{
 "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
 "bomFormat": "CycloneDX",
 "specVersion": "1.5",
 "serialNumber": "urn:uuid:79782803-268f-42c7-921f-be0f81dc7075",
 "version": 1,
 "metadata": {
  "timestamp": "2026-08-15T19:23:22Z",
  "tools": {
   "components": [
    {
     "type": "application",
     "author": "anchore",
     "name": "syft",
     "version": "1.51.0"
    }
   ]
  },
  "component": {
   "bom-ref": "157689553695917f",
   "type": "container",
   "name": "/w/image.tar",
   "version": "sha256:7166f6d0e75b1c181fb2591d2d4e2b701822a0435aa02521be99ee5fc652c366"
  },
  "properties": [
   {
    "name": "syft:image:labels:io.buildah.version",
    "value": "1.42.2"
   },
   {
    "name": "syft:image:labels:org.opencontainers.image.description",
    "value": "container signing, verification and storage in an OCI registry"
   },
   {
    "name": "syft:image:labels:org.opencontainers.image.licenses",
    "value": "AGPL-3.0-only"
   },
   {
    "name": "syft:image:labels:org.opencontainers.image.source",
    "value": "https://index.boks.sh"
   },
   {
    "name": "syft:image:labels:org.opencontainers.image.title",
    "value": "cosign"
   },
   {
    "name": "syft:image:labels:org.opencontainers.image.vendor",
    "value": "boks"
   },
   {
    "name": "syft:image:labels:org.opencontainers.image.version",
    "value": "3.1.3"
   },
   {
    "name": "syft:image:labels:sh.boks.description",
    "value": "container signing, verification and storage in an OCI registry"
   },
   {
    "name": "syft:image:labels:sh.boks.prefix",
    "value": "/boks/dist/cosign-3.1.3"
   },
   {
    "name": "syft:image:labels:sh.boks.project",
    "value": "cosign"
   },
   {
    "name": "syft:image:labels:sh.boks.provides",
    "value": "[\"/boks/dist/cosign-3.1.3/bin/cosign\"]"
   },
   {
    "name": "syft:image:labels:sh.boks.source-url",
    "value": "https://github.com/sigstore/cosign"
   },
   {
    "name": "syft:image:labels:sh.boks.version",
    "value": "3.1.3"
   }
  ]
 },
 "components": [
  {
   "bom-ref": "pkg:golang/buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go@v1.36.11-20260415201107-50325440f8f2.1?package-id=c59334ee81aa0fa1",
   "type": "library",
   "name": "buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go",
   "version": "v1.36.11-20260415201107-50325440f8f2.1",
   "cpe": "cpe:2.3:a:gen:go\\/bufbuild\\/protovalidate\\/protocolbuffers\\/go:v1.36.11-20260415201107-50325440f8f2.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go@v1.36.11-20260415201107-50325440f8f2.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:s6hzCXtND/ICdGPTMGk7C+/BFlr2Jg5GyH0NKf4XGXg="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/cloud.google.com/go/auth@v0.20.0?package-id=7d09da00f46c20c3",
   "type": "library",
   "name": "cloud.google.com/go/auth",
   "version": "v0.20.0",
   "cpe": "cpe:2.3:a:go:auth:v0.20.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/cloud.google.com/go/auth@v0.20.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:kXTssoVb4azsVDoUiF8KvxAqrsQcQtB53DcSgta74CA="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/cloud.google.com/go/auth/oauth2adapt@v0.2.8?package-id=f890aceb2c31525f",
   "type": "library",
   "name": "cloud.google.com/go/auth/oauth2adapt",
   "version": "v0.2.8",
   "cpe": "cpe:2.3:a:go:auth\\/oauth2adapt:v0.2.8:*:*:*:*:*:*:*",
   "purl": "pkg:golang/cloud.google.com/go/auth/oauth2adapt@v0.2.8",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:keo8NaayQZ6wimpNSmW5OPc283g65QNIiLpZnkHRbnc="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/cloud.google.com/go/compute/metadata@v0.9.0?package-id=db1e134286799a51",
   "type": "library",
   "name": "cloud.google.com/go/compute/metadata",
   "version": "v0.9.0",
   "cpe": "cpe:2.3:a:go:compute\\/metadata:v0.9.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/cloud.google.com/go/compute/metadata@v0.9.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:pDUj4QMoPejqq20dK0Pg2N4yG9zIkYGdBtwLoEkH9Zs="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/cloud.google.com/go/iam@v1.11.0?package-id=882ad4bcde0ee7fd",
   "type": "library",
   "name": "cloud.google.com/go/iam",
   "version": "v1.11.0",
   "cpe": "cpe:2.3:a:go:iam:v1.11.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/cloud.google.com/go/iam@v1.11.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:KieQ9Pb+LLPak1O3Rv3GgCxhnmkYf7Xyh0P5HfF1jFM="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/cloud.google.com/go/kms@v1.31.0?package-id=fca2a97a39c7ed08",
   "type": "library",
   "name": "cloud.google.com/go/kms",
   "version": "v1.31.0",
   "cpe": "cpe:2.3:a:go:kms:v1.31.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/cloud.google.com/go/kms@v1.31.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:LS8N92OxFDgOLg5NCo3OmbvjtQAIVT5gUHVLKIDHaFE="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/cloud.google.com/go/longrunning@v1.0.0?package-id=dae1f8b9a87ba5a4",
   "type": "library",
   "name": "cloud.google.com/go/longrunning",
   "version": "v1.0.0",
   "cpe": "cpe:2.3:a:go:longrunning:v1.0.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/cloud.google.com/go/longrunning@v1.0.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:lwzWEYD8+NkYV7dhexOz6kmlvajZA70+bW/xMhRVVdY="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/connectrpc.com/connect@v1.20.0?package-id=bf7cdaf26126cd0b",
   "type": "library",
   "name": "connectrpc.com/connect",
   "version": "v1.20.0",
   "purl": "pkg:golang/connectrpc.com/connect@v1.20.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:6TNDAB+WeNd2uolWNlYczB5E0KNNaVMNUEx8JEUsPmQ="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/cuelabs.dev/go/oci/ociregistry@v0.0.0-20251212221603-3adeb8663819?package-id=3dc35e327183cb15",
   "type": "library",
   "name": "cuelabs.dev/go/oci/ociregistry",
   "version": "v0.0.0-20251212221603-3adeb8663819",
   "cpe": "cpe:2.3:a:go:oci\\/ociregistry:v0.0.0-20251212221603-3adeb8663819:*:*:*:*:*:*:*",
   "purl": "pkg:golang/cuelabs.dev/go/oci/ociregistry@v0.0.0-20251212221603-3adeb8663819",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:Zh+Ur3OsoWpvALHPLT45nOekHkgOt+IOfutBbPqM17I="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/cuelang.org/go@v0.16.1?package-id=2735008ac697b99c",
   "type": "library",
   "name": "cuelang.org/go",
   "version": "v0.16.1",
   "purl": "pkg:golang/cuelang.org/go@v0.16.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:iPN1lHZd2J0hjcr8hfq9PnIGk7VfPkKFfxH4de+m9sE="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/aliyuncontainerservice/ack-ram-tool/pkg/credentials/provider@v0.14.0?package-id=ad3112e798c52393",
   "type": "library",
   "name": "github.com/AliyunContainerService/ack-ram-tool/pkg/credentials/provider",
   "version": "v0.14.0",
   "cpe": "cpe:2.3:a:AliyunContainerService:ack-ram-tool\\/pkg\\/credentials\\/provider:v0.14.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/AliyunContainerService/ack-ram-tool/pkg/credentials/provider@v0.14.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:AliyunContainerService:ack_ram_tool\\/pkg\\/credentials\\/provider:v0.14.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:kcnfY4vljxXliXDBrA9K9lwF8IoEZ4Up6Eg9kWTIm28="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go@v68.0.0%2Bincompatible?package-id=cedde4da5834fb09",
   "type": "library",
   "name": "github.com/Azure/azure-sdk-for-go",
   "version": "v68.0.0+incompatible",
   "cpe": "cpe:2.3:a:Azure:azure-sdk-for-go:v68.0.0\\+incompatible:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go@v68.0.0%2Bincompatible",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:Azure:azure_sdk_for_go:v68.0.0\\+incompatible:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:fcYLmCpyNYRnvJbPerq7U0hS+6+I79yEDJBqVNcqUzU="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/azcore@v1.22.0?package-id=9b96b6bd27e8be68",
   "type": "library",
   "name": "github.com/Azure/azure-sdk-for-go/sdk/azcore",
   "version": "v1.22.0",
   "cpe": "cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/azcore:v1.22.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/azcore@v1.22.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/azcore:v1.22.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:aokoqcHvaGjiM3VpjKDfMMnF/8epJ+Q1HLJ7CudztqE="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/azidentity@v1.14.0?package-id=42057a97289d38e5",
   "type": "library",
   "name": "github.com/Azure/azure-sdk-for-go/sdk/azidentity",
   "version": "v1.14.0",
   "cpe": "cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/azidentity:v1.14.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.14.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/azidentity:v1.14.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:CU4+EJeJi3TKYWEcYuSdWsjzw0nVsK/H0MSQOiPcymU="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/internal@v1.12.0?package-id=3993b3b1ade3a93c",
   "type": "library",
   "name": "github.com/Azure/azure-sdk-for-go/sdk/internal",
   "version": "v1.12.0",
   "cpe": "cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/internal:v1.12.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/internal@v1.12.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/internal:v1.12.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:fhqpLE3UEXi9lPaBRpQ6XuRW0nU7hgg4zlmZZa+a9q4="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/security/keyvault/azkeys@v1.5.0?package-id=8319927b4341c44d",
   "type": "library",
   "name": "github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys",
   "version": "v1.5.0",
   "cpe": "cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/security\\/keyvault\\/azkeys:v1.5.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys@v1.5.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/security\\/keyvault\\/azkeys:v1.5.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:MaKvxE6D0KkjOg6Wd9M00iqP5PR0kUxCfiezes4JweM="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/security/keyvault/internal@v1.2.0?package-id=68f2e7e1b6b0f668",
   "type": "library",
   "name": "github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal",
   "version": "v1.2.0",
   "cpe": "cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/security\\/keyvault\\/internal:v1.2.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal@v1.2.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/security\\/keyvault\\/internal:v1.2.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:nCYfgcSyHZXJI8J0IWE5MsCGlb2xp9fJiXyxWgmOFg4="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/azure/go-autorest/autorest@v0.11.29?package-id=b11496313ef87582",
   "type": "library",
   "name": "github.com/Azure/go-autorest/autorest",
   "version": "v0.11.29",
   "cpe": "cpe:2.3:a:Azure:go-autorest\\/autorest:v0.11.29:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/Azure/go-autorest/autorest@v0.11.29",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:Azure:go_autorest\\/autorest:v0.11.29:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:I4+HL/JDvErx2LjyzaVxllw2lRDB5/BT2Bm4g20iqYw="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/azure/go-autorest/autorest/adal@v0.9.23?package-id=0fa3a7bd9c86423f",
   "type": "library",
   "name": "github.com/Azure/go-autorest/autorest/adal",
   "version": "v0.9.23",
   "cpe": "cpe:2.3:a:Azure:go-autorest\\/autorest\\/adal:v0.9.23:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/Azure/go-autorest/autorest/adal@v0.9.23",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:Azure:go_autorest\\/autorest\\/adal:v0.9.23:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:Yepx8CvFxwNKpH6ja7RZ+sKX+DWYNldbLiALMC3BTz8="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/azure/go-autorest/autorest/azure/auth@v0.5.12?package-id=414bff1d999012c3",
   "type": "library",
   "name": "github.com/Azure/go-autorest/autorest/azure/auth",
   "version": "v0.5.12",
   "cpe": "cpe:2.3:a:Azure:go-autorest\\/autorest\\/azure\\/auth:v0.5.12:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/Azure/go-autorest/autorest/azure/auth@v0.5.12",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:Azure:go_autorest\\/autorest\\/azure\\/auth:v0.5.12:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:wkAZRgT/pn8HhFyzfe9UnqOjJYqlembgCTi72Bm/xKk="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/azure/go-autorest/autorest/azure/cli@v0.4.6?package-id=b8c3885c78b1389b",
   "type": "library",
   "name": "github.com/Azure/go-autorest/autorest/azure/cli",
   "version": "v0.4.6",
   "cpe": "cpe:2.3:a:Azure:go-autorest\\/autorest\\/azure\\/cli:v0.4.6:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/Azure/go-autorest/autorest/azure/cli@v0.4.6",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:Azure:go_autorest\\/autorest\\/azure\\/cli:v0.4.6:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:w77/uPk80ZET2F+AfQExZyEWtn+0Rk/uw17m9fv5Ajc="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/azure/go-autorest/autorest/date@v0.3.0?package-id=743f99ace4c837d9",
   "type": "library",
   "name": "github.com/Azure/go-autorest/autorest/date",
   "version": "v0.3.0",
   "cpe": "cpe:2.3:a:Azure:go-autorest\\/autorest\\/date:v0.3.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/Azure/go-autorest/autorest/date@v0.3.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:Azure:go_autorest\\/autorest\\/date:v0.3.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:7gUk1U5M/CQbp9WoqinNzJar+8KY+LPI6wiWrP/myHw="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/azure/go-autorest/logger@v0.2.1?package-id=27101c71ce3b0bfa",
   "type": "library",
   "name": "github.com/Azure/go-autorest/logger",
   "version": "v0.2.1",
   "cpe": "cpe:2.3:a:Azure:go-autorest\\/logger:v0.2.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/Azure/go-autorest/logger@v0.2.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:Azure:go_autorest\\/logger:v0.2.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:IG7i4p/mDa2Ce4TRyAO8IHnVhAVF3RFU+ZtXWSmf4Tg="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/azure/go-autorest/tracing@v0.6.0?package-id=33b009d2d14a5a46",
   "type": "library",
   "name": "github.com/Azure/go-autorest/tracing",
   "version": "v0.6.0",
   "cpe": "cpe:2.3:a:Azure:go-autorest\\/tracing:v0.6.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/Azure/go-autorest/tracing@v0.6.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:Azure:go_autorest\\/tracing:v0.6.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:TYi4+3m5t6K48TGI9AUdb+IzbnSxvnvUMfuitfgcfuo="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/azuread/microsoft-authentication-library-for-go@v1.7.2?package-id=aafe6809ce6796db",
   "type": "library",
   "name": "github.com/AzureAD/microsoft-authentication-library-for-go",
   "version": "v1.7.2",
   "cpe": "cpe:2.3:a:AzureAD:microsoft-authentication-library-for-go:v1.7.2:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/AzureAD/microsoft-authentication-library-for-go@v1.7.2",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:AzureAD:microsoft_authentication_library_for_go:v1.7.2:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:RHK7bS+HQMslb1sZpAokUt+zTVmue0hKSs2C791hhzU="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/agnivade/levenshtein@v1.2.1?package-id=65f70311e1a2ffc0",
   "type": "library",
   "name": "github.com/agnivade/levenshtein",
   "version": "v1.2.1",
   "cpe": "cpe:2.3:a:agnivade:levenshtein:v1.2.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/agnivade/levenshtein@v1.2.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:EHBY3UOn1gwdy/VbFwgo4cxecRznFk7fKWN1KOX7eoM="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/alibabacloud-go/alibabacloud-gateway-spi@v0.0.4?package-id=609bbf80b71140e5",
   "type": "library",
   "name": "github.com/alibabacloud-go/alibabacloud-gateway-spi",
   "version": "v0.0.4",
   "cpe": "cpe:2.3:a:alibabacloud-go:alibabacloud-gateway-spi:v0.0.4:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/alibabacloud-go/alibabacloud-gateway-spi@v0.0.4",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud-go:alibabacloud_gateway_spi:v0.0.4:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud_go:alibabacloud-gateway-spi:v0.0.4:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud_go:alibabacloud_gateway_spi:v0.0.4:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud:alibabacloud-gateway-spi:v0.0.4:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud:alibabacloud_gateway_spi:v0.0.4:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:iC9YFYKDGEy3n/FtqJnOkZsene9olVspKmkX5A2YBEo="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/alibabacloud-go/cr-20160607@v1.0.1?package-id=801160f01412d193",
   "type": "library",
   "name": "github.com/alibabacloud-go/cr-20160607",
   "version": "v1.0.1",
   "cpe": "cpe:2.3:a:alibabacloud-go:cr-20160607:v1.0.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/alibabacloud-go/cr-20160607@v1.0.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud-go:cr_20160607:v1.0.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud_go:cr-20160607:v1.0.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud_go:cr_20160607:v1.0.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud:cr-20160607:v1.0.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud:cr_20160607:v1.0.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:WEnP1iPFKJU74ryUKh/YDPHoxMZawqlPajOymyNAkts="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/alibabacloud-go/cr-20181201@v1.0.10?package-id=11530b3427d5b893",
   "type": "library",
   "name": "github.com/alibabacloud-go/cr-20181201",
   "version": "v1.0.10",
   "cpe": "cpe:2.3:a:alibabacloud-go:cr-20181201:v1.0.10:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/alibabacloud-go/cr-20181201@v1.0.10",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud-go:cr_20181201:v1.0.10:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud_go:cr-20181201:v1.0.10:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud_go:cr_20181201:v1.0.10:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud:cr-20181201:v1.0.10:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud:cr_20181201:v1.0.10:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:B60f6S1imsgn2fgC6X6FrVNrONDrbCT0NwYhsJ0C9/c="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/alibabacloud-go/darabonba-openapi@v0.2.1?package-id=c2e503ecf18b8a63",
   "type": "library",
   "name": "github.com/alibabacloud-go/darabonba-openapi",
   "version": "v0.2.1",
   "cpe": "cpe:2.3:a:alibabacloud-go:darabonba-openapi:v0.2.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/alibabacloud-go/darabonba-openapi@v0.2.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud-go:darabonba_openapi:v0.2.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud_go:darabonba-openapi:v0.2.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud_go:darabonba_openapi:v0.2.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud:darabonba-openapi:v0.2.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud:darabonba_openapi:v0.2.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:WyzxxKvhdVDlwpAMOHgAiCJ+NXa6g5ZWPFEzaK/ewwY="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/alibabacloud-go/debug@v1.0.0?package-id=68611351b3491b22",
   "type": "library",
   "name": "github.com/alibabacloud-go/debug",
   "version": "v1.0.0",
   "cpe": "cpe:2.3:a:alibabacloud-go:debug:v1.0.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/alibabacloud-go/debug@v1.0.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud_go:debug:v1.0.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud:debug:v1.0.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:3eIEQWfay1fB24PQIEzXAswlVJtdQok8f3EVN5VrBnA="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/alibabacloud-go/endpoint-util@v1.1.1?package-id=276dfc2051c924aa",
   "type": "library",
   "name": "github.com/alibabacloud-go/endpoint-util",
   "version": "v1.1.1",
   "cpe": "cpe:2.3:a:alibabacloud-go:endpoint-util:v1.1.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/alibabacloud-go/endpoint-util@v1.1.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud-go:endpoint_util:v1.1.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud_go:endpoint-util:v1.1.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud_go:endpoint_util:v1.1.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud:endpoint-util:v1.1.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud:endpoint_util:v1.1.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:ZkBv2/jnghxtU0p+upSU0GGzW1VL9GQdZO3mcSUTUy8="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/alibabacloud-go/openapi-util@v0.1.0?package-id=7d30122865d54369",
   "type": "library",
   "name": "github.com/alibabacloud-go/openapi-util",
   "version": "v0.1.0",
   "cpe": "cpe:2.3:a:alibabacloud-go:openapi-util:v0.1.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/alibabacloud-go/openapi-util@v0.1.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud-go:openapi_util:v0.1.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud_go:openapi-util:v0.1.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud_go:openapi_util:v0.1.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud:openapi-util:v0.1.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud:openapi_util:v0.1.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:0z75cIULkDrdEhkLWgi9tnLe+KhAFE/r5Pb3312/eAY="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/alibabacloud-go/tea@v1.2.1?package-id=9ba6eb17bcc3568b",
   "type": "library",
   "name": "github.com/alibabacloud-go/tea",
   "version": "v1.2.1",
   "cpe": "cpe:2.3:a:alibabacloud-go:tea:v1.2.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/alibabacloud-go/tea@v1.2.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud_go:tea:v1.2.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud:tea:v1.2.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:rFF1LnrAdhaiPmKwH5xwYOKlMh66CqRwPUTzIK74ask="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/alibabacloud-go/tea-utils@v1.4.5?package-id=9ac1a64856e883f2",
   "type": "library",
   "name": "github.com/alibabacloud-go/tea-utils",
   "version": "v1.4.5",
   "cpe": "cpe:2.3:a:alibabacloud-go:tea-utils:v1.4.5:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/alibabacloud-go/tea-utils@v1.4.5",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud-go:tea_utils:v1.4.5:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud_go:tea-utils:v1.4.5:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud_go:tea_utils:v1.4.5:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud:tea-utils:v1.4.5:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud:tea_utils:v1.4.5:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:h0/6Xd2f3bPE4XHTvkpjwxowIwRCJAJOqY6Eq8f3zfA="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/alibabacloud-go/tea-xml@v1.1.3?package-id=46816a4acc9e3e33",
   "type": "library",
   "name": "github.com/alibabacloud-go/tea-xml",
   "version": "v1.1.3",
   "cpe": "cpe:2.3:a:alibabacloud-go:tea-xml:v1.1.3:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/alibabacloud-go/tea-xml@v1.1.3",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud-go:tea_xml:v1.1.3:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud_go:tea-xml:v1.1.3:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud_go:tea_xml:v1.1.3:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud:tea-xml:v1.1.3:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud:tea_xml:v1.1.3:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:7LYnm+JbOq2B+T/B0fHC4Ies4/FofC4zHzYtqw7dgt0="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/aliyun/credentials-go@v1.3.2?package-id=35309b24819ed6a8",
   "type": "library",
   "name": "github.com/aliyun/credentials-go",
   "version": "v1.3.2",
   "cpe": "cpe:2.3:a:aliyun:credentials-go:v1.3.2:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/aliyun/credentials-go@v1.3.2",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:aliyun:credentials_go:v1.3.2:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:L4WppI9rctC8PdlMgyTkF8bBsy9pyKQEzBD1bHMRl+g="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/asaskevich/govalidator@v0.0.0-20230301143203-a9d515a09cc2?package-id=cab777971dc7f71e",
   "type": "library",
   "name": "github.com/asaskevich/govalidator",
   "version": "v0.0.0-20230301143203-a9d515a09cc2",
   "cpe": "cpe:2.3:a:asaskevich:govalidator:v0.0.0-20230301143203-a9d515a09cc2:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/asaskevich/govalidator@v0.0.0-20230301143203-a9d515a09cc2",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:DklsrG3dyBCFEj5IhUbnKptjxatkF07cF2ak3yi77so="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.42.0?package-id=48d8d162ccb94a7c",
   "type": "library",
   "name": "github.com/aws/aws-sdk-go-v2",
   "version": "v1.42.0",
   "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2:v1.42.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.42.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:aws:aws_sdk_go_v2:v1.42.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:XvXMJTkFQtpBKIWZnmr9ZEOc2InWM2yldjXEJ/bymhA="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.32.25?package-id=7568894ec3a5327a",
   "type": "library",
   "name": "github.com/aws/aws-sdk-go-v2/config",
   "version": "v1.32.25",
   "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/config:v1.32.25:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.32.25",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/config:v1.32.25:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:ACCejvStYoilgwrfegSt5ZntCbPrk52qfwyNcnl3omM="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/credentials@v1.19.24?package-id=1bc1a821673b91be",
   "type": "library",
   "name": "github.com/aws/aws-sdk-go-v2/credentials",
   "version": "v1.19.24",
   "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/credentials:v1.19.24:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/credentials@v1.19.24",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/credentials:v1.19.24:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:2hQqYCV9yqyePQ9o6dCrZc/zO8U3TwPr9mIKlZnPu/I="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.18.29?package-id=f2c96d11d85210f7",
   "type": "library",
   "name": "github.com/aws/aws-sdk-go-v2/feature/ec2/imds",
   "version": "v1.18.29",
   "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/feature\\/ec2\\/imds:v1.18.29:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.18.29",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/feature\\/ec2\\/imds:v1.18.29:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:r6qZHbT+wxgWO/e9vYNUEtg7lv5+UN3pRqKhLXvnArg="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.4.29?package-id=0bffa50011d2b821",
   "type": "library",
   "name": "github.com/aws/aws-sdk-go-v2/internal/configsources",
   "version": "v1.4.29",
   "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/configsources:v1.4.29:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.4.29",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/configsources:v1.4.29:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:f3vKqSo13fhTYb+JEcXwXefZQE26I1FB5eTSniU67ko="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.7.29?package-id=d71db78c8fdc9f80",
   "type": "library",
   "name": "github.com/aws/aws-sdk-go-v2/internal/endpoints/v2",
   "version": "v2.7.29",
   "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/endpoints\\/v2:v2.7.29:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.7.29",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/endpoints\\/v2:v2.7.29:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:RdwIf/CuUsvJX3RgJagbOyotl/cxoLY4xviKuE7p2GY="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/v4a@v1.4.30?package-id=1a260368336a005f",
   "type": "library",
   "name": "github.com/aws/aws-sdk-go-v2/internal/v4a",
   "version": "v1.4.30",
   "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/v4a:v1.4.30:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/v4a@v1.4.30",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/v4a:v1.4.30:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:VTGy885W5DKBxWRUJbym9hytNaYzsyaPkCHGRRMAOhU="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ecr@v1.55.3?package-id=28f6a9a0751155f0",
   "type": "library",
   "name": "github.com/aws/aws-sdk-go-v2/service/ecr",
   "version": "v1.55.3",
   "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/ecr:v1.55.3:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ecr@v1.55.3",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/ecr:v1.55.3:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:RtGctYMmkTerGClvdY6bHXdtly4FeYw9wz/NPz62LF8="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ecrpublic@v1.38.10?package-id=e5e6b41d4e33667d",
   "type": "library",
   "name": "github.com/aws/aws-sdk-go-v2/service/ecrpublic",
   "version": "v1.38.10",
   "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/ecrpublic:v1.38.10:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ecrpublic@v1.38.10",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/ecrpublic:v1.38.10:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:1A/sI3LNMi3fhRI5TFLMwwo7ALAALSFVCSGvFlr1Iys="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding@v1.13.12?package-id=379209eceed120ea",
   "type": "library",
   "name": "github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding",
   "version": "v1.13.12",
   "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/accept-encoding:v1.13.12:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding@v1.13.12",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/accept_encoding:v1.13.12:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:ZD2+BSw9vFsNlKYIasSNt3uDbjqqXIBcM13UJv/Lx2k="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.13.29?package-id=02ad1d8c46006a9c",
   "type": "library",
   "name": "github.com/aws/aws-sdk-go-v2/service/internal/presigned-url",
   "version": "v1.13.29",
   "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/presigned-url:v1.13.29:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.13.29",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/presigned_url:v1.13.29:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:DRebniUGZ2MqiiIVmQJ04vIXr918hubdHMnarSLEWyU="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/kms@v1.53.4?package-id=0e359bda2eaaffda",
   "type": "library",
   "name": "github.com/aws/aws-sdk-go-v2/service/kms",
   "version": "v1.53.4",
   "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/kms:v1.53.4:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/kms@v1.53.4",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/kms:v1.53.4:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:PEgVSsWtR8NNxsDxFL2Ywisi7R+1EFQARGsT4q3mWwI="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/signin@v1.2.0?package-id=f5d96a459d796846",
   "type": "library",
   "name": "github.com/aws/aws-sdk-go-v2/service/signin",
   "version": "v1.2.0",
   "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/signin:v1.2.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/signin@v1.2.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/signin:v1.2.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:3nXpRcFwRCW8n7HgO2QGy0Dc20eQNfBuUemGQhpF8m8="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sso@v1.31.3?package-id=204fdadd780bc575",
   "type": "library",
   "name": "github.com/aws/aws-sdk-go-v2/service/sso",
   "version": "v1.31.3",
   "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/sso:v1.31.3:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sso@v1.31.3",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/sso:v1.31.3:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:ey1XLTYXb9PcLt4535632o5kCGXNXEhNb620Dqwuylo="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.36.6?package-id=173490bf2e3be781",
   "type": "library",
   "name": "github.com/aws/aws-sdk-go-v2/service/ssooidc",
   "version": "v1.36.6",
   "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/ssooidc:v1.36.6:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.36.6",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/ssooidc:v1.36.6:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:yLr03zQE/5Eu5l3QU0Si+xMbLMbSDF2YXsigqXngs6g="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sts@v1.43.3?package-id=afe4dd5f5d6c33d3",
   "type": "library",
   "name": "github.com/aws/aws-sdk-go-v2/service/sts",
   "version": "v1.43.3",
   "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/sts:v1.43.3:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sts@v1.43.3",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/sts:v1.43.3:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:VrIhKRCSK1umelSgB9RghvA9RTUYeQffyAS5ApXehNI="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/aws/smithy-go@v1.27.2?package-id=287625221fafbed1",
   "type": "library",
   "name": "github.com/aws/smithy-go",
   "version": "v1.27.2",
   "cpe": "cpe:2.3:a:aws:smithy-go:v1.27.2:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/aws/smithy-go@v1.27.2",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:aws:smithy_go:v1.27.2:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:y9NPmSE6am6LjEFPfqHqG/jJk7AauQvhCJONKh7kpzk="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/awslabs/amazon-ecr-credential-helper/ecr-login@v0.12.0?package-id=4ed98a91b34e67f3",
   "type": "library",
   "name": "github.com/awslabs/amazon-ecr-credential-helper/ecr-login",
   "version": "v0.12.0",
   "cpe": "cpe:2.3:a:awslabs:amazon-ecr-credential-helper\\/ecr-login:v0.12.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/awslabs/amazon-ecr-credential-helper/ecr-login@v0.12.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:awslabs:amazon_ecr_credential_helper\\/ecr_login:v0.12.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:JFWXO6QPihCknDdnL6VaQE57km4ZKheHIGd9YiOGcTo="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/blang/semver@v3.5.1%2Bincompatible?package-id=221563798687c639",
   "type": "library",
   "name": "github.com/blang/semver",
   "version": "v3.5.1+incompatible",
   "cpe": "cpe:2.3:a:blang:semver:v3.5.1\\+incompatible:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/blang/semver@v3.5.1%2Bincompatible",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:cQNTCjp13qL8KC3Nbxr/y2Bqb63oX6wdnnjpJbkM4JQ="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/buildkite/agent/v3@v3.130.0?package-id=5c5417521476214a",
   "type": "library",
   "name": "github.com/buildkite/agent/v3",
   "version": "v3.130.0",
   "cpe": "cpe:2.3:a:buildkite:agent\\/v3:v3.130.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/buildkite/agent/v3@v3.130.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:fYo5iTrYAK6OTBWBoF7M627tnCKhZaRTD+Ex186dJZ0="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/buildkite/go-pipeline@v0.17.1?package-id=93e5aa3ff4dd8425",
   "type": "library",
   "name": "github.com/buildkite/go-pipeline",
   "version": "v0.17.1",
   "cpe": "cpe:2.3:a:buildkite:go-pipeline:v0.17.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/buildkite/go-pipeline@v0.17.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:buildkite:go_pipeline:v0.17.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:m7+a2SF9hLjqsbe6HShmzm9M4rDk4QtanKTF2LD6LG0="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/buildkite/interpolate@v0.1.5?package-id=26eb66d1c93374ae",
   "type": "library",
   "name": "github.com/buildkite/interpolate",
   "version": "v0.1.5",
   "cpe": "cpe:2.3:a:buildkite:interpolate:v0.1.5:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/buildkite/interpolate@v0.1.5",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:v2Ji3voik69UZlbfoqzx+qfcsOKLA61nHdU79VV+tPU="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/buildkite/roko@v1.4.0?package-id=e38c3f7822d104b2",
   "type": "library",
   "name": "github.com/buildkite/roko",
   "version": "v1.4.0",
   "cpe": "cpe:2.3:a:buildkite:roko:v1.4.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/buildkite/roko@v1.4.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:DxixoCdpNqxu4/1lXrXbfsKbJSd7r1qoxtef/TT2J80="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/cenkalti/backoff/v4@v4.3.0?package-id=53ef731f00a780c6",
   "type": "library",
   "name": "github.com/cenkalti/backoff/v4",
   "version": "v4.3.0",
   "cpe": "cpe:2.3:a:cenkalti:backoff\\/v4:v4.3.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/cenkalti/backoff/v4@v4.3.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:MyRJ/UdXutAwSAT+s3wNd7MfTIcy71VQueUuFK343L8="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/cenkalti/backoff/v5@v5.0.3?package-id=de4492f49f7820f6",
   "type": "library",
   "name": "github.com/cenkalti/backoff/v5",
   "version": "v5.0.3",
   "cpe": "cpe:2.3:a:cenkalti:backoff\\/v5:v5.0.3:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/cenkalti/backoff/v5@v5.0.3",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:ZN+IMa753KfX5hd8vVaMixjnqRZ3y8CuJKRKj1xcsSM="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/cespare/xxhash/v2@v2.3.0?package-id=75300e358d311878",
   "type": "library",
   "name": "github.com/cespare/xxhash/v2",
   "version": "v2.3.0",
   "cpe": "cpe:2.3:a:cespare:xxhash\\/v2:v2.3.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/cespare/xxhash/v2@v2.3.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:UL815xU9SqsFlibzuggzjXhog7bL6oX9BbNZnL2UFvs="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/chrismellard/docker-credential-acr-env@v0.0.0-20230304212654-82a0ddb27589?package-id=255aefdb9623b5ff",
   "type": "library",
   "name": "github.com/chrismellard/docker-credential-acr-env",
   "version": "v0.0.0-20230304212654-82a0ddb27589",
   "cpe": "cpe:2.3:a:chrismellard:docker-credential-acr-env:v0.0.0-20230304212654-82a0ddb27589:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/chrismellard/docker-credential-acr-env@v0.0.0-20230304212654-82a0ddb27589",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:chrismellard:docker_credential_acr_env:v0.0.0-20230304212654-82a0ddb27589:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:krfRl01rzPzxSxyLyrChD+U+MzsBXbm0OwYYB67uF+4="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/clbanning/mxj/v2@v2.7.0?package-id=42672da594f75a92",
   "type": "library",
   "name": "github.com/clbanning/mxj/v2",
   "version": "v2.7.0",
   "cpe": "cpe:2.3:a:clbanning:mxj\\/v2:v2.7.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/clbanning/mxj/v2@v2.7.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:WA/La7UGCanFe5NpHF0Q3DNtnCsVoxbPKuyBNHWRyME="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/cockroachdb/apd/v3@v3.2.1?package-id=af2607cd64c12fff",
   "type": "library",
   "name": "github.com/cockroachdb/apd/v3",
   "version": "v3.2.1",
   "cpe": "cpe:2.3:a:cockroachdb:apd\\/v3:v3.2.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/cockroachdb/apd/v3@v3.2.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:U+8j7t0axsIgvQUqthuNm82HIrYXodOV2iWLWtEaIwg="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/common-nighthawk/go-figure@v0.0.0-20210622060536-734e95fb86be?package-id=4264449d1a0c2872",
   "type": "library",
   "name": "github.com/common-nighthawk/go-figure",
   "version": "v0.0.0-20210622060536-734e95fb86be",
   "cpe": "cpe:2.3:a:common-nighthawk:go-figure:v0.0.0-20210622060536-734e95fb86be:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/common-nighthawk/go-figure@v0.0.0-20210622060536-734e95fb86be",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:common-nighthawk:go_figure:v0.0.0-20210622060536-734e95fb86be:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:common_nighthawk:go-figure:v0.0.0-20210622060536-734e95fb86be:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:common_nighthawk:go_figure:v0.0.0-20210622060536-734e95fb86be:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:common:go-figure:v0.0.0-20210622060536-734e95fb86be:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:common:go_figure:v0.0.0-20210622060536-734e95fb86be:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:J5BL2kskAlV9ckgEsNQXscjIaLiOYiZ75d4e94E6dcQ="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/coreos/go-oidc/v3@v3.18.0?package-id=b51ad9a724bb39e3",
   "type": "library",
   "name": "github.com/coreos/go-oidc/v3",
   "version": "v3.18.0",
   "cpe": "cpe:2.3:a:coreos:go-oidc\\/v3:v3.18.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/coreos/go-oidc/v3@v3.18.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:coreos:go_oidc\\/v3:v3.18.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:V9orjXynvu5wiC9SemFTWnG4F45v403aIcjWo0d41+A="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/cyberphone/json-canonicalization@v0.0.0-20241213102144-19d51d7fe467?package-id=6205ed7c825195ee",
   "type": "library",
   "name": "github.com/cyberphone/json-canonicalization",
   "version": "v0.0.0-20241213102144-19d51d7fe467",
   "cpe": "cpe:2.3:a:cyberphone:json-canonicalization:v0.0.0-20241213102144-19d51d7fe467:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/cyberphone/json-canonicalization@v0.0.0-20241213102144-19d51d7fe467",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:cyberphone:json_canonicalization:v0.0.0-20241213102144-19d51d7fe467:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:uX1JmpONuD549D73r6cgnxyUu18Zb7yHAy5AYU0Pm4Q="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc?package-id=27f6453bce30368e",
   "type": "library",
   "name": "github.com/davecgh/go-spew",
   "version": "v1.1.2-0.20180830191138-d8f796af33cc",
   "cpe": "cpe:2.3:a:davecgh:go-spew:v1.1.2-0.20180830191138-d8f796af33cc:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:davecgh:go_spew:v1.1.2-0.20180830191138-d8f796af33cc:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:U9qPSI2PIWSS1VwoXQT9A3Wy9MM3WgvqSxFWenqJduM="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/digitorus/pkcs7@v0.0.0-20230818184609-3a137a874352?package-id=13ca793d7e1bbc96",
   "type": "library",
   "name": "github.com/digitorus/pkcs7",
   "version": "v0.0.0-20230818184609-3a137a874352",
   "cpe": "cpe:2.3:a:digitorus:pkcs7:v0.0.0-20230818184609-3a137a874352:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/digitorus/pkcs7@v0.0.0-20230818184609-3a137a874352",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:ge14PCmCvPjpMQMIAH7uKg0lrtNSOdpYsRXlwk3QbaE="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/digitorus/timestamp@v0.0.0-20231217203849-220c5c2851b7?package-id=068bc8c7721cca77",
   "type": "library",
   "name": "github.com/digitorus/timestamp",
   "version": "v0.0.0-20231217203849-220c5c2851b7",
   "cpe": "cpe:2.3:a:digitorus:timestamp:v0.0.0-20231217203849-220c5c2851b7:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/digitorus/timestamp@v0.0.0-20231217203849-220c5c2851b7",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:lxmTCgmHE1GUYL7P0MlNa00M67axePTq+9nBSGddR8I="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/dimchansky/utfbom@v1.1.1?package-id=10e60b8f572a0a75",
   "type": "library",
   "name": "github.com/dimchansky/utfbom",
   "version": "v1.1.1",
   "cpe": "cpe:2.3:a:dimchansky:utfbom:v1.1.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/dimchansky/utfbom@v1.1.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:vV6w1AhK4VMnhBno/TPVCoK9U/LP0PkLCS9tbxHdi/U="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/docker/cli@v29.5.3%2Bincompatible?package-id=459732f139f2cf3b",
   "type": "library",
   "name": "github.com/docker/cli",
   "version": "v29.5.3+incompatible",
   "cpe": "cpe:2.3:a:docker:cli:v29.5.3\\+incompatible:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/docker/cli@v29.5.3%2Bincompatible",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:nbEFfz774vBwQ5KRYv7c/AghjReqnGISvrRhzjV0evs="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/docker/docker-credential-helpers@v0.9.5?package-id=5d58563a00cca68d",
   "type": "library",
   "name": "github.com/docker/docker-credential-helpers",
   "version": "v0.9.5",
   "cpe": "cpe:2.3:a:docker:docker-credential-helpers:v0.9.5:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/docker/docker-credential-helpers@v0.9.5",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:docker:docker_credential_helpers:v0.9.5:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:EFNN8DHvaiK8zVqFA2DT6BjXE0GzfLOZ38ggPTKePkY="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/dustin/go-humanize@v1.0.1?package-id=8e4b5e31a10e6ac1",
   "type": "library",
   "name": "github.com/dustin/go-humanize",
   "version": "v1.0.1",
   "cpe": "cpe:2.3:a:dustin:go-humanize:v1.0.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/dustin/go-humanize@v1.0.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:dustin:go_humanize:v1.0.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:GzkhY7T5VNhEkwH0PVJgjz+fX1rhBrR7pRT3mDkpeCY="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/emicklei/go-restful/v3@v3.13.0?package-id=7a870f54d97d1b22",
   "type": "library",
   "name": "github.com/emicklei/go-restful/v3",
   "version": "v3.13.0",
   "cpe": "cpe:2.3:a:emicklei:go-restful\\/v3:v3.13.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/emicklei/go-restful/v3@v3.13.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:emicklei:go_restful\\/v3:v3.13.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:C4Bl2xDndpU6nJ4bc1jXd+uTmYPVUwkD6bFY/oTyCes="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/emicklei/proto@v1.14.3?package-id=568c1315239cbb01",
   "type": "library",
   "name": "github.com/emicklei/proto",
   "version": "v1.14.3",
   "cpe": "cpe:2.3:a:emicklei:proto:v1.14.3:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/emicklei/proto@v1.14.3",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:zEhlzNkpP8kN6utonKMzlPfIvy82t5Kb9mufaJxSe1Q="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/felixge/httpsnoop@v1.0.4?package-id=beaa481982f74a6f",
   "type": "library",
   "name": "github.com/felixge/httpsnoop",
   "version": "v1.0.4",
   "cpe": "cpe:2.3:a:felixge:httpsnoop:v1.0.4:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/felixge/httpsnoop@v1.0.4",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:NFTV2Zj1bL4mc9sqWACXbQFVBBg2W3GPvqp8/ESS2Wg="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/fsnotify/fsnotify@v1.10.1?package-id=5bcdacbdb230860c",
   "type": "library",
   "name": "github.com/fsnotify/fsnotify",
   "version": "v1.10.1",
   "cpe": "cpe:2.3:a:fsnotify:fsnotify:v1.10.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/fsnotify/fsnotify@v1.10.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:b0/UzAf9yR5rhf3RPm9gf3ehBPpf0oZKIjtpKrx59Ho="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/fxamacker/cbor/v2@v2.9.0?package-id=0fbbca6ef48ea06c",
   "type": "library",
   "name": "github.com/fxamacker/cbor/v2",
   "version": "v2.9.0",
   "cpe": "cpe:2.3:a:fxamacker:cbor\\/v2:v2.9.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/fxamacker/cbor/v2@v2.9.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:NpKPmjDBgUfBms6tr6JZkTHtfFGcMKsw3eGcmD/sapM="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/go-chi/chi/v5@v5.3.0?package-id=10d703286ad338a9",
   "type": "library",
   "name": "github.com/go-chi/chi/v5",
   "version": "v5.3.0",
   "cpe": "cpe:2.3:a:go-chi:chi\\/v5:v5.3.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/go-chi/chi/v5@v5.3.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_chi:chi\\/v5:v5.3.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:chi\\/v5:v5.3.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:halUjDxhshgXHMrao5bB8eNBXo/rnzwr8m5m36glehM="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/go-jose/go-jose/v4@v4.1.4?package-id=20d1930659ddefb3",
   "type": "library",
   "name": "github.com/go-jose/go-jose/v4",
   "version": "v4.1.4",
   "cpe": "cpe:2.3:a:go-jose:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/go-jose/go-jose/v4@v4.1.4",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go-jose:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_jose:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_jose:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:moDMcTHmvE6Groj34emNPLs/qtYXRVcd6S7NHbHz3kA="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/go-logr/logr@v1.4.3?package-id=e05d669eb961843a",
   "type": "library",
   "name": "github.com/go-logr/logr",
   "version": "v1.4.3",
   "cpe": "cpe:2.3:a:go-logr:logr:v1.4.3:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/go-logr/logr@v1.4.3",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_logr:logr:v1.4.3:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:logr:v1.4.3:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:CjnDlHq8ikf6E492q6eKboGOC0T8CDaOvkHCIg8idEI="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/go-logr/stdr@v1.2.2?package-id=e30c3966c712c1bc",
   "type": "library",
   "name": "github.com/go-logr/stdr",
   "version": "v1.2.2",
   "cpe": "cpe:2.3:a:go-logr:stdr:v1.2.2:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/go-logr/stdr@v1.2.2",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_logr:stdr:v1.2.2:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:stdr:v1.2.2:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:hSWxHoqTgW2S2qGc0LTAI563KZ5YKYRhT3MFKZMbjag="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/go-openapi/analysis@v0.25.2?package-id=d657da2083eacc78",
   "type": "library",
   "name": "github.com/go-openapi/analysis",
   "version": "v0.25.2",
   "cpe": "cpe:2.3:a:go-openapi:analysis:v0.25.2:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/go-openapi/analysis@v0.25.2",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_openapi:analysis:v0.25.2:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:analysis:v0.25.2:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:I0vy4n3alz+DHTiN1PRhCb7QZxkK6g5YmswZKv2TKuw="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/go-openapi/errors@v0.22.8?package-id=067ba0fec3919b33",
   "type": "library",
   "name": "github.com/go-openapi/errors",
   "version": "v0.22.8",
   "cpe": "cpe:2.3:a:go-openapi:errors:v0.22.8:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/go-openapi/errors@v0.22.8",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_openapi:errors:v0.22.8:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:errors:v0.22.8:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:oP7sW7TWc3wFFjrzzj0nI83H2qMBkNjNfSd+XRejk/I="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/go-openapi/jsonpointer@v0.23.1?package-id=3a613e6b0b7cef6c",
   "type": "library",
   "name": "github.com/go-openapi/jsonpointer",
   "version": "v0.23.1",
   "cpe": "cpe:2.3:a:go-openapi:jsonpointer:v0.23.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/go-openapi/jsonpointer@v0.23.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_openapi:jsonpointer:v0.23.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:jsonpointer:v0.23.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:1HBACs7XIwR2RcmItfdSFlALhGbe6S92p0ry4d1GWg4="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/go-openapi/jsonreference@v0.21.6?package-id=cdf9396ad09324a2",
   "type": "library",
   "name": "github.com/go-openapi/jsonreference",
   "version": "v0.21.6",
   "cpe": "cpe:2.3:a:go-openapi:jsonreference:v0.21.6:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/go-openapi/jsonreference@v0.21.6",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_openapi:jsonreference:v0.21.6:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:jsonreference:v0.21.6:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:NZ5nGfnaM1n4I43Xjm1e5/M2GjOwQwndQz22uhxwD+Y="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/go-openapi/loads@v0.24.0?package-id=3611ceed0357aa94",
   "type": "library",
   "name": "github.com/go-openapi/loads",
   "version": "v0.24.0",
   "cpe": "cpe:2.3:a:go-openapi:loads:v0.24.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/go-openapi/loads@v0.24.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_openapi:loads:v0.24.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:loads:v0.24.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:4LLorXRPTzIN9V6ngMUZbAscsBOUBk3Oa8cClu/bFrQ="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/go-openapi/runtime@v0.32.4?package-id=1f3f6543b4b300f7",
   "type": "library",
   "name": "github.com/go-openapi/runtime",
   "version": "v0.32.4",
   "cpe": "cpe:2.3:a:go-openapi:runtime:v0.32.4:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/go-openapi/runtime@v0.32.4",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_openapi:runtime:v0.32.4:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:runtime:v0.32.4:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:8ElGj/3goG0itt0nBPP6Cm57ehcYyuHoI3O20nxgvkw="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/go-openapi/runtime/server-middleware@v0.30.0?package-id=409a44be30237c6a",
   "type": "library",
   "name": "github.com/go-openapi/runtime/server-middleware",
   "version": "v0.30.0",
   "cpe": "cpe:2.3:a:go-openapi:runtime\\/server-middleware:v0.30.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/go-openapi/runtime/server-middleware@v0.30.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go-openapi:runtime\\/server_middleware:v0.30.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_openapi:runtime\\/server-middleware:v0.30.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_openapi:runtime\\/server_middleware:v0.30.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:runtime\\/server-middleware:v0.30.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:runtime\\/server_middleware:v0.30.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:8rPoJ/xv7JL8BsovaqboKETlpWBArVh8n+0L/GyePog="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/go-openapi/spec@v0.22.6?package-id=6b831fb374747127",
   "type": "library",
   "name": "github.com/go-openapi/spec",
   "version": "v0.22.6",
   "cpe": "cpe:2.3:a:go-openapi:spec:v0.22.6:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/go-openapi/spec@v0.22.6",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_openapi:spec:v0.22.6:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:spec:v0.22.6:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:Tyy1pLaNCM8GBCFLoGYLonjJi6zykqyLCjXLc19ZPic="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/go-openapi/strfmt@v0.26.4?package-id=aa91e5f2d6263626",
   "type": "library",
   "name": "github.com/go-openapi/strfmt",
   "version": "v0.26.4",
   "cpe": "cpe:2.3:a:go-openapi:strfmt:v0.26.4:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/go-openapi/strfmt@v0.26.4",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_openapi:strfmt:v0.26.4:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:strfmt:v0.26.4:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:yI6IAEfcWow459BD5UzFY430KUwXZwBHrYusPFkhWlc="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/go-openapi/swag@v0.26.1?package-id=e1eb3d239ef5d2d3",
   "type": "library",
   "name": "github.com/go-openapi/swag",
   "version": "v0.26.1",
   "cpe": "cpe:2.3:a:go-openapi:swag:v0.26.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/go-openapi/swag@v0.26.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_openapi:swag:v0.26.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:swag:v0.26.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:l5sVEyVpwj+DDYeZyo7wQI/Ebn/mKYIyGB/pFwAfGoQ="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/go-openapi/swag/cmdutils@v0.26.1?package-id=84651a685e49de8f",
   "type": "library",
   "name": "github.com/go-openapi/swag/cmdutils",
   "version": "v0.26.1",
   "cpe": "cpe:2.3:a:go-openapi:swag\\/cmdutils:v0.26.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/go-openapi/swag/cmdutils@v0.26.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_openapi:swag\\/cmdutils:v0.26.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:swag\\/cmdutils:v0.26.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:f2iE1ijYaJ3nuu5PaEMx3zpEhzhZFgivCJObWEObLIQ="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/go-openapi/swag/conv@v0.27.0?package-id=8906d4e3d5f098f2",
   "type": "library",
   "name": "github.com/go-openapi/swag/conv",
   "version": "v0.27.0",
   "cpe": "cpe:2.3:a:go-openapi:swag\\/conv:v0.27.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/go-openapi/swag/conv@v0.27.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_openapi:swag\\/conv:v0.27.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:swag\\/conv:v0.27.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:EKOH4feXrvdo8DbSsXSAqRT8fz1epEnS5O2IfXUOzE8="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/go-openapi/swag/fileutils@v0.26.1?package-id=71dd762f86679ea5",
   "type": "library",
   "name": "github.com/go-openapi/swag/fileutils",
   "version": "v0.26.1",
   "cpe": "cpe:2.3:a:go-openapi:swag\\/fileutils:v0.26.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/go-openapi/swag/fileutils@v0.26.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_openapi:swag\\/fileutils:v0.26.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:swag\\/fileutils:v0.26.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:K1XCM2CGhfNsc6YDt6v7Q5+1e59rftYWdcu/isZhvFw="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/go-openapi/swag/jsonname@v0.26.1?package-id=025cc4201a1f0746",
   "type": "library",
   "name": "github.com/go-openapi/swag/jsonname",
   "version": "v0.26.1",
   "cpe": "cpe:2.3:a:go-openapi:swag\\/jsonname:v0.26.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/go-openapi/swag/jsonname@v0.26.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_openapi:swag\\/jsonname:v0.26.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:swag\\/jsonname:v0.26.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:VReupaV6WxlAsCn0e4DUfgV6bPmINnPpyJDLqSfNPcE="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/go-openapi/swag/jsonutils@v0.26.1?package-id=06866940b050a799",
   "type": "library",
   "name": "github.com/go-openapi/swag/jsonutils",
   "version": "v0.26.1",
   "cpe": "cpe:2.3:a:go-openapi:swag\\/jsonutils:v0.26.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/go-openapi/swag/jsonutils@v0.26.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_openapi:swag\\/jsonutils:v0.26.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:swag\\/jsonutils:v0.26.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:2hdBfFkHg+7Wrz2VsCbeyR6hzkRDs7AztnMR2u84yOY="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/go-openapi/swag/loading@v0.26.1?package-id=99da6600481cc3d3",
   "type": "library",
   "name": "github.com/go-openapi/swag/loading",
   "version": "v0.26.1",
   "cpe": "cpe:2.3:a:go-openapi:swag\\/loading:v0.26.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/go-openapi/swag/loading@v0.26.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_openapi:swag\\/loading:v0.26.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:swag\\/loading:v0.26.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:E9K4wqXeROlhjFQ13K9zMz6ojFGXIggGe+ad1odrK9w="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/go-openapi/swag/mangling@v0.26.1?package-id=82618d3457a837a7",
   "type": "library",
   "name": "github.com/go-openapi/swag/mangling",
   "version": "v0.26.1",
   "cpe": "cpe:2.3:a:go-openapi:swag\\/mangling:v0.26.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/go-openapi/swag/mangling@v0.26.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_openapi:swag\\/mangling:v0.26.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:swag\\/mangling:v0.26.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:gpYI4WuPKFJJVjV5cDLGlDVJhFIxYjQc7yN5eEb4CqM="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/go-openapi/swag/netutils@v0.26.1?package-id=7b1200f6dd89af74",
   "type": "library",
   "name": "github.com/go-openapi/swag/netutils",
   "version": "v0.26.1",
   "cpe": "cpe:2.3:a:go-openapi:swag\\/netutils:v0.26.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/go-openapi/swag/netutils@v0.26.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_openapi:swag\\/netutils:v0.26.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:swag\\/netutils:v0.26.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:BNctoc39WTAUMxyAs355fExOPzMZtPbZ0ZZ1Am2FR5M="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/go-openapi/swag/stringutils@v0.26.1?package-id=5b57cf0352351704",
   "type": "library",
   "name": "github.com/go-openapi/swag/stringutils",
   "version": "v0.26.1",
   "cpe": "cpe:2.3:a:go-openapi:swag\\/stringutils:v0.26.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/go-openapi/swag/stringutils@v0.26.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_openapi:swag\\/stringutils:v0.26.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:swag\\/stringutils:v0.26.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:f88uYyTso7TnHrKM/bUBsQ5e2wKf37cpgo6pvbzd9yU="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/go-openapi/swag/typeutils@v0.27.0?package-id=a38b19b4814014f6",
   "type": "library",
   "name": "github.com/go-openapi/swag/typeutils",
   "version": "v0.27.0",
   "cpe": "cpe:2.3:a:go-openapi:swag\\/typeutils:v0.27.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/go-openapi/swag/typeutils@v0.27.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_openapi:swag\\/typeutils:v0.27.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:swag\\/typeutils:v0.27.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:aCf4MSGo8NLwZP8Q6t32DWLJSvl/WwNqgmEG+xJ6v2o="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/go-openapi/swag/yamlutils@v0.26.1?package-id=f527916b8089f6c5",
   "type": "library",
   "name": "github.com/go-openapi/swag/yamlutils",
   "version": "v0.26.1",
   "cpe": "cpe:2.3:a:go-openapi:swag\\/yamlutils:v0.26.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/go-openapi/swag/yamlutils@v0.26.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_openapi:swag\\/yamlutils:v0.26.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:swag\\/yamlutils:v0.26.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:0TSLK+lXs9vfIhAWzBeI/lOzEnIoot6WTCO1aAeWFTk="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/go-openapi/validate@v0.26.0?package-id=16855b9828aa5da4",
   "type": "library",
   "name": "github.com/go-openapi/validate",
   "version": "v0.26.0",
   "cpe": "cpe:2.3:a:go-openapi:validate:v0.26.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/go-openapi/validate@v0.26.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_openapi:validate:v0.26.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:validate:v0.26.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:dxWzQ3F+vb1SajqUxHjwb5T4mTpSHmdrtv5Bi7+ZNhw="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/go-viper/mapstructure/v2@v2.5.0?package-id=d40b2c1873880dd2",
   "type": "library",
   "name": "github.com/go-viper/mapstructure/v2",
   "version": "v2.5.0",
   "cpe": "cpe:2.3:a:go-viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/go-viper/mapstructure/v2@v2.5.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:vM5IJoUAy3d7zRSVtIwQgBj7BiWtMPfmPEgAXnvj1Ro="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/gobwas/glob@v0.2.3?package-id=5f70527e43caf956",
   "type": "library",
   "name": "github.com/gobwas/glob",
   "version": "v0.2.3",
   "cpe": "cpe:2.3:a:gobwas:glob:v0.2.3:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/gobwas/glob@v0.2.3",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:A4xDbljILXROh+kObIiy5kIaPYD8e96x1tgBhUI5J+Y="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/golang-jwt/jwt/v4@v4.5.2?package-id=6e117d82b220182a",
   "type": "library",
   "name": "github.com/golang-jwt/jwt/v4",
   "version": "v4.5.2",
   "cpe": "cpe:2.3:a:golang-jwt:jwt\\/v4:v4.5.2:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/golang-jwt/jwt/v4@v4.5.2",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:golang_jwt:jwt\\/v4:v4.5.2:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:golang:jwt\\/v4:v4.5.2:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:YtQM7lnr8iZ+j5q71MGKkNw9Mn7AjHM68uc9g5fXeUI="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/golang-jwt/jwt/v5@v5.3.1?package-id=990e596a16b3aa56",
   "type": "library",
   "name": "github.com/golang-jwt/jwt/v5",
   "version": "v5.3.1",
   "cpe": "cpe:2.3:a:golang-jwt:jwt\\/v5:v5.3.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/golang-jwt/jwt/v5@v5.3.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:golang_jwt:jwt\\/v5:v5.3.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:golang:jwt\\/v5:v5.3.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:kYf81DTWFe7t+1VvL7eS+jKFVWaUnK9cB1qbwn63YCY="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/golang/snappy@v0.0.4?package-id=2a09a913a87ca2eb",
   "type": "library",
   "name": "github.com/golang/snappy",
   "version": "v0.0.4",
   "cpe": "cpe:2.3:a:golang:snappy:v0.0.4:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/golang/snappy@v0.0.4",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:yAGX7huGHXlcLOEtBnF4w7FQwA26wojNCwOYAEhLjQM="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/google/certificate-transparency-go@v1.3.3?package-id=d464c381a3ecd9cf",
   "type": "library",
   "name": "github.com/google/certificate-transparency-go",
   "version": "v1.3.3",
   "cpe": "cpe:2.3:a:google:certificate-transparency-go:v1.3.3:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/google/certificate-transparency-go@v1.3.3",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:google:certificate_transparency_go:v1.3.3:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:hq/rSxztSkXN2tx/3jQqF6Xc0O565UQPdHrOWvZwybo="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/google/gnostic-models@v0.7.0?package-id=1e837bd10f05995c",
   "type": "library",
   "name": "github.com/google/gnostic-models",
   "version": "v0.7.0",
   "cpe": "cpe:2.3:a:google:gnostic-models:v0.7.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/google/gnostic-models@v0.7.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:google:gnostic_models:v0.7.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:qwTtogB15McXDaNqTZdzPJRHvaVJlAl+HVQnLmJEJxo="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/google/go-cmp@v0.7.0?package-id=45d80675c33e84e8",
   "type": "library",
   "name": "github.com/google/go-cmp",
   "version": "v0.7.0",
   "cpe": "cpe:2.3:a:google:go-cmp:v0.7.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/google/go-cmp@v0.7.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:google:go_cmp:v0.7.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/google/go-containerregistry@v0.21.7?package-id=7a79869eed40381f",
   "type": "library",
   "name": "github.com/google/go-containerregistry",
   "version": "v0.21.7",
   "cpe": "cpe:2.3:a:google:go-containerregistry:v0.21.7:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/google/go-containerregistry@v0.21.7",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:google:go_containerregistry:v0.21.7:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:/vPFuVXDjtFREsVArW+0h1CIl5urnOhzei4X2DMW9IU="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/google/go-github/v88@v88.0.0?package-id=5c449fbc64bb3c86",
   "type": "library",
   "name": "github.com/google/go-github/v88",
   "version": "v88.0.0",
   "cpe": "cpe:2.3:a:google:go-github\\/v88:v88.0.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/google/go-github/v88@v88.0.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:google:go_github\\/v88:v88.0.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:dZA9IKkPK1eXZj4ypngnpRj5FwdpTv4whix2PrQMP7M="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/google/go-querystring@v1.2.0?package-id=443bb27d9e01a171",
   "type": "library",
   "name": "github.com/google/go-querystring",
   "version": "v1.2.0",
   "cpe": "cpe:2.3:a:google:go-querystring:v1.2.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/google/go-querystring@v1.2.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:google:go_querystring:v1.2.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:yhqkPbu2/OH+V9BfpCVPZkNmUXhb2gBxJArfhIxNtP0="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/google/s2a-go@v0.1.9?package-id=2305a9e81d27a1e8",
   "type": "library",
   "name": "github.com/google/s2a-go",
   "version": "v0.1.9",
   "cpe": "cpe:2.3:a:google:s2a-go:v0.1.9:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/google/s2a-go@v0.1.9",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:google:s2a_go:v0.1.9:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:LGD7gtMgezd8a/Xak7mEWL0PjoTQFvpRudN895yqKW0="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/google/uuid@v1.6.0?package-id=c77c16530e92bc81",
   "type": "library",
   "name": "github.com/google/uuid",
   "version": "v1.6.0",
   "cpe": "cpe:2.3:a:google:uuid:v1.6.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/google/uuid@v1.6.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.16?package-id=76059d08ce73db59",
   "type": "library",
   "name": "github.com/googleapis/enterprise-certificate-proxy",
   "version": "v0.3.16",
   "cpe": "cpe:2.3:a:googleapis:enterprise-certificate-proxy:v0.3.16:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.16",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:googleapis:enterprise_certificate_proxy:v0.3.16:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:F/VPrx0YPBdksZJQdCAp0WUsqnNmZpUZszzfYt0M5Dw="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/googleapis/gax-go/v2@v2.22.0?package-id=b43ed500b049eb6c",
   "type": "library",
   "name": "github.com/googleapis/gax-go/v2",
   "version": "v2.22.0",
   "cpe": "cpe:2.3:a:googleapis:gax-go\\/v2:v2.22.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/googleapis/gax-go/v2@v2.22.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:googleapis:gax_go\\/v2:v2.22.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:PjIWBpgGIVKGoCXuiCoP64altEJCj3/Ei+kSU5vlZD4="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.29.0?package-id=46df53356537c2e9",
   "type": "library",
   "name": "github.com/grpc-ecosystem/grpc-gateway/v2",
   "version": "v2.29.0",
   "cpe": "cpe:2.3:a:grpc-ecosystem:grpc-gateway\\/v2:v2.29.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.29.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:grpc-ecosystem:grpc_gateway\\/v2:v2.29.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:grpc_ecosystem:grpc-gateway\\/v2:v2.29.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:grpc_ecosystem:grpc_gateway\\/v2:v2.29.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:grpc:grpc-gateway\\/v2:v2.29.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:grpc:grpc_gateway\\/v2:v2.29.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:5VipnvEpbqr2gA2VbM+nYVbkIF28c5ZQfqCBQ5g2xfk="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/hashicorp/errwrap@v1.1.0?package-id=3462b29e56adef03",
   "type": "library",
   "name": "github.com/hashicorp/errwrap",
   "version": "v1.1.0",
   "cpe": "cpe:2.3:a:hashicorp:errwrap:v1.1.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/hashicorp/errwrap@v1.1.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:OxrOeh75EUXMY8TBjag2fzXGZ40LB6IKw45YeGUDY2I="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2?package-id=fcaafb3580c80baf",
   "type": "library",
   "name": "github.com/hashicorp/go-cleanhttp",
   "version": "v0.5.2",
   "cpe": "cpe:2.3:a:hashicorp:go-cleanhttp:v0.5.2:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:hashicorp:go_cleanhttp:v0.5.2:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:035FKYIWjmULyFRBKPs8TBQoi0x6d9G4xc9neXJWAZQ="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1?package-id=25743bdb60bae92b",
   "type": "library",
   "name": "github.com/hashicorp/go-multierror",
   "version": "v1.1.1",
   "cpe": "cpe:2.3:a:hashicorp:go-multierror:v1.1.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:hashicorp:go_multierror:v1.1.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:H5DkEtf6CXdFp0N0Em5UCwQpXMWke8IA0+lD48awMYo="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/hashicorp/go-retryablehttp@v0.7.8?package-id=76e94d7be0123045",
   "type": "library",
   "name": "github.com/hashicorp/go-retryablehttp",
   "version": "v0.7.8",
   "cpe": "cpe:2.3:a:hashicorp:retryablehttp:v0.7.8:*:*:*:*:go:*:*",
   "purl": "pkg:golang/github.com/hashicorp/go-retryablehttp@v0.7.8",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:ylXZWnqa7Lhqpk0L1P1LzDtGcCR0rPVUrx/c8Unxc48="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/hashicorp/go-rootcerts@v1.0.2?package-id=6747343471d0a211",
   "type": "library",
   "name": "github.com/hashicorp/go-rootcerts",
   "version": "v1.0.2",
   "cpe": "cpe:2.3:a:hashicorp:go-rootcerts:v1.0.2:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/hashicorp/go-rootcerts@v1.0.2",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:hashicorp:go_rootcerts:v1.0.2:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:jzhAVGtqPKbwpyCPELlgNWhE1znq+qwJtW5Oi2viEzc="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/hashicorp/go-secure-stdlib/parseutil@v0.2.0?package-id=0e2cc963e90bccf5",
   "type": "library",
   "name": "github.com/hashicorp/go-secure-stdlib/parseutil",
   "version": "v0.2.0",
   "cpe": "cpe:2.3:a:hashicorp:go-secure-stdlib\\/parseutil:v0.2.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/hashicorp/go-secure-stdlib/parseutil@v0.2.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:hashicorp:go_secure_stdlib\\/parseutil:v0.2.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:U+kC2dOhMFQctRfhK0gRctKAPTloZdMU5ZJxaesJ/VM="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/hashicorp/go-secure-stdlib/strutil@v0.1.2?package-id=eff7143c2abe2dcf",
   "type": "library",
   "name": "github.com/hashicorp/go-secure-stdlib/strutil",
   "version": "v0.1.2",
   "cpe": "cpe:2.3:a:hashicorp:go-secure-stdlib\\/strutil:v0.1.2:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/hashicorp/go-secure-stdlib/strutil@v0.1.2",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:hashicorp:go_secure_stdlib\\/strutil:v0.1.2:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:kes8mmyCpxJsI7FTwtzRqEy9CdjCtrXrXGuOpxEA7Ts="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/hashicorp/go-sockaddr@v1.0.7?package-id=5a15f233e4cea5b1",
   "type": "library",
   "name": "github.com/hashicorp/go-sockaddr",
   "version": "v1.0.7",
   "cpe": "cpe:2.3:a:hashicorp:go-sockaddr:v1.0.7:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/hashicorp/go-sockaddr@v1.0.7",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:hashicorp:go_sockaddr:v1.0.7:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:G+pTkSO01HpR5qCxg7lxfsFEZaG+C0VssTy/9dbT+Fw="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/hashicorp/hcl@v1.0.1-vault-7?package-id=7d0e8e53b8653006",
   "type": "library",
   "name": "github.com/hashicorp/hcl",
   "version": "v1.0.1-vault-7",
   "cpe": "cpe:2.3:a:hashicorp:hcl:v1.0.1-vault-7:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/hashicorp/hcl@v1.0.1-vault-7",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:ag5OxFVy3QYTFTJODRzTKVZ6xvdfLLCA1cy/Y6xGI0I="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/hashicorp/vault/api@v1.22.0?package-id=64410cb683f3020c",
   "type": "library",
   "name": "github.com/hashicorp/vault/api",
   "version": "v1.22.0",
   "cpe": "cpe:2.3:a:hashicorp:vault\\/api:v1.22.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/hashicorp/vault/api@v1.22.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:+HYFquE35/B74fHoIeXlZIP2YADVboaPjaSicHEZiH0="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/in-toto/attestation@v1.2.0?package-id=d8d9951817b201d6",
   "type": "library",
   "name": "github.com/in-toto/attestation",
   "version": "v1.2.0",
   "cpe": "cpe:2.3:a:in-toto:attestation:v1.2.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/in-toto/attestation@v1.2.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:in_toto:attestation:v1.2.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:in:attestation:v1.2.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:aPRUZ3azbqD7yEBD5fP3TD8Dszf+YHo284SOcpahjQk="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/in-toto/in-toto-golang@v0.11.0?package-id=5690f7e877b85366",
   "type": "library",
   "name": "github.com/in-toto/in-toto-golang",
   "version": "v0.11.0",
   "cpe": "cpe:2.3:a:in-toto:in-toto-golang:v0.11.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/in-toto/in-toto-golang@v0.11.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:in-toto:in_toto_golang:v0.11.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:in_toto:in-toto-golang:v0.11.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:in_toto:in_toto_golang:v0.11.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:in:in-toto-golang:v0.11.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:in:in_toto_golang:v0.11.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:nfidMYBFx+E0lnmX5KUnN2Pdm8zdNKal1ayjJuzzRoA="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/jedisct1/go-minisign@v0.0.0-20230811132847-661be99b8267?package-id=a00d26221410316d",
   "type": "library",
   "name": "github.com/jedisct1/go-minisign",
   "version": "v0.0.0-20230811132847-661be99b8267",
   "cpe": "cpe:2.3:a:jedisct1:go-minisign:v0.0.0-20230811132847-661be99b8267:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/jedisct1/go-minisign@v0.0.0-20230811132847-661be99b8267",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:jedisct1:go_minisign:v0.0.0-20230811132847-661be99b8267:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:TMtDYDHKYY15rFihtRfck/bfFqNfvcabqvXAFQfAUpY="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/jellydator/ttlcache/v3@v3.4.0?package-id=f62e8a268a89fa05",
   "type": "library",
   "name": "github.com/jellydator/ttlcache/v3",
   "version": "v3.4.0",
   "cpe": "cpe:2.3:a:jellydator:ttlcache\\/v3:v3.4.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/jellydator/ttlcache/v3@v3.4.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:YS4P125qQS0tNhtL6aeYkheEaB/m8HCqdMMP4mnWdTY="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/json-iterator/go@v1.1.12?package-id=be5c24b1ee6d03c3",
   "type": "library",
   "name": "github.com/json-iterator/go",
   "version": "v1.1.12",
   "cpe": "cpe:2.3:a:json-iterator:go:v1.1.12:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/json-iterator/go@v1.1.12",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:json_iterator:go:v1.1.12:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:json:go:v1.1.12:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:PV8peI4a0ysnczrg+LtxykD8LfKY9ML6u2jnxaEnrnM="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/klauspost/compress@v1.18.6?package-id=8a9ff1a37c183567",
   "type": "library",
   "name": "github.com/klauspost/compress",
   "version": "v1.18.6",
   "cpe": "cpe:2.3:a:klauspost:compress:v1.18.6:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/klauspost/compress@v1.18.6",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:2jupLlAwFm95+YDR+NwD2MEfFO9d4z4Prjl1XXDjuao="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/kylelemons/godebug@v1.1.0?package-id=8ab2e2ac79e0104a",
   "type": "library",
   "name": "github.com/kylelemons/godebug",
   "version": "v1.1.0",
   "cpe": "cpe:2.3:a:kylelemons:godebug:v1.1.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/kylelemons/godebug@v1.1.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:RPNrshWIDI6G2gRW9EHilWtl7Z6Sb1BR0xunSBf0SNc="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/lestrrat-go/blackmagic@v1.0.4?package-id=0fbda0357d753c02",
   "type": "library",
   "name": "github.com/lestrrat-go/blackmagic",
   "version": "v1.0.4",
   "cpe": "cpe:2.3:a:lestrrat-go:blackmagic:v1.0.4:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/lestrrat-go/blackmagic@v1.0.4",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:lestrrat_go:blackmagic:v1.0.4:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:lestrrat:blackmagic:v1.0.4:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:IwQibdnf8l2KoO+qC3uT4OaTWsW7tuRQXy9TRN9QanA="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/lestrrat-go/dsig@v1.2.1?package-id=1602c9be54895846",
   "type": "library",
   "name": "github.com/lestrrat-go/dsig",
   "version": "v1.2.1",
   "cpe": "cpe:2.3:a:lestrrat-go:dsig:v1.2.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/lestrrat-go/dsig@v1.2.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:lestrrat_go:dsig:v1.2.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:lestrrat:dsig:v1.2.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:MwxzZhE4+4fguHi+uDALKVlC3Cn+O1QU1Q/F8D7hVIc="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/lestrrat-go/httpcc@v1.0.1?package-id=4f2096a2e427e980",
   "type": "library",
   "name": "github.com/lestrrat-go/httpcc",
   "version": "v1.0.1",
   "cpe": "cpe:2.3:a:lestrrat-go:httpcc:v1.0.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/lestrrat-go/httpcc@v1.0.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:lestrrat_go:httpcc:v1.0.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:lestrrat:httpcc:v1.0.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:ydWCStUeJLkpYyjLDHihupbn2tYmZ7m22BGkcvZZrIE="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/lestrrat-go/httprc/v3@v3.0.5?package-id=9f00a907edd0d208",
   "type": "library",
   "name": "github.com/lestrrat-go/httprc/v3",
   "version": "v3.0.5",
   "cpe": "cpe:2.3:a:lestrrat-go:httprc\\/v3:v3.0.5:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/lestrrat-go/httprc/v3@v3.0.5",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:lestrrat_go:httprc\\/v3:v3.0.5:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:lestrrat:httprc\\/v3:v3.0.5:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:S+Mb4L2I+bM6JGTibLmxExhyTOqnXjqx+zi9MoXw/TM="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/lestrrat-go/jwx/v3@v3.1.1?package-id=7ee340524f01fedb",
   "type": "library",
   "name": "github.com/lestrrat-go/jwx/v3",
   "version": "v3.1.1",
   "cpe": "cpe:2.3:a:lestrrat-go:jwx\\/v3:v3.1.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/lestrrat-go/jwx/v3@v3.1.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:lestrrat_go:jwx\\/v3:v3.1.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:lestrrat:jwx\\/v3:v3.1.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:yd9AdPmZ4INnQ7k42IrzXYpnEG803+SrQ6hdMvzHJzw="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/lestrrat-go/option/v2@v2.0.0?package-id=c4070f17aae0c15d",
   "type": "library",
   "name": "github.com/lestrrat-go/option/v2",
   "version": "v2.0.0",
   "cpe": "cpe:2.3:a:lestrrat-go:option\\/v2:v2.0.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/lestrrat-go/option/v2@v2.0.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:lestrrat_go:option\\/v2:v2.0.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:lestrrat:option\\/v2:v2.0.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:XxrcaJESE1fokHy3FpaQ/cXW8ZsIdWcdFzzLOcID3Ss="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/letsencrypt/boulder@v0.20260309.0?package-id=a0e79753a339133c",
   "type": "library",
   "name": "github.com/letsencrypt/boulder",
   "version": "v0.20260309.0",
   "cpe": "cpe:2.3:a:letsencrypt:boulder:v0.20260309.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/letsencrypt/boulder@v0.20260309.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:kZynrxK3QfqLGx6hhoz+Rfs3hgltJs1p9Mp+4+VwnY0="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0?package-id=04542bc652161b46",
   "type": "library",
   "name": "github.com/mitchellh/go-homedir",
   "version": "v1.1.0",
   "cpe": "cpe:2.3:a:mitchellh:go-homedir:v1.1.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:mitchellh:go_homedir:v1.1.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:lukF9ziXFxDFPkA1vsr5zpc1XuPDn/wFntq5mG+4E0Y="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1?package-id=f5abfaa30b11bce9",
   "type": "library",
   "name": "github.com/mitchellh/go-wordwrap",
   "version": "v1.0.1",
   "cpe": "cpe:2.3:a:mitchellh:go-wordwrap:v1.0.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:mitchellh:go_wordwrap:v1.0.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:TLuKupo69TCn6TQSyGxwI1EblZZEsQ0vMlAFQflz0v0="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/mitchellh/mapstructure@v1.5.1-0.20231216201459-8508981c8b6c?package-id=980a58e462cee409",
   "type": "library",
   "name": "github.com/mitchellh/mapstructure",
   "version": "v1.5.1-0.20231216201459-8508981c8b6c",
   "cpe": "cpe:2.3:a:mitchellh:mapstructure:v1.5.1-0.20231216201459-8508981c8b6c:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/mitchellh/mapstructure@v1.5.1-0.20231216201459-8508981c8b6c",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:cqn374mizHuIWj+OSJCajGr/phAmuMug9qIX3l9CflE="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/moby/term@v0.5.2?package-id=c97c404340a399ab",
   "type": "library",
   "name": "github.com/moby/term",
   "version": "v0.5.2",
   "cpe": "cpe:2.3:a:moby:term:v0.5.2:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/moby/term@v0.5.2",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:6qk3FJAFDs6i/q3W/pQ97SX192qKfZgGjCQqfCJkgzQ="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd?package-id=298213374b3fc300",
   "type": "library",
   "name": "github.com/modern-go/concurrent",
   "version": "v0.0.0-20180306012644-bacd9c7ef1dd",
   "cpe": "cpe:2.3:a:modern-go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:modern_go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:modern:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:TRLaZ9cD/w8PVh93nsPXa1VrQ6jlwL5oN8l14QlcNfg="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee?package-id=fa28a66691669634",
   "type": "library",
   "name": "github.com/modern-go/reflect2",
   "version": "v1.0.3-0.20250322232337-35a7c28c31ee",
   "cpe": "cpe:2.3:a:modern-go:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:modern_go:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:modern:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:W5t00kpgFdJifH4BDsTlE89Zl93FEloxaWZfGcifgq8="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/mozillazg/docker-credential-acr-helper@v0.4.0?package-id=5a08eae4757fea68",
   "type": "library",
   "name": "github.com/mozillazg/docker-credential-acr-helper",
   "version": "v0.4.0",
   "cpe": "cpe:2.3:a:mozillazg:docker-credential-acr-helper:v0.4.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/mozillazg/docker-credential-acr-helper@v0.4.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:mozillazg:docker_credential_acr_helper:v0.4.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:Uoh3Z9CcpEDnLiozDx+D7oDgRq7X+R296vAqAumnOcw="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822?package-id=70d2160e1eae3dba",
   "type": "library",
   "name": "github.com/munnerz/goautoneg",
   "version": "v0.0.0-20191010083416-a7dc8b61c822",
   "cpe": "cpe:2.3:a:munnerz:goautoneg:v0.0.0-20191010083416-a7dc8b61c822:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:C3w9PqII01/Oq1c1nUAm88MOHcQC9l5mIlSMApZMrHA="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/natefinch/atomic@v1.0.1?package-id=50797376d38c184e",
   "type": "library",
   "name": "github.com/natefinch/atomic",
   "version": "v1.0.1",
   "cpe": "cpe:2.3:a:natefinch:atomic:v1.0.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/natefinch/atomic@v1.0.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:ZPYKxkqQOx3KZ+RsbnP/YsgvxWQPGxjC0oBt2AhwV0A="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/nozzle/throttler@v0.0.0-20180817012639-2ea982251481?package-id=3ed9e5ec04f2eea5",
   "type": "library",
   "name": "github.com/nozzle/throttler",
   "version": "v0.0.0-20180817012639-2ea982251481",
   "cpe": "cpe:2.3:a:nozzle:throttler:v0.0.0-20180817012639-2ea982251481:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/nozzle/throttler@v0.0.0-20180817012639-2ea982251481",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:Up6+btDp321ZG5/zdSLo48H9Iaq0UQGthrhWC6pCxzE="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/oklog/ulid/v2@v2.1.1?package-id=7ff8bd3f15705bfd",
   "type": "library",
   "name": "github.com/oklog/ulid/v2",
   "version": "v2.1.1",
   "cpe": "cpe:2.3:a:oklog:ulid\\/v2:v2.1.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/oklog/ulid/v2@v2.1.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:suPZ4ARWLOJLegGFiZZ1dFAkqzhMjL3J1TzI+5wHz8s="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/oleiade/reflections@v1.1.0?package-id=1709f9b6598f0441",
   "type": "library",
   "name": "github.com/oleiade/reflections",
   "version": "v1.1.0",
   "cpe": "cpe:2.3:a:oleiade:reflections:v1.1.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/oleiade/reflections@v1.1.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:D+I/UsXQB4esMathlt0kkZRJZdUDmhv5zGi/HOwYTWo="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/open-policy-agent/opa@v1.17.1?package-id=f5ebf03e1a8f3cbd",
   "type": "library",
   "name": "github.com/open-policy-agent/opa",
   "version": "v1.17.1",
   "cpe": "cpe:2.3:a:open-policy-agent:opa:v1.17.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/open-policy-agent/opa@v1.17.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:open_policy_agent:opa:v1.17.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:open-policy:opa:v1.17.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:open_policy:opa:v1.17.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:open:opa:v1.17.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:wO0MOux/VCqY41aVAD6Toe1p3A7O7DlRZ1RHmYSpoS8="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0?package-id=bd76f79424b79c5b",
   "type": "library",
   "name": "github.com/opencontainers/go-digest",
   "version": "v1.0.0",
   "cpe": "cpe:2.3:a:opencontainers:go-digest:v1.0.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:opencontainers:go_digest:v1.0.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:apOUWs51W5PlhuyGyz9FCeeBIOUDA/6nW8Oi/yOhh5U="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/opencontainers/image-spec@v1.1.1?package-id=558e7e51aa5c0dcc",
   "type": "library",
   "name": "github.com/opencontainers/image-spec",
   "version": "v1.1.1",
   "cpe": "cpe:2.3:a:opencontainers:image-spec:v1.1.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/opencontainers/image-spec@v1.1.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:opencontainers:image_spec:v1.1.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:y0fUlFfIZhPF1W537XOLg0/fcx6zcHCJwooC2xJA040="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/pborman/uuid@v1.2.1?package-id=4bf166e915d2cc77",
   "type": "library",
   "name": "github.com/pborman/uuid",
   "version": "v1.2.1",
   "cpe": "cpe:2.3:a:pborman:uuid:v1.2.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/pborman/uuid@v1.2.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:+ZZIw58t/ozdjRaXh/3awHfmWRbzYxJoAdNJxe/3pvw="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/pelletier/go-toml/v2@v2.2.4?package-id=39019e66531c0961",
   "type": "library",
   "name": "github.com/pelletier/go-toml/v2",
   "version": "v2.2.4",
   "cpe": "cpe:2.3:a:pelletier:go-toml\\/v2:v2.2.4:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/pelletier/go-toml/v2@v2.2.4",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:pelletier:go_toml\\/v2:v2.2.4:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:mye9XuhQ6gvn5h28+VilKrrPoQVanw5PMw/TB0t5Ec4="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/pkg/browser@v0.0.0-20240102092130-5ac0b6a4141c?package-id=b4458fb42504301e",
   "type": "library",
   "name": "github.com/pkg/browser",
   "version": "v0.0.0-20240102092130-5ac0b6a4141c",
   "cpe": "cpe:2.3:a:pkg:browser:v0.0.0-20240102092130-5ac0b6a4141c:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/pkg/browser@v0.0.0-20240102092130-5ac0b6a4141c",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:+mdjkGKdHQG3305AYmdv1U2eRNDiU2ErMBj1gwrq8eQ="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/pkg/errors@v0.9.1?package-id=d419f42bdce24133",
   "type": "library",
   "name": "github.com/pkg/errors",
   "version": "v0.9.1",
   "cpe": "cpe:2.3:a:pkg:errors:v0.9.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/pkg/errors@v0.9.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:FEBLx1zS214owpjy7qsBeixbURkuhQAwrK5UwLGTwt4="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/protocolbuffers/txtpbfmt@v0.0.0-20260217160748-a481f6a22f94?package-id=2a8b1988b5c43727",
   "type": "library",
   "name": "github.com/protocolbuffers/txtpbfmt",
   "version": "v0.0.0-20260217160748-a481f6a22f94",
   "cpe": "cpe:2.3:a:protocolbuffers:txtpbfmt:v0.0.0-20260217160748-a481f6a22f94:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/protocolbuffers/txtpbfmt@v0.0.0-20260217160748-a481f6a22f94",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:2PC6Ql3jipz1KvBlqUHjjk6v4aMwE86mfDu1XMH0LR8="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/rcrowley/go-metrics@v0.0.0-20250401214520-65e299d6c5c9?package-id=9051d815f73d4fdf",
   "type": "library",
   "name": "github.com/rcrowley/go-metrics",
   "version": "v0.0.0-20250401214520-65e299d6c5c9",
   "cpe": "cpe:2.3:a:rcrowley:go-metrics:v0.0.0-20250401214520-65e299d6c5c9:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/rcrowley/go-metrics@v0.0.0-20250401214520-65e299d6c5c9",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:rcrowley:go_metrics:v0.0.0-20250401214520-65e299d6c5c9:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:bsUq1dX0N8AOIL7EB/X911+m4EHsnWEHeJ0c+3TTBrg="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/rogpeppe/go-internal@v1.14.1?package-id=fa928ec4ad789abf",
   "type": "library",
   "name": "github.com/rogpeppe/go-internal",
   "version": "v1.14.1",
   "cpe": "cpe:2.3:a:rogpeppe:go-internal:v1.14.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/rogpeppe/go-internal@v1.14.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:rogpeppe:go_internal:v1.14.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:UQB4HGPB6osV0SQTLymcB4TgvyWu6ZyliaW0tI/otEQ="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/ryanuber/go-glob@v1.0.0?package-id=d29f729c35a2bf42",
   "type": "library",
   "name": "github.com/ryanuber/go-glob",
   "version": "v1.0.0",
   "cpe": "cpe:2.3:a:ryanuber:go-glob:v1.0.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/ryanuber/go-glob@v1.0.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:ryanuber:go_glob:v1.0.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:iQh3xXAumdQ+4Ufa5b25cRpC5TYKlno6hsv6Cb3pkBk="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/sagikazarmark/locafero@v0.11.0?package-id=ece2230ecb814116",
   "type": "library",
   "name": "github.com/sagikazarmark/locafero",
   "version": "v0.11.0",
   "cpe": "cpe:2.3:a:sagikazarmark:locafero:v0.11.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/sagikazarmark/locafero@v0.11.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:1iurJgmM9G3PA/I+wWYIOw/5SyBtxapeHDcg+AAIFXc="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/sassoftware/relic@v7.2.1%2Bincompatible?package-id=4dcb696d862d3d08",
   "type": "library",
   "name": "github.com/sassoftware/relic",
   "version": "v7.2.1+incompatible",
   "cpe": "cpe:2.3:a:sassoftware:relic:v7.2.1\\+incompatible:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/sassoftware/relic@v7.2.1%2Bincompatible",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:Pwyh1F3I0r4clFJXkSI8bOyJINGqpgjJU3DYAZeI05A="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.11.0?package-id=334e2ae2424a9caf",
   "type": "library",
   "name": "github.com/secure-systems-lab/go-securesystemslib",
   "version": "v0.11.0",
   "cpe": "cpe:2.3:a:secure-systems-lab:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.11.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:secure-systems-lab:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:secure_systems_lab:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:secure_systems_lab:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:secure-systems:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:secure-systems:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:secure_systems:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:secure_systems:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:secure:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:secure:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:iuCR9kcMFD4QurdKrGvPLoKZLv9YvwPYVr0473BdtFs="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/shibumi/go-pathspec@v1.3.0?package-id=e2315a63674e02d0",
   "type": "library",
   "name": "github.com/shibumi/go-pathspec",
   "version": "v1.3.0",
   "cpe": "cpe:2.3:a:shibumi:go-pathspec:v1.3.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/shibumi/go-pathspec@v1.3.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:shibumi:go_pathspec:v1.3.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:QUyMZhFo0Md5B8zV8x2tesohbb5kfbpTi9rBnKh5dkI="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/sigstore/cosign/v3@v3.1.3?package-id=85c31cc571318125",
   "type": "library",
   "name": "github.com/sigstore/cosign/v3",
   "version": "v3.1.3",
   "cpe": "cpe:2.3:a:sigstore:cosign\\/v3:v3.1.3:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/sigstore/cosign/v3@v3.1.3",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/sigstore/protobuf-specs@v0.5.1?package-id=cfef3e3a2d3b7f16",
   "type": "library",
   "name": "github.com/sigstore/protobuf-specs",
   "version": "v0.5.1",
   "cpe": "cpe:2.3:a:sigstore:protobuf-specs:v0.5.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/sigstore/protobuf-specs@v0.5.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:sigstore:protobuf_specs:v0.5.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:/5OPaNuolRJmQfeZLayJGFXMpsRJEdgC6ah1/+7Px7U="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/sigstore/rekor@v1.5.3?package-id=36b034515578545d",
   "type": "library",
   "name": "github.com/sigstore/rekor",
   "version": "v1.5.3",
   "cpe": "cpe:2.3:a:sigstore:rekor:v1.5.3:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/sigstore/rekor@v1.5.3",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:0Tyolw3zreRgm7PUW8dccFLXGBThi08278jI8EXNSr4="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/sigstore/rekor-tiles/v2@v2.3.0?package-id=7743665687ca6a79",
   "type": "library",
   "name": "github.com/sigstore/rekor-tiles/v2",
   "version": "v2.3.0",
   "cpe": "cpe:2.3:a:sigstore:rekor-tiles\\/v2:v2.3.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/sigstore/rekor-tiles/v2@v2.3.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:sigstore:rekor_tiles\\/v2:v2.3.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:HhMgH61UP0t899V8Fjt7pz1YdgOBptbaQdnCF+79cdc="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/sigstore/sigstore@v1.10.8?package-id=ca1cb96bfd281e9a",
   "type": "library",
   "name": "github.com/sigstore/sigstore",
   "version": "v1.10.8",
   "cpe": "cpe:2.3:a:sigstore:sigstore:v1.10.8:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/sigstore/sigstore@v1.10.8",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:1Mgkxvkw4AXMfIP1DOjc6kw0GkUgA8pGVpveN/EfOq4="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/sigstore/sigstore-go@v1.2.2?package-id=ee97cb0fd6e578c8",
   "type": "library",
   "name": "github.com/sigstore/sigstore-go",
   "version": "v1.2.2",
   "cpe": "cpe:2.3:a:sigstore:sigstore-go:v1.2.2:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/sigstore/sigstore-go@v1.2.2",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:sigstore:sigstore_go:v1.2.2:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:xAJ8hxaoecC0HKBYVbrwUjkeAI+GJYu6vLqbxDlD2Q0="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/aws@v1.10.8?package-id=7cecdad0fbf4f7c7",
   "type": "library",
   "name": "github.com/sigstore/sigstore/pkg/signature/kms/aws",
   "version": "v1.10.8",
   "cpe": "cpe:2.3:a:sigstore:sigstore\\/pkg\\/signature\\/kms\\/aws:v1.10.8:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/aws@v1.10.8",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:tofVQ+UWJgad/69I5zbqxdFCN5gpIn9tRQP7iBzIpBw="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/azure@v1.10.8?package-id=86a76c6eab0f2134",
   "type": "library",
   "name": "github.com/sigstore/sigstore/pkg/signature/kms/azure",
   "version": "v1.10.8",
   "cpe": "cpe:2.3:a:sigstore:sigstore\\/pkg\\/signature\\/kms\\/azure:v1.10.8:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/azure@v1.10.8",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:8Mt7J36GcUEmbiJaiFhz2tud5ZIgkfVVCe2H/WJCHmw="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/gcp@v1.10.8?package-id=8fb19b802ad7d87b",
   "type": "library",
   "name": "github.com/sigstore/sigstore/pkg/signature/kms/gcp",
   "version": "v1.10.8",
   "cpe": "cpe:2.3:a:sigstore:sigstore\\/pkg\\/signature\\/kms\\/gcp:v1.10.8:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/gcp@v1.10.8",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:MxpAIMZVzn0Tpbarc9ax1I498oQBp7oYSMgoMSsOmKI="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/hashivault@v1.10.8?package-id=a80d954453f888fa",
   "type": "library",
   "name": "github.com/sigstore/sigstore/pkg/signature/kms/hashivault",
   "version": "v1.10.8",
   "cpe": "cpe:2.3:a:sigstore:sigstore\\/pkg\\/signature\\/kms\\/hashivault:v1.10.8:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/hashivault@v1.10.8",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:1DGe4/clcdOnkz5MINEczWlmEvjUtZd+AjPPT/cBhQ8="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/sigstore/timestamp-authority/v2@v2.1.2?package-id=aabb748f68bdb361",
   "type": "library",
   "name": "github.com/sigstore/timestamp-authority/v2",
   "version": "v2.1.2",
   "cpe": "cpe:2.3:a:sigstore:timestamp-authority\\/v2:v2.1.2:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/sigstore/timestamp-authority/v2@v2.1.2",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:sigstore:timestamp_authority\\/v2:v2.1.2:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:7DDhnknLL4w8VwomyvW2W8qblOS9LDR8oihna+jc7Ls="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/sirupsen/logrus@v1.9.4?package-id=f75e69cc62b87fc7",
   "type": "library",
   "name": "github.com/sirupsen/logrus",
   "version": "v1.9.4",
   "cpe": "cpe:2.3:a:turbopuffer:logrus:v1.9.4:*:*:*:*:go:*:*",
   "purl": "pkg:golang/github.com/sirupsen/logrus@v1.9.4",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:TsZE7l11zFCLZnZ+teH4Umoq5BhEIfIzfRDZ1Uzql2w="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/sourcegraph/conc@v0.3.1-0.20240121214520-5f936abd7ae8?package-id=bfadf8981248af18",
   "type": "library",
   "name": "github.com/sourcegraph/conc",
   "version": "v0.3.1-0.20240121214520-5f936abd7ae8",
   "cpe": "cpe:2.3:a:sourcegraph:conc:v0.3.1-0.20240121214520-5f936abd7ae8:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/sourcegraph/conc@v0.3.1-0.20240121214520-5f936abd7ae8",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:+jumHNA0Wrelhe64i8F6HNlS8pkoyMv5sreGx2Ry5Rw="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/spf13/afero@v1.15.0?package-id=78e3c019238e684d",
   "type": "library",
   "name": "github.com/spf13/afero",
   "version": "v1.15.0",
   "cpe": "cpe:2.3:a:spf13:afero:v1.15.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/spf13/afero@v1.15.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:b/YBCLWAJdFWJTN9cLhiXXcD7mzKn9Dm86dNnfyQw1I="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/spf13/cast@v1.10.0?package-id=20ab1860bc63f52a",
   "type": "library",
   "name": "github.com/spf13/cast",
   "version": "v1.10.0",
   "cpe": "cpe:2.3:a:spf13:cast:v1.10.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/spf13/cast@v1.10.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:h2x0u2shc1QuLHfxi+cTJvs30+ZAHOGRic8uyGTDWxY="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/spf13/cobra@v1.10.2?package-id=d9a5045a76c5be8d",
   "type": "library",
   "name": "github.com/spf13/cobra",
   "version": "v1.10.2",
   "cpe": "cpe:2.3:a:spf13:cobra:v1.10.2:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/spf13/cobra@v1.10.2",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:DMTTonx5m65Ic0GOoRY2c16WCbHxOOw6xxezuLaBpcU="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/spf13/pflag@v1.0.10?package-id=2e67eb23497855ec",
   "type": "library",
   "name": "github.com/spf13/pflag",
   "version": "v1.0.10",
   "cpe": "cpe:2.3:a:spf13:pflag:v1.0.10:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/spf13/pflag@v1.0.10",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:4EBh2KAYBwaONj6b2Ye1GiHfwjqyROoF4RwYO+vPwFk="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/spf13/viper@v1.21.0?package-id=5439f0219b2b1cdf",
   "type": "library",
   "name": "github.com/spf13/viper",
   "version": "v1.21.0",
   "cpe": "cpe:2.3:a:spf13:viper:v1.21.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/spf13/viper@v1.21.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:x5S+0EU27Lbphp4UKm1C+1oQO+rKx36vfCoaVebLFSU="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/spiffe/go-spiffe/v2@v2.7.0?package-id=c0eba8e51e72f9ed",
   "type": "library",
   "name": "github.com/spiffe/go-spiffe/v2",
   "version": "v2.7.0",
   "cpe": "cpe:2.3:a:spiffe:go-spiffe\\/v2:v2.7.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/spiffe/go-spiffe/v2@v2.7.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:spiffe:go_spiffe\\/v2:v2.7.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:uXe1MflJoHw58wAUvxVlcM7WpKtijWG7I1UidcGh6g4="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/subosito/gotenv@v1.6.0?package-id=dee98e1a54bf3b07",
   "type": "library",
   "name": "github.com/subosito/gotenv",
   "version": "v1.6.0",
   "cpe": "cpe:2.3:a:subosito:gotenv:v1.6.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/subosito/gotenv@v1.6.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:9NlTDc1FTs4qu0DDq7AEtTPNw6SVm7uBMsUCUjABIf8="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/syndtr/goleveldb@v1.0.1-0.20220721030215-126854af5e6d?package-id=e38c810304f45298",
   "type": "library",
   "name": "github.com/syndtr/goleveldb",
   "version": "v1.0.1-0.20220721030215-126854af5e6d",
   "cpe": "cpe:2.3:a:syndtr:goleveldb:v1.0.1-0.20220721030215-126854af5e6d:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/syndtr/goleveldb@v1.0.1-0.20220721030215-126854af5e6d",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:vfofYNRScrDdvS342BElfbETmL1Aiz3i2t0zfRj16Hs="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/tchap/go-patricia/v2@v2.3.3?package-id=c59e696babbd3b01",
   "type": "library",
   "name": "github.com/tchap/go-patricia/v2",
   "version": "v2.3.3",
   "cpe": "cpe:2.3:a:tchap:go-patricia\\/v2:v2.3.3:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/tchap/go-patricia/v2@v2.3.3",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:tchap:go_patricia\\/v2:v2.3.3:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:xfNEsODumaEcCcY3gI0hYPZ/PcpVv5ju6RMAhgwZDDc="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/theupdateframework/go-tuf@v0.7.0?package-id=11fafbb91700dbd1",
   "type": "library",
   "name": "github.com/theupdateframework/go-tuf",
   "version": "v0.7.0",
   "cpe": "cpe:2.3:a:theupdateframework:go-tuf:v0.7.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/theupdateframework/go-tuf@v0.7.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:theupdateframework:go_tuf:v0.7.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:CqbQFrWo1ae3/I0UCblSbczevCCbS31Qvs5LdxRWqRI="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/theupdateframework/go-tuf/v2@v2.4.2?package-id=5750690a2fe785d2",
   "type": "library",
   "name": "github.com/theupdateframework/go-tuf/v2",
   "version": "v2.4.2",
   "cpe": "cpe:2.3:a:theupdateframework:go-tuf\\/v2:v2.4.2:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/theupdateframework/go-tuf/v2@v2.4.2",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:theupdateframework:go_tuf\\/v2:v2.4.2:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:w7976/W8uTwlsegP5nRymlpjPgrwSh+AXUf85is6nJk="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/titanous/rocacheck@v0.0.0-20171023193734-afe73141d399?package-id=b4328d6848038f69",
   "type": "library",
   "name": "github.com/titanous/rocacheck",
   "version": "v0.0.0-20171023193734-afe73141d399",
   "cpe": "cpe:2.3:a:titanous:rocacheck:v0.0.0-20171023193734-afe73141d399:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/titanous/rocacheck@v0.0.0-20171023193734-afe73141d399",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:e/5i7d4oYZ+C1wj2THlRK+oAhjeS/TRQwMfkIuet3w0="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/tjfoc/gmsm@v1.4.1?package-id=d1ea2f8fd368f38f",
   "type": "library",
   "name": "github.com/tjfoc/gmsm",
   "version": "v1.4.1",
   "cpe": "cpe:2.3:a:tjfoc:gmsm:v1.4.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/tjfoc/gmsm@v1.4.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:aMe1GlZb+0bLjn+cKTPEvvn9oUEBlJitaZiiBwsbgho="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/transparency-dev/formats@v0.1.1?package-id=8ab03f33fb415076",
   "type": "library",
   "name": "github.com/transparency-dev/formats",
   "version": "v0.1.1",
   "cpe": "cpe:2.3:a:transparency-dev:formats:v0.1.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/transparency-dev/formats@v0.1.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:transparency_dev:formats:v0.1.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:transparency:formats:v0.1.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:4bVHJc+KdBgpA1OJD1yjI+g0i5Z1graCppTMH8lWKJI="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/transparency-dev/merkle@v0.0.2?package-id=dc9cebcf627377d7",
   "type": "library",
   "name": "github.com/transparency-dev/merkle",
   "version": "v0.0.2",
   "cpe": "cpe:2.3:a:transparency-dev:merkle:v0.0.2:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/transparency-dev/merkle@v0.0.2",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:transparency_dev:merkle:v0.0.2:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:transparency:merkle:v0.0.2:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:Q9nBoQcZcgPamMkGn7ghV8XiTZ/kRxn1yCG81+twTK4="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/valyala/fastjson@v1.6.10?package-id=5a60e8d0c2bb2308",
   "type": "library",
   "name": "github.com/valyala/fastjson",
   "version": "v1.6.10",
   "cpe": "cpe:2.3:a:valyala:fastjson:v1.6.10:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/valyala/fastjson@v1.6.10",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:/yjJg8jaVQdYR3arGxPE2X5z89xrlhS0eGXdv+ADTh4="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/vektah/gqlparser/v2@v2.5.33?package-id=bf9fdc344ed3c7a3",
   "type": "library",
   "name": "github.com/vektah/gqlparser/v2",
   "version": "v2.5.33",
   "cpe": "cpe:2.3:a:vektah:gqlparser\\/v2:v2.5.33:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/vektah/gqlparser/v2@v2.5.33",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:lRp8aIeNUNbimf/axZd7ETg24q06hBtPaas+TcvI/7E="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/withfig/autocomplete-tools/integrations/cobra@v1.2.1?package-id=52138083e80b33bc",
   "type": "library",
   "name": "github.com/withfig/autocomplete-tools/integrations/cobra",
   "version": "v1.2.1",
   "cpe": "cpe:2.3:a:withfig:autocomplete-tools\\/integrations\\/cobra:v1.2.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/withfig/autocomplete-tools/integrations/cobra@v1.2.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:withfig:autocomplete_tools\\/integrations\\/cobra:v1.2.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:+dBg5k7nuTE38VVdoroRsT0Z88fmvdYrI2EjzJst35I="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/x448/float16@v0.8.4?package-id=e411b1f28a281f16",
   "type": "library",
   "name": "github.com/x448/float16",
   "version": "v0.8.4",
   "cpe": "cpe:2.3:a:x448:float16:v0.8.4:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/x448/float16@v0.8.4",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:qLwI1I70+NjRFUR3zs1JPUCgaCXSh3SW62uAKT1mSBM="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb?package-id=4cefdce1f9189b60",
   "type": "library",
   "name": "github.com/xeipuuv/gojsonpointer",
   "version": "v0.0.0-20190905194746-02993c407bfb",
   "cpe": "cpe:2.3:a:xeipuuv:gojsonpointer:v0.0.0-20190905194746-02993c407bfb:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:zGWFAtiMcyryUHoUjUJX0/lt1H2+i2Ka2n+D3DImSNo="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415?package-id=3cbecb032631b200",
   "type": "library",
   "name": "github.com/xeipuuv/gojsonreference",
   "version": "v0.0.0-20180127040603-bd5ef7bd5415",
   "cpe": "cpe:2.3:a:xeipuuv:gojsonreference:v0.0.0-20180127040603-bd5ef7bd5415:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:EzJWgHovont7NscjpAxXsDA8S8BMYve8Y5+7cuRE7R0="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/yashtewari/glob-intersection@v0.2.0?package-id=59c43ebdd1c0805c",
   "type": "library",
   "name": "github.com/yashtewari/glob-intersection",
   "version": "v0.2.0",
   "cpe": "cpe:2.3:a:yashtewari:glob-intersection:v0.2.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/yashtewari/glob-intersection@v0.2.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:yashtewari:glob_intersection:v0.2.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:8iuHdN88yYuCzCdjt0gDe+6bAhUwBeEWqThExu54RFg="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/youmark/pkcs8@v0.0.0-20240726163527-a2c0da244d78?package-id=c0f60a72fb81efb3",
   "type": "library",
   "name": "github.com/youmark/pkcs8",
   "version": "v0.0.0-20240726163527-a2c0da244d78",
   "cpe": "cpe:2.3:a:youmark:pkcs8:v0.0.0-20240726163527-a2c0da244d78:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/youmark/pkcs8@v0.0.0-20240726163527-a2c0da244d78",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:ilQV1hzziu+LLM3zUTJ0trRztfwgjqKnBWNtSRkbmwM="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/gitlab.com/gitlab-org/api/client-go@v1.46.0?package-id=e54782cf668951a3",
   "type": "library",
   "name": "gitlab.com/gitlab-org/api/client-go",
   "version": "v1.46.0",
   "cpe": "cpe:2.3:a:gitlab-org:api\\/client-go:v1.46.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/gitlab.com/gitlab-org/api/client-go@v1.46.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:gitlab-org:api\\/client_go:v1.46.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:gitlab_org:api\\/client-go:v1.46.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:gitlab_org:api\\/client_go:v1.46.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:gitlab:api\\/client-go:v1.46.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:gitlab:api\\/client_go:v1.46.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:YxBWFZIFYKcGESCb9fpkwzouo+apyB9pr/XTWzNoL24="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1?package-id=7ae61881186bc56f",
   "type": "library",
   "name": "go.opentelemetry.io/auto/sdk",
   "version": "v1.2.1",
   "cpe": "cpe:2.3:a:auto:sdk:v1.2.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:jXsnJ4Lmnqd11kwkBV2LgLoFMZKizbCi5fNZ/ipaZ64="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.68.0?package-id=5806b6ac2b8a57df",
   "type": "library",
   "name": "go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc",
   "version": "v0.68.0",
   "cpe": "cpe:2.3:a:contrib:instrumentation\\/google.golang.org\\/grpc\\/otelgrpc:v0.68.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.68.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:0Qx7VGBacMm9ZENQ7TnNObTYI4ShC+lHI16seduaxZo="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.68.0?package-id=d4862c6cc06e5cbc",
   "type": "library",
   "name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp",
   "version": "v0.68.0",
   "cpe": "cpe:2.3:a:contrib:instrumentation\\/net\\/http\\/otelhttp:v0.68.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.68.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:CqXxU8VOmDefoh0+ztfGaymYbhdB/tT3zs79QaZTNGY="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/go.opentelemetry.io/otel@v1.44.0?package-id=5bd28dbbe65b38f0",
   "type": "library",
   "name": "go.opentelemetry.io/otel",
   "version": "v1.44.0",
   "cpe": "cpe:2.3:a:opentelemetry:opentelemetry:v1.44.0:*:*:*:*:go:*:*",
   "purl": "pkg:golang/go.opentelemetry.io/otel@v1.44.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:JjwHmHpA4iZ3wBxluu2fbbE7j4kqlE8jXyAyPXH7HqU="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/go.opentelemetry.io/otel/metric@v1.44.0?package-id=f0589828f6efa30c",
   "type": "library",
   "name": "go.opentelemetry.io/otel/metric",
   "version": "v1.44.0",
   "cpe": "cpe:2.3:a:otel:metric:v1.44.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/go.opentelemetry.io/otel/metric@v1.44.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:1w0gILTcHdr3YI+ixLyjemwrVnsMURbTZFrSYCdDdmc="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/go.opentelemetry.io/otel/trace@v1.44.0?package-id=f419b57176bc7b82",
   "type": "library",
   "name": "go.opentelemetry.io/otel/trace",
   "version": "v1.44.0",
   "cpe": "cpe:2.3:a:otel:trace:v1.44.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/go.opentelemetry.io/otel/trace@v1.44.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:jxF5CsGYCe74MCRx2X4g7WsY/VBKRqqpNvXlX/6gtIk="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/go.uber.org/multierr@v1.11.0?package-id=49307fba017f8130",
   "type": "library",
   "name": "go.uber.org/multierr",
   "version": "v1.11.0",
   "purl": "pkg:golang/go.uber.org/multierr@v1.11.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:blXXJkSxSSfBVBlC76pxqeO+LN3aDfLQo+309xJstO0="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/go.uber.org/zap@v1.28.0?package-id=b38b162a3dadd42d",
   "type": "library",
   "name": "go.uber.org/zap",
   "version": "v1.28.0",
   "purl": "pkg:golang/go.uber.org/zap@v1.28.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:IZzaP1Fv73/T/pBMLk4VutPl36uNC+OSUh3JLG3FIjo="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/go.yaml.in/yaml/v2@v2.4.4?package-id=cfc1ff6d8176b644",
   "type": "library",
   "name": "go.yaml.in/yaml/v2",
   "version": "v2.4.4",
   "cpe": "cpe:2.3:a:yaml:v2:v2.4.4:*:*:*:*:*:*:*",
   "purl": "pkg:golang/go.yaml.in/yaml/v2@v2.4.4",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:tuyd0P+2Ont/d6e2rl3be67goVK4R6deVxCUX5vyPaQ="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/go.yaml.in/yaml/v3@v3.0.4?package-id=4d019907d282c5b9",
   "type": "library",
   "name": "go.yaml.in/yaml/v3",
   "version": "v3.0.4",
   "cpe": "cpe:2.3:a:yaml:v3:v3.0.4:*:*:*:*:*:*:*",
   "purl": "pkg:golang/go.yaml.in/yaml/v3@v3.0.4",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:tfq32ie2Jv2UxXFdLJdh3jXuOzWiL1fo0bu/FbuKpbc="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/golang.org/x/crypto@v0.53.0?package-id=db80fc4b2fc7b9ef",
   "type": "library",
   "name": "golang.org/x/crypto",
   "version": "v0.53.0",
   "cpe": "cpe:2.3:a:golang:crypto:v0.53.0:*:*:*:*:go:*:*",
   "purl": "pkg:golang/golang.org/x/crypto@v0.53.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:ssh:v0.53.0:*:*:*:*:go:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:QZ4Muo8THX6CizN2vPPd5fBGHyogrdK9fG4wLPFUsto="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/golang.org/x/mod@v0.37.0?package-id=ccfa21dd0e117c38",
   "type": "library",
   "name": "golang.org/x/mod",
   "version": "v0.37.0",
   "cpe": "cpe:2.3:a:golang:x\\/mod:v0.37.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/golang.org/x/mod@v0.37.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:vF1DjpVEshcIqoEaauuHebaLk1O1forxjxBaVn884JQ="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/golang.org/x/net@v0.56.0?package-id=8ca2490d9f837899",
   "type": "library",
   "name": "golang.org/x/net",
   "version": "v0.56.0",
   "cpe": "cpe:2.3:a:golang:networking:v0.56.0:*:*:*:*:go:*:*",
   "purl": "pkg:golang/golang.org/x/net@v0.56.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:golang:net:v0.56.0:*:*:*:*:go:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:Rw8j/hFzGvJUZwNBXnAtf5sVDVt+65SK2C7IxCxZt5o="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/golang.org/x/oauth2@v0.36.0?package-id=9c37452e121a20fa",
   "type": "library",
   "name": "golang.org/x/oauth2",
   "version": "v0.36.0",
   "cpe": "cpe:2.3:a:golang:x\\/oauth2:v0.36.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/golang.org/x/oauth2@v0.36.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:peZ/1z27fi9hUOFCAZaHyrpWG5lwe0RJEEEeH0ThlIs="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/golang.org/x/sync@v0.21.0?package-id=a8376837e2f438e7",
   "type": "library",
   "name": "golang.org/x/sync",
   "version": "v0.21.0",
   "cpe": "cpe:2.3:a:golang:x\\/sync:v0.21.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/golang.org/x/sync@v0.21.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:HLII4xRRTtCRkxYp4HNFF0Js/Og6q2i++KXbg0gHCwM="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/golang.org/x/sys@v0.46.0?package-id=23f0ef716af116c6",
   "type": "library",
   "name": "golang.org/x/sys",
   "version": "v0.46.0",
   "cpe": "cpe:2.3:a:golang:x\\/sys:v0.46.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/golang.org/x/sys@v0.46.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:noSf2Fq6F8DBgS+LysIkx7rIExoNHJsxOAtPp4rthXw="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/golang.org/x/term@v0.44.0?package-id=954752e766c63199",
   "type": "library",
   "name": "golang.org/x/term",
   "version": "v0.44.0",
   "cpe": "cpe:2.3:a:golang:x\\/term:v0.44.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/golang.org/x/term@v0.44.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:0rLvDRCtNj0gZkyIXhCyOb2OAzEhLVqc4B+hrsBhrmc="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/golang.org/x/text@v0.38.0?package-id=dc034c481b5e36f1",
   "type": "library",
   "name": "golang.org/x/text",
   "version": "v0.38.0",
   "cpe": "cpe:2.3:a:golang:text:v0.38.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/golang.org/x/text@v0.38.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:sXmwo9DwP3OK9EZ7PqAdaooSGozfl/3a6/xJcbzPRhE="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/golang.org/x/time@v0.15.0?package-id=2266e178c71af879",
   "type": "library",
   "name": "golang.org/x/time",
   "version": "v0.15.0",
   "cpe": "cpe:2.3:a:golang:x\\/time:v0.15.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/golang.org/x/time@v0.15.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:bbrp8t3bGUeFOx08pvsMYRTCVSMk89u4tKbNOZbp88U="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/google.golang.org/api@v0.284.0?package-id=8049bf3940f964b8",
   "type": "library",
   "name": "google.golang.org/api",
   "version": "v0.284.0",
   "cpe": "cpe:2.3:a:google:api:v0.284.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/google.golang.org/api@v0.284.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:i+cKTgeQRcRySkP7QTl5PDO7/pAm8EcMFIUMlNbk4Vc="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/google.golang.org/genproto@v0.0.0-20260406210006-6f92a3bedf2d?package-id=bb16af7674dfe48a",
   "type": "library",
   "name": "google.golang.org/genproto",
   "version": "v0.0.0-20260406210006-6f92a3bedf2d",
   "cpe": "cpe:2.3:a:google:genproto:v0.0.0-20260406210006-6f92a3bedf2d:*:*:*:*:*:*:*",
   "purl": "pkg:golang/google.golang.org/genproto@v0.0.0-20260406210006-6f92a3bedf2d",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:N1Ec54vZnIPd7MnxRiYLW+oY4fDR4BOS/LrssdD9+ek="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260526163538-3dc84a4a5aaa?package-id=861a3e03873ba882",
   "type": "library",
   "name": "google.golang.org/genproto/googleapis/api",
   "version": "v0.0.0-20260526163538-3dc84a4a5aaa",
   "cpe": "cpe:2.3:a:google:genproto:v0.0.0-20260526163538-3dc84a4a5aaa:*:*:*:*:*:*:*",
   "purl": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260526163538-3dc84a4a5aaa",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:Kjn0N0tCrDgiAFW+lGO4JZ3ck44CehvJQMAwj9QF0G8="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260526163538-3dc84a4a5aaa?package-id=98fbb6280943477c",
   "type": "library",
   "name": "google.golang.org/genproto/googleapis/rpc",
   "version": "v0.0.0-20260526163538-3dc84a4a5aaa",
   "cpe": "cpe:2.3:a:google:genproto:v0.0.0-20260526163538-3dc84a4a5aaa:*:*:*:*:*:*:*",
   "purl": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260526163538-3dc84a4a5aaa",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:mZHHdPZl0dbGHCflZgAq/Q468DWVFcU2whhB2KAo8fk="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/google.golang.org/grpc@v1.82.0?package-id=b2b40f0ffc3e1b39",
   "type": "library",
   "name": "google.golang.org/grpc",
   "version": "v1.82.0",
   "cpe": "cpe:2.3:a:google:grpc:v1.82.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/google.golang.org/grpc@v1.82.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:vguDnZUPjE26w09A63VoxZPnvPjB5Riyc0mkXPFmAIU="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/google.golang.org/protobuf@v1.36.12-0.20260120151049-f2248ac996af?package-id=dedadf41edab3580",
   "type": "library",
   "name": "google.golang.org/protobuf",
   "version": "v1.36.12-0.20260120151049-f2248ac996af",
   "cpe": "cpe:2.3:a:google:protobuf:v1.36.12-0.20260120151049-f2248ac996af:*:*:*:*:*:*:*",
   "purl": "pkg:golang/google.golang.org/protobuf@v1.36.12-0.20260120151049-f2248ac996af",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:+5/Sw3GsDNlEmu7TfklWKPdQ0Ykja5VEmq2i817+jbI="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/gopkg.in/evanphx/json-patch.v4@v4.13.0?package-id=ff61ae1fc015cd6d",
   "type": "library",
   "name": "gopkg.in/evanphx/json-patch.v4",
   "version": "v4.13.0",
   "purl": "pkg:golang/gopkg.in/evanphx/json-patch.v4@v4.13.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:czT3CmqEaQ1aanPc5SdlgQrrEIb8w/wwCvWWnfEbYzo="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/gopkg.in/inf.v0@v0.9.1?package-id=eec314c07120245e",
   "type": "library",
   "name": "gopkg.in/inf.v0",
   "version": "v0.9.1",
   "purl": "pkg:golang/gopkg.in/inf.v0@v0.9.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:73M5CoZyi3ZLMOyDlQh031Cx6N9NDJ2Vvfl76EDAgDc="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/gopkg.in/ini.v1@v1.67.3?package-id=5b9d89605f4e8259",
   "type": "library",
   "name": "gopkg.in/ini.v1",
   "version": "v1.67.3",
   "purl": "pkg:golang/gopkg.in/ini.v1@v1.67.3",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:iM9Lhz5MRSGhHVGGwCuzG9KO8PoirCXj/m/qTmOJJQw="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/gopkg.in/yaml.v3@v3.0.1?package-id=af9066a6f874d94e",
   "type": "library",
   "name": "gopkg.in/yaml.v3",
   "version": "v3.0.1",
   "cpe": "cpe:2.3:a:yaml_project:yaml:v3.0.1:*:*:*:*:go:*:*",
   "purl": "pkg:golang/gopkg.in/yaml.v3@v3.0.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/k8s.io/api@v0.36.2?package-id=0ca7cbece08cf067",
   "type": "library",
   "name": "k8s.io/api",
   "version": "v0.36.2",
   "purl": "pkg:golang/k8s.io/api@v0.36.2",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:TF6YDLIzKfccK7cq9YpTcGX8TJmEkHVRv78DM51fRYY="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/k8s.io/apimachinery@v0.36.2?package-id=e18fd3f17a3998ea",
   "type": "library",
   "name": "k8s.io/apimachinery",
   "version": "v0.36.2",
   "purl": "pkg:golang/k8s.io/apimachinery@v0.36.2",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:0PE/W/WNy1UX61NLbXY5TMbJ6UwLL6E6lAPkYrKFxbQ="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/k8s.io/client-go@v0.36.2?package-id=712ad9dccac79f54",
   "type": "library",
   "name": "k8s.io/client-go",
   "version": "v0.36.2",
   "purl": "pkg:golang/k8s.io/client-go@v0.36.2",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:bfgxmFKc9CgqsgX4xKLAAdmTQlWee7Ob/HlDOrJ5TBI="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/k8s.io/klog/v2@v2.140.0?package-id=d8d26618bb71f04b",
   "type": "library",
   "name": "k8s.io/klog/v2",
   "version": "v2.140.0",
   "cpe": "cpe:2.3:a:klog:v2:v2.140.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/k8s.io/klog/v2@v2.140.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:Tf+J3AH7xnUzZyVVXhTgGhEKnFqye14aadWv7bzXdzc="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20260317180543-43fb72c5454a?package-id=0e25b8486b4f46f3",
   "type": "library",
   "name": "k8s.io/kube-openapi",
   "version": "v0.0.0-20260317180543-43fb72c5454a",
   "purl": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20260317180543-43fb72c5454a",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:xCeOEAOoGYl2jnJoHkC3hkbPJgdATINPMAxaynU2Ovg="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/k8s.io/utils@v0.0.0-20260210185600-b8788abfbbc2?package-id=aa6fa6c33a3c0ba0",
   "type": "library",
   "name": "k8s.io/utils",
   "version": "v0.0.0-20260210185600-b8788abfbbc2",
   "purl": "pkg:golang/k8s.io/utils@v0.0.0-20260210185600-b8788abfbbc2",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:AZYQSJemyQB5eRxqcPky+/7EdBj0xi3g0ZcxxJ7vbWU="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/sigs.k8s.io/json@v0.0.0-20250730193827-2d320260d730?package-id=fc01486d1fd5c276",
   "type": "library",
   "name": "sigs.k8s.io/json",
   "version": "v0.0.0-20250730193827-2d320260d730",
   "purl": "pkg:golang/sigs.k8s.io/json@v0.0.0-20250730193827-2d320260d730",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:IpInykpT6ceI+QxKBbEflcR5EXP7sU1kvOlxwZh5txg="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/sigs.k8s.io/randfill@v1.0.0?package-id=0a1df5ef1d0f008d",
   "type": "library",
   "name": "sigs.k8s.io/randfill",
   "version": "v1.0.0",
   "purl": "pkg:golang/sigs.k8s.io/randfill@v1.0.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:JfjMILfT8A6RbawdsK2JXGBR5AQVfd+9TbzrlneTyrU="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/sigs.k8s.io/release-utils@v0.12.4?package-id=74701cadebe4abae",
   "type": "library",
   "name": "sigs.k8s.io/release-utils",
   "version": "v0.12.4",
   "purl": "pkg:golang/sigs.k8s.io/release-utils@v0.12.4",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:kuG6WTWGCKx5uUrJwl2uFErOKOw+4Ba8WrPmOQh5J3g="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/sigs.k8s.io/structured-merge-diff/v6@v6.3.2?package-id=453f629bb15c1542",
   "type": "library",
   "name": "sigs.k8s.io/structured-merge-diff/v6",
   "version": "v6.3.2",
   "cpe": "cpe:2.3:a:structured-merge-diff:v6:v6.3.2:*:*:*:*:*:*:*",
   "purl": "pkg:golang/sigs.k8s.io/structured-merge-diff/v6@v6.3.2",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:structured_merge_diff:v6:v6.3.2:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:structured-merge:v6:v6.3.2:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:structured_merge:v6:v6.3.2:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:structured:v6:v6.3.2:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:kwVWMx5yS1CrnFWA/2QHyRVJ8jM6dBA80uLmm0wJkk8="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/sigs.k8s.io/yaml@v1.6.0?package-id=dd3cffaae7aa4391",
   "type": "library",
   "name": "sigs.k8s.io/yaml",
   "version": "v1.6.0",
   "purl": "pkg:golang/sigs.k8s.io/yaml@v1.6.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "amd64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:G8fkbMSAFqgEFgh4b1wmtzDnioxFCUgTZhlbj5P9QYs="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/stdlib@1.26.6?package-id=5493a7925f3f056e",
   "type": "library",
   "name": "stdlib",
   "version": "go1.26.6",
   "licenses": [
    {
     "license": {
      "id": "BSD-3-Clause"
     }
    }
   ],
   "cpe": "cpe:2.3:a:golang:go:1.26.6:-:*:*:*:*:*:*",
   "purl": "pkg:golang/stdlib@1.26.6",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:1c8be43b2fa65763603fde71b04e4f9285f5d6169854c5d5ad9334899de607e9"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    }
   ]
  },
  {
   "type": "application",
   "name": "cosign",
   "version": "3.1.3",
   "description": "container signing, verification and storage in an OCI registry",
   "properties": []
  }
 ],
 "dependencies": [
  {
   "ref": "pkg:golang/github.com/sigstore/cosign/v3@v3.1.3?package-id=85c31cc571318125",
   "dependsOn": [
    "pkg:golang/buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go@v1.36.11-20260415201107-50325440f8f2.1?package-id=c59334ee81aa0fa1",
    "pkg:golang/cloud.google.com/go/auth/oauth2adapt@v0.2.8?package-id=f890aceb2c31525f",
    "pkg:golang/cloud.google.com/go/auth@v0.20.0?package-id=7d09da00f46c20c3",
    "pkg:golang/cloud.google.com/go/compute/metadata@v0.9.0?package-id=db1e134286799a51",
    "pkg:golang/cloud.google.com/go/iam@v1.11.0?package-id=882ad4bcde0ee7fd",
    "pkg:golang/cloud.google.com/go/kms@v1.31.0?package-id=fca2a97a39c7ed08",
    "pkg:golang/cloud.google.com/go/longrunning@v1.0.0?package-id=dae1f8b9a87ba5a4",
    "pkg:golang/connectrpc.com/connect@v1.20.0?package-id=bf7cdaf26126cd0b",
    "pkg:golang/cuelabs.dev/go/oci/ociregistry@v0.0.0-20251212221603-3adeb8663819?package-id=3dc35e327183cb15",
    "pkg:golang/cuelang.org/go@v0.16.1?package-id=2735008ac697b99c",
    "pkg:golang/github.com/agnivade/levenshtein@v1.2.1?package-id=65f70311e1a2ffc0",
    "pkg:golang/github.com/alibabacloud-go/alibabacloud-gateway-spi@v0.0.4?package-id=609bbf80b71140e5",
    "pkg:golang/github.com/alibabacloud-go/cr-20160607@v1.0.1?package-id=801160f01412d193",
    "pkg:golang/github.com/alibabacloud-go/cr-20181201@v1.0.10?package-id=11530b3427d5b893",
    "pkg:golang/github.com/alibabacloud-go/darabonba-openapi@v0.2.1?package-id=c2e503ecf18b8a63",
    "pkg:golang/github.com/alibabacloud-go/debug@v1.0.0?package-id=68611351b3491b22",
    "pkg:golang/github.com/alibabacloud-go/endpoint-util@v1.1.1?package-id=276dfc2051c924aa",
    "pkg:golang/github.com/alibabacloud-go/openapi-util@v0.1.0?package-id=7d30122865d54369",
    "pkg:golang/github.com/alibabacloud-go/tea-utils@v1.4.5?package-id=9ac1a64856e883f2",
    "pkg:golang/github.com/alibabacloud-go/tea-xml@v1.1.3?package-id=46816a4acc9e3e33",
    "pkg:golang/github.com/alibabacloud-go/tea@v1.2.1?package-id=9ba6eb17bcc3568b",
    "pkg:golang/github.com/aliyun/credentials-go@v1.3.2?package-id=35309b24819ed6a8",
    "pkg:golang/github.com/aliyuncontainerservice/ack-ram-tool/pkg/credentials/provider@v0.14.0?package-id=ad3112e798c52393",
    "pkg:golang/github.com/asaskevich/govalidator@v0.0.0-20230301143203-a9d515a09cc2?package-id=cab777971dc7f71e",
    "pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.32.25?package-id=7568894ec3a5327a",
    "pkg:golang/github.com/aws/aws-sdk-go-v2/credentials@v1.19.24?package-id=1bc1a821673b91be",
    "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.18.29?package-id=f2c96d11d85210f7",
    "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.4.29?package-id=0bffa50011d2b821",
    "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.7.29?package-id=d71db78c8fdc9f80",
    "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/v4a@v1.4.30?package-id=1a260368336a005f",
    "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ecr@v1.55.3?package-id=28f6a9a0751155f0",
    "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ecrpublic@v1.38.10?package-id=e5e6b41d4e33667d",
    "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding@v1.13.12?package-id=379209eceed120ea",
    "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.13.29?package-id=02ad1d8c46006a9c",
    "pkg:golang/github.com/aws/aws-sdk-go-v2/service/kms@v1.53.4?package-id=0e359bda2eaaffda",
    "pkg:golang/github.com/aws/aws-sdk-go-v2/service/signin@v1.2.0?package-id=f5d96a459d796846",
    "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sso@v1.31.3?package-id=204fdadd780bc575",
    "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.36.6?package-id=173490bf2e3be781",
    "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sts@v1.43.3?package-id=afe4dd5f5d6c33d3",
    "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.42.0?package-id=48d8d162ccb94a7c",
    "pkg:golang/github.com/aws/smithy-go@v1.27.2?package-id=287625221fafbed1",
    "pkg:golang/github.com/awslabs/amazon-ecr-credential-helper/ecr-login@v0.12.0?package-id=4ed98a91b34e67f3",
    "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/azcore@v1.22.0?package-id=9b96b6bd27e8be68",
    "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/azidentity@v1.14.0?package-id=42057a97289d38e5",
    "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/internal@v1.12.0?package-id=3993b3b1ade3a93c",
    "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/security/keyvault/azkeys@v1.5.0?package-id=8319927b4341c44d",
    "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/security/keyvault/internal@v1.2.0?package-id=68f2e7e1b6b0f668",
    "pkg:golang/github.com/azure/azure-sdk-for-go@v68.0.0%2Bincompatible?package-id=cedde4da5834fb09",
    "pkg:golang/github.com/azure/go-autorest/autorest/adal@v0.9.23?package-id=0fa3a7bd9c86423f",
    "pkg:golang/github.com/azure/go-autorest/autorest/azure/auth@v0.5.12?package-id=414bff1d999012c3",
    "pkg:golang/github.com/azure/go-autorest/autorest/azure/cli@v0.4.6?package-id=b8c3885c78b1389b",
    "pkg:golang/github.com/azure/go-autorest/autorest/date@v0.3.0?package-id=743f99ace4c837d9",
    "pkg:golang/github.com/azure/go-autorest/autorest@v0.11.29?package-id=b11496313ef87582",
    "pkg:golang/github.com/azure/go-autorest/logger@v0.2.1?package-id=27101c71ce3b0bfa",
    "pkg:golang/github.com/azure/go-autorest/tracing@v0.6.0?package-id=33b009d2d14a5a46",
    "pkg:golang/github.com/azuread/microsoft-authentication-library-for-go@v1.7.2?package-id=aafe6809ce6796db",
    "pkg:golang/github.com/blang/semver@v3.5.1%2Bincompatible?package-id=221563798687c639",
    "pkg:golang/github.com/buildkite/agent/v3@v3.130.0?package-id=5c5417521476214a",
    "pkg:golang/github.com/buildkite/go-pipeline@v0.17.1?package-id=93e5aa3ff4dd8425",
    "pkg:golang/github.com/buildkite/interpolate@v0.1.5?package-id=26eb66d1c93374ae",
    "pkg:golang/github.com/buildkite/roko@v1.4.0?package-id=e38c3f7822d104b2",
    "pkg:golang/github.com/cenkalti/backoff/v4@v4.3.0?package-id=53ef731f00a780c6",
    "pkg:golang/github.com/cenkalti/backoff/v5@v5.0.3?package-id=de4492f49f7820f6",
    "pkg:golang/github.com/cespare/xxhash/v2@v2.3.0?package-id=75300e358d311878",
    "pkg:golang/github.com/chrismellard/docker-credential-acr-env@v0.0.0-20230304212654-82a0ddb27589?package-id=255aefdb9623b5ff",
    "pkg:golang/github.com/clbanning/mxj/v2@v2.7.0?package-id=42672da594f75a92",
    "pkg:golang/github.com/cockroachdb/apd/v3@v3.2.1?package-id=af2607cd64c12fff",
    "pkg:golang/github.com/common-nighthawk/go-figure@v0.0.0-20210622060536-734e95fb86be?package-id=4264449d1a0c2872",
    "pkg:golang/github.com/coreos/go-oidc/v3@v3.18.0?package-id=b51ad9a724bb39e3",
    "pkg:golang/github.com/cyberphone/json-canonicalization@v0.0.0-20241213102144-19d51d7fe467?package-id=6205ed7c825195ee",
    "pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc?package-id=27f6453bce30368e",
    "pkg:golang/github.com/digitorus/pkcs7@v0.0.0-20230818184609-3a137a874352?package-id=13ca793d7e1bbc96",
    "pkg:golang/github.com/digitorus/timestamp@v0.0.0-20231217203849-220c5c2851b7?package-id=068bc8c7721cca77",
    "pkg:golang/github.com/dimchansky/utfbom@v1.1.1?package-id=10e60b8f572a0a75",
    "pkg:golang/github.com/docker/cli@v29.5.3%2Bincompatible?package-id=459732f139f2cf3b",
    "pkg:golang/github.com/docker/docker-credential-helpers@v0.9.5?package-id=5d58563a00cca68d",
    "pkg:golang/github.com/dustin/go-humanize@v1.0.1?package-id=8e4b5e31a10e6ac1",
    "pkg:golang/github.com/emicklei/go-restful/v3@v3.13.0?package-id=7a870f54d97d1b22",
    "pkg:golang/github.com/emicklei/proto@v1.14.3?package-id=568c1315239cbb01",
    "pkg:golang/github.com/felixge/httpsnoop@v1.0.4?package-id=beaa481982f74a6f",
    "pkg:golang/github.com/fsnotify/fsnotify@v1.10.1?package-id=5bcdacbdb230860c",
    "pkg:golang/github.com/fxamacker/cbor/v2@v2.9.0?package-id=0fbbca6ef48ea06c",
    "pkg:golang/github.com/go-chi/chi/v5@v5.3.0?package-id=10d703286ad338a9",
    "pkg:golang/github.com/go-jose/go-jose/v4@v4.1.4?package-id=20d1930659ddefb3",
    "pkg:golang/github.com/go-logr/logr@v1.4.3?package-id=e05d669eb961843a",
    "pkg:golang/github.com/go-logr/stdr@v1.2.2?package-id=e30c3966c712c1bc",
    "pkg:golang/github.com/go-openapi/analysis@v0.25.2?package-id=d657da2083eacc78",
    "pkg:golang/github.com/go-openapi/errors@v0.22.8?package-id=067ba0fec3919b33",
    "pkg:golang/github.com/go-openapi/jsonpointer@v0.23.1?package-id=3a613e6b0b7cef6c",
    "pkg:golang/github.com/go-openapi/jsonreference@v0.21.6?package-id=cdf9396ad09324a2",
    "pkg:golang/github.com/go-openapi/loads@v0.24.0?package-id=3611ceed0357aa94",
    "pkg:golang/github.com/go-openapi/runtime/server-middleware@v0.30.0?package-id=409a44be30237c6a",
    "pkg:golang/github.com/go-openapi/runtime@v0.32.4?package-id=1f3f6543b4b300f7",
    "pkg:golang/github.com/go-openapi/spec@v0.22.6?package-id=6b831fb374747127",
    "pkg:golang/github.com/go-openapi/strfmt@v0.26.4?package-id=aa91e5f2d6263626",
    "pkg:golang/github.com/go-openapi/swag/cmdutils@v0.26.1?package-id=84651a685e49de8f",
    "pkg:golang/github.com/go-openapi/swag/conv@v0.27.0?package-id=8906d4e3d5f098f2",
    "pkg:golang/github.com/go-openapi/swag/fileutils@v0.26.1?package-id=71dd762f86679ea5",
    "pkg:golang/github.com/go-openapi/swag/jsonname@v0.26.1?package-id=025cc4201a1f0746",
    "pkg:golang/github.com/go-openapi/swag/jsonutils@v0.26.1?package-id=06866940b050a799",
    "pkg:golang/github.com/go-openapi/swag/loading@v0.26.1?package-id=99da6600481cc3d3",
    "pkg:golang/github.com/go-openapi/swag/mangling@v0.26.1?package-id=82618d3457a837a7",
    "pkg:golang/github.com/go-openapi/swag/netutils@v0.26.1?package-id=7b1200f6dd89af74",
    "pkg:golang/github.com/go-openapi/swag/stringutils@v0.26.1?package-id=5b57cf0352351704",
    "pkg:golang/github.com/go-openapi/swag/typeutils@v0.27.0?package-id=a38b19b4814014f6",
    "pkg:golang/github.com/go-openapi/swag/yamlutils@v0.26.1?package-id=f527916b8089f6c5",
    "pkg:golang/github.com/go-openapi/swag@v0.26.1?package-id=e1eb3d239ef5d2d3",
    "pkg:golang/github.com/go-openapi/validate@v0.26.0?package-id=16855b9828aa5da4",
    "pkg:golang/github.com/go-viper/mapstructure/v2@v2.5.0?package-id=d40b2c1873880dd2",
    "pkg:golang/github.com/gobwas/glob@v0.2.3?package-id=5f70527e43caf956",
    "pkg:golang/github.com/golang-jwt/jwt/v4@v4.5.2?package-id=6e117d82b220182a",
    "pkg:golang/github.com/golang-jwt/jwt/v5@v5.3.1?package-id=990e596a16b3aa56",
    "pkg:golang/github.com/golang/snappy@v0.0.4?package-id=2a09a913a87ca2eb",
    "pkg:golang/github.com/google/certificate-transparency-go@v1.3.3?package-id=d464c381a3ecd9cf",
    "pkg:golang/github.com/google/gnostic-models@v0.7.0?package-id=1e837bd10f05995c",
    "pkg:golang/github.com/google/go-cmp@v0.7.0?package-id=45d80675c33e84e8",
    "pkg:golang/github.com/google/go-containerregistry@v0.21.7?package-id=7a79869eed40381f",
    "pkg:golang/github.com/google/go-github/v88@v88.0.0?package-id=5c449fbc64bb3c86",
    "pkg:golang/github.com/google/go-querystring@v1.2.0?package-id=443bb27d9e01a171",
    "pkg:golang/github.com/google/s2a-go@v0.1.9?package-id=2305a9e81d27a1e8",
    "pkg:golang/github.com/google/uuid@v1.6.0?package-id=c77c16530e92bc81",
    "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.16?package-id=76059d08ce73db59",
    "pkg:golang/github.com/googleapis/gax-go/v2@v2.22.0?package-id=b43ed500b049eb6c",
    "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.29.0?package-id=46df53356537c2e9",
    "pkg:golang/github.com/hashicorp/errwrap@v1.1.0?package-id=3462b29e56adef03",
    "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2?package-id=fcaafb3580c80baf",
    "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1?package-id=25743bdb60bae92b",
    "pkg:golang/github.com/hashicorp/go-retryablehttp@v0.7.8?package-id=76e94d7be0123045",
    "pkg:golang/github.com/hashicorp/go-rootcerts@v1.0.2?package-id=6747343471d0a211",
    "pkg:golang/github.com/hashicorp/go-secure-stdlib/parseutil@v0.2.0?package-id=0e2cc963e90bccf5",
    "pkg:golang/github.com/hashicorp/go-secure-stdlib/strutil@v0.1.2?package-id=eff7143c2abe2dcf",
    "pkg:golang/github.com/hashicorp/go-sockaddr@v1.0.7?package-id=5a15f233e4cea5b1",
    "pkg:golang/github.com/hashicorp/hcl@v1.0.1-vault-7?package-id=7d0e8e53b8653006",
    "pkg:golang/github.com/hashicorp/vault/api@v1.22.0?package-id=64410cb683f3020c",
    "pkg:golang/github.com/in-toto/attestation@v1.2.0?package-id=d8d9951817b201d6",
    "pkg:golang/github.com/in-toto/in-toto-golang@v0.11.0?package-id=5690f7e877b85366",
    "pkg:golang/github.com/jedisct1/go-minisign@v0.0.0-20230811132847-661be99b8267?package-id=a00d26221410316d",
    "pkg:golang/github.com/jellydator/ttlcache/v3@v3.4.0?package-id=f62e8a268a89fa05",
    "pkg:golang/github.com/json-iterator/go@v1.1.12?package-id=be5c24b1ee6d03c3",
    "pkg:golang/github.com/klauspost/compress@v1.18.6?package-id=8a9ff1a37c183567",
    "pkg:golang/github.com/kylelemons/godebug@v1.1.0?package-id=8ab2e2ac79e0104a",
    "pkg:golang/github.com/lestrrat-go/blackmagic@v1.0.4?package-id=0fbda0357d753c02",
    "pkg:golang/github.com/lestrrat-go/dsig@v1.2.1?package-id=1602c9be54895846",
    "pkg:golang/github.com/lestrrat-go/httpcc@v1.0.1?package-id=4f2096a2e427e980",
    "pkg:golang/github.com/lestrrat-go/httprc/v3@v3.0.5?package-id=9f00a907edd0d208",
    "pkg:golang/github.com/lestrrat-go/jwx/v3@v3.1.1?package-id=7ee340524f01fedb",
    "pkg:golang/github.com/lestrrat-go/option/v2@v2.0.0?package-id=c4070f17aae0c15d",
    "pkg:golang/github.com/letsencrypt/boulder@v0.20260309.0?package-id=a0e79753a339133c",
    "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0?package-id=04542bc652161b46",
    "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1?package-id=f5abfaa30b11bce9",
    "pkg:golang/github.com/mitchellh/mapstructure@v1.5.1-0.20231216201459-8508981c8b6c?package-id=980a58e462cee409",
    "pkg:golang/github.com/moby/term@v0.5.2?package-id=c97c404340a399ab",
    "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd?package-id=298213374b3fc300",
    "pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee?package-id=fa28a66691669634",
    "pkg:golang/github.com/mozillazg/docker-credential-acr-helper@v0.4.0?package-id=5a08eae4757fea68",
    "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822?package-id=70d2160e1eae3dba",
    "pkg:golang/github.com/natefinch/atomic@v1.0.1?package-id=50797376d38c184e",
    "pkg:golang/github.com/nozzle/throttler@v0.0.0-20180817012639-2ea982251481?package-id=3ed9e5ec04f2eea5",
    "pkg:golang/github.com/oklog/ulid/v2@v2.1.1?package-id=7ff8bd3f15705bfd",
    "pkg:golang/github.com/oleiade/reflections@v1.1.0?package-id=1709f9b6598f0441",
    "pkg:golang/github.com/open-policy-agent/opa@v1.17.1?package-id=f5ebf03e1a8f3cbd",
    "pkg:golang/github.com/opencontainers/go-digest@v1.0.0?package-id=bd76f79424b79c5b",
    "pkg:golang/github.com/opencontainers/image-spec@v1.1.1?package-id=558e7e51aa5c0dcc",
    "pkg:golang/github.com/pborman/uuid@v1.2.1?package-id=4bf166e915d2cc77",
    "pkg:golang/github.com/pelletier/go-toml/v2@v2.2.4?package-id=39019e66531c0961",
    "pkg:golang/github.com/pkg/browser@v0.0.0-20240102092130-5ac0b6a4141c?package-id=b4458fb42504301e",
    "pkg:golang/github.com/pkg/errors@v0.9.1?package-id=d419f42bdce24133",
    "pkg:golang/github.com/protocolbuffers/txtpbfmt@v0.0.0-20260217160748-a481f6a22f94?package-id=2a8b1988b5c43727",
    "pkg:golang/github.com/rcrowley/go-metrics@v0.0.0-20250401214520-65e299d6c5c9?package-id=9051d815f73d4fdf",
    "pkg:golang/github.com/rogpeppe/go-internal@v1.14.1?package-id=fa928ec4ad789abf",
    "pkg:golang/github.com/ryanuber/go-glob@v1.0.0?package-id=d29f729c35a2bf42",
    "pkg:golang/github.com/sagikazarmark/locafero@v0.11.0?package-id=ece2230ecb814116",
    "pkg:golang/github.com/sassoftware/relic@v7.2.1%2Bincompatible?package-id=4dcb696d862d3d08",
    "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.11.0?package-id=334e2ae2424a9caf",
    "pkg:golang/github.com/shibumi/go-pathspec@v1.3.0?package-id=e2315a63674e02d0",
    "pkg:golang/github.com/sigstore/protobuf-specs@v0.5.1?package-id=cfef3e3a2d3b7f16",
    "pkg:golang/github.com/sigstore/rekor-tiles/v2@v2.3.0?package-id=7743665687ca6a79",
    "pkg:golang/github.com/sigstore/rekor@v1.5.3?package-id=36b034515578545d",
    "pkg:golang/github.com/sigstore/sigstore-go@v1.2.2?package-id=ee97cb0fd6e578c8",
    "pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/aws@v1.10.8?package-id=7cecdad0fbf4f7c7",
    "pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/azure@v1.10.8?package-id=86a76c6eab0f2134",
    "pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/gcp@v1.10.8?package-id=8fb19b802ad7d87b",
    "pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/hashivault@v1.10.8?package-id=a80d954453f888fa",
    "pkg:golang/github.com/sigstore/sigstore@v1.10.8?package-id=ca1cb96bfd281e9a",
    "pkg:golang/github.com/sigstore/timestamp-authority/v2@v2.1.2?package-id=aabb748f68bdb361",
    "pkg:golang/github.com/sirupsen/logrus@v1.9.4?package-id=f75e69cc62b87fc7",
    "pkg:golang/github.com/sourcegraph/conc@v0.3.1-0.20240121214520-5f936abd7ae8?package-id=bfadf8981248af18",
    "pkg:golang/github.com/spf13/afero@v1.15.0?package-id=78e3c019238e684d",
    "pkg:golang/github.com/spf13/cast@v1.10.0?package-id=20ab1860bc63f52a",
    "pkg:golang/github.com/spf13/cobra@v1.10.2?package-id=d9a5045a76c5be8d",
    "pkg:golang/github.com/spf13/pflag@v1.0.10?package-id=2e67eb23497855ec",
    "pkg:golang/github.com/spf13/viper@v1.21.0?package-id=5439f0219b2b1cdf",
    "pkg:golang/github.com/spiffe/go-spiffe/v2@v2.7.0?package-id=c0eba8e51e72f9ed",
    "pkg:golang/github.com/subosito/gotenv@v1.6.0?package-id=dee98e1a54bf3b07",
    "pkg:golang/github.com/syndtr/goleveldb@v1.0.1-0.20220721030215-126854af5e6d?package-id=e38c810304f45298",
    "pkg:golang/github.com/tchap/go-patricia/v2@v2.3.3?package-id=c59e696babbd3b01",
    "pkg:golang/github.com/theupdateframework/go-tuf/v2@v2.4.2?package-id=5750690a2fe785d2",
    "pkg:golang/github.com/theupdateframework/go-tuf@v0.7.0?package-id=11fafbb91700dbd1",
    "pkg:golang/github.com/titanous/rocacheck@v0.0.0-20171023193734-afe73141d399?package-id=b4328d6848038f69",
    "pkg:golang/github.com/tjfoc/gmsm@v1.4.1?package-id=d1ea2f8fd368f38f",
    "pkg:golang/github.com/transparency-dev/formats@v0.1.1?package-id=8ab03f33fb415076",
    "pkg:golang/github.com/transparency-dev/merkle@v0.0.2?package-id=dc9cebcf627377d7",
    "pkg:golang/github.com/valyala/fastjson@v1.6.10?package-id=5a60e8d0c2bb2308",
    "pkg:golang/github.com/vektah/gqlparser/v2@v2.5.33?package-id=bf9fdc344ed3c7a3",
    "pkg:golang/github.com/withfig/autocomplete-tools/integrations/cobra@v1.2.1?package-id=52138083e80b33bc",
    "pkg:golang/github.com/x448/float16@v0.8.4?package-id=e411b1f28a281f16",
    "pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb?package-id=4cefdce1f9189b60",
    "pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415?package-id=3cbecb032631b200",
    "pkg:golang/github.com/yashtewari/glob-intersection@v0.2.0?package-id=59c43ebdd1c0805c",
    "pkg:golang/github.com/youmark/pkcs8@v0.0.0-20240726163527-a2c0da244d78?package-id=c0f60a72fb81efb3",
    "pkg:golang/gitlab.com/gitlab-org/api/client-go@v1.46.0?package-id=e54782cf668951a3",
    "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1?package-id=7ae61881186bc56f",
    "pkg:golang/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.68.0?package-id=5806b6ac2b8a57df",
    "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.68.0?package-id=d4862c6cc06e5cbc",
    "pkg:golang/go.opentelemetry.io/otel/metric@v1.44.0?package-id=f0589828f6efa30c",
    "pkg:golang/go.opentelemetry.io/otel/trace@v1.44.0?package-id=f419b57176bc7b82",
    "pkg:golang/go.opentelemetry.io/otel@v1.44.0?package-id=5bd28dbbe65b38f0",
    "pkg:golang/go.uber.org/multierr@v1.11.0?package-id=49307fba017f8130",
    "pkg:golang/go.uber.org/zap@v1.28.0?package-id=b38b162a3dadd42d",
    "pkg:golang/go.yaml.in/yaml/v2@v2.4.4?package-id=cfc1ff6d8176b644",
    "pkg:golang/go.yaml.in/yaml/v3@v3.0.4?package-id=4d019907d282c5b9",
    "pkg:golang/golang.org/x/crypto@v0.53.0?package-id=db80fc4b2fc7b9ef",
    "pkg:golang/golang.org/x/mod@v0.37.0?package-id=ccfa21dd0e117c38",
    "pkg:golang/golang.org/x/net@v0.56.0?package-id=8ca2490d9f837899",
    "pkg:golang/golang.org/x/oauth2@v0.36.0?package-id=9c37452e121a20fa",
    "pkg:golang/golang.org/x/sync@v0.21.0?package-id=a8376837e2f438e7",
    "pkg:golang/golang.org/x/sys@v0.46.0?package-id=23f0ef716af116c6",
    "pkg:golang/golang.org/x/term@v0.44.0?package-id=954752e766c63199",
    "pkg:golang/golang.org/x/text@v0.38.0?package-id=dc034c481b5e36f1",
    "pkg:golang/golang.org/x/time@v0.15.0?package-id=2266e178c71af879",
    "pkg:golang/google.golang.org/api@v0.284.0?package-id=8049bf3940f964b8",
    "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260526163538-3dc84a4a5aaa?package-id=861a3e03873ba882",
    "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260526163538-3dc84a4a5aaa?package-id=98fbb6280943477c",
    "pkg:golang/google.golang.org/genproto@v0.0.0-20260406210006-6f92a3bedf2d?package-id=bb16af7674dfe48a",
    "pkg:golang/google.golang.org/grpc@v1.82.0?package-id=b2b40f0ffc3e1b39",
    "pkg:golang/google.golang.org/protobuf@v1.36.12-0.20260120151049-f2248ac996af?package-id=dedadf41edab3580",
    "pkg:golang/gopkg.in/evanphx/json-patch.v4@v4.13.0?package-id=ff61ae1fc015cd6d",
    "pkg:golang/gopkg.in/inf.v0@v0.9.1?package-id=eec314c07120245e",
    "pkg:golang/gopkg.in/ini.v1@v1.67.3?package-id=5b9d89605f4e8259",
    "pkg:golang/gopkg.in/yaml.v3@v3.0.1?package-id=af9066a6f874d94e",
    "pkg:golang/k8s.io/api@v0.36.2?package-id=0ca7cbece08cf067",
    "pkg:golang/k8s.io/apimachinery@v0.36.2?package-id=e18fd3f17a3998ea",
    "pkg:golang/k8s.io/client-go@v0.36.2?package-id=712ad9dccac79f54",
    "pkg:golang/k8s.io/klog/v2@v2.140.0?package-id=d8d26618bb71f04b",
    "pkg:golang/k8s.io/kube-openapi@v0.0.0-20260317180543-43fb72c5454a?package-id=0e25b8486b4f46f3",
    "pkg:golang/k8s.io/utils@v0.0.0-20260210185600-b8788abfbbc2?package-id=aa6fa6c33a3c0ba0",
    "pkg:golang/sigs.k8s.io/json@v0.0.0-20250730193827-2d320260d730?package-id=fc01486d1fd5c276",
    "pkg:golang/sigs.k8s.io/randfill@v1.0.0?package-id=0a1df5ef1d0f008d",
    "pkg:golang/sigs.k8s.io/release-utils@v0.12.4?package-id=74701cadebe4abae",
    "pkg:golang/sigs.k8s.io/structured-merge-diff/v6@v6.3.2?package-id=453f629bb15c1542",
    "pkg:golang/sigs.k8s.io/yaml@v1.6.0?package-id=dd3cffaae7aa4391",
    "pkg:golang/stdlib@1.26.6?package-id=5493a7925f3f056e"
   ]
  }
 ]
}