{"artifacts":[{"id":"bf3797e407aa74c9","name":"actions/checkout","version":"de0fac2e4500dabe0009e67214ff5f5447ce83dd","type":"github-action","foundBy":"github-actions-usage-cataloger","locations":[{"path":"/.github/workflows/docker-multiarch-build.yml","accessPath":"/.github/workflows/docker-multiarch-build.yml","annotations":{"evidence":"primary"}}],"licenses":[],"language":"","cpes":[{"cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:de0fac2e4500dabe0009e67214ff5f5447ce83dd:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:github/actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd","metadataType":"github-actions-use-statement","metadata":{"value":"actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd","comment":"v6"}},{"id":"1e76c638c42e671c","name":"actions/checkout","version":"de0fac2e4500dabe0009e67214ff5f5447ce83dd","type":"github-action","foundBy":"github-actions-usage-cataloger","locations":[{"path":"/.github/workflows/phan-php-code-analysis.yml","accessPath":"/.github/workflows/phan-php-code-analysis.yml","annotations":{"evidence":"primary"}}],"licenses":[],"language":"","cpes":[{"cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:de0fac2e4500dabe0009e67214ff5f5447ce83dd:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:github/actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd","metadataType":"github-actions-use-statement","metadata":{"value":"actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd","comment":"v6"}},{"id":"db145f0c74b08b12","name":"actions/checkout","version":"v6.0.2","type":"github-action","foundBy":"github-actions-usage-cataloger","locations":[{"path":"/.github/workflows/codeql.yml","accessPath":"/.github/workflows/codeql.yml","annotations":{"evidence":"primary"}}],"licenses":[],"language":"","cpes":[{"cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v6.0.2:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:github/actions/checkout@v6.0.2","metadataType":"github-actions-use-statement","metadata":{"value":"actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd","comment":"v6.0.2"}},{"id":"36d5f3eea8347bd4","name":"actions/checkout","version":"v6.0.2","type":"github-action","foundBy":"github-actions-usage-cataloger","locations":[{"path":"/.github/workflows/count_lines_of_code.yml","accessPath":"/.github/workflows/count_lines_of_code.yml","annotations":{"evidence":"primary"}}],"licenses":[],"language":"","cpes":[{"cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v6.0.2:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:github/actions/checkout@v6.0.2","metadataType":"github-actions-use-statement","metadata":{"value":"actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd","comment":"v6.0.2"}},{"id":"85281977c9cc65c0","name":"actions/checkout","version":"v6.0.2","type":"github-action","foundBy":"github-actions-usage-cataloger","locations":[{"path":"/.github/workflows/dependency-review.yml","accessPath":"/.github/workflows/dependency-review.yml","annotations":{"evidence":"primary"}}],"licenses":[],"language":"","cpes":[{"cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v6.0.2:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:github/actions/checkout@v6.0.2","metadataType":"github-actions-use-statement","metadata":{"value":"actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd","comment":"v6.0.2"}},{"id":"2d333b1298a44f88","name":"actions/checkout","version":"v6.0.2","type":"github-action","foundBy":"github-actions-usage-cataloger","locations":[{"path":"/.github/workflows/eslint.yml","accessPath":"/.github/workflows/eslint.yml","annotations":{"evidence":"primary"}}],"licenses":[],"language":"","cpes":[{"cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v6.0.2:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:github/actions/checkout@v6.0.2","metadataType":"github-actions-use-statement","metadata":{"value":"actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd","comment":"v6.0.2"}},{"id":"e5c5af7ba135b231","name":"actions/checkout","version":"v6.0.2","type":"github-action","foundBy":"github-actions-usage-cataloger","locations":[{"path":"/.github/workflows/generator-generic-ossf-slsa3-publish.yml","accessPath":"/.github/workflows/generator-generic-ossf-slsa3-publish.yml","annotations":{"evidence":"primary"}}],"licenses":[],"language":"","cpes":[{"cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v6.0.2:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:github/actions/checkout@v6.0.2","metadataType":"github-actions-use-statement","metadata":{"value":"actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd","comment":"v6.0.2"}},{"id":"c54900e5dbc0ecae","name":"actions/checkout","version":"v6.0.2","type":"github-action","foundBy":"github-actions-usage-cataloger","locations":[{"path":"/.github/workflows/sbom-generation.yml","accessPath":"/.github/workflows/sbom-generation.yml","annotations":{"evidence":"primary"}}],"licenses":[],"language":"","cpes":[{"cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v6.0.2:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:github/actions/checkout@v6.0.2","metadataType":"github-actions-use-statement","metadata":{"value":"actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd","comment":"v6.0.2"}},{"id":"ec77cd62600ce9c1","name":"actions/checkout","version":"v6.0.2","type":"github-action","foundBy":"github-actions-usage-cataloger","locations":[{"path":"/.github/workflows/scorecard.yml","accessPath":"/.github/workflows/scorecard.yml","annotations":{"evidence":"primary"}}],"licenses":[],"language":"","cpes":[{"cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v6.0.2:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:github/actions/checkout@v6.0.2","metadataType":"github-actions-use-statement","metadata":{"value":"actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd","comment":"v6.0.2"}},{"id":"74f73e01d4beeab7","name":"actions/checkout","version":"v6.0.2","type":"github-action","foundBy":"github-actions-usage-cataloger","locations":[{"path":"/.github/workflows/trivy-vulnerability-scans.yml","accessPath":"/.github/workflows/trivy-vulnerability-scans.yml","annotations":{"evidence":"primary"}}],"licenses":[],"language":"","cpes":[{"cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v6.0.2:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:github/actions/checkout@v6.0.2","metadataType":"github-actions-use-statement","metadata":{"value":"actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd","comment":"v6.0.2"}},{"id":"a07043ff73347682","name":"actions/configure-pages","version":"983d7736d9b0ae728b81ab479565c72886d7745b","type":"github-action","foundBy":"github-actions-usage-cataloger","locations":[{"path":"/.github/workflows/sbom-generation.yml","accessPath":"/.github/workflows/sbom-generation.yml","annotations":{"evidence":"primary"}}],"licenses":[],"language":"","cpes":[{"cpe":"cpe:2.3:a:actions\\/configure-pages:actions\\/configure-pages:983d7736d9b0ae728b81ab479565c72886d7745b:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:actions\\/configure-pages:actions\\/configure_pages:983d7736d9b0ae728b81ab479565c72886d7745b:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:actions\\/configure_pages:actions\\/configure-pages:983d7736d9b0ae728b81ab479565c72886d7745b:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:actions\\/configure_pages:actions\\/configure_pages:983d7736d9b0ae728b81ab479565c72886d7745b:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:actions\\/configure:actions\\/configure-pages:983d7736d9b0ae728b81ab479565c72886d7745b:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:actions\\/configure:actions\\/configure_pages:983d7736d9b0ae728b81ab479565c72886d7745b:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:github/actions/configure-pages@983d7736d9b0ae728b81ab479565c72886d7745b","metadataType":"github-actions-use-statement","metadata":{"value":"actions/configure-pages@983d7736d9b0ae728b81ab479565c72886d7745b","comment":"v5"}},{"id":"3f2ba4e27b5bfb0a","name":"actions/dependency-review-action","version":"v5.0.0","type":"github-action","foundBy":"github-actions-usage-cataloger","locations":[{"path":"/.github/workflows/dependency-review.yml","accessPath":"/.github/workflows/dependency-review.yml","annotations":{"evidence":"primary"}}],"licenses":[],"language":"","cpes":[{"cpe":"cpe:2.3:a:actions\\/dependency-review-action:actions\\/dependency-review-action:v5.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:actions\\/dependency-review-action:actions\\/dependency_review_action:v5.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:actions\\/dependency_review_action:actions\\/dependency-review-action:v5.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:actions\\/dependency_review_action:actions\\/dependency_review_action:v5.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:actions\\/dependency-review:actions\\/dependency-review-action:v5.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:actions\\/dependency-review:actions\\/dependency_review_action:v5.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:actions\\/dependency_review:actions\\/dependency-review-action:v5.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:actions\\/dependency_review:actions\\/dependency_review_action:v5.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:actions\\/dependency:actions\\/dependency-review-action:v5.0.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:actions\\/dependency:actions\\/dependency_review_action:v5.0.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:github/actions/dependency-review-action@v5.0.0","metadataType":"github-actions-use-statement","metadata":{"value":"actions/dependency-review-action@a1d282b36b6f3519aa1f3fc636f609c47dddb294","comment":"v5.0.0"}},{"id":"6c98088196e3270a","name":"actions/deploy-pages","version":"d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e","type":"github-action","foundBy":"github-actions-usage-cataloger","locations":[{"path":"/.github/workflows/sbom-generation.yml","accessPath":"/.github/workflows/sbom-generation.yml","annotations":{"evidence":"primary"}}],"licenses":[],"language":"","cpes":[{"cpe":"cpe:2.3:a:actions\\/deploy-pages:actions\\/deploy-pages:d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:actions\\/deploy-pages:actions\\/deploy_pages:d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:actions\\/deploy_pages:actions\\/deploy-pages:d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:actions\\/deploy_pages:actions\\/deploy_pages:d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:actions\\/deploy:actions\\/deploy-pages:d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:actions\\/deploy:actions\\/deploy_pages:d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:github/actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e","metadataType":"github-actions-use-statement","metadata":{"value":"actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e","comment":"v4"}},{"id":"72d20634c018c750","name":"actions/setup-node","version":"v6.4.0","type":"github-action","foundBy":"github-actions-usage-cataloger","locations":[{"path":"/.github/workflows/count_lines_of_code.yml","accessPath":"/.github/workflows/count_lines_of_code.yml","annotations":{"evidence":"primary"}}],"licenses":[],"language":"","cpes":[{"cpe":"cpe:2.3:a:actions\\/setup-node:actions\\/setup-node:v6.4.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:actions\\/setup-node:actions\\/setup_node:v6.4.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:actions\\/setup_node:actions\\/setup-node:v6.4.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:actions\\/setup_node:actions\\/setup_node:v6.4.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:actions\\/setup:actions\\/setup-node:v6.4.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:actions\\/setup:actions\\/setup_node:v6.4.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:github/actions/setup-node@v6.4.0","metadataType":"github-actions-use-statement","metadata":{"value":"actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e","comment":"v6.4.0"}},{"id":"68c862711aa2ee2b","name":"actions/upload-artifact","version":"043fb46d1a93c77aae656e7c1c64a875d1fc6a0a","type":"github-action","foundBy":"github-actions-usage-cataloger","locations":[{"path":"/.github/workflows/count_lines_of_code.yml","accessPath":"/.github/workflows/count_lines_of_code.yml","annotations":{"evidence":"primary"}}],"licenses":[],"language":"","cpes":[{"cpe":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:043fb46d1a93c77aae656e7c1c64a875d1fc6a0a:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:043fb46d1a93c77aae656e7c1c64a875d1fc6a0a:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:043fb46d1a93c77aae656e7c1c64a875d1fc6a0a:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:043fb46d1a93c77aae656e7c1c64a875d1fc6a0a:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:043fb46d1a93c77aae656e7c1c64a875d1fc6a0a:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:043fb46d1a93c77aae656e7c1c64a875d1fc6a0a:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:github/actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a","metadataType":"github-actions-use-statement","metadata":{"value":"actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a","comment":"v7"}},{"id":"1d6a560f3b077fc2","name":"actions/upload-artifact","version":"043fb46d1a93c77aae656e7c1c64a875d1fc6a0a","type":"github-action","foundBy":"github-actions-usage-cataloger","locations":[{"path":"/.github/workflows/phan-php-code-analysis.yml","accessPath":"/.github/workflows/phan-php-code-analysis.yml","annotations":{"evidence":"primary"}}],"licenses":[],"language":"","cpes":[{"cpe":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:043fb46d1a93c77aae656e7c1c64a875d1fc6a0a:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:043fb46d1a93c77aae656e7c1c64a875d1fc6a0a:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:043fb46d1a93c77aae656e7c1c64a875d1fc6a0a:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:043fb46d1a93c77aae656e7c1c64a875d1fc6a0a:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:043fb46d1a93c77aae656e7c1c64a875d1fc6a0a:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:043fb46d1a93c77aae656e7c1c64a875d1fc6a0a:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:github/actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a","metadataType":"github-actions-use-statement","metadata":{"value":"actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a","comment":"v7"}},{"id":"394670b0b04bea6f","name":"actions/upload-artifact","version":"043fb46d1a93c77aae656e7c1c64a875d1fc6a0a","type":"github-action","foundBy":"github-actions-usage-cataloger","locations":[{"path":"/.github/workflows/trivy-vulnerability-scans.yml","accessPath":"/.github/workflows/trivy-vulnerability-scans.yml","annotations":{"evidence":"primary"}}],"licenses":[],"language":"","cpes":[{"cpe":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:043fb46d1a93c77aae656e7c1c64a875d1fc6a0a:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:043fb46d1a93c77aae656e7c1c64a875d1fc6a0a:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:043fb46d1a93c77aae656e7c1c64a875d1fc6a0a:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:043fb46d1a93c77aae656e7c1c64a875d1fc6a0a:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:043fb46d1a93c77aae656e7c1c64a875d1fc6a0a:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:043fb46d1a93c77aae656e7c1c64a875d1fc6a0a:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:github/actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a","metadataType":"github-actions-use-statement","metadata":{"value":"actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a","comment":"v7"}},{"id":"9a7f6c34be2cf71c","name":"actions/upload-artifact","version":"v7.0.1","type":"github-action","foundBy":"github-actions-usage-cataloger","locations":[{"path":"/.github/workflows/scorecard.yml","accessPath":"/.github/workflows/scorecard.yml","annotations":{"evidence":"primary"}}],"licenses":[],"language":"","cpes":[{"cpe":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:v7.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:v7.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:v7.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:v7.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:v7.0.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:v7.0.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:github/actions/upload-artifact@v7.0.1","metadataType":"github-actions-use-statement","metadata":{"value":"actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a","comment":"v7.0.1"}},{"id":"9e6b749f1f2ebf18","name":"actions/upload-pages-artifact","version":"56afc609e74202658d3ffba0e8f6dda462b719fa","type":"github-action","foundBy":"github-actions-usage-cataloger","locations":[{"path":"/.github/workflows/sbom-generation.yml","accessPath":"/.github/workflows/sbom-generation.yml","annotations":{"evidence":"primary"}}],"licenses":[],"language":"","cpes":[{"cpe":"cpe:2.3:a:actions\\/upload-pages-artifact:actions\\/upload-pages-artifact:56afc609e74202658d3ffba0e8f6dda462b719fa:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:actions\\/upload-pages-artifact:actions\\/upload_pages_artifact:56afc609e74202658d3ffba0e8f6dda462b719fa:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:actions\\/upload_pages_artifact:actions\\/upload-pages-artifact:56afc609e74202658d3ffba0e8f6dda462b719fa:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:actions\\/upload_pages_artifact:actions\\/upload_pages_artifact:56afc609e74202658d3ffba0e8f6dda462b719fa:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:actions\\/upload-pages:actions\\/upload-pages-artifact:56afc609e74202658d3ffba0e8f6dda462b719fa:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:actions\\/upload-pages:actions\\/upload_pages_artifact:56afc609e74202658d3ffba0e8f6dda462b719fa:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:actions\\/upload_pages:actions\\/upload-pages-artifact:56afc609e74202658d3ffba0e8f6dda462b719fa:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:actions\\/upload_pages:actions\\/upload_pages_artifact:56afc609e74202658d3ffba0e8f6dda462b719fa:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:actions\\/upload:actions\\/upload-pages-artifact:56afc609e74202658d3ffba0e8f6dda462b719fa:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:actions\\/upload:actions\\/upload_pages_artifact:56afc609e74202658d3ffba0e8f6dda462b719fa:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:github/actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa","metadataType":"github-actions-use-statement","metadata":{"value":"actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa","comment":"v3"}},{"id":"60fdf0d4129e0929","name":"aquasecurity/trivy-action","version":"v0.36.0","type":"github-action","foundBy":"github-actions-usage-cataloger","locations":[{"path":"/.github/workflows/trivy-vulnerability-scans.yml","accessPath":"/.github/workflows/trivy-vulnerability-scans.yml","annotations":{"evidence":"primary"}}],"licenses":[],"language":"","cpes":[{"cpe":"cpe:2.3:a:aquasecurity\\/trivy-action:aquasecurity\\/trivy-action:v0.36.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:aquasecurity\\/trivy-action:aquasecurity\\/trivy_action:v0.36.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:aquasecurity\\/trivy_action:aquasecurity\\/trivy-action:v0.36.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:aquasecurity\\/trivy_action:aquasecurity\\/trivy_action:v0.36.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:aquasecurity\\/trivy:aquasecurity\\/trivy-action:v0.36.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:aquasecurity\\/trivy:aquasecurity\\/trivy_action:v0.36.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:github/aquasecurity/trivy-action@v0.36.0","metadataType":"github-actions-use-statement","metadata":{"value":"aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25","comment":"v0.36.0"}},{"id":"a3007dc6c19ae9bd","name":"docker/build-push-action","version":"ca052bb54ab0790a636c9b5f226502c73d547a25","type":"github-action","foundBy":"github-actions-usage-cataloger","locations":[{"path":"/.github/workflows/docker-multiarch-build.yml","accessPath":"/.github/workflows/docker-multiarch-build.yml","annotations":{"evidence":"primary"}}],"licenses":[],"language":"","cpes":[{"cpe":"cpe:2.3:a:docker\\/build-push-action:docker\\/build-push-action:ca052bb54ab0790a636c9b5f226502c73d547a25:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:docker\\/build-push-action:docker\\/build_push_action:ca052bb54ab0790a636c9b5f226502c73d547a25:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:docker\\/build_push_action:docker\\/build-push-action:ca052bb54ab0790a636c9b5f226502c73d547a25:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:docker\\/build_push_action:docker\\/build_push_action:ca052bb54ab0790a636c9b5f226502c73d547a25:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:docker\\/build-push:docker\\/build-push-action:ca052bb54ab0790a636c9b5f226502c73d547a25:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:docker\\/build-push:docker\\/build_push_action:ca052bb54ab0790a636c9b5f226502c73d547a25:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:docker\\/build_push:docker\\/build-push-action:ca052bb54ab0790a636c9b5f226502c73d547a25:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:docker\\/build_push:docker\\/build_push_action:ca052bb54ab0790a636c9b5f226502c73d547a25:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:docker\\/build:docker\\/build-push-action:ca052bb54ab0790a636c9b5f226502c73d547a25:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:docker\\/build:docker\\/build_push_action:ca052bb54ab0790a636c9b5f226502c73d547a25:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:github/docker/build-push-action@ca052bb54ab0790a636c9b5f226502c73d547a25","metadataType":"github-actions-use-statement","metadata":{"value":"docker/build-push-action@ca052bb54ab0790a636c9b5f226502c73d547a25","comment":"v5"}},{"id":"81a0cd414d9ff13a","name":"docker/login-action","version":"4907a6ddec9925e35a0a9e82d7399ccc52663121","type":"github-action","foundBy":"github-actions-usage-cataloger","locations":[{"path":"/.github/workflows/docker-multiarch-build.yml","accessPath":"/.github/workflows/docker-multiarch-build.yml","annotations":{"evidence":"primary"}}],"licenses":[],"language":"","cpes":[{"cpe":"cpe:2.3:a:docker\\/login-action:docker\\/login-action:4907a6ddec9925e35a0a9e82d7399ccc52663121:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:docker\\/login-action:docker\\/login_action:4907a6ddec9925e35a0a9e82d7399ccc52663121:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:docker\\/login_action:docker\\/login-action:4907a6ddec9925e35a0a9e82d7399ccc52663121:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:docker\\/login_action:docker\\/login_action:4907a6ddec9925e35a0a9e82d7399ccc52663121:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:docker\\/login:docker\\/login-action:4907a6ddec9925e35a0a9e82d7399ccc52663121:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:docker\\/login:docker\\/login_action:4907a6ddec9925e35a0a9e82d7399ccc52663121:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:github/docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121","metadataType":"github-actions-use-statement","metadata":{"value":"docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121","comment":"v4"}},{"id":"cd6616c842eaf2da","name":"docker/setup-buildx-action","version":"4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd","type":"github-action","foundBy":"github-actions-usage-cataloger","locations":[{"path":"/.github/workflows/docker-multiarch-build.yml","accessPath":"/.github/workflows/docker-multiarch-build.yml","annotations":{"evidence":"primary"}}],"licenses":[],"language":"","cpes":[{"cpe":"cpe:2.3:a:docker\\/setup-buildx-action:docker\\/setup-buildx-action:4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:docker\\/setup-buildx-action:docker\\/setup_buildx_action:4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:docker\\/setup_buildx_action:docker\\/setup-buildx-action:4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:docker\\/setup_buildx_action:docker\\/setup_buildx_action:4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:docker\\/setup-buildx:docker\\/setup-buildx-action:4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:docker\\/setup-buildx:docker\\/setup_buildx_action:4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:docker\\/setup_buildx:docker\\/setup-buildx-action:4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:docker\\/setup_buildx:docker\\/setup_buildx_action:4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:docker\\/setup:docker\\/setup-buildx-action:4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:docker\\/setup:docker\\/setup_buildx_action:4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:github/docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd","metadataType":"github-actions-use-statement","metadata":{"value":"docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd","comment":"v4"}},{"id":"4b039c32531aa404","name":"docker/setup-qemu-action","version":"c7c53464625b32c7a7e944ae62b3e17d2b600130","type":"github-action","foundBy":"github-actions-usage-cataloger","locations":[{"path":"/.github/workflows/docker-multiarch-build.yml","accessPath":"/.github/workflows/docker-multiarch-build.yml","annotations":{"evidence":"primary"}}],"licenses":[],"language":"","cpes":[{"cpe":"cpe:2.3:a:docker\\/setup-qemu-action:docker\\/setup-qemu-action:c7c53464625b32c7a7e944ae62b3e17d2b600130:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:docker\\/setup-qemu-action:docker\\/setup_qemu_action:c7c53464625b32c7a7e944ae62b3e17d2b600130:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:docker\\/setup_qemu_action:docker\\/setup-qemu-action:c7c53464625b32c7a7e944ae62b3e17d2b600130:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:docker\\/setup_qemu_action:docker\\/setup_qemu_action:c7c53464625b32c7a7e944ae62b3e17d2b600130:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:docker\\/setup-qemu:docker\\/setup-qemu-action:c7c53464625b32c7a7e944ae62b3e17d2b600130:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:docker\\/setup-qemu:docker\\/setup_qemu_action:c7c53464625b32c7a7e944ae62b3e17d2b600130:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:docker\\/setup_qemu:docker\\/setup-qemu-action:c7c53464625b32c7a7e944ae62b3e17d2b600130:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:docker\\/setup_qemu:docker\\/setup_qemu_action:c7c53464625b32c7a7e944ae62b3e17d2b600130:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:docker\\/setup:docker\\/setup-qemu-action:c7c53464625b32c7a7e944ae62b3e17d2b600130:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:docker\\/setup:docker\\/setup_qemu_action:c7c53464625b32c7a7e944ae62b3e17d2b600130:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:github/docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130","metadataType":"github-actions-use-statement","metadata":{"value":"docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130","comment":"v3"}},{"id":"3956f5961bfcf596","name":"github/codeql-action/analyze","version":"v3.26.2","type":"github-action","foundBy":"github-actions-usage-cataloger","locations":[{"path":"/.github/workflows/codeql.yml","accessPath":"/.github/workflows/codeql.yml","annotations":{"evidence":"primary"}}],"licenses":[],"language":"","cpes":[{"cpe":"cpe:2.3:a:github\\/codeql-action\\/analyze:github\\/codeql-action\\/analyze:v3.26.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:github\\/codeql-action\\/analyze:github\\/codeql_action\\/analyze:v3.26.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:github\\/codeql_action\\/analyze:github\\/codeql-action\\/analyze:v3.26.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:github\\/codeql_action\\/analyze:github\\/codeql_action\\/analyze:v3.26.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:github\\/codeql:github\\/codeql-action\\/analyze:v3.26.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:github\\/codeql:github\\/codeql_action\\/analyze:v3.26.2:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:github/github/codeql-action@v3.26.2#analyze","metadataType":"github-actions-use-statement","metadata":{"value":"github/codeql-action/analyze@429e1977040da7a23b6822b13c129cd1ba93dbb2","comment":"v3.26.2"}},{"id":"78e33e01051e9dd9","name":"github/codeql-action/autobuild","version":"v3.26.2","type":"github-action","foundBy":"github-actions-usage-cataloger","locations":[{"path":"/.github/workflows/codeql.yml","accessPath":"/.github/workflows/codeql.yml","annotations":{"evidence":"primary"}}],"licenses":[],"language":"","cpes":[{"cpe":"cpe:2.3:a:github\\/codeql-action\\/autobuild:github\\/codeql-action\\/autobuild:v3.26.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:github\\/codeql-action\\/autobuild:github\\/codeql_action\\/autobuild:v3.26.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:github\\/codeql_action\\/autobuild:github\\/codeql-action\\/autobuild:v3.26.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:github\\/codeql_action\\/autobuild:github\\/codeql_action\\/autobuild:v3.26.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:github\\/codeql:github\\/codeql-action\\/autobuild:v3.26.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:github\\/codeql:github\\/codeql_action\\/autobuild:v3.26.2:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:github/github/codeql-action@v3.26.2#autobuild","metadataType":"github-actions-use-statement","metadata":{"value":"github/codeql-action/autobuild@429e1977040da7a23b6822b13c129cd1ba93dbb2","comment":"v3.26.2"}},{"id":"7417d2a3fc5800c4","name":"github/codeql-action/init","version":"v3.26.2","type":"github-action","foundBy":"github-actions-usage-cataloger","locations":[{"path":"/.github/workflows/codeql.yml","accessPath":"/.github/workflows/codeql.yml","annotations":{"evidence":"primary"}}],"licenses":[],"language":"","cpes":[{"cpe":"cpe:2.3:a:github\\/codeql-action\\/init:github\\/codeql-action\\/init:v3.26.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:github\\/codeql-action\\/init:github\\/codeql_action\\/init:v3.26.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:github\\/codeql_action\\/init:github\\/codeql-action\\/init:v3.26.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:github\\/codeql_action\\/init:github\\/codeql_action\\/init:v3.26.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:github\\/codeql:github\\/codeql-action\\/init:v3.26.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:github\\/codeql:github\\/codeql_action\\/init:v3.26.2:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:github/github/codeql-action@v3.26.2#init","metadataType":"github-actions-use-statement","metadata":{"value":"github/codeql-action/init@429e1977040da7a23b6822b13c129cd1ba93dbb2","comment":"v3.26.2"}},{"id":"75f73da96f71ee7c","name":"github/codeql-action/upload-sarif","version":"v3.26.2","type":"github-action","foundBy":"github-actions-usage-cataloger","locations":[{"path":"/.github/workflows/eslint.yml","accessPath":"/.github/workflows/eslint.yml","annotations":{"evidence":"primary"}}],"licenses":[],"language":"","cpes":[{"cpe":"cpe:2.3:a:github\\/codeql-action\\/upload-sarif:github\\/codeql-action\\/upload-sarif:v3.26.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:github\\/codeql-action\\/upload-sarif:github\\/codeql_action\\/upload_sarif:v3.26.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:github\\/codeql_action\\/upload_sarif:github\\/codeql-action\\/upload-sarif:v3.26.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:github\\/codeql_action\\/upload_sarif:github\\/codeql_action\\/upload_sarif:v3.26.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:github\\/codeql-action\\/upload:github\\/codeql-action\\/upload-sarif:v3.26.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:github\\/codeql-action\\/upload:github\\/codeql_action\\/upload_sarif:v3.26.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:github\\/codeql_action\\/upload:github\\/codeql-action\\/upload-sarif:v3.26.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:github\\/codeql_action\\/upload:github\\/codeql_action\\/upload_sarif:v3.26.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:github\\/codeql:github\\/codeql-action\\/upload-sarif:v3.26.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:github\\/codeql:github\\/codeql_action\\/upload_sarif:v3.26.2:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:github/github/codeql-action@v3.26.2#upload-sarif","metadataType":"github-actions-use-statement","metadata":{"value":"github/codeql-action/upload-sarif@429e1977040da7a23b6822b13c129cd1ba93dbb2","comment":"v3.26.2"}},{"id":"3a9474dca9217bbb","name":"github/codeql-action/upload-sarif","version":"v3.26.2","type":"github-action","foundBy":"github-actions-usage-cataloger","locations":[{"path":"/.github/workflows/scorecard.yml","accessPath":"/.github/workflows/scorecard.yml","annotations":{"evidence":"primary"}}],"licenses":[],"language":"","cpes":[{"cpe":"cpe:2.3:a:github\\/codeql-action\\/upload-sarif:github\\/codeql-action\\/upload-sarif:v3.26.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:github\\/codeql-action\\/upload-sarif:github\\/codeql_action\\/upload_sarif:v3.26.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:github\\/codeql_action\\/upload_sarif:github\\/codeql-action\\/upload-sarif:v3.26.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:github\\/codeql_action\\/upload_sarif:github\\/codeql_action\\/upload_sarif:v3.26.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:github\\/codeql-action\\/upload:github\\/codeql-action\\/upload-sarif:v3.26.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:github\\/codeql-action\\/upload:github\\/codeql_action\\/upload_sarif:v3.26.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:github\\/codeql_action\\/upload:github\\/codeql-action\\/upload-sarif:v3.26.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:github\\/codeql_action\\/upload:github\\/codeql_action\\/upload_sarif:v3.26.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:github\\/codeql:github\\/codeql-action\\/upload-sarif:v3.26.2:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:github\\/codeql:github\\/codeql_action\\/upload_sarif:v3.26.2:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:github/github/codeql-action@v3.26.2#upload-sarif","metadataType":"github-actions-use-statement","metadata":{"value":"github/codeql-action/upload-sarif@429e1977040da7a23b6822b13c129cd1ba93dbb2","comment":"v3.26.2"}},{"id":"142bdff2ea5952fc","name":"ossf/scorecard-action","version":"v2.4.3","type":"github-action","foundBy":"github-actions-usage-cataloger","locations":[{"path":"/.github/workflows/scorecard.yml","accessPath":"/.github/workflows/scorecard.yml","annotations":{"evidence":"primary"}}],"licenses":[],"language":"","cpes":[{"cpe":"cpe:2.3:a:ossf\\/scorecard-action:ossf\\/scorecard-action:v2.4.3:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:ossf\\/scorecard-action:ossf\\/scorecard_action:v2.4.3:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:ossf\\/scorecard_action:ossf\\/scorecard-action:v2.4.3:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:ossf\\/scorecard_action:ossf\\/scorecard_action:v2.4.3:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:ossf\\/scorecard:ossf\\/scorecard-action:v2.4.3:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:ossf\\/scorecard:ossf\\/scorecard_action:v2.4.3:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:github/ossf/scorecard-action@v2.4.3","metadataType":"github-actions-use-statement","metadata":{"value":"ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a","comment":"v2.4.3"}},{"id":"34efc6acafb66bb3","name":"shivammathur/setup-php","version":"accd6127cb78bee3e8082180cb391013d204ef9f","type":"github-action","foundBy":"github-actions-usage-cataloger","locations":[{"path":"/.github/workflows/phan-php-code-analysis.yml","accessPath":"/.github/workflows/phan-php-code-analysis.yml","annotations":{"evidence":"primary"}}],"licenses":[],"language":"","cpes":[{"cpe":"cpe:2.3:a:shivammathur\\/setup-php:shivammathur\\/setup-php:accd6127cb78bee3e8082180cb391013d204ef9f:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:shivammathur\\/setup-php:shivammathur\\/setup_php:accd6127cb78bee3e8082180cb391013d204ef9f:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:shivammathur\\/setup_php:shivammathur\\/setup-php:accd6127cb78bee3e8082180cb391013d204ef9f:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:shivammathur\\/setup_php:shivammathur\\/setup_php:accd6127cb78bee3e8082180cb391013d204ef9f:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:shivammathur\\/setup:shivammathur\\/setup-php:accd6127cb78bee3e8082180cb391013d204ef9f:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:shivammathur\\/setup:shivammathur\\/setup_php:accd6127cb78bee3e8082180cb391013d204ef9f:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:github/shivammathur/setup-php@accd6127cb78bee3e8082180cb391013d204ef9f","metadataType":"github-actions-use-statement","metadata":{"value":"shivammathur/setup-php@accd6127cb78bee3e8082180cb391013d204ef9f","comment":"v2"}},{"id":"a10c50abc71928da","name":"slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml","version":"v2.1.0","type":"github-action-workflow","foundBy":"github-action-workflow-usage-cataloger","locations":[{"path":"/.github/workflows/generator-generic-ossf-slsa3-publish.yml","accessPath":"/.github/workflows/generator-generic-ossf-slsa3-publish.yml","annotations":{"evidence":"primary"}}],"licenses":[],"language":"","cpes":[{"cpe":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:slsa-framework\\/slsa-github:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:slsa-framework\\/slsa-github:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:slsa-framework\\/slsa-github:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:slsa_framework\\/slsa_github:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:slsa_framework\\/slsa_github:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:slsa_framework\\/slsa_github:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:slsa-framework\\/slsa:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:slsa-framework\\/slsa:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:slsa-framework\\/slsa:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:slsa_framework\\/slsa:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:slsa_framework\\/slsa:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:slsa_framework\\/slsa:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:slsa:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator-generic-slsa3.yml:v2.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:slsa:slsa-framework\\/slsa-github-generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:slsa:slsa_framework\\/slsa_github_generator\\/.github\\/workflows\\/generator_generic_slsa3.yml:v2.1.0:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:github/slsa-framework/slsa-github-generator@v2.1.0#.github/workflows/generator_generic_slsa3.yml","metadataType":"github-actions-use-statement","metadata":{"value":"slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v2.1.0"}},{"id":"e3db744a067d29e4","name":"step-security/harden-runner","version":"v2.19.1","type":"github-action","foundBy":"github-actions-usage-cataloger","locations":[{"path":"/.github/workflows/codeql.yml","accessPath":"/.github/workflows/codeql.yml","annotations":{"evidence":"primary"}}],"licenses":[],"language":"","cpes":[{"cpe":"cpe:2.3:a:step-security\\/harden-runner:step-security\\/harden-runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step-security\\/harden-runner:step_security\\/harden_runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step_security\\/harden_runner:step-security\\/harden-runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step_security\\/harden_runner:step_security\\/harden_runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step-security\\/harden:step-security\\/harden-runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step-security\\/harden:step_security\\/harden_runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step_security\\/harden:step-security\\/harden-runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step_security\\/harden:step_security\\/harden_runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step:step-security\\/harden-runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step:step_security\\/harden_runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:github/step-security/harden-runner@v2.19.1","metadataType":"github-actions-use-statement","metadata":{"value":"step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450","comment":"v2.19.1"}},{"id":"2c0e1d59fa51ae62","name":"step-security/harden-runner","version":"v2.19.1","type":"github-action","foundBy":"github-actions-usage-cataloger","locations":[{"path":"/.github/workflows/count_lines_of_code.yml","accessPath":"/.github/workflows/count_lines_of_code.yml","annotations":{"evidence":"primary"}}],"licenses":[],"language":"","cpes":[{"cpe":"cpe:2.3:a:step-security\\/harden-runner:step-security\\/harden-runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step-security\\/harden-runner:step_security\\/harden_runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step_security\\/harden_runner:step-security\\/harden-runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step_security\\/harden_runner:step_security\\/harden_runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step-security\\/harden:step-security\\/harden-runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step-security\\/harden:step_security\\/harden_runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step_security\\/harden:step-security\\/harden-runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step_security\\/harden:step_security\\/harden_runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step:step-security\\/harden-runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step:step_security\\/harden_runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:github/step-security/harden-runner@v2.19.1","metadataType":"github-actions-use-statement","metadata":{"value":"step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450","comment":"v2.19.1"}},{"id":"757560a1901d4a9a","name":"step-security/harden-runner","version":"v2.19.1","type":"github-action","foundBy":"github-actions-usage-cataloger","locations":[{"path":"/.github/workflows/dependency-review.yml","accessPath":"/.github/workflows/dependency-review.yml","annotations":{"evidence":"primary"}}],"licenses":[],"language":"","cpes":[{"cpe":"cpe:2.3:a:step-security\\/harden-runner:step-security\\/harden-runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step-security\\/harden-runner:step_security\\/harden_runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step_security\\/harden_runner:step-security\\/harden-runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step_security\\/harden_runner:step_security\\/harden_runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step-security\\/harden:step-security\\/harden-runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step-security\\/harden:step_security\\/harden_runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step_security\\/harden:step-security\\/harden-runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step_security\\/harden:step_security\\/harden_runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step:step-security\\/harden-runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step:step_security\\/harden_runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:github/step-security/harden-runner@v2.19.1","metadataType":"github-actions-use-statement","metadata":{"value":"step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450","comment":"v2.19.1"}},{"id":"b3e7cb73635f70ea","name":"step-security/harden-runner","version":"v2.19.1","type":"github-action","foundBy":"github-actions-usage-cataloger","locations":[{"path":"/.github/workflows/eslint.yml","accessPath":"/.github/workflows/eslint.yml","annotations":{"evidence":"primary"}}],"licenses":[],"language":"","cpes":[{"cpe":"cpe:2.3:a:step-security\\/harden-runner:step-security\\/harden-runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step-security\\/harden-runner:step_security\\/harden_runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step_security\\/harden_runner:step-security\\/harden-runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step_security\\/harden_runner:step_security\\/harden_runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step-security\\/harden:step-security\\/harden-runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step-security\\/harden:step_security\\/harden_runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step_security\\/harden:step-security\\/harden-runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step_security\\/harden:step_security\\/harden_runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step:step-security\\/harden-runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step:step_security\\/harden_runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:github/step-security/harden-runner@v2.19.1","metadataType":"github-actions-use-statement","metadata":{"value":"step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450","comment":"v2.19.1"}},{"id":"23bb26552be8b004","name":"step-security/harden-runner","version":"v2.19.1","type":"github-action","foundBy":"github-actions-usage-cataloger","locations":[{"path":"/.github/workflows/generator-generic-ossf-slsa3-publish.yml","accessPath":"/.github/workflows/generator-generic-ossf-slsa3-publish.yml","annotations":{"evidence":"primary"}}],"licenses":[],"language":"","cpes":[{"cpe":"cpe:2.3:a:step-security\\/harden-runner:step-security\\/harden-runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step-security\\/harden-runner:step_security\\/harden_runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step_security\\/harden_runner:step-security\\/harden-runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step_security\\/harden_runner:step_security\\/harden_runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step-security\\/harden:step-security\\/harden-runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step-security\\/harden:step_security\\/harden_runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step_security\\/harden:step-security\\/harden-runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step_security\\/harden:step_security\\/harden_runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step:step-security\\/harden-runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step:step_security\\/harden_runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:github/step-security/harden-runner@v2.19.1","metadataType":"github-actions-use-statement","metadata":{"value":"step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450","comment":"v2.19.1"}},{"id":"b65a87195ea088ae","name":"step-security/harden-runner","version":"v2.19.1","type":"github-action","foundBy":"github-actions-usage-cataloger","locations":[{"path":"/.github/workflows/sbom-generation.yml","accessPath":"/.github/workflows/sbom-generation.yml","annotations":{"evidence":"primary"}}],"licenses":[],"language":"","cpes":[{"cpe":"cpe:2.3:a:step-security\\/harden-runner:step-security\\/harden-runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step-security\\/harden-runner:step_security\\/harden_runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step_security\\/harden_runner:step-security\\/harden-runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step_security\\/harden_runner:step_security\\/harden_runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step-security\\/harden:step-security\\/harden-runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step-security\\/harden:step_security\\/harden_runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step_security\\/harden:step-security\\/harden-runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step_security\\/harden:step_security\\/harden_runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step:step-security\\/harden-runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step:step_security\\/harden_runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:github/step-security/harden-runner@v2.19.1","metadataType":"github-actions-use-statement","metadata":{"value":"step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450","comment":"v2.19.1"}},{"id":"5bb383629006377e","name":"step-security/harden-runner","version":"v2.19.1","type":"github-action","foundBy":"github-actions-usage-cataloger","locations":[{"path":"/.github/workflows/scorecard.yml","accessPath":"/.github/workflows/scorecard.yml","annotations":{"evidence":"primary"}}],"licenses":[],"language":"","cpes":[{"cpe":"cpe:2.3:a:step-security\\/harden-runner:step-security\\/harden-runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step-security\\/harden-runner:step_security\\/harden_runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step_security\\/harden_runner:step-security\\/harden-runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step_security\\/harden_runner:step_security\\/harden_runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step-security\\/harden:step-security\\/harden-runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step-security\\/harden:step_security\\/harden_runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step_security\\/harden:step-security\\/harden-runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step_security\\/harden:step_security\\/harden_runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step:step-security\\/harden-runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step:step_security\\/harden_runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:github/step-security/harden-runner@v2.19.1","metadataType":"github-actions-use-statement","metadata":{"value":"step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450","comment":"v2.19.1"}},{"id":"962c7e163bc111d9","name":"step-security/harden-runner","version":"v2.19.1","type":"github-action","foundBy":"github-actions-usage-cataloger","locations":[{"path":"/.github/workflows/trivy-vulnerability-scans.yml","accessPath":"/.github/workflows/trivy-vulnerability-scans.yml","annotations":{"evidence":"primary"}}],"licenses":[],"language":"","cpes":[{"cpe":"cpe:2.3:a:step-security\\/harden-runner:step-security\\/harden-runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step-security\\/harden-runner:step_security\\/harden_runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step_security\\/harden_runner:step-security\\/harden-runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step_security\\/harden_runner:step_security\\/harden_runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step-security\\/harden:step-security\\/harden-runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step-security\\/harden:step_security\\/harden_runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step_security\\/harden:step-security\\/harden-runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step_security\\/harden:step_security\\/harden_runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step:step-security\\/harden-runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"},{"cpe":"cpe:2.3:a:step:step_security\\/harden_runner:v2.19.1:*:*:*:*:*:*:*","source":"syft-generated"}],"purl":"pkg:github/step-security/harden-runner@v2.19.1","metadataType":"github-actions-use-statement","metadata":{"value":"step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450","comment":"v2.19.1"}}],"artifactRelationships":[{"parent":"142bdff2ea5952fc","child":"f175f3b2ff568407","type":"evident-by","metadata":{"kind":"primary"}},{"parent":"1d6a560f3b077fc2","child":"f491971c6a8f2d00","type":"evident-by","metadata":{"kind":"primary"}},{"parent":"1e76c638c42e671c","child":"f491971c6a8f2d00","type":"evident-by","metadata":{"kind":"primary"}},{"parent":"23bb26552be8b004","child":"4ee1db3149884070","type":"evident-by","metadata":{"kind":"primary"}},{"parent":"2c0e1d59fa51ae62","child":"ca4bba1469643f65","type":"evident-by","metadata":{"kind":"primary"}},{"parent":"2d333b1298a44f88","child":"f9fe3691a8816215","type":"evident-by","metadata":{"kind":"primary"}},{"parent":"34efc6acafb66bb3","child":"f491971c6a8f2d00","type":"evident-by","metadata":{"kind":"primary"}},{"parent":"36d5f3eea8347bd4","child":"ca4bba1469643f65","type":"evident-by","metadata":{"kind":"primary"}},{"parent":"394670b0b04bea6f","child":"2edd8745af40f05e","type":"evident-by","metadata":{"kind":"primary"}},{"parent":"3956f5961bfcf596","child":"f4fe0eee66e1ba99","type":"evident-by","metadata":{"kind":"primary"}},{"parent":"3a9474dca9217bbb","child":"f175f3b2ff568407","type":"evident-by","metadata":{"kind":"primary"}},{"parent":"3f2ba4e27b5bfb0a","child":"11769e63aa84e323","type":"evident-by","metadata":{"kind":"primary"}},{"parent":"4b039c32531aa404","child":"4687f6b3a8798af9","type":"evident-by","metadata":{"kind":"primary"}},{"parent":"5bb383629006377e","child":"f175f3b2ff568407","type":"evident-by","metadata":{"kind":"primary"}},{"parent":"60fdf0d4129e0929","child":"2edd8745af40f05e","type":"evident-by","metadata":{"kind":"primary"}},{"parent":"68c862711aa2ee2b","child":"ca4bba1469643f65","type":"evident-by","metadata":{"kind":"primary"}},{"parent":"6c98088196e3270a","child":"eb17d210499e9f61","type":"evident-by","metadata":{"kind":"primary"}},{"parent":"72d20634c018c750","child":"ca4bba1469643f65","type":"evident-by","metadata":{"kind":"primary"}},{"parent":"7417d2a3fc5800c4","child":"f4fe0eee66e1ba99","type":"evident-by","metadata":{"kind":"primary"}},{"parent":"74f73e01d4beeab7","child":"2edd8745af40f05e","type":"evident-by","metadata":{"kind":"primary"}},{"parent":"757560a1901d4a9a","child":"11769e63aa84e323","type":"evident-by","metadata":{"kind":"primary"}},{"parent":"75f73da96f71ee7c","child":"f9fe3691a8816215","type":"evident-by","metadata":{"kind":"primary"}},{"parent":"78e33e01051e9dd9","child":"f4fe0eee66e1ba99","type":"evident-by","metadata":{"kind":"primary"}},{"parent":"81a0cd414d9ff13a","child":"4687f6b3a8798af9","type":"evident-by","metadata":{"kind":"primary"}},{"parent":"85281977c9cc65c0","child":"11769e63aa84e323","type":"evident-by","metadata":{"kind":"primary"}},{"parent":"962c7e163bc111d9","child":"2edd8745af40f05e","type":"evident-by","metadata":{"kind":"primary"}},{"parent":"9a7f6c34be2cf71c","child":"f175f3b2ff568407","type":"evident-by","metadata":{"kind":"primary"}},{"parent":"9e6b749f1f2ebf18","child":"eb17d210499e9f61","type":"evident-by","metadata":{"kind":"primary"}},{"parent":"a07043ff73347682","child":"eb17d210499e9f61","type":"evident-by","metadata":{"kind":"primary"}},{"parent":"a10c50abc71928da","child":"4ee1db3149884070","type":"evident-by","metadata":{"kind":"primary"}},{"parent":"a3007dc6c19ae9bd","child":"4687f6b3a8798af9","type":"evident-by","metadata":{"kind":"primary"}},{"parent":"b3e7cb73635f70ea","child":"f9fe3691a8816215","type":"evident-by","metadata":{"kind":"primary"}},{"parent":"b65a87195ea088ae","child":"eb17d210499e9f61","type":"evident-by","metadata":{"kind":"primary"}},{"parent":"bf3797e407aa74c9","child":"4687f6b3a8798af9","type":"evident-by","metadata":{"kind":"primary"}},{"parent":"c54900e5dbc0ecae","child":"eb17d210499e9f61","type":"evident-by","metadata":{"kind":"primary"}},{"parent":"cd6616c842eaf2da","child":"4687f6b3a8798af9","type":"evident-by","metadata":{"kind":"primary"}},{"parent":"cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8","child":"142bdff2ea5952fc","type":"contains"},{"parent":"cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8","child":"1d6a560f3b077fc2","type":"contains"},{"parent":"cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8","child":"1e76c638c42e671c","type":"contains"},{"parent":"cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8","child":"23bb26552be8b004","type":"contains"},{"parent":"cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8","child":"2c0e1d59fa51ae62","type":"contains"},{"parent":"cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8","child":"2d333b1298a44f88","type":"contains"},{"parent":"cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8","child":"34efc6acafb66bb3","type":"contains"},{"parent":"cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8","child":"36d5f3eea8347bd4","type":"contains"},{"parent":"cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8","child":"394670b0b04bea6f","type":"contains"},{"parent":"cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8","child":"3956f5961bfcf596","type":"contains"},{"parent":"cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8","child":"3a9474dca9217bbb","type":"contains"},{"parent":"cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8","child":"3f2ba4e27b5bfb0a","type":"contains"},{"parent":"cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8","child":"4b039c32531aa404","type":"contains"},{"parent":"cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8","child":"5bb383629006377e","type":"contains"},{"parent":"cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8","child":"60fdf0d4129e0929","type":"contains"},{"parent":"cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8","child":"68c862711aa2ee2b","type":"contains"},{"parent":"cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8","child":"6c98088196e3270a","type":"contains"},{"parent":"cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8","child":"72d20634c018c750","type":"contains"},{"parent":"cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8","child":"7417d2a3fc5800c4","type":"contains"},{"parent":"cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8","child":"74f73e01d4beeab7","type":"contains"},{"parent":"cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8","child":"757560a1901d4a9a","type":"contains"},{"parent":"cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8","child":"75f73da96f71ee7c","type":"contains"},{"parent":"cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8","child":"78e33e01051e9dd9","type":"contains"},{"parent":"cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8","child":"81a0cd414d9ff13a","type":"contains"},{"parent":"cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8","child":"85281977c9cc65c0","type":"contains"},{"parent":"cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8","child":"962c7e163bc111d9","type":"contains"},{"parent":"cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8","child":"9a7f6c34be2cf71c","type":"contains"},{"parent":"cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8","child":"9e6b749f1f2ebf18","type":"contains"},{"parent":"cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8","child":"a07043ff73347682","type":"contains"},{"parent":"cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8","child":"a10c50abc71928da","type":"contains"},{"parent":"cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8","child":"a3007dc6c19ae9bd","type":"contains"},{"parent":"cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8","child":"b3e7cb73635f70ea","type":"contains"},{"parent":"cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8","child":"b65a87195ea088ae","type":"contains"},{"parent":"cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8","child":"bf3797e407aa74c9","type":"contains"},{"parent":"cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8","child":"c54900e5dbc0ecae","type":"contains"},{"parent":"cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8","child":"cd6616c842eaf2da","type":"contains"},{"parent":"cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8","child":"db145f0c74b08b12","type":"contains"},{"parent":"cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8","child":"e3db744a067d29e4","type":"contains"},{"parent":"cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8","child":"e5c5af7ba135b231","type":"contains"},{"parent":"cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8","child":"ec77cd62600ce9c1","type":"contains"},{"parent":"db145f0c74b08b12","child":"f4fe0eee66e1ba99","type":"evident-by","metadata":{"kind":"primary"}},{"parent":"e3db744a067d29e4","child":"f4fe0eee66e1ba99","type":"evident-by","metadata":{"kind":"primary"}},{"parent":"e5c5af7ba135b231","child":"4ee1db3149884070","type":"evident-by","metadata":{"kind":"primary"}},{"parent":"ec77cd62600ce9c1","child":"f175f3b2ff568407","type":"evident-by","metadata":{"kind":"primary"}}],"files":[{"id":"f4fe0eee66e1ba99","location":{"path":"/.github/workflows/codeql.yml"},"metadata":{"mode":644,"type":"RegularFile","userID":1001,"groupID":1001,"mimeType":"text/plain","size":1149},"digests":[{"algorithm":"sha1","value":"81be4eb666d9c11e363e2713ebb55bc1c7b4131f"},{"algorithm":"sha256","value":"995d87c4bf2009c56a2ff3548b776df1cd972a3c34d5f9f1477c01b74c199e49"}]},{"id":"ca4bba1469643f65","location":{"path":"/.github/workflows/count_lines_of_code.yml"},"metadata":{"mode":644,"type":"RegularFile","userID":1001,"groupID":1001,"mimeType":"text/plain","size":1212},"digests":[{"algorithm":"sha1","value":"e065a1c4778e5cec0d1c59a35f79fabeeebc7e82"},{"algorithm":"sha256","value":"55caa13a2436f0274bc7de276d2bf57968f3a27a39a57a6041cbea732a4d8d88"}]},{"id":"11769e63aa84e323","location":{"path":"/.github/workflows/dependency-review.yml"},"metadata":{"mode":644,"type":"RegularFile","userID":1001,"groupID":1001,"mimeType":"text/plain","size":972},"digests":[{"algorithm":"sha1","value":"150aac864354f5ab438dbc955028e23887cf1f50"},{"algorithm":"sha256","value":"8c18644f5d8757fb44eb63d873b94775e8c37ca292868c2f12c9d5749fec1678"}]},{"id":"4687f6b3a8798af9","location":{"path":"/.github/workflows/docker-multiarch-build.yml"},"metadata":{"mode":644,"type":"RegularFile","userID":1001,"groupID":1001,"mimeType":"text/plain","size":1347},"digests":[{"algorithm":"sha1","value":"2cb24cd2563e090936c405ab582e79bb4a2fa7b7"},{"algorithm":"sha256","value":"86148452ee4d56a33f541592a04f6b2615c5204bdb031fa7b5b3f43449d34356"}]},{"id":"f9fe3691a8816215","location":{"path":"/.github/workflows/eslint.yml"},"metadata":{"mode":644,"type":"RegularFile","userID":1001,"groupID":1001,"mimeType":"text/plain","size":1546},"digests":[{"algorithm":"sha1","value":"9a7ad4d83c8dfe9363782dd9dadc6063050c4b22"},{"algorithm":"sha256","value":"d310075b3be83ab89d04346b9d5544a72a5f8bc588ca98c552ed23d6454837d3"}]},{"id":"4ee1db3149884070","location":{"path":"/.github/workflows/generator-generic-ossf-slsa3-publish.yml"},"metadata":{"mode":644,"type":"RegularFile","userID":1001,"groupID":1001,"mimeType":"text/plain","size":2677},"digests":[{"algorithm":"sha1","value":"1557a9681ad7121df2db7ed5a0bc52062d42000e"},{"algorithm":"sha256","value":"aec9bb26efbdbe401705f9df9c50c04c8f4528cd3219a1590fe22376bb99a3a6"}]},{"id":"f491971c6a8f2d00","location":{"path":"/.github/workflows/phan-php-code-analysis.yml"},"metadata":{"mode":644,"type":"RegularFile","userID":1001,"groupID":1001,"mimeType":"text/plain","size":955},"digests":[{"algorithm":"sha1","value":"10d0e50d08b7af8a33d892b7c46543744eb156e0"},{"algorithm":"sha256","value":"e657c0808213e523b7f38f22dcbaec991e1c6cc7a4598ac35e49987b70a4e744"}]},{"id":"eb17d210499e9f61","location":{"path":"/.github/workflows/sbom-generation.yml"},"metadata":{"mode":644,"type":"RegularFile","userID":1001,"groupID":1001,"mimeType":"text/plain","size":2003},"digests":[{"algorithm":"sha1","value":"5845369d09d6430bfbe174de6a9c3f2180327eb1"},{"algorithm":"sha256","value":"005eb013a10ac886d5a6a0aa22e319c2c476b2874f723eea948b376e4d5ae59d"}]},{"id":"f175f3b2ff568407","location":{"path":"/.github/workflows/scorecard.yml"},"metadata":{"mode":644,"type":"RegularFile","userID":1001,"groupID":1001,"mimeType":"text/plain","size":3493},"digests":[{"algorithm":"sha1","value":"dbe0e378c26c5761e0d1a73349316298f8a3dcf0"},{"algorithm":"sha256","value":"63f735c263d80551fce4e32de3321a3e7876425f6680e721811d9f4d4e52a65e"}]},{"id":"2edd8745af40f05e","location":{"path":"/.github/workflows/trivy-vulnerability-scans.yml"},"metadata":{"mode":644,"type":"RegularFile","userID":1001,"groupID":1001,"mimeType":"text/plain","size":946},"digests":[{"algorithm":"sha1","value":"ba65027a1a0e040384e51f3ea337bc588cd4c1bd"},{"algorithm":"sha256","value":"607f5cdb4d05d46aebc4e952d4f81b94b81d0dc00758eab25833a2533edc4952"}]}],"source":{"id":"cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8","name":".","version":"","type":"directory","metadata":{"path":"."}},"distro":{},"descriptor":{"name":"syft","version":"1.46.0","configuration":{"catalogers":{"requested":{"default":["directory","file"]},"used":["alpm-db-cataloger","apk-db-cataloger","binary-classifier-cataloger","cargo-auditable-binary-cataloger","cocoapods-cataloger","conan-cataloger","conda-meta-cataloger","dart-pubspec-cataloger","dart-pubspec-lock-cataloger","deb-archive-cataloger","dotnet-deps-binary-cataloger","dotnet-packages-lock-cataloger","dpkg-db-cataloger","elf-binary-package-cataloger","elixir-mix-lock-cataloger","erlang-otp-application-cataloger","erlang-rebar-lock-cataloger","file-content-cataloger","file-digest-cataloger","file-executable-cataloger","file-metadata-cataloger","gguf-cataloger","github-action-workflow-usage-cataloger","github-actions-usage-cataloger","go-module-binary-cataloger","go-module-file-cataloger","graalvm-native-image-cataloger","haskell-cataloger","homebrew-cataloger","java-archive-cataloger","java-gradle-lockfile-cataloger","java-jvm-cataloger","java-pom-cataloger","javascript-lock-cataloger","linux-kernel-cataloger","lua-rock-cataloger","nix-cataloger","opam-cataloger","pe-binary-package-cataloger","php-composer-lock-cataloger","php-interpreter-cataloger","php-pear-serialized-cataloger","portage-cataloger","python-installed-package-cataloger","python-package-cataloger","r-package-cataloger","rpm-archive-cataloger","rpm-db-cataloger","ruby-gemfile-cataloger","ruby-gemspec-cataloger","rust-cargo-lock-cataloger","snap-cataloger","swift-package-manager-cataloger","swipl-pack-cataloger","terraform-lock-cataloger","wordpress-plugins-cataloger"]},"data-generation":{"generate-cpes":true},"files":{"content":{"globs":null,"skip-files-above-size":0},"hashers":["sha-1","sha-256"],"selection":"owned-by-package"},"licenses":{"coverage":75,"include-content":"none"},"packages":{"binary":["python-binary","python-binary-lib","pypy-binary-lib","go-binary","julia-binary","julia-binary","helm","redis-binary","valkey-binary","nodejs-binary","busybox-binary","util-linux-binary","haproxy-binary","perl-binary","php-composer-binary","httpd-binary","memcached-binary","traefik-binary","arangodb-binary","postgresql-binary","mysql-binary","mysql-binary","mysql-binary","mysqld-mysql-cluster-legacy-binary","mysqld-binary","ndbd-binary","ndbmtd-binary","ndb_mgmd-binary","xtrabackup-binary","mariadb-binary","rust-standard-library-linux","rust-standard-library-macos","ruby-binary","erlang-binary","erlang-alpine-binary","erlang-library","swipl-binary","dart-binary","deno-binary","haskell-ghc-binary","haskell-cabal-binary","haskell-stack-binary","consul-binary","hashicorp-vault-binary","nginx-binary","bash-binary","openssl-binary","openldap-search-binary","qt-qtbase-lib","gcc-binary","fluent-bit-binary","wordpress-cli-binary","curl-binary","lighttpd-binary","proftpd-binary","zstd-binary","xz-binary","gzip-binary","sqlcipher-binary","jq-binary","chrome-binary","ffmpeg-binary","ffmpeg-library","ffmpeg-library","elixir-binary","elixir-library","istio-binary","istio-binary","grafana-binary","grafana-binary","envoy-binary","mongodb-binary","ingress-nginx-binary","filebeat-binary","metricbeat-binary","heartbeat-binary","packetbeat-binary","auditbeat-binary","elastic-agent-binary","java-binary","java-jdb-binary"],"dotnet":{"dep-packages-must-claim-dll":true,"dep-packages-must-have-dll":false,"exclude-project-references":true,"propagate-dll-claims-to-parents":true,"relax-dll-claims-when-bundling-detected":true},"golang":{"local-mod-cache-dir":"/home/runner/go/pkg/mod","local-vendor-dir":"","main-module-version":{"from-build-settings":true,"from-contents":false,"from-ld-flags":true},"proxies":["https://proxy.golang.org","direct"],"search-local-mod-cache-licenses":false,"search-local-vendor-licenses":false,"search-remote-licenses":false,"use-packages-lib":true},"java-archive":{"include-indexed-archives":true,"include-unindexed-archives":false,"maven-base-url":"https://repo1.maven.org/maven2","maven-localrepository-dir":"/home/runner/.m2/repository","max-parent-recursive-depth":0,"resolve-transitive-dependencies":false,"use-maven-localrepository":false,"use-network":false},"javascript":{"include-dev-dependencies":false,"npm-base-url":"https://registry.npmjs.org","search-remote-licenses":false},"linux-kernel":{"catalog-modules":true},"nix":{"capture-owned-files":false},"python":{"guess-unpinned-requirements":false,"pypi-base-url":"https://pypi.org/pypi","search-remote-licenses":false}},"relationships":{"exclude-binary-packages-with-file-ownership-overlap":true,"package-file-ownership":true,"package-file-ownership-overlap":true},"search":{"scope":"squashed"}}},"schema":{"version":"16.1.5","url":"https://raw.githubusercontent.com/anchore/syft/main/schema/json/schema-16.1.5.json"}}