{
  "spdxVersion": "SPDX-2.3",
  "dataLicense": "CC0-1.0",
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "build/payload/victoria-metrics-v1.154.0-tpio.2",
  "documentNamespace": "http://trivy.dev/container_image/build/payload/victoria-metrics-v1.154.0-tpio.2-6f7959ee-d6c5-4349-9354-edd8e95769db",
  "creationInfo": {
    "creators": [
      "Organization: aquasecurity",
      "Tool: trivy-0.75.0"
    ],
    "created": "2026-10-22T00:27:29Z"
  },
  "packages": [
    {
      "name": "victoria-metrics-prod",
      "SPDXID": "SPDXRef-Application-e2781d35e22db105",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "primaryPackagePurpose": "APPLICATION",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "Class: lang-pkgs"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "Type: gobinary"
        }
      ]
    },
    {
      "name": "build/payload/victoria-metrics-v1.154.0-tpio.2",
      "SPDXID": "SPDXRef-ContainerImage-5746329993ea7665",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "primaryPackagePurpose": "CONTAINER",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "DiffID: sha256:50033a8da0eb7068e79780b54be52d4ad35f4e97ec876252665cca296adcf806"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "DiffID: sha256:78478f0224f8e42062cc71c049d586ea4c10e2b8e5bae1955607fabd08c71dfc"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "DiffID: sha256:7b8b976f9a7982ebb5d599662fe11e4eed5c861e3644f377bb5addc0e7b75292"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "DiffID: sha256:7fe382f6a95119c0b05882a0598568c940e2bf2828ae872b8b8e85d76064ea55"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "ImageID: sha256:dbd61f5e45aa153528031fdedcadf24641f7f736ed6a71326dcf5f69f462ff96"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "Labels:io.buildah.version: 1.43.1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "Labels:io.thepeoples.hardened.distribution: vmsingle"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "Labels:io.thepeoples.hardened.ladder: b+minimize"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "Labels:io.thepeoples.hardened.source-status: upstream release tarball plus this Containerfile and recorded module changes"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "Labels:io.thepeoples.hardened.toolchain: docker.io/library/golang:1.27.3-alpine3.24@sha256:f2c872bcee949b7be9c490efd02b48a8a2fbf947cdf533f1c58525ec9d8170fd"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "Labels:org.opencontainers.image.licenses: Apache-2.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "Labels:org.opencontainers.image.revision: 29c43cd2fee05409499a4d1b38e950e1b7f13bd4"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "Labels:org.opencontainers.image.source: https://github.com/VictoriaMetrics/VictoriaMetrics"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "Labels:org.opencontainers.image.version: v1.154.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "SchemaVersion: 2"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "Size: 19208704"
        }
      ]
    },
    {
      "name": "cloud.google.com/go/compute/metadata",
      "SPDXID": "SPDXRef-Package-9ab7d4600b7b12cd",
      "versionInfo": "v0.10.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: victoria-metrics-prod",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/cloud.google.com/go/compute/metadata@v0.10.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:50033a8da0eb7068e79780b54be52d4ad35f4e97ec876252665cca296adcf806"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:081131f5587c104db3a779442fc47360203812c8d4855c51ec3f2c68a92377e9"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "PkgID: cloud.google.com/go/compute/metadata@v0.10.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/VictoriaMetrics/VictoriaMetrics",
      "SPDXID": "SPDXRef-Package-cb196d6a865eb3c5",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: victoria-metrics-prod",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/victoriametrics/victoriametrics"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:50033a8da0eb7068e79780b54be52d4ad35f4e97ec876252665cca296adcf806"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:081131f5587c104db3a779442fc47360203812c8d4855c51ec3f2c68a92377e9"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/VictoriaMetrics/VictoriaMetrics"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/VictoriaMetrics/easyproto",
      "SPDXID": "SPDXRef-Package-f3d986299d3f64be",
      "versionInfo": "v1.2.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: victoria-metrics-prod",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/victoriametrics/easyproto@v1.2.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:50033a8da0eb7068e79780b54be52d4ad35f4e97ec876252665cca296adcf806"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:081131f5587c104db3a779442fc47360203812c8d4855c51ec3f2c68a92377e9"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/VictoriaMetrics/easyproto@v1.2.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/VictoriaMetrics/fastcache",
      "SPDXID": "SPDXRef-Package-c9cc64367e4149b2",
      "versionInfo": "v1.13.3",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: victoria-metrics-prod",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/victoriametrics/fastcache@v1.13.3"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:50033a8da0eb7068e79780b54be52d4ad35f4e97ec876252665cca296adcf806"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:081131f5587c104db3a779442fc47360203812c8d4855c51ec3f2c68a92377e9"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/VictoriaMetrics/fastcache@v1.13.3"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/VictoriaMetrics/metrics",
      "SPDXID": "SPDXRef-Package-8e7dbb10743bb81b",
      "versionInfo": "v1.44.1",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: victoria-metrics-prod",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/victoriametrics/metrics@v1.44.1"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:50033a8da0eb7068e79780b54be52d4ad35f4e97ec876252665cca296adcf806"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:081131f5587c104db3a779442fc47360203812c8d4855c51ec3f2c68a92377e9"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/VictoriaMetrics/metrics@v1.44.1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/VictoriaMetrics/metricsql",
      "SPDXID": "SPDXRef-Package-4555acd875b85a72",
      "versionInfo": "v0.87.5",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: victoria-metrics-prod",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/victoriametrics/metricsql@v0.87.5"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:50033a8da0eb7068e79780b54be52d4ad35f4e97ec876252665cca296adcf806"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:081131f5587c104db3a779442fc47360203812c8d4855c51ec3f2c68a92377e9"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/VictoriaMetrics/metricsql@v0.87.5"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/cespare/xxhash/v2",
      "SPDXID": "SPDXRef-Package-d252af5a7230f4a4",
      "versionInfo": "v2.3.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: victoria-metrics-prod",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/cespare/xxhash/v2@v2.3.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:50033a8da0eb7068e79780b54be52d4ad35f4e97ec876252665cca296adcf806"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:081131f5587c104db3a779442fc47360203812c8d4855c51ec3f2c68a92377e9"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/cespare/xxhash/v2@v2.3.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/golang/snappy",
      "SPDXID": "SPDXRef-Package-bf29866441eeefa0",
      "versionInfo": "v1.0.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: victoria-metrics-prod",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/golang/snappy@v1.0.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:50033a8da0eb7068e79780b54be52d4ad35f4e97ec876252665cca296adcf806"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:081131f5587c104db3a779442fc47360203812c8d4855c51ec3f2c68a92377e9"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/golang/snappy@v1.0.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/klauspost/compress",
      "SPDXID": "SPDXRef-Package-1fbf4e4c1215c3b",
      "versionInfo": "v1.20.1",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: victoria-metrics-prod",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/klauspost/compress@v1.20.1"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:50033a8da0eb7068e79780b54be52d4ad35f4e97ec876252665cca296adcf806"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:081131f5587c104db3a779442fc47360203812c8d4855c51ec3f2c68a92377e9"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/klauspost/compress@v1.20.1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/valyala/bytebufferpool",
      "SPDXID": "SPDXRef-Package-afd59ad1a205f754",
      "versionInfo": "v1.0.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: victoria-metrics-prod",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/valyala/bytebufferpool@v1.0.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:50033a8da0eb7068e79780b54be52d4ad35f4e97ec876252665cca296adcf806"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:081131f5587c104db3a779442fc47360203812c8d4855c51ec3f2c68a92377e9"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/valyala/bytebufferpool@v1.0.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/valyala/fastjson",
      "SPDXID": "SPDXRef-Package-1ee57d2766980595",
      "versionInfo": "v1.6.10",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: victoria-metrics-prod",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/valyala/fastjson@v1.6.10"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:50033a8da0eb7068e79780b54be52d4ad35f4e97ec876252665cca296adcf806"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:081131f5587c104db3a779442fc47360203812c8d4855c51ec3f2c68a92377e9"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/valyala/fastjson@v1.6.10"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/valyala/fastrand",
      "SPDXID": "SPDXRef-Package-11351addd34d5aa6",
      "versionInfo": "v1.1.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: victoria-metrics-prod",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/valyala/fastrand@v1.1.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:50033a8da0eb7068e79780b54be52d4ad35f4e97ec876252665cca296adcf806"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:081131f5587c104db3a779442fc47360203812c8d4855c51ec3f2c68a92377e9"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/valyala/fastrand@v1.1.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/valyala/fasttemplate",
      "SPDXID": "SPDXRef-Package-dad0c15d4fc758bd",
      "versionInfo": "v1.2.2",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: victoria-metrics-prod",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/valyala/fasttemplate@v1.2.2"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:50033a8da0eb7068e79780b54be52d4ad35f4e97ec876252665cca296adcf806"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:081131f5587c104db3a779442fc47360203812c8d4855c51ec3f2c68a92377e9"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/valyala/fasttemplate@v1.2.2"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/valyala/histogram",
      "SPDXID": "SPDXRef-Package-146b6ca7f93e11f1",
      "versionInfo": "v1.2.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: victoria-metrics-prod",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/valyala/histogram@v1.2.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:50033a8da0eb7068e79780b54be52d4ad35f4e97ec876252665cca296adcf806"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:081131f5587c104db3a779442fc47360203812c8d4855c51ec3f2c68a92377e9"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/valyala/histogram@v1.2.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "github.com/valyala/quicktemplate",
      "SPDXID": "SPDXRef-Package-a3b78407fa3cf446",
      "versionInfo": "v1.8.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: victoria-metrics-prod",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/github.com/valyala/quicktemplate@v1.8.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:50033a8da0eb7068e79780b54be52d4ad35f4e97ec876252665cca296adcf806"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:081131f5587c104db3a779442fc47360203812c8d4855c51ec3f2c68a92377e9"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "PkgID: github.com/valyala/quicktemplate@v1.8.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "golang.org/x/net",
      "SPDXID": "SPDXRef-Package-48ddfbe49a6754a2",
      "versionInfo": "v0.60.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: victoria-metrics-prod",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/golang.org/x/net@v0.60.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:50033a8da0eb7068e79780b54be52d4ad35f4e97ec876252665cca296adcf806"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:081131f5587c104db3a779442fc47360203812c8d4855c51ec3f2c68a92377e9"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "PkgID: golang.org/x/net@v0.60.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "golang.org/x/oauth2",
      "SPDXID": "SPDXRef-Package-a598db80d18da299",
      "versionInfo": "v0.37.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: victoria-metrics-prod",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/golang.org/x/oauth2@v0.37.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:50033a8da0eb7068e79780b54be52d4ad35f4e97ec876252665cca296adcf806"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:081131f5587c104db3a779442fc47360203812c8d4855c51ec3f2c68a92377e9"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "PkgID: golang.org/x/oauth2@v0.37.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "golang.org/x/sys",
      "SPDXID": "SPDXRef-Package-cdc7d555e737b76d",
      "versionInfo": "v0.48.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: victoria-metrics-prod",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/golang.org/x/sys@v0.48.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:50033a8da0eb7068e79780b54be52d4ad35f4e97ec876252665cca296adcf806"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:081131f5587c104db3a779442fc47360203812c8d4855c51ec3f2c68a92377e9"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "PkgID: golang.org/x/sys@v0.48.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "gopkg.in/yaml.v2",
      "SPDXID": "SPDXRef-Package-9aaa8dbde17d0086",
      "versionInfo": "v2.4.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: victoria-metrics-prod",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/gopkg.in/yaml.v2@v2.4.0"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:50033a8da0eb7068e79780b54be52d4ad35f4e97ec876252665cca296adcf806"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:081131f5587c104db3a779442fc47360203812c8d4855c51ec3f2c68a92377e9"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "PkgID: gopkg.in/yaml.v2@v2.4.0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    },
    {
      "name": "stdlib",
      "SPDXID": "SPDXRef-Package-186970219fd0878f",
      "versionInfo": "v1.27.3",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "sourceInfo": "package found in: victoria-metrics-prod",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:golang/stdlib@v1.27.3"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:50033a8da0eb7068e79780b54be52d4ad35f4e97ec876252665cca296adcf806"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:081131f5587c104db3a779442fc47360203812c8d4855c51ec3f2c68a92377e9"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "PkgID: stdlib@v1.27.3"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-22T00:27:29Z",
          "annotationType": "OTHER",
          "comment": "PkgType: gobinary"
        }
      ]
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-Application-e2781d35e22db105",
      "relatedSpdxElement": "SPDXRef-Package-cb196d6a865eb3c5",
      "relationshipType": "CONTAINS"
    },
    {
      "spdxElementId": "SPDXRef-ContainerImage-5746329993ea7665",
      "relatedSpdxElement": "SPDXRef-Application-e2781d35e22db105",
      "relationshipType": "CONTAINS"
    },
    {
      "spdxElementId": "SPDXRef-DOCUMENT",
      "relatedSpdxElement": "SPDXRef-ContainerImage-5746329993ea7665",
      "relationshipType": "DESCRIBES"
    },
    {
      "spdxElementId": "SPDXRef-Package-cb196d6a865eb3c5",
      "relatedSpdxElement": "SPDXRef-Package-11351addd34d5aa6",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-cb196d6a865eb3c5",
      "relatedSpdxElement": "SPDXRef-Package-146b6ca7f93e11f1",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-cb196d6a865eb3c5",
      "relatedSpdxElement": "SPDXRef-Package-186970219fd0878f",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-cb196d6a865eb3c5",
      "relatedSpdxElement": "SPDXRef-Package-1ee57d2766980595",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-cb196d6a865eb3c5",
      "relatedSpdxElement": "SPDXRef-Package-1fbf4e4c1215c3b",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-cb196d6a865eb3c5",
      "relatedSpdxElement": "SPDXRef-Package-4555acd875b85a72",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-cb196d6a865eb3c5",
      "relatedSpdxElement": "SPDXRef-Package-48ddfbe49a6754a2",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-cb196d6a865eb3c5",
      "relatedSpdxElement": "SPDXRef-Package-8e7dbb10743bb81b",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-cb196d6a865eb3c5",
      "relatedSpdxElement": "SPDXRef-Package-9aaa8dbde17d0086",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-cb196d6a865eb3c5",
      "relatedSpdxElement": "SPDXRef-Package-9ab7d4600b7b12cd",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-cb196d6a865eb3c5",
      "relatedSpdxElement": "SPDXRef-Package-a3b78407fa3cf446",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-cb196d6a865eb3c5",
      "relatedSpdxElement": "SPDXRef-Package-a598db80d18da299",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-cb196d6a865eb3c5",
      "relatedSpdxElement": "SPDXRef-Package-afd59ad1a205f754",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-cb196d6a865eb3c5",
      "relatedSpdxElement": "SPDXRef-Package-bf29866441eeefa0",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-cb196d6a865eb3c5",
      "relatedSpdxElement": "SPDXRef-Package-c9cc64367e4149b2",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-cb196d6a865eb3c5",
      "relatedSpdxElement": "SPDXRef-Package-cdc7d555e737b76d",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-cb196d6a865eb3c5",
      "relatedSpdxElement": "SPDXRef-Package-d252af5a7230f4a4",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-cb196d6a865eb3c5",
      "relatedSpdxElement": "SPDXRef-Package-dad0c15d4fc758bd",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-cb196d6a865eb3c5",
      "relatedSpdxElement": "SPDXRef-Package-f3d986299d3f64be",
      "relationshipType": "DEPENDS_ON"
    }
  ]
}