      "versionInfo": "v0.4.1",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/armon/go-metrics@v0.4.1"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/armon/go-metrics@v0.4.1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/armon/go-radix",
      "SPDXID": "SPDXRef-Package-213141545fd6a08a",
      "versionInfo": "v1.0.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/armon/go-radix@v1.0.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/armon/go-radix@v1.0.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/aws/aws-sdk-go-v2",
      "SPDXID": "SPDXRef-Package-d1fe60259d2db765",
      "versionInfo": "v1.34.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.34.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/aws/aws-sdk-go-v2@v1.34.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/aws/aws-sdk-go-v2/config",
      "SPDXID": "SPDXRef-Package-d5aedcfc8b3bd50",
      "versionInfo": "v1.29.1",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.29.1"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/aws/aws-sdk-go-v2/config@v1.29.1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/aws/aws-sdk-go-v2/credentials",
      "SPDXID": "SPDXRef-Package-1a5d0b29f74dfacf",
      "versionInfo": "v1.17.54",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2/credentials@v1.17.54"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/aws/aws-sdk-go-v2/credentials@v1.17.54"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/aws/aws-sdk-go-v2/feature/ec2/imds",
      "SPDXID": "SPDXRef-Package-7ddd52cbe8eca93c",
      "versionInfo": "v1.16.24",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.16.24"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.16.24"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/aws/aws-sdk-go-v2/internal/configsources",
      "SPDXID": "SPDXRef-Package-989fabda7f72b4aa",
      "versionInfo": "v1.3.28",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.3.28"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/aws/aws-sdk-go-v2/internal/configsources@v1.3.28"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/aws/aws-sdk-go-v2/internal/endpoints/v2",
      "SPDXID": "SPDXRef-Package-e9e6c99843fd8d66",
      "versionInfo": "v2.6.28",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.6.28"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.6.28"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/aws/aws-sdk-go-v2/internal/ini",
      "SPDXID": "SPDXRef-Package-ab3a398bae79caba",
      "versionInfo": "v1.8.1",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/ini@v1.8.1"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/aws/aws-sdk-go-v2/internal/ini@v1.8.1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/aws/aws-sdk-go-v2/service/ec2",
      "SPDXID": "SPDXRef-Package-763219f4a63827a5",
      "versionInfo": "v1.200.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ec2@v1.200.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/aws/aws-sdk-go-v2/service/ec2@v1.200.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/aws/aws-sdk-go-v2/service/ecs",
      "SPDXID": "SPDXRef-Package-f35d52e8b36517a0",
      "versionInfo": "v1.53.8",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ecs@v1.53.8"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/aws/aws-sdk-go-v2/service/ecs@v1.53.8"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding",
      "SPDXID": "SPDXRef-Package-89af326154bc8a1",
      "versionInfo": "v1.12.1",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding@v1.12.1"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding@v1.12.1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/aws/aws-sdk-go-v2/service/internal/presigned-url",
      "SPDXID": "SPDXRef-Package-4d5648efca0707d9",
      "versionInfo": "v1.12.9",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.12.9"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.12.9"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/aws/aws-sdk-go-v2/service/sso",
      "SPDXID": "SPDXRef-Package-b737822ec3903239",
      "versionInfo": "v1.24.11",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sso@v1.24.11"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/aws/aws-sdk-go-v2/service/sso@v1.24.11"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/aws/aws-sdk-go-v2/service/ssooidc",
      "SPDXID": "SPDXRef-Package-f7122ffc8ee80418",
      "versionInfo": "v1.28.10",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.28.10"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.28.10"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/aws/aws-sdk-go-v2/service/sts",
      "SPDXID": "SPDXRef-Package-8761632f12f2ec8c",
      "versionInfo": "v1.33.9",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sts@v1.33.9"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/aws/aws-sdk-go-v2/service/sts@v1.33.9"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/aws/smithy-go",
      "SPDXID": "SPDXRef-Package-8984172e33be0303",
      "versionInfo": "v1.22.2",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/aws/smithy-go@v1.22.2"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/aws/smithy-go@v1.22.2"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/beorn7/perks",
      "SPDXID": "SPDXRef-Package-8dc3a9719862612f",
      "versionInfo": "v1.0.1",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/beorn7/perks@v1.0.1"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/beorn7/perks@v1.0.1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/bgentry/speakeasy",
      "SPDXID": "SPDXRef-Package-b82a767e69292189",
      "versionInfo": "v0.2.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/bgentry/speakeasy@v0.2.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/bgentry/speakeasy@v0.2.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/boombuler/barcode",
      "SPDXID": "SPDXRef-Package-2bcf67669c74416e",
      "versionInfo": "v1.0.1",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/boombuler/barcode@v1.0.1"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/boombuler/barcode@v1.0.1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/caddyserver/certmagic",
      "SPDXID": "SPDXRef-Package-4308e70cf1fbf1fd",
      "versionInfo": "v0.25.4",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/caddyserver/certmagic@v0.25.4"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/caddyserver/certmagic@v0.25.4"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/caddyserver/zerossl",
      "SPDXID": "SPDXRef-Package-1c8017c0e6b6e5e7",
      "versionInfo": "v0.1.5",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/caddyserver/zerossl@v0.1.5"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/caddyserver/zerossl@v0.1.5"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/cenkalti/backoff/v4",
      "SPDXID": "SPDXRef-Package-d055010e82c79324",
      "versionInfo": "v4.3.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/cenkalti/backoff/v4@v4.3.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/cenkalti/backoff/v4@v4.3.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/cenkalti/backoff/v5",
      "SPDXID": "SPDXRef-Package-e22dbbfafc3648d7",
      "versionInfo": "v5.0.3",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/cenkalti/backoff/v5@v5.0.3"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/cenkalti/backoff/v5@v5.0.3"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/cespare/xxhash/v2",
      "SPDXID": "SPDXRef-Package-8ddd9c2029e2cb59",
      "versionInfo": "v2.3.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/cespare/xxhash/v2@v2.3.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/cespare/xxhash/v2@v2.3.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/circonus-labs/circonus-gometrics",
      "SPDXID": "SPDXRef-Package-e96197d9fdc06d38",
      "versionInfo": "v2.3.1+incompatible",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/circonus-labs/circonus-gometrics@v2.3.1%2Bincompatible"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/circonus-labs/circonus-gometrics@v2.3.1+incompatible"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/circonus-labs/circonusllhist",
      "SPDXID": "SPDXRef-Package-4a2682febeb3cde8",
      "versionInfo": "v0.1.3",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/circonus-labs/circonusllhist@v0.1.3"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/circonus-labs/circonusllhist@v0.1.3"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/cloudflare/circl",
      "SPDXID": "SPDXRef-Package-757c0655849f1a",
      "versionInfo": "v1.6.3",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/cloudflare/circl@v1.6.3"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/cloudflare/circl@v1.6.3"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/cockroachdb/errors",
      "SPDXID": "SPDXRef-Package-b78bd81d2c9c4af",
      "versionInfo": "v1.11.3",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/cockroachdb/errors@v1.11.3"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/cockroachdb/errors@v1.11.3"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/cockroachdb/fifo",
      "SPDXID": "SPDXRef-Package-befc5d6c05444551",
      "versionInfo": "v0.0.0-20240606204812-0bbfbd93a7ce",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/cockroachdb/fifo@v0.0.0-20240606204812-0bbfbd93a7ce"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/cockroachdb/fifo@v0.0.0-20240606204812-0bbfbd93a7ce"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/cockroachdb/logtags",
      "SPDXID": "SPDXRef-Package-9e7740b3f13b5e2c",
      "versionInfo": "v0.0.0-20230118201751-21c54148d20b",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/cockroachdb/logtags@v0.0.0-20230118201751-21c54148d20b"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/cockroachdb/logtags@v0.0.0-20230118201751-21c54148d20b"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/cockroachdb/pebble",
      "SPDXID": "SPDXRef-Package-d7681e563de6a20c",
      "versionInfo": "v1.1.5",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/cockroachdb/pebble@v1.1.5"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/cockroachdb/pebble@v1.1.5"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/cockroachdb/redact",
      "SPDXID": "SPDXRef-Package-f3c5d29278bd114c",
      "versionInfo": "v1.1.5",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/cockroachdb/redact@v1.1.5"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/cockroachdb/redact@v1.1.5"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/cockroachdb/tokenbucket",
      "SPDXID": "SPDXRef-Package-717dde2c5d09c759",
      "versionInfo": "v0.0.0-20230807174530-cc333fc44b06",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/cockroachdb/tokenbucket@v0.0.0-20230807174530-cc333fc44b06"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/cockroachdb/tokenbucket@v0.0.0-20230807174530-cc333fc44b06"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/containerd/errdefs",
      "SPDXID": "SPDXRef-Package-96338f7bc8aedac0",
      "versionInfo": "v1.0.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/containerd/errdefs@v1.0.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/containerd/errdefs@v1.0.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/containerd/errdefs/pkg",
      "SPDXID": "SPDXRef-Package-c94bef8a6ce77976",
      "versionInfo": "v0.3.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/containerd/errdefs/pkg@v0.3.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/containerd/errdefs/pkg@v0.3.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/containerd/log",
      "SPDXID": "SPDXRef-Package-63818fac64bd200",
      "versionInfo": "v0.1.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/containerd/log@v0.1.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/containerd/log@v0.1.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/containerd/platforms",
      "SPDXID": "SPDXRef-Package-7af6f6f9e22fa253",
      "versionInfo": "v0.2.1",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/containerd/platforms@v0.2.1"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/containerd/platforms@v0.2.1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/coreos/go-oidc/v3",
      "SPDXID": "SPDXRef-Package-f9063d83a084b221",
      "versionInfo": "v3.11.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/coreos/go-oidc/v3@v3.11.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/coreos/go-oidc/v3@v3.11.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/davecgh/go-spew",
      "SPDXID": "SPDXRef-Package-9c1a89e5b74eefc6",
      "versionInfo": "v1.1.2-0.20180830191138-d8f796af33cc",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/denverdino/aliyungo",
      "SPDXID": "SPDXRef-Package-c4753ec241f7f06e",
      "versionInfo": "v0.0.0-20190125010748-a747050bb1ba",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/denverdino/aliyungo@v0.0.0-20190125010748-a747050bb1ba"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/denverdino/aliyungo@v0.0.0-20190125010748-a747050bb1ba"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/digitalocean/godo",
      "SPDXID": "SPDXRef-Package-425b468784933e53",
      "versionInfo": "v1.7.5",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/digitalocean/godo@v1.7.5"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/digitalocean/godo@v1.7.5"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/distribution/reference",
      "SPDXID": "SPDXRef-Package-69eb27f395d438ae",
      "versionInfo": "v0.6.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/distribution/reference@v0.6.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/distribution/reference@v0.6.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/docker/cli",
      "SPDXID": "SPDXRef-Package-99a7a517e6ba8959",
      "versionInfo": "v29.6.2+incompatible",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/docker/cli@v29.6.2%2Bincompatible"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/docker/cli@v29.6.2+incompatible"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/docker/docker-credential-helpers",
      "SPDXID": "SPDXRef-Package-34d28a1b6b95ffcc",
      "versionInfo": "v0.9.3",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/docker/docker-credential-helpers@v0.9.3"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/docker/docker-credential-helpers@v0.9.3"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/docker/go-connections",
      "SPDXID": "SPDXRef-Package-4e889be419f25c6b",
      "versionInfo": "v0.7.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/docker/go-connections@v0.7.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/docker/go-connections@v0.7.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/docker/go-units",
      "SPDXID": "SPDXRef-Package-6251a0c39a4dc2ef",
      "versionInfo": "v0.5.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/docker/go-units@v0.5.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/docker/go-units@v0.5.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/duosecurity/duo_api_golang",
      "SPDXID": "SPDXRef-Package-65830d64e59d5dcc",
      "versionInfo": "v0.2.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/duosecurity/duo_api_golang@v0.2.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/duosecurity/duo_api_golang@v0.2.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/emicklei/go-restful/v3",
      "SPDXID": "SPDXRef-Package-6a951480f1923192",
      "versionInfo": "v3.13.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/emicklei/go-restful/v3@v3.13.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/emicklei/go-restful/v3@v3.13.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/evanphx/json-patch/v5",
      "SPDXID": "SPDXRef-Package-301dceb0385b9092",
      "versionInfo": "v5.9.11",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/evanphx/json-patch/v5@v5.9.11"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/evanphx/json-patch/v5@v5.9.11"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/fatih/color",
      "SPDXID": "SPDXRef-Package-968c86d160f53402",
      "versionInfo": "v1.19.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/fatih/color@v1.19.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/fatih/color@v1.19.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/felixge/httpsnoop",
      "SPDXID": "SPDXRef-Package-b27a30caa4b7d5f9",
      "versionInfo": "v1.0.4",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/felixge/httpsnoop@v1.0.4"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/felixge/httpsnoop@v1.0.4"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/fxamacker/cbor/v2",
      "SPDXID": "SPDXRef-Package-cd51df514c2afb13",
      "versionInfo": "v2.9.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/fxamacker/cbor/v2@v2.9.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/fxamacker/cbor/v2@v2.9.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/getsentry/sentry-go",
      "SPDXID": "SPDXRef-Package-4e8987734e00650d",
      "versionInfo": "v0.27.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/getsentry/sentry-go@v0.27.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/getsentry/sentry-go@v0.27.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/go-jose/go-jose/v3",
      "SPDXID": "SPDXRef-Package-9cdafb1c5fc598e7",
      "versionInfo": "v3.0.5",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/go-jose/go-jose/v3@v3.0.5"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/go-jose/go-jose/v3@v3.0.5"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/go-jose/go-jose/v4",
      "SPDXID": "SPDXRef-Package-ac6f6c86af3c3663",
      "versionInfo": "v4.1.4",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/go-jose/go-jose/v4@v4.1.4"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/go-jose/go-jose/v4@v4.1.4"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/go-logr/logr",
      "SPDXID": "SPDXRef-Package-4ed20085868182a6",
      "versionInfo": "v1.4.4",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/go-logr/logr@v1.4.4"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/go-logr/logr@v1.4.4"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/go-logr/stdr",
      "SPDXID": "SPDXRef-Package-6453a0b3a42c41f1",
      "versionInfo": "v1.2.2",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/go-logr/stdr@v1.2.2"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/go-logr/stdr@v1.2.2"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/go-openapi/jsonpointer",
      "SPDXID": "SPDXRef-Package-6a43e8d6002efe60",
      "versionInfo": "v0.21.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/go-openapi/jsonpointer@v0.21.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/go-openapi/jsonpointer@v0.21.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/go-openapi/jsonreference",
      "SPDXID": "SPDXRef-Package-db403f520e2d21c8",
      "versionInfo": "v0.20.2",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/go-openapi/jsonreference@v0.20.2"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/go-openapi/jsonreference@v0.20.2"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/go-openapi/swag",
      "SPDXID": "SPDXRef-Package-135b5d26b0de84ea",
      "versionInfo": "v0.23.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/go-openapi/swag@v0.23.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/go-openapi/swag@v0.23.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/go-resty/resty/v2",
      "SPDXID": "SPDXRef-Package-d18b740bf1dc1e24",
      "versionInfo": "v2.16.5",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/go-resty/resty/v2@v2.16.5"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/go-resty/resty/v2@v2.16.5"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/go-sql-driver/mysql",
      "SPDXID": "SPDXRef-Package-a9b688f0e3234259",
      "versionInfo": "v1.10.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/go-sql-driver/mysql@v1.10.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/go-sql-driver/mysql@v1.10.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/go-test/deep",
      "SPDXID": "SPDXRef-Package-1d3c92103f0a0c91",
      "versionInfo": "v1.1.1",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/go-test/deep@v1.1.1"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/go-test/deep@v1.1.1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/go-viper/mapstructure/v2",
      "SPDXID": "SPDXRef-Package-b1aa6f574198915",
      "versionInfo": "v2.5.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/go-viper/mapstructure/v2@v2.5.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/go-viper/mapstructure/v2@v2.5.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/gocql/gocql",
      "SPDXID": "SPDXRef-Package-b3cc3ebf01569359",
      "versionInfo": "v1.7.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/gocql/gocql@v1.7.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/gocql/gocql@v1.7.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/gogo/protobuf",
      "SPDXID": "SPDXRef-Package-a1280f1f0a8e633b",
      "versionInfo": "v1.3.2",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/gogo/protobuf@v1.3.2"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/gogo/protobuf@v1.3.2"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/golang-jwt/jwt/v4",
      "SPDXID": "SPDXRef-Package-4e42e780caf79784",
      "versionInfo": "v4.5.2",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/golang-jwt/jwt/v4@v4.5.2"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/golang-jwt/jwt/v4@v4.5.2"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/golang-jwt/jwt/v5",
      "SPDXID": "SPDXRef-Package-f42fc019b00d9e8b",
      "versionInfo": "v5.3.1",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/golang-jwt/jwt/v5@v5.3.1"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/golang-jwt/jwt/v5@v5.3.1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/golang/protobuf",
      "SPDXID": "SPDXRef-Package-5c4d691d3e0d95d9",
      "versionInfo": "v1.5.4",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/golang/protobuf@v1.5.4"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/golang/protobuf@v1.5.4"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/golang/snappy",
      "SPDXID": "SPDXRef-Package-61a6e4fc851d1eeb",
      "versionInfo": "v0.0.4",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/golang/snappy@v0.0.4"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/golang/snappy@v0.0.4"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/google/gnostic-models",
      "SPDXID": "SPDXRef-Package-da3d14d8f04a0065",
      "versionInfo": "v0.7.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/google/gnostic-models@v0.7.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/google/gnostic-models@v0.7.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/google/go-cmp",
      "SPDXID": "SPDXRef-Package-f0ed5659baae2fb8",
      "versionInfo": "v0.7.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/google/go-cmp@v0.7.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/google/go-cmp@v0.7.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/google/go-containerregistry",
      "SPDXID": "SPDXRef-Package-870abcea8b2e5cac",
      "versionInfo": "v0.21.9",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/google/go-containerregistry@v0.21.9"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/google/go-containerregistry@v0.21.9"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/google/go-metrics-stackdriver",
      "SPDXID": "SPDXRef-Package-57e3b8a99c042a77",
      "versionInfo": "v0.2.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/google/go-metrics-stackdriver@v0.2.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/google/go-metrics-stackdriver@v0.2.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/google/go-querystring",
      "SPDXID": "SPDXRef-Package-bd31ffcdb2631579",
      "versionInfo": "v1.1.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/google/go-querystring@v1.1.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/google/go-querystring@v1.1.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/google/s2a-go",
      "SPDXID": "SPDXRef-Package-8a268ab73879f7fd",
      "versionInfo": "v0.1.9",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/google/s2a-go@v0.1.9"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/google/s2a-go@v0.1.9"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/google/uuid",
      "SPDXID": "SPDXRef-Package-af44d34489f6accd",
      "versionInfo": "v1.6.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/google/uuid@v1.6.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/google/uuid@v1.6.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/googleapis/enterprise-certificate-proxy",
      "SPDXID": "SPDXRef-Package-87acfa45cbf954c4",
      "versionInfo": "v0.3.20",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.20"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/googleapis/enterprise-certificate-proxy@v0.3.20"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/googleapis/gax-go/v2",
      "SPDXID": "SPDXRef-Package-30b8da59f5a65401",
      "versionInfo": "v2.23.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/googleapis/gax-go/v2@v2.23.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/googleapis/gax-go/v2@v2.23.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/gophercloud/gophercloud",
      "SPDXID": "SPDXRef-Package-7becf4407f0de2cf",
      "versionInfo": "v0.1.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/gophercloud/gophercloud@v0.1.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/gophercloud/gophercloud@v0.1.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/hailocab/go-hostpool",
      "SPDXID": "SPDXRef-Package-594458e314c02250",
      "versionInfo": "v0.0.0-20160125115350-e80d13ce29ed",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/hailocab/go-hostpool@v0.0.0-20160125115350-e80d13ce29ed"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/hailocab/go-hostpool@v0.0.0-20160125115350-e80d13ce29ed"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/hashicorp/cap",
      "SPDXID": "SPDXRef-Package-7f556ff3a3e0ec7b",
      "versionInfo": "v0.14.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/hashicorp/cap@v0.14.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/hashicorp/cap@v0.14.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/hashicorp/cli",
      "SPDXID": "SPDXRef-Package-d567bd6105146926",
      "versionInfo": "v1.1.7",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/hashicorp/cli@v1.1.7"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/hashicorp/cli@v1.1.7"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/hashicorp/errwrap",
      "SPDXID": "SPDXRef-Package-bc423023dba9a765",
      "versionInfo": "v1.1.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/hashicorp/errwrap@v1.1.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/hashicorp/errwrap@v1.1.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/hashicorp/go-cleanhttp",
      "SPDXID": "SPDXRef-Package-1d7fa8196379c568",
      "versionInfo": "v0.5.2",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/hashicorp/go-cleanhttp@v0.5.2"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/hashicorp/go-discover",
      "SPDXID": "SPDXRef-Package-2bfcc452e2dce6c5",
      "versionInfo": "v1.4.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/hashicorp/go-discover@v1.4.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/hashicorp/go-discover@v1.4.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/hashicorp/go-discover/provider/gce",
      "SPDXID": "SPDXRef-Package-2467d8558a95b40f",
      "versionInfo": "v0.0.0-20241120163552-5eb1507d16b4",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/hashicorp/go-discover/provider/gce@v0.0.0-20241120163552-5eb1507d16b4"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/hashicorp/go-discover/provider/gce@v0.0.0-20241120163552-5eb1507d16b4"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/hashicorp/go-hclog",
      "SPDXID": "SPDXRef-Package-53647587589127b2",
      "versionInfo": "v1.6.3",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/hashicorp/go-hclog@v1.6.3"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/hashicorp/go-hclog@v1.6.3"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/hashicorp/go-immutable-radix",
      "SPDXID": "SPDXRef-Package-1a616a466b5b3da1",
      "versionInfo": "v1.3.1",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/hashicorp/go-immutable-radix@v1.3.1"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/hashicorp/go-immutable-radix@v1.3.1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/hashicorp/go-memdb",
      "SPDXID": "SPDXRef-Package-7db62dc154d03ca5",
      "versionInfo": "v1.3.5",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/hashicorp/go-memdb@v1.3.5"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/hashicorp/go-memdb@v1.3.5"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/hashicorp/go-metrics",
      "SPDXID": "SPDXRef-Package-79c1f34dc219e96a",
      "versionInfo": "v0.6.1",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/hashicorp/go-metrics@v0.6.1"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/hashicorp/go-metrics@v0.6.1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/hashicorp/go-msgpack/v2",
      "SPDXID": "SPDXRef-Package-542f340441f8b594",
      "versionInfo": "v2.1.2",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/hashicorp/go-msgpack/v2@v2.1.2"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/hashicorp/go-msgpack/v2@v2.1.2"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/hashicorp/go-multierror",
      "SPDXID": "SPDXRef-Package-1abb16b92c730d8e",
      "versionInfo": "v1.1.1",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/hashicorp/go-multierror@v1.1.1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/hashicorp/go-plugin",
      "SPDXID": "SPDXRef-Package-a18ceb918efd5030",
      "versionInfo": "v1.8.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/hashicorp/go-plugin@v1.8.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/hashicorp/go-plugin@v1.8.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/hashicorp/go-raftchunking",
      "SPDXID": "SPDXRef-Package-e412fede132c053a",
      "versionInfo": "v0.7.1",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/hashicorp/go-raftchunking@v0.7.1"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/hashicorp/go-raftchunking@v0.7.1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/hashicorp/go-retryablehttp",
      "SPDXID": "SPDXRef-Package-d3e740ee909d218f",
      "versionInfo": "v0.7.8",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/hashicorp/go-retryablehttp@v0.7.8"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/hashicorp/go-retryablehttp@v0.7.8"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/hashicorp/go-rootcerts",
      "SPDXID": "SPDXRef-Package-a91693b11ca00ff9",
      "versionInfo": "v1.0.2",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/hashicorp/go-rootcerts@v1.0.2"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/hashicorp/go-rootcerts@v1.0.2"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/hashicorp/go-secure-stdlib/base62",
      "SPDXID": "SPDXRef-Package-b6200cc48262b1a2",
      "versionInfo": "v0.1.2",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/hashicorp/go-secure-stdlib/base62@v0.1.2"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/hashicorp/go-secure-stdlib/base62@v0.1.2"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/hashicorp/go-secure-stdlib/fileutil",
      "SPDXID": "SPDXRef-Package-700567a7b8a214aa",
      "versionInfo": "v0.1.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/hashicorp/go-secure-stdlib/fileutil@v0.1.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/hashicorp/go-secure-stdlib/fileutil@v0.1.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/hashicorp/go-secure-stdlib/kv-builder",
      "SPDXID": "SPDXRef-Package-63dc22902d53368a",
      "versionInfo": "v0.1.2",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/hashicorp/go-secure-stdlib/kv-builder@v0.1.2"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/hashicorp/go-secure-stdlib/kv-builder@v0.1.2"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/hashicorp/go-secure-stdlib/mlock",
      "SPDXID": "SPDXRef-Package-3f86e429295d5188",
      "versionInfo": "v0.1.3",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/hashicorp/go-secure-stdlib/mlock@v0.1.3"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/hashicorp/go-secure-stdlib/mlock@v0.1.3"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/hashicorp/go-secure-stdlib/nonceutil",
      "SPDXID": "SPDXRef-Package-4512530e02fe5e4",
      "versionInfo": "v0.1.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/hashicorp/go-secure-stdlib/nonceutil@v0.1.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/hashicorp/go-secure-stdlib/nonceutil@v0.1.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/hashicorp/go-secure-stdlib/parseutil",
      "SPDXID": "SPDXRef-Package-d79bf434fec502fd",
      "versionInfo": "v0.2.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/hashicorp/go-secure-stdlib/parseutil@v0.2.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/hashicorp/go-secure-stdlib/parseutil@v0.2.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/hashicorp/go-secure-stdlib/password",
      "SPDXID": "SPDXRef-Package-a8b90a14f5aafbc9",
      "versionInfo": "v0.1.5",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/hashicorp/go-secure-stdlib/password@v0.1.5"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/hashicorp/go-secure-stdlib/password@v0.1.5"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/hashicorp/go-secure-stdlib/reloadutil",
      "SPDXID": "SPDXRef-Package-be6e31b38a45f945",
      "versionInfo": "v0.1.1",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/hashicorp/go-secure-stdlib/reloadutil@v0.1.1"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/hashicorp/go-secure-stdlib/reloadutil@v0.1.1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/hashicorp/go-secure-stdlib/strutil",
      "SPDXID": "SPDXRef-Package-9bfc8a09bb79f07b",
      "versionInfo": "v0.1.2",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/hashicorp/go-secure-stdlib/strutil@v0.1.2"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/hashicorp/go-secure-stdlib/strutil@v0.1.2"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/hashicorp/go-secure-stdlib/tlsutil",
      "SPDXID": "SPDXRef-Package-5126cee1d95a2005",
      "versionInfo": "v0.1.3",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/hashicorp/go-secure-stdlib/tlsutil@v0.1.3"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/hashicorp/go-secure-stdlib/tlsutil@v0.1.3"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/hashicorp/go-sockaddr",
      "SPDXID": "SPDXRef-Package-5d00110d30b7cd00",
      "versionInfo": "v1.0.7",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/hashicorp/go-sockaddr@v1.0.7"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/hashicorp/go-sockaddr@v1.0.7"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/hashicorp/go-syslog",
      "SPDXID": "SPDXRef-Package-695d2a0ba1715f79",
      "versionInfo": "v1.0.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/hashicorp/go-syslog@v1.0.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/hashicorp/go-syslog@v1.0.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/hashicorp/go-uuid",
      "SPDXID": "SPDXRef-Package-fae3093d18c92c50",
      "versionInfo": "v1.0.3",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/hashicorp/go-uuid@v1.0.3"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/hashicorp/go-uuid@v1.0.3"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/hashicorp/go-version",
      "SPDXID": "SPDXRef-Package-267c04115e2d0473",
      "versionInfo": "v1.9.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/hashicorp/go-version@v1.9.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/hashicorp/go-version@v1.9.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/hashicorp/golang-lru",
      "SPDXID": "SPDXRef-Package-e245cbf5edcc51a3",
      "versionInfo": "v0.5.4",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/hashicorp/golang-lru@v0.5.4"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/hashicorp/golang-lru@v0.5.4"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/hashicorp/golang-lru/v2",
      "SPDXID": "SPDXRef-Package-2d8dfd0a1ab6f023",
      "versionInfo": "v2.0.7",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/hashicorp/golang-lru/v2@v2.0.7"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/hashicorp/golang-lru/v2@v2.0.7"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/hashicorp/hcl",
      "SPDXID": "SPDXRef-Package-4785b2ded0fa7949",
      "versionInfo": "v1.0.1-vault-7",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/hashicorp/hcl@v1.0.1-vault-7"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/hashicorp/hcl@v1.0.1-vault-7"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/hashicorp/hcl/v2",
      "SPDXID": "SPDXRef-Package-65e05aac424c94e8",
      "versionInfo": "v2.24.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/hashicorp/hcl/v2@v2.24.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/hashicorp/hcl/v2@v2.24.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/hashicorp/logutils",
      "SPDXID": "SPDXRef-Package-69d6f52f86e8abff",
      "versionInfo": "v1.0.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/hashicorp/logutils@v1.0.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/hashicorp/logutils@v1.0.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/hashicorp/mdns",
      "SPDXID": "SPDXRef-Package-96c2692143ad5d9b",
      "versionInfo": "v1.0.4",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/hashicorp/mdns@v1.0.4"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/hashicorp/mdns@v1.0.4"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/hashicorp/raft",
      "SPDXID": "SPDXRef-Package-4a91e2f08d7b961a",
      "versionInfo": "v1.7.3",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/hashicorp/raft@v1.7.3"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/hashicorp/raft@v1.7.3"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/hashicorp/raft-autopilot",
      "SPDXID": "SPDXRef-Package-7c300b954e07fce3",
      "versionInfo": "v0.3.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/hashicorp/raft-autopilot@v0.3.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/hashicorp/raft-autopilot@v0.3.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/hashicorp/raft-boltdb/v2",
      "SPDXID": "SPDXRef-Package-5803f9da4d2c7629",
      "versionInfo": "v2.3.1",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/hashicorp/raft-boltdb/v2@v2.3.1"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/hashicorp/raft-boltdb/v2@v2.3.1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/hashicorp/vic",
      "SPDXID": "SPDXRef-Package-7bc3288d16732d44",
      "versionInfo": "v1.5.1-0.20190403131502-bbfe86ec9443",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/hashicorp/vic@v1.5.1-0.20190403131502-bbfe86ec9443"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/hashicorp/vic@v1.5.1-0.20190403131502-bbfe86ec9443"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/hashicorp/yamux",
      "SPDXID": "SPDXRef-Package-7d655bf46f810e1b",
      "versionInfo": "v0.1.2",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/hashicorp/yamux@v0.1.2"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/hashicorp/yamux@v0.1.2"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/huandu/xstrings",
      "SPDXID": "SPDXRef-Package-565b649c927666f6",
      "versionInfo": "v1.4.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/huandu/xstrings@v1.4.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/huandu/xstrings@v1.4.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/imdario/mergo",
      "SPDXID": "SPDXRef-Package-5d54338de8cae23c",
      "versionInfo": "v0.3.15",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/imdario/mergo@v0.3.15"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/imdario/mergo@v0.3.15"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/influxdata/influxdb1-client",
      "SPDXID": "SPDXRef-Package-40ad9f29b508d616",
      "versionInfo": "v0.0.0-20200827194710-b269163b24ab",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/influxdata/influxdb1-client@v0.0.0-20200827194710-b269163b24ab"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/influxdata/influxdb1-client@v0.0.0-20200827194710-b269163b24ab"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/jackc/pgpassfile",
      "SPDXID": "SPDXRef-Package-1562f504781f44fb",
      "versionInfo": "v1.0.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/jackc/pgpassfile@v1.0.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/jackc/pgpassfile@v1.0.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/jackc/pgservicefile",
      "SPDXID": "SPDXRef-Package-e14b78d26fbd58ca",
      "versionInfo": "v0.0.0-20240606120523-5a60cdf6a761",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/jackc/pgservicefile@v0.0.0-20240606120523-5a60cdf6a761"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/jackc/pgservicefile@v0.0.0-20240606120523-5a60cdf6a761"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/jackc/pgx/v5",
      "SPDXID": "SPDXRef-Package-35bbe4a6180cbb07",
      "versionInfo": "v5.10.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/jackc/pgx/v5@v5.10.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/jackc/pgx/v5@v5.10.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/jackc/puddle/v2",
      "SPDXID": "SPDXRef-Package-753e4ea683366fc4",
      "versionInfo": "v2.2.2",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/jackc/puddle/v2@v2.2.2"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/jackc/puddle/v2@v2.2.2"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/jefferai/isbadcipher",
      "SPDXID": "SPDXRef-Package-b76b178568b937d5",
      "versionInfo": "v0.0.0-20190226160619-51d2077c035f",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/jefferai/isbadcipher@v0.0.0-20190226160619-51d2077c035f"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/jefferai/isbadcipher@v0.0.0-20190226160619-51d2077c035f"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/jmespath/go-jmespath",
      "SPDXID": "SPDXRef-Package-bae44ac6c6c7b2e6",
      "versionInfo": "v0.4.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/jmespath/go-jmespath@v0.4.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/jmespath/go-jmespath@v0.4.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/josharian/intern",
      "SPDXID": "SPDXRef-Package-4a3d2adce60bf7c3",
      "versionInfo": "v1.0.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/josharian/intern@v1.0.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/josharian/intern@v1.0.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/json-iterator/go",
      "SPDXID": "SPDXRef-Package-f57c11bab1c9154f",
      "versionInfo": "v1.1.12",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/json-iterator/go@v1.1.12"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/json-iterator/go@v1.1.12"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/kelseyhightower/envconfig",
      "SPDXID": "SPDXRef-Package-c011a5385a281c9c",
      "versionInfo": "v1.4.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/kelseyhightower/envconfig@v1.4.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/kelseyhightower/envconfig@v1.4.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/klauspost/compress",
      "SPDXID": "SPDXRef-Package-4e4b394b14638cd9",
      "versionInfo": "v1.19.2",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/klauspost/compress@v1.19.2"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/klauspost/compress@v1.19.2"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/klauspost/cpuid/v2",
      "SPDXID": "SPDXRef-Package-9db21af43a3c8072",
      "versionInfo": "v2.3.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/klauspost/cpuid/v2@v2.3.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/klauspost/cpuid/v2@v2.3.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/kr/pretty",
      "SPDXID": "SPDXRef-Package-a7cd94b337b2ff4c",
      "versionInfo": "v0.3.1",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/kr/pretty@v0.3.1"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/kr/pretty@v0.3.1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/kr/text",
      "SPDXID": "SPDXRef-Package-22aa5fb62088bd8b",
      "versionInfo": "v0.2.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/kr/text@v0.2.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/kr/text@v0.2.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/kylelemons/godebug",
      "SPDXID": "SPDXRef-Package-8bce76e8970e3b8a",
      "versionInfo": "v1.1.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/kylelemons/godebug@v1.1.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/kylelemons/godebug@v1.1.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/libdns/libdns",
      "SPDXID": "SPDXRef-Package-86df79a22a4de1",
      "versionInfo": "v1.1.1",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/libdns/libdns@v1.1.1"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/libdns/libdns@v1.1.1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/linode/linodego",
      "SPDXID": "SPDXRef-Package-4144894cce1a1743",
      "versionInfo": "v1.61.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/linode/linodego@v1.61.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/linode/linodego@v1.61.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/mailru/easyjson",
      "SPDXID": "SPDXRef-Package-7c26758016dd3bbe",
      "versionInfo": "v0.7.7",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/mailru/easyjson@v0.7.7"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/mailru/easyjson@v0.7.7"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/mattn/go-colorable",
      "SPDXID": "SPDXRef-Package-4605b6514e22e950",
      "versionInfo": "v0.1.15",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/mattn/go-colorable@v0.1.15"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/mattn/go-colorable@v0.1.15"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/mattn/go-isatty",
      "SPDXID": "SPDXRef-Package-d4ea2cb3d91b3b33",
      "versionInfo": "v0.0.24",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/mattn/go-isatty@v0.0.24"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/mattn/go-isatty@v0.0.24"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/mediocregopher/radix/v4",
      "SPDXID": "SPDXRef-Package-d15ad47f7a102277",
      "versionInfo": "v4.1.5",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/mediocregopher/radix/v4@v4.1.5"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/mediocregopher/radix/v4@v4.1.5"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/mholt/acmez/v3",
      "SPDXID": "SPDXRef-Package-29eb49dc18fd07a5",
      "versionInfo": "v3.1.6",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/mholt/acmez/v3@v3.1.6"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/mholt/acmez/v3@v3.1.6"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/michaelklishin/rabbit-hole/v3",
      "SPDXID": "SPDXRef-Package-512099bb8eeaf97c",
      "versionInfo": "v3.5.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/michaelklishin/rabbit-hole/v3@v3.5.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/michaelklishin/rabbit-hole/v3@v3.5.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/miekg/dns",
      "SPDXID": "SPDXRef-Package-5b161f77224a0b90",
      "versionInfo": "v1.1.72",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/miekg/dns@v1.1.72"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/miekg/dns@v1.1.72"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/mitchellh/copystructure",
      "SPDXID": "SPDXRef-Package-445adba2c884f2cf",
      "versionInfo": "v1.2.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/mitchellh/copystructure@v1.2.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/mitchellh/copystructure@v1.2.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/mitchellh/go-homedir",
      "SPDXID": "SPDXRef-Package-63d2a9889fddd0bd",
      "versionInfo": "v1.1.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/mitchellh/go-homedir@v1.1.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/mitchellh/go-testing-interface",
      "SPDXID": "SPDXRef-Package-e7ae7493b05ffe50",
      "versionInfo": "v1.14.2-0.20210821155943-2d9075ca8770",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/mitchellh/go-testing-interface@v1.14.2-0.20210821155943-2d9075ca8770"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/mitchellh/go-testing-interface@v1.14.2-0.20210821155943-2d9075ca8770"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/mitchellh/go-wordwrap",
      "SPDXID": "SPDXRef-Package-1f72a3a678524aec",
      "versionInfo": "v1.0.1",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/mitchellh/go-wordwrap@v1.0.1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/mitchellh/mapstructure",
      "SPDXID": "SPDXRef-Package-95e7121db91c7a03",
      "versionInfo": "v1.5.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/mitchellh/mapstructure@v1.5.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/mitchellh/mapstructure@v1.5.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/mitchellh/pointerstructure",
      "SPDXID": "SPDXRef-Package-511476e15adedf7f",
      "versionInfo": "v1.2.1",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/mitchellh/pointerstructure@v1.2.1"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/mitchellh/pointerstructure@v1.2.1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/mitchellh/reflectwalk",
      "SPDXID": "SPDXRef-Package-735919d3115c1e65",
      "versionInfo": "v1.0.2",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/mitchellh/reflectwalk@v1.0.2"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/mitchellh/reflectwalk@v1.0.2"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/moby/docker-image-spec",
      "SPDXID": "SPDXRef-Package-1dc42aa4d7384c5e",
      "versionInfo": "v1.3.1",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/moby/docker-image-spec@v1.3.1"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/moby/docker-image-spec@v1.3.1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/moby/go-archive",
      "SPDXID": "SPDXRef-Package-629a4484aa33a714",
      "versionInfo": "v0.3.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/moby/go-archive@v0.3.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/moby/go-archive@v0.3.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/moby/moby/api",
      "SPDXID": "SPDXRef-Package-ffa041285505aa0",
      "versionInfo": "v1.55.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/moby/moby/api@v1.55.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/moby/moby/api@v1.55.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/moby/moby/client",
      "SPDXID": "SPDXRef-Package-357bf675ad525d2a",
      "versionInfo": "v0.5.1",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/moby/moby/client@v0.5.1"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/moby/moby/client@v0.5.1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/moby/patternmatcher",
      "SPDXID": "SPDXRef-Package-9445434f793d1aac",
      "versionInfo": "v0.6.1",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/moby/patternmatcher@v0.6.1"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/moby/patternmatcher@v0.6.1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/moby/sys/sequential",
      "SPDXID": "SPDXRef-Package-1cc7d612af6d133e",
      "versionInfo": "v0.7.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/moby/sys/sequential@v0.7.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/moby/sys/sequential@v0.7.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/moby/sys/user",
      "SPDXID": "SPDXRef-Package-3ec5bd63f68ae86",
      "versionInfo": "v0.4.1",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/moby/sys/user@v0.4.1"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/moby/sys/user@v0.4.1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/moby/sys/userns",
      "SPDXID": "SPDXRef-Package-2a66ea2890a5775b",
      "versionInfo": "v0.1.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/moby/sys/userns@v0.1.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/moby/sys/userns@v0.1.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/modern-go/concurrent",
      "SPDXID": "SPDXRef-Package-3b51c2088c99b282",
      "versionInfo": "v0.0.0-20180306012644-bacd9c7ef1dd",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/modern-go/reflect2",
      "SPDXID": "SPDXRef-Package-afd411a6a3f3bb63",
      "versionInfo": "v1.0.3-0.20250322232337-35a7c28c31ee",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/munnerz/goautoneg",
      "SPDXID": "SPDXRef-Package-7306b6a0de816222",
      "versionInfo": "v0.0.0-20191010083416-a7dc8b61c822",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/nicolai86/scaleway-sdk",
      "SPDXID": "SPDXRef-Package-391eed4af920f99a",
      "versionInfo": "v1.10.2-0.20180628010248-798f60e20bb2",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/nicolai86/scaleway-sdk@v1.10.2-0.20180628010248-798f60e20bb2"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/nicolai86/scaleway-sdk@v1.10.2-0.20180628010248-798f60e20bb2"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/oklog/run",
      "SPDXID": "SPDXRef-Package-9e9e506b8ba60bca",
      "versionInfo": "v1.2.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/oklog/run@v1.2.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/oklog/run@v1.2.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/okta/okta-sdk-golang/v2",
      "SPDXID": "SPDXRef-Package-4ba78250baee83b",
      "versionInfo": "v2.20.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/okta/okta-sdk-golang/v2@v2.20.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/okta/okta-sdk-golang/v2@v2.20.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/openbao/go-kms-wrapping/kms/transit/v2",
      "SPDXID": "SPDXRef-Package-120af31a50606a90",
      "versionInfo": "v2.1.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/openbao/go-kms-wrapping/kms/transit/v2@v2.1.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/openbao/go-kms-wrapping/kms/transit/v2@v2.1.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/openbao/go-kms-wrapping/plugin/v2",
      "SPDXID": "SPDXRef-Package-81253970dd92f4c",
      "versionInfo": "v2.4.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/openbao/go-kms-wrapping/plugin/v2@v2.4.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/openbao/go-kms-wrapping/plugin/v2@v2.4.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/openbao/go-kms-wrapping/v2",
      "SPDXID": "SPDXRef-Package-94bb1dd625425c1a",
      "versionInfo": "v2.9.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/openbao/go-kms-wrapping/v2@v2.9.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/openbao/go-kms-wrapping/v2@v2.9.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/openbao/go-kms-wrapping/wrappers/kmip/v2",
      "SPDXID": "SPDXRef-Package-14989632f90ce7ea",
      "versionInfo": "v2.2.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/openbao/go-kms-wrapping/wrappers/kmip/v2@v2.2.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/openbao/go-kms-wrapping/wrappers/kmip/v2@v2.2.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/openbao/go-kms-wrapping/wrappers/static/v2",
      "SPDXID": "SPDXRef-Package-28ac835d455cca32",
      "versionInfo": "v2.2.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/openbao/go-kms-wrapping/wrappers/static/v2@v2.2.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/openbao/go-kms-wrapping/wrappers/static/v2@v2.2.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/openbao/go-kms-wrapping/wrappers/transit/v2",
      "SPDXID": "SPDXRef-Package-e4ba47574c7cd3fe",
      "versionInfo": "v2.8.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/openbao/go-kms-wrapping/wrappers/transit/v2@v2.8.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/openbao/go-kms-wrapping/wrappers/transit/v2@v2.8.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/openbao/openbao-template",
      "SPDXID": "SPDXRef-Package-5cca677ddc12b51d",
      "versionInfo": "v1.0.1",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/openbao/openbao-template@v1.0.1"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/openbao/openbao-template@v1.0.1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/openbao/openbao/v2",
      "SPDXID": "SPDXRef-Package-9de5bc7bb8041634",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/openbao/openbao/v2"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/openbao/openbao/v2"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/opencontainers/go-digest",
      "SPDXID": "SPDXRef-Package-d7f22bae3f913fe9",
      "versionInfo": "v1.0.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/opencontainers/go-digest@v1.0.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/opencontainers/image-spec",
      "SPDXID": "SPDXRef-Package-b662b78ff4f86add",
      "versionInfo": "v1.1.1",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/opencontainers/image-spec@v1.1.1"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/opencontainers/image-spec@v1.1.1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/ovh/kmip-go",
      "SPDXID": "SPDXRef-Package-1228acebe151f568",
      "versionInfo": "v0.3.3",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/ovh/kmip-go@v0.3.3"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/ovh/kmip-go@v0.3.3"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/packethost/packngo",
      "SPDXID": "SPDXRef-Package-585308f038a74cb4",
      "versionInfo": "v0.1.1-0.20180711074735-b9cb5096f54c",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/packethost/packngo@v0.1.1-0.20180711074735-b9cb5096f54c"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/packethost/packngo@v0.1.1-0.20180711074735-b9cb5096f54c"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/patrickmn/go-cache",
      "SPDXID": "SPDXRef-Package-b0e44b25ff9a1c1a",
      "versionInfo": "v2.1.0+incompatible",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/patrickmn/go-cache@v2.1.0%2Bincompatible"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/patrickmn/go-cache@v2.1.0+incompatible"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/petermattis/goid",
      "SPDXID": "SPDXRef-Package-439b43752b612140",
      "versionInfo": "v0.0.0-20250813065127-a731cc31b4fe",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/petermattis/goid@v0.0.0-20250813065127-a731cc31b4fe"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/petermattis/goid@v0.0.0-20250813065127-a731cc31b4fe"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/pires/go-proxyproto",
      "SPDXID": "SPDXRef-Package-ecb719c09a7a0351",
      "versionInfo": "v0.14.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/pires/go-proxyproto@v0.14.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/pires/go-proxyproto@v0.14.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/pkg/browser",
      "SPDXID": "SPDXRef-Package-60b070d824980f38",
      "versionInfo": "v0.0.0-20240102092130-5ac0b6a4141c",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/pkg/browser@v0.0.0-20240102092130-5ac0b6a4141c"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/pkg/browser@v0.0.0-20240102092130-5ac0b6a4141c"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/pkg/errors",
      "SPDXID": "SPDXRef-Package-4c402f07d772560a",
      "versionInfo": "v0.9.1",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/pkg/errors@v0.9.1"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/pkg/errors@v0.9.1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/posener/complete",
      "SPDXID": "SPDXRef-Package-8235c12554ff18a9",
      "versionInfo": "v1.2.3",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/posener/complete@v1.2.3"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/posener/complete@v1.2.3"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/pquerna/otp",
      "SPDXID": "SPDXRef-Package-98325e2f8a9bec19",
      "versionInfo": "v1.5.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/pquerna/otp@v1.5.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/pquerna/otp@v1.5.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/prometheus/client_golang",
      "SPDXID": "SPDXRef-Package-c33754cfb65b424d",
      "versionInfo": "v1.24.1",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/prometheus/client_golang@v1.24.1"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/prometheus/client_golang@v1.24.1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/prometheus/client_model",
      "SPDXID": "SPDXRef-Package-8a9666d90e8518a2",
      "versionInfo": "v0.6.2",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/prometheus/client_model@v0.6.2"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/prometheus/client_model@v0.6.2"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/prometheus/common",
      "SPDXID": "SPDXRef-Package-8f175c3326760c5d",
      "versionInfo": "v0.70.1",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/prometheus/common@v0.70.1"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/prometheus/common@v0.70.1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/prometheus/procfs",
      "SPDXID": "SPDXRef-Package-114c6176b56963b9",
      "versionInfo": "v0.21.1",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/prometheus/procfs@v0.21.1"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/prometheus/procfs@v0.21.1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/rboyer/safeio",
      "SPDXID": "SPDXRef-Package-bad6206e384419bf",
      "versionInfo": "v0.2.3",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/rboyer/safeio@v0.2.3"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/rboyer/safeio@v0.2.3"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/renier/xmlrpc",
      "SPDXID": "SPDXRef-Package-4089e802d69086ea",
      "versionInfo": "v0.0.0-20170708154548-ce4a1a486c03",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/renier/xmlrpc@v0.0.0-20170708154548-ce4a1a486c03"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/renier/xmlrpc@v0.0.0-20170708154548-ce4a1a486c03"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/rogpeppe/go-internal",
      "SPDXID": "SPDXRef-Package-41e83ab03f3488f",
      "versionInfo": "v1.14.1",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/rogpeppe/go-internal@v1.14.1"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/rogpeppe/go-internal@v1.14.1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/ryanuber/columnize",
      "SPDXID": "SPDXRef-Package-785fe46b5016ea4e",
      "versionInfo": "v2.1.2+incompatible",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/ryanuber/columnize@v2.1.2%2Bincompatible"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/ryanuber/columnize@v2.1.2+incompatible"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/ryanuber/go-glob",
      "SPDXID": "SPDXRef-Package-7584dc3602e95254",
      "versionInfo": "v1.0.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/ryanuber/go-glob@v1.0.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/ryanuber/go-glob@v1.0.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/sasha-s/go-deadlock",
      "SPDXID": "SPDXRef-Package-f0ef1e10bfffaa81",
      "versionInfo": "v0.3.9",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/sasha-s/go-deadlock@v0.3.9"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/sasha-s/go-deadlock@v0.3.9"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/sethvargo/go-limiter",
      "SPDXID": "SPDXRef-Package-6bddff7466c9a065",
      "versionInfo": "v1.2.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/sethvargo/go-limiter@v1.2.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/sethvargo/go-limiter@v1.2.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/shirou/gopsutil/v4",
      "SPDXID": "SPDXRef-Package-2390c435c987e950",
      "versionInfo": "v4.26.7",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/shirou/gopsutil/v4@v4.26.7"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/shirou/gopsutil/v4@v4.26.7"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/shopspring/decimal",
      "SPDXID": "SPDXRef-Package-eed7124cdd57fdf0",
      "versionInfo": "v1.3.1",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/shopspring/decimal@v1.3.1"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/shopspring/decimal@v1.3.1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/sirupsen/logrus",
      "SPDXID": "SPDXRef-Package-26be2576315df2eb",
      "versionInfo": "v1.9.4",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/sirupsen/logrus@v1.9.4"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/sirupsen/logrus@v1.9.4"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/softlayer/softlayer-go",
      "SPDXID": "SPDXRef-Package-3c3433a572cb895d",
      "versionInfo": "v0.0.0-20180806151055-260589d94c7d",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/softlayer/softlayer-go@v0.0.0-20180806151055-260589d94c7d"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/softlayer/softlayer-go@v0.0.0-20180806151055-260589d94c7d"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/spf13/cast",
      "SPDXID": "SPDXRef-Package-8e7702b5427da812",
      "versionInfo": "v1.5.1",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/spf13/cast@v1.5.1"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/spf13/cast@v1.5.1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/spf13/pflag",
      "SPDXID": "SPDXRef-Package-4228c05c29692151",
      "versionInfo": "v1.0.10",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/spf13/pflag@v1.0.10"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/spf13/pflag@v1.0.10"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/stretchr/objx",
      "SPDXID": "SPDXRef-Package-2bee370368ac8317",
      "versionInfo": "v0.5.3",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/stretchr/objx@v0.5.3"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/stretchr/objx@v0.5.3"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/stretchr/testify",
      "SPDXID": "SPDXRef-Package-1d46452f5bc87ff9",
      "versionInfo": "v1.12.1",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/stretchr/testify@v1.12.1"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/stretchr/testify@v1.12.1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common",
      "SPDXID": "SPDXRef-Package-50ed6d7a8683b9d2",
      "versionInfo": "v1.0.480",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common@v1.0.480"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common@v1.0.480"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/cvm",
      "SPDXID": "SPDXRef-Package-6aa8211e1ac34008",
      "versionInfo": "v1.0.480",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/cvm@v1.0.480"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/cvm@v1.0.480"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/tilinna/clock",
      "SPDXID": "SPDXRef-Package-3f79c3f7282858d5",
      "versionInfo": "v1.0.2",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/tilinna/clock@v1.0.2"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/tilinna/clock@v1.0.2"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/tink-crypto/tink-go/v2",
      "SPDXID": "SPDXRef-Package-d29e0c8835bc5815",
      "versionInfo": "v2.8.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/tink-crypto/tink-go/v2@v2.8.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/tink-crypto/tink-go/v2@v2.8.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/tklauser/go-sysconf",
      "SPDXID": "SPDXRef-Package-52142771cabf7b3c",
      "versionInfo": "v0.3.16",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/tklauser/go-sysconf@v0.3.16"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/tklauser/go-sysconf@v0.3.16"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/tklauser/numcpus",
      "SPDXID": "SPDXRef-Package-20333474440ffdfb",
      "versionInfo": "v0.11.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/tklauser/numcpus@v0.11.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/tklauser/numcpus@v0.11.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/tv42/httpunix",
      "SPDXID": "SPDXRef-Package-247697db0a3eab5d",
      "versionInfo": "v0.0.0-20191220191345-2ba4b9c3382c",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/tv42/httpunix@v0.0.0-20191220191345-2ba4b9c3382c"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/tv42/httpunix@v0.0.0-20191220191345-2ba4b9c3382c"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/vmware/govmomi",
      "SPDXID": "SPDXRef-Package-206aaf64a7809063",
      "versionInfo": "v0.18.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/vmware/govmomi@v0.18.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/vmware/govmomi@v0.18.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/x448/float16",
      "SPDXID": "SPDXRef-Package-8f18035a0e630fff",
      "versionInfo": "v0.8.4",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/x448/float16@v0.8.4"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/x448/float16@v0.8.4"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/yeqown/go-qrcode/v2",
      "SPDXID": "SPDXRef-Package-17fae25a6b39484b",
      "versionInfo": "v2.3.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/yeqown/go-qrcode/v2@v2.3.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/yeqown/go-qrcode/v2@v2.3.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/yeqown/reedsolomon",
      "SPDXID": "SPDXRef-Package-44e5c9892c94e126",
      "versionInfo": "v1.0.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/yeqown/reedsolomon@v1.0.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/yeqown/reedsolomon@v1.0.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/zclconf/go-cty",
      "SPDXID": "SPDXRef-Package-9b7d12a01713c46d",
      "versionInfo": "v1.16.3",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/zclconf/go-cty@v1.16.3"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/zclconf/go-cty@v1.16.3"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/zeebo/blake3",
      "SPDXID": "SPDXRef-Package-6ee9b098678afc9a",
      "versionInfo": "v0.2.4",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/zeebo/blake3@v0.2.4"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/zeebo/blake3@v0.2.4"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "go.etcd.io/bbolt",
      "SPDXID": "SPDXRef-Package-91731bac9f025458",
      "versionInfo": "v1.5.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/go.etcd.io/bbolt@v1.5.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: go.etcd.io/bbolt@v1.5.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "go.opentelemetry.io/auto/sdk",
      "SPDXID": "SPDXRef-Package-ee6a750ff9b56ef5",
      "versionInfo": "v1.2.1",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: go.opentelemetry.io/auto/sdk@v1.2.1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc",
      "SPDXID": "SPDXRef-Package-8c70e74aa44d2d32",
      "versionInfo": "v0.67.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.67.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.67.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp",
      "SPDXID": "SPDXRef-Package-de7f00476e5559c",
      "versionInfo": "v0.67.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.67.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.67.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "go.opentelemetry.io/otel",
      "SPDXID": "SPDXRef-Package-669dd2103ef6b590",
      "versionInfo": "v1.45.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/go.opentelemetry.io/otel@v1.45.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: go.opentelemetry.io/otel@v1.45.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "go.opentelemetry.io/otel/metric",
      "SPDXID": "SPDXRef-Package-abc763e1a0277f9c",
      "versionInfo": "v1.45.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/metric@v1.45.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: go.opentelemetry.io/otel/metric@v1.45.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "go.opentelemetry.io/otel/sdk",
      "SPDXID": "SPDXRef-Package-d36e61091e4a884a",
      "versionInfo": "v1.45.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/sdk@v1.45.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: go.opentelemetry.io/otel/sdk@v1.45.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "go.opentelemetry.io/otel/trace",
      "SPDXID": "SPDXRef-Package-f4564fca722eb4c4",
      "versionInfo": "v1.45.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/trace@v1.45.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: go.opentelemetry.io/otel/trace@v1.45.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "go.uber.org/multierr",
      "SPDXID": "SPDXRef-Package-6e0afebb769596f6",
      "versionInfo": "v1.11.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/go.uber.org/multierr@v1.11.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: go.uber.org/multierr@v1.11.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "go.uber.org/zap",
      "SPDXID": "SPDXRef-Package-ece207aba53d075c",
      "versionInfo": "v1.28.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/go.uber.org/zap@v1.28.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: go.uber.org/zap@v1.28.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "go.uber.org/zap/exp",
      "SPDXID": "SPDXRef-Package-e2f0be4563ad00b8",
      "versionInfo": "v0.3.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/go.uber.org/zap/exp@v0.3.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: go.uber.org/zap/exp@v0.3.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "go.yaml.in/yaml/v2",
      "SPDXID": "SPDXRef-Package-481426e1210df2f4",
      "versionInfo": "v2.4.4",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/go.yaml.in/yaml/v2@v2.4.4"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: go.yaml.in/yaml/v2@v2.4.4"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "go.yaml.in/yaml/v3",
      "SPDXID": "SPDXRef-Package-c30d6d182cdd4b80",
      "versionInfo": "v3.0.5",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/go.yaml.in/yaml/v3@v3.0.5"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: go.yaml.in/yaml/v3@v3.0.5"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "golang.org/x/crypto",
      "SPDXID": "SPDXRef-Package-43283df45a0dcf60",
      "versionInfo": "v0.57.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/golang.org/x/crypto@v0.57.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: golang.org/x/crypto@v0.57.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "golang.org/x/exp",
      "SPDXID": "SPDXRef-Package-427733d9e0e474bb",
      "versionInfo": "v0.0.0-20260112195511-716be5621a96",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/golang.org/x/exp@v0.0.0-20260112195511-716be5621a96"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: golang.org/x/exp@v0.0.0-20260112195511-716be5621a96"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "golang.org/x/net",
      "SPDXID": "SPDXRef-Package-bf306adabb08d25d",
      "versionInfo": "v0.60.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/golang.org/x/net@v0.60.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: golang.org/x/net@v0.60.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "golang.org/x/oauth2",
      "SPDXID": "SPDXRef-Package-312286a1e6b7de9b",
      "versionInfo": "v0.36.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/golang.org/x/oauth2@v0.36.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: golang.org/x/oauth2@v0.36.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "golang.org/x/sync",
      "SPDXID": "SPDXRef-Package-28240e21cfe1939d",
      "versionInfo": "v0.23.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/golang.org/x/sync@v0.23.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: golang.org/x/sync@v0.23.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "golang.org/x/sys",
      "SPDXID": "SPDXRef-Package-2eb31a87dcb339c9",
      "versionInfo": "v0.48.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/golang.org/x/sys@v0.48.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: golang.org/x/sys@v0.48.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "golang.org/x/term",
      "SPDXID": "SPDXRef-Package-941fae9ea8dc4649",
      "versionInfo": "v0.46.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/golang.org/x/term@v0.46.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: golang.org/x/term@v0.46.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "golang.org/x/text",
      "SPDXID": "SPDXRef-Package-c2411591e220138a",
      "versionInfo": "v0.42.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/golang.org/x/text@v0.42.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: golang.org/x/text@v0.42.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "golang.org/x/time",
      "SPDXID": "SPDXRef-Package-263f7a900a65b063",
      "versionInfo": "v0.15.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/golang.org/x/time@v0.15.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: golang.org/x/time@v0.15.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "google.golang.org/api",
      "SPDXID": "SPDXRef-Package-d556b0ebe594114f",
      "versionInfo": "v0.293.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/google.golang.org/api@v0.293.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: google.golang.org/api@v0.293.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "google.golang.org/genproto",
      "SPDXID": "SPDXRef-Package-9812cbce2c4af3a8",
      "versionInfo": "v0.0.0-20260319201613-d00831a3d3e7",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/google.golang.org/genproto@v0.0.0-20260319201613-d00831a3d3e7"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: google.golang.org/genproto@v0.0.0-20260319201613-d00831a3d3e7"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "google.golang.org/genproto/googleapis/api",
      "SPDXID": "SPDXRef-Package-a738d7ca3c0653bb",
      "versionInfo": "v0.0.0-20260630182238-925bb5da69e7",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260630182238-925bb5da69e7"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: google.golang.org/genproto/googleapis/api@v0.0.0-20260630182238-925bb5da69e7"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "google.golang.org/genproto/googleapis/rpc",
      "SPDXID": "SPDXRef-Package-a5e2be32abd64588",
      "versionInfo": "v0.0.0-20260807164820-c8921c73eeea",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260807164820-c8921c73eeea"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: google.golang.org/genproto/googleapis/rpc@v0.0.0-20260807164820-c8921c73eeea"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "google.golang.org/grpc",
      "SPDXID": "SPDXRef-Package-95ba5f50b7023e7d",
      "versionInfo": "v1.83.2",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/google.golang.org/grpc@v1.83.2"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: google.golang.org/grpc@v1.83.2"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "google.golang.org/protobuf",
      "SPDXID": "SPDXRef-Package-5224431817b4f972",
      "versionInfo": "v1.36.12",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/google.golang.org/protobuf@v1.36.12"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: google.golang.org/protobuf@v1.36.12"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "gopkg.in/evanphx/json-patch.v4",
      "SPDXID": "SPDXRef-Package-cf5250a07b980705",
      "versionInfo": "v4.13.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/gopkg.in/evanphx/json-patch.v4@v4.13.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: gopkg.in/evanphx/json-patch.v4@v4.13.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "gopkg.in/inf.v0",
      "SPDXID": "SPDXRef-Package-6703dd266e4ce49d",
      "versionInfo": "v0.9.1",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/gopkg.in/inf.v0@v0.9.1"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: gopkg.in/inf.v0@v0.9.1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "gopkg.in/ini.v1",
      "SPDXID": "SPDXRef-Package-906564553bd0c43d",
      "versionInfo": "v1.67.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/gopkg.in/ini.v1@v1.67.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: gopkg.in/ini.v1@v1.67.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "gopkg.in/yaml.v2",
      "SPDXID": "SPDXRef-Package-52e1f666e3410835",
      "versionInfo": "v2.4.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/gopkg.in/yaml.v2@v2.4.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: gopkg.in/yaml.v2@v2.4.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "gopkg.in/yaml.v3",
      "SPDXID": "SPDXRef-Package-52dab6d2466b12d8",
      "versionInfo": "v3.0.1",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/gopkg.in/yaml.v3@v3.0.1"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: gopkg.in/yaml.v3@v3.0.1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "k8s.io/api",
      "SPDXID": "SPDXRef-Package-4d4c168fd3ec7612",
      "versionInfo": "v0.36.4",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/k8s.io/api@v0.36.4"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: k8s.io/api@v0.36.4"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "k8s.io/apimachinery",
      "SPDXID": "SPDXRef-Package-3aab977b5986562b",
      "versionInfo": "v0.36.4",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/k8s.io/apimachinery@v0.36.4"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: k8s.io/apimachinery@v0.36.4"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "k8s.io/client-go",
      "SPDXID": "SPDXRef-Package-3822671cbcfaa8ca",
      "versionInfo": "v0.36.4",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/k8s.io/client-go@v0.36.4"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: k8s.io/client-go@v0.36.4"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "k8s.io/klog/v2",
      "SPDXID": "SPDXRef-Package-dfefc8e494da05a",
      "versionInfo": "v2.140.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/k8s.io/klog/v2@v2.140.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: k8s.io/klog/v2@v2.140.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "k8s.io/kube-openapi",
      "SPDXID": "SPDXRef-Package-d1f30265da979aea",
      "versionInfo": "v0.0.0-20260317180543-43fb72c5454a",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20260317180543-43fb72c5454a"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: k8s.io/kube-openapi@v0.0.0-20260317180543-43fb72c5454a"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "k8s.io/utils",
      "SPDXID": "SPDXRef-Package-898fd8839ac4ee84",
      "versionInfo": "v0.0.0-20260210185600-b8788abfbbc2",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/k8s.io/utils@v0.0.0-20260210185600-b8788abfbbc2"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: k8s.io/utils@v0.0.0-20260210185600-b8788abfbbc2"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "sigs.k8s.io/json",
      "SPDXID": "SPDXRef-Package-9ace54430f59cc77",
      "versionInfo": "v0.0.0-20250730193827-2d320260d730",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/sigs.k8s.io/json@v0.0.0-20250730193827-2d320260d730"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: sigs.k8s.io/json@v0.0.0-20250730193827-2d320260d730"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "sigs.k8s.io/randfill",
      "SPDXID": "SPDXRef-Package-2300038dd0b90e7d",
      "versionInfo": "v1.0.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/sigs.k8s.io/randfill@v1.0.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: sigs.k8s.io/randfill@v1.0.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "sigs.k8s.io/structured-merge-diff/v6",
      "SPDXID": "SPDXRef-Package-c09bab020d59061d",
      "versionInfo": "v6.3.3",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/sigs.k8s.io/structured-merge-diff/v6@v6.3.3"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: sigs.k8s.io/structured-merge-diff/v6@v6.3.3"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "sigs.k8s.io/yaml",
      "SPDXID": "SPDXRef-Package-fc80643a1629b44f",
      "versionInfo": "v1.6.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/sigs.k8s.io/yaml@v1.6.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: sigs.k8s.io/yaml@v1.6.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "stdlib",
      "SPDXID": "SPDXRef-Package-1e22c9013319f2af",
      "versionInfo": "v1.27.3",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/stdlib@v1.27.3"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: stdlib@v1.27.3"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "vault",
      "SPDXID": "SPDXRef-Package-cfbc7bbf0e874ebf",
      "versionInfo": "0.0.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:npm/vault@0.0.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:c31cc0ecd47f82cf9a8c77b50048d5eb3288325db33b9eba54860fe5bba85110"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:8f9bd996266c8cc36ee21cd6c9b809e6e0255a2b525ad2fd06c3b538fd3870e0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: vault@0.0.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: node-pkg"
        }
      ]
    },
    {
      "name": "zgo.at/zcache/v2",
      "SPDXID": "SPDXRef-Package-65bfa6471f2b20eb",
      "versionInfo": "v2.4.1",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: usr/bin/bao",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/zgo.at/zcache/v2@v2.4.1"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:acd5b9d0fa2beb0ab5d58fb9e547c6341efe94a58d54d2f79879a82076cfef34"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:f46a5ab2645521919d8c3de96fd909404208194a641a9e7f221de63e3b3ebb44"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgID: zgo.at/zcache/v2@v2.4.1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T15:17:21Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-Application-97956e214ca4d071",
      "relatedSpdxElement": "SPDXRef-Package-9de5bc7bb8041634",
      "relationshipType": "CONTAINS"
    },
    {
      "spdxElementId": "SPDXRef-ContainerImage-9fa127ceb3db8304",
      "relatedSpdxElement": "SPDXRef-Application-97956e214ca4d071",
      "relationshipType": "CONTAINS"
    },
    {
      "spdxElementId": "SPDXRef-ContainerImage-9fa127ceb3db8304",
      "relatedSpdxElement": "SPDXRef-Package-cfbc7bbf0e874ebf",
      "relationshipType": "CONTAINS"
    },
    {
      "spdxElementId": "SPDXRef-DOCUMENT",
      "relatedSpdxElement": "SPDXRef-ContainerImage-9fa127ceb3db8304",
      "relationshipType": "DESCRIBES"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-114c6176b56963b9",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-120af31a50606a90",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-1228acebe151f568",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-135b5d26b0de84ea",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-14989632f90ce7ea",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-1562f504781f44fb",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-17fae25a6b39484b",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-1a3a0c7b2d62b06d",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-1a5d0b29f74dfacf",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-1a616a466b5b3da1",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-1abb16b92c730d8e",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-1c8017c0e6b6e5e7",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-1cc7d612af6d133e",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-1d3c92103f0a0c91",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-1d46452f5bc87ff9",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-1d7fa8196379c568",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-1dc42aa4d7384c5e",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-1e22c9013319f2af",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-1f72a3a678524aec",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-20333474440ffdfb",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-206aaf64a7809063",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-213141545fd6a08a",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-224e7fd9ca2056a5",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-22aa5fb62088bd8b",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-2300038dd0b90e7d",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-2390c435c987e950",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-2467d8558a95b40f",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-247697db0a3eab5d",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-263f7a900a65b063",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-267c04115e2d0473",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-26be2576315df2eb",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-28240e21cfe1939d",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-28ac835d455cca32",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-29eb49dc18fd07a5",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-2a66ea2890a5775b",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-2bcf67669c74416e",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-2bee370368ac8317",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-2bfcc452e2dce6c5",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-2d8dfd0a1ab6f023",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-2eb31a87dcb339c9",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-301dceb0385b9092",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-30b8da59f5a65401",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-312286a1e6b7de9b",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-3417c9d29fb93932",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-34d28a1b6b95ffcc",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-357bf675ad525d2a",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-35bbe4a6180cbb07",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-3822671cbcfaa8ca",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-391eed4af920f99a",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-395e71ab43878fa1",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-3a0e3c347fabdaad",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-3aab977b5986562b",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-3b51c2088c99b282",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-3c3433a572cb895d",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-3ec5bd63f68ae86",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-3f79c3f7282858d5",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-3f86e429295d5188",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-4089e802d69086ea",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-40ad9f29b508d616",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-4144894cce1a1743",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-41e83ab03f3488f",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-4228c05c29692151",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-425b468784933e53",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-427733d9e0e474bb",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-428a280cd7bb6ab7",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-4308e70cf1fbf1fd",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-43283df45a0dcf60",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-439b43752b612140",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-445adba2c884f2cf",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-44e5c9892c94e126",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-4512530e02fe5e4",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-4605b6514e22e950",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-4785b2ded0fa7949",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-481426e1210df2f4",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-49124ec2c6097e91",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-4a2682febeb3cde8",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-4a3d2adce60bf7c3",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-4a91e2f08d7b961a",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-4ba78250baee83b",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-4c2a789862c069f9",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-4c402f07d772560a",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-4d4c168fd3ec7612",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-4d5648efca0707d9",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-4d8764d20eb21123",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-4e42e780caf79784",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-4e4b394b14638cd9",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-4e889be419f25c6b",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-4e8987734e00650d",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-4ed20085868182a6",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-50ed6d7a8683b9d2",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-511476e15adedf7f",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-512099bb8eeaf97c",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-5126cee1d95a2005",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-52142771cabf7b3c",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-5224431817b4f972",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-52dab6d2466b12d8",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-52e1f666e3410835",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-53647587589127b2",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-542f340441f8b594",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-565b649c927666f6",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-57e3b8a99c042a77",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-5803f9da4d2c7629",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-585308f038a74cb4",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-594458e314c02250",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-5b161f77224a0b90",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-5c4d691d3e0d95d9",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-5cca677ddc12b51d",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-5d00110d30b7cd00",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-5d54338de8cae23c",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-60b070d824980f38",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-61a6e4fc851d1eeb",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-6251a0c39a4dc2ef",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-629a4484aa33a714",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-63818fac64bd200",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-63d2a9889fddd0bd",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-63dc22902d53368a",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-6453a0b3a42c41f1",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-65830d64e59d5dcc",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-65bfa6471f2b20eb",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-65e05aac424c94e8",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-669dd2103ef6b590",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-6703dd266e4ce49d",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-695d2a0ba1715f79",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-69d6f52f86e8abff",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-69eb27f395d438ae",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-6a43e8d6002efe60",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-6a951480f1923192",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-6aa8211e1ac34008",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-6bddff7466c9a065",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-6e0afebb769596f6",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-6ee9b098678afc9a",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-700567a7b8a214aa",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-717dde2c5d09c759",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-7306b6a0de816222",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-735919d3115c1e65",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-753e4ea683366fc4",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-757c0655849f1a",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-7584dc3602e95254",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-763219f4a63827a5",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-785fe46b5016ea4e",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-79c1f34dc219e96a",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-7af6f6f9e22fa253",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-7bc3288d16732d44",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-7becf4407f0de2cf",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-7c26758016dd3bbe",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-7c300b954e07fce3",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-7d655bf46f810e1b",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-7db62dc154d03ca5",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-7ddd52cbe8eca93c",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-7f556ff3a3e0ec7b",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-81253970dd92f4c",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-8235c12554ff18a9",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-86df79a22a4de1",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-870abcea8b2e5cac",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-8761632f12f2ec8c",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-87acfa45cbf954c4",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-8984172e33be0303",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-898fd8839ac4ee84",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-89af326154bc8a1",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-8a268ab73879f7fd",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-8a9666d90e8518a2",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-8bce76e8970e3b8a",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-8c70e74aa44d2d32",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-8dc3a9719862612f",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-8ddd9c2029e2cb59",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-8e7702b5427da812",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-8eba47af6bdf54ac",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-8f175c3326760c5d",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-8f18035a0e630fff",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-906564553bd0c43d",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-91731bac9f025458",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-940d985732366422",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-941fae9ea8dc4649",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-9445434f793d1aac",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-94bb1dd625425c1a",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-95ba5f50b7023e7d",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-95e7121db91c7a03",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-96338f7bc8aedac0",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-968c86d160f53402",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-96c2692143ad5d9b",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-9812cbce2c4af3a8",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-98325e2f8a9bec19",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-989fabda7f72b4aa",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-99a7a517e6ba8959",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-9ace54430f59cc77",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-9b7d12a01713c46d",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-9bfc8a09bb79f07b",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-9c1a89e5b74eefc6",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-9cdafb1c5fc598e7",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-9d356f051059982e",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-9db21af43a3c8072",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-9e7740b3f13b5e2c",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-9e9e506b8ba60bca",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-a1280f1f0a8e633b",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-a18ceb918efd5030",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-a5e2be32abd64588",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-a5efbbaf1cb53b52",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-a738d7ca3c0653bb",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-a7cd94b337b2ff4c",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-a8b90a14f5aafbc9",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-a91693b11ca00ff9",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-a9b688f0e3234259",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-ab3a398bae79caba",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-abc763e1a0277f9c",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-ac6f6c86af3c3663",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-ac7e98aed7fe440a",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-af44d34489f6accd",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-af8b7de1e496f4d8",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-afbb65487a188a25",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-afd411a6a3f3bb63",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-b06c2dbcaffa90d0",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-b0e44b25ff9a1c1a",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-b1aa6f574198915",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-b1b2a6546b8f13a3",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-b27a30caa4b7d5f9",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-b3cc3ebf01569359",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-b41aa3274e69968b",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-b6200cc48262b1a2",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-b662b78ff4f86add",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-b737822ec3903239",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-b76b178568b937d5",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-b78bd81d2c9c4af",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-b82a767e69292189",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-bad6206e384419bf",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-bae44ac6c6c7b2e6",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-bc423023dba9a765",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-bd31ffcdb2631579",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-be6e31b38a45f945",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-befc5d6c05444551",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-bf306adabb08d25d",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-c011a5385a281c9c",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-c09bab020d59061d",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-c2411591e220138a",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-c30d6d182cdd4b80",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-c33754cfb65b424d",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-c4753ec241f7f06e",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-c93a00e557091f23",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-c94bef8a6ce77976",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-cb47159ac837bed3",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-cd51df514c2afb13",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-cf5250a07b980705",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-d055010e82c79324",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-d15ad47f7a102277",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-d18b740bf1dc1e24",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-d1f30265da979aea",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-d1fe60259d2db765",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-d29e0c8835bc5815",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-d36e61091e4a884a",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-d3e740ee909d218f",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-d4ea2cb3d91b3b33",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-d556b0ebe594114f",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-d567bd6105146926",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-d5aedcfc8b3bd50",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-d7681e563de6a20c",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-d79bf434fec502fd",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-d7f22bae3f913fe9",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-da3d14d8f04a0065",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-db403f520e2d21c8",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-de7f00476e5559c",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-dfefc8e494da05a",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-e04b65a2d18fdb68",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-e14b78d26fbd58ca",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-e22dbbfafc3648d7",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-e245cbf5edcc51a3",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-e2f0be4563ad00b8",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-e412fede132c053a",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-e4ba47574c7cd3fe",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-e7ae7493b05ffe50",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-e819502bca73782",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-e96197d9fdc06d38",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-e9e6c99843fd8d66",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-ecb719c09a7a0351",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-ece207aba53d075c",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-ee6a750ff9b56ef5",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-eed7124cdd57fdf0",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-f0ed5659baae2fb8",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-f0ef1e10bfffaa81",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-f1d57513b3239d4c",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-f35d52e8b36517a0",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-f3c5d29278bd114c",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-f42fc019b00d9e8b",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-f4564fca722eb4c4",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-f4f428fa7e964477",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-f57c11bab1c9154f",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-f7122ffc8ee80418",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-f8ac7e130051d494",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-f9063d83a084b221",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-fae3093d18c92c50",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-fb792e7cb02961f3",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-fc80643a1629b44f",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-9de5bc7bb8041634",
      "relatedSpdxElement": "SPDXRef-Package-ffa041285505aa0",
      "relationshipType": "DEPENDS_ON"
    }
  ]
}