{
 "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
 "bomFormat": "CycloneDX",
 "specVersion": "1.5",
 "serialNumber": "urn:uuid:48e5d248-277c-4518-a57c-8fdb2fed6b21",
 "version": 1,
 "metadata": {
  "timestamp": "2026-08-15T19:23:49Z",
  "tools": {
   "components": [
    {
     "type": "application",
     "author": "anchore",
     "name": "syft",
     "version": "1.51.0"
    }
   ]
  },
  "component": {
   "bom-ref": "3da9da593c026a86",
   "type": "container",
   "name": "/w/image.tar",
   "version": "sha256:5856cfbb941628a90acec1a9dac1c08ab3d5c51ff03805ffadf12c716d156c86"
  },
  "properties": [
   {
    "name": "syft:image:labels:io.buildah.version",
    "value": "1.42.2"
   },
   {
    "name": "syft:image:labels:org.opencontainers.image.description",
    "value": "container signing, verification and storage in an OCI registry"
   },
   {
    "name": "syft:image:labels:org.opencontainers.image.licenses",
    "value": "AGPL-3.0-only"
   },
   {
    "name": "syft:image:labels:org.opencontainers.image.source",
    "value": "https://index.boks.sh"
   },
   {
    "name": "syft:image:labels:org.opencontainers.image.title",
    "value": "cosign"
   },
   {
    "name": "syft:image:labels:org.opencontainers.image.vendor",
    "value": "boks"
   },
   {
    "name": "syft:image:labels:org.opencontainers.image.version",
    "value": "3.1.3"
   },
   {
    "name": "syft:image:labels:sh.boks.description",
    "value": "container signing, verification and storage in an OCI registry"
   },
   {
    "name": "syft:image:labels:sh.boks.prefix",
    "value": "/boks/dist/cosign-3.1.3"
   },
   {
    "name": "syft:image:labels:sh.boks.project",
    "value": "cosign"
   },
   {
    "name": "syft:image:labels:sh.boks.provides",
    "value": "[\"/boks/dist/cosign-3.1.3/bin/cosign\"]"
   },
   {
    "name": "syft:image:labels:sh.boks.source-url",
    "value": "https://github.com/sigstore/cosign"
   },
   {
    "name": "syft:image:labels:sh.boks.version",
    "value": "3.1.3"
   }
  ]
 },
 "components": [
  {
   "bom-ref": "pkg:golang/buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go@v1.36.11-20260415201107-50325440f8f2.1?package-id=7297573af5cda60e",
   "type": "library",
   "name": "buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go",
   "version": "v1.36.11-20260415201107-50325440f8f2.1",
   "cpe": "cpe:2.3:a:gen:go\\/bufbuild\\/protovalidate\\/protocolbuffers\\/go:v1.36.11-20260415201107-50325440f8f2.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go@v1.36.11-20260415201107-50325440f8f2.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:s6hzCXtND/ICdGPTMGk7C+/BFlr2Jg5GyH0NKf4XGXg="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/cloud.google.com/go/auth@v0.20.0?package-id=918944dea4086239",
   "type": "library",
   "name": "cloud.google.com/go/auth",
   "version": "v0.20.0",
   "cpe": "cpe:2.3:a:go:auth:v0.20.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/cloud.google.com/go/auth@v0.20.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:kXTssoVb4azsVDoUiF8KvxAqrsQcQtB53DcSgta74CA="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/cloud.google.com/go/auth/oauth2adapt@v0.2.8?package-id=2b2fee2cfc295c73",
   "type": "library",
   "name": "cloud.google.com/go/auth/oauth2adapt",
   "version": "v0.2.8",
   "cpe": "cpe:2.3:a:go:auth\\/oauth2adapt:v0.2.8:*:*:*:*:*:*:*",
   "purl": "pkg:golang/cloud.google.com/go/auth/oauth2adapt@v0.2.8",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:keo8NaayQZ6wimpNSmW5OPc283g65QNIiLpZnkHRbnc="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/cloud.google.com/go/compute/metadata@v0.9.0?package-id=df2c7c57fb5db4db",
   "type": "library",
   "name": "cloud.google.com/go/compute/metadata",
   "version": "v0.9.0",
   "cpe": "cpe:2.3:a:go:compute\\/metadata:v0.9.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/cloud.google.com/go/compute/metadata@v0.9.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:pDUj4QMoPejqq20dK0Pg2N4yG9zIkYGdBtwLoEkH9Zs="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/cloud.google.com/go/iam@v1.11.0?package-id=804a417e8649fffc",
   "type": "library",
   "name": "cloud.google.com/go/iam",
   "version": "v1.11.0",
   "cpe": "cpe:2.3:a:go:iam:v1.11.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/cloud.google.com/go/iam@v1.11.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:KieQ9Pb+LLPak1O3Rv3GgCxhnmkYf7Xyh0P5HfF1jFM="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/cloud.google.com/go/kms@v1.31.0?package-id=f418c1c4ee349307",
   "type": "library",
   "name": "cloud.google.com/go/kms",
   "version": "v1.31.0",
   "cpe": "cpe:2.3:a:go:kms:v1.31.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/cloud.google.com/go/kms@v1.31.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:LS8N92OxFDgOLg5NCo3OmbvjtQAIVT5gUHVLKIDHaFE="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/cloud.google.com/go/longrunning@v1.0.0?package-id=e9ffcc5f6b7cd2fa",
   "type": "library",
   "name": "cloud.google.com/go/longrunning",
   "version": "v1.0.0",
   "cpe": "cpe:2.3:a:go:longrunning:v1.0.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/cloud.google.com/go/longrunning@v1.0.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:lwzWEYD8+NkYV7dhexOz6kmlvajZA70+bW/xMhRVVdY="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/connectrpc.com/connect@v1.20.0?package-id=e3802a2ca7c359dc",
   "type": "library",
   "name": "connectrpc.com/connect",
   "version": "v1.20.0",
   "purl": "pkg:golang/connectrpc.com/connect@v1.20.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:6TNDAB+WeNd2uolWNlYczB5E0KNNaVMNUEx8JEUsPmQ="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/cuelabs.dev/go/oci/ociregistry@v0.0.0-20251212221603-3adeb8663819?package-id=915251ed8a23fdd3",
   "type": "library",
   "name": "cuelabs.dev/go/oci/ociregistry",
   "version": "v0.0.0-20251212221603-3adeb8663819",
   "cpe": "cpe:2.3:a:go:oci\\/ociregistry:v0.0.0-20251212221603-3adeb8663819:*:*:*:*:*:*:*",
   "purl": "pkg:golang/cuelabs.dev/go/oci/ociregistry@v0.0.0-20251212221603-3adeb8663819",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:Zh+Ur3OsoWpvALHPLT45nOekHkgOt+IOfutBbPqM17I="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/cuelang.org/go@v0.16.1?package-id=2d6e73907e206ee3",
   "type": "library",
   "name": "cuelang.org/go",
   "version": "v0.16.1",
   "purl": "pkg:golang/cuelang.org/go@v0.16.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:iPN1lHZd2J0hjcr8hfq9PnIGk7VfPkKFfxH4de+m9sE="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/aliyuncontainerservice/ack-ram-tool/pkg/credentials/provider@v0.14.0?package-id=2cdbd42c1b660621",
   "type": "library",
   "name": "github.com/AliyunContainerService/ack-ram-tool/pkg/credentials/provider",
   "version": "v0.14.0",
   "cpe": "cpe:2.3:a:AliyunContainerService:ack-ram-tool\\/pkg\\/credentials\\/provider:v0.14.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/AliyunContainerService/ack-ram-tool/pkg/credentials/provider@v0.14.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:AliyunContainerService:ack_ram_tool\\/pkg\\/credentials\\/provider:v0.14.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:kcnfY4vljxXliXDBrA9K9lwF8IoEZ4Up6Eg9kWTIm28="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go@v68.0.0%2Bincompatible?package-id=229b422137101ef2",
   "type": "library",
   "name": "github.com/Azure/azure-sdk-for-go",
   "version": "v68.0.0+incompatible",
   "cpe": "cpe:2.3:a:Azure:azure-sdk-for-go:v68.0.0\\+incompatible:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go@v68.0.0%2Bincompatible",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:Azure:azure_sdk_for_go:v68.0.0\\+incompatible:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:fcYLmCpyNYRnvJbPerq7U0hS+6+I79yEDJBqVNcqUzU="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/azcore@v1.22.0?package-id=e1b057912e18bb77",
   "type": "library",
   "name": "github.com/Azure/azure-sdk-for-go/sdk/azcore",
   "version": "v1.22.0",
   "cpe": "cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/azcore:v1.22.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/azcore@v1.22.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/azcore:v1.22.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:aokoqcHvaGjiM3VpjKDfMMnF/8epJ+Q1HLJ7CudztqE="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/azidentity@v1.14.0?package-id=403ebcd24ccbbe25",
   "type": "library",
   "name": "github.com/Azure/azure-sdk-for-go/sdk/azidentity",
   "version": "v1.14.0",
   "cpe": "cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/azidentity:v1.14.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.14.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/azidentity:v1.14.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:CU4+EJeJi3TKYWEcYuSdWsjzw0nVsK/H0MSQOiPcymU="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/internal@v1.12.0?package-id=3b2d7b3d552ed3dd",
   "type": "library",
   "name": "github.com/Azure/azure-sdk-for-go/sdk/internal",
   "version": "v1.12.0",
   "cpe": "cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/internal:v1.12.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/internal@v1.12.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/internal:v1.12.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:fhqpLE3UEXi9lPaBRpQ6XuRW0nU7hgg4zlmZZa+a9q4="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/security/keyvault/azkeys@v1.5.0?package-id=7fd5b46980f897c1",
   "type": "library",
   "name": "github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys",
   "version": "v1.5.0",
   "cpe": "cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/security\\/keyvault\\/azkeys:v1.5.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys@v1.5.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/security\\/keyvault\\/azkeys:v1.5.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:MaKvxE6D0KkjOg6Wd9M00iqP5PR0kUxCfiezes4JweM="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/security/keyvault/internal@v1.2.0?package-id=b83453f651babca1",
   "type": "library",
   "name": "github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal",
   "version": "v1.2.0",
   "cpe": "cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/security\\/keyvault\\/internal:v1.2.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal@v1.2.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/security\\/keyvault\\/internal:v1.2.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:nCYfgcSyHZXJI8J0IWE5MsCGlb2xp9fJiXyxWgmOFg4="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/azure/go-autorest/autorest@v0.11.29?package-id=05a71e3ca9b7f336",
   "type": "library",
   "name": "github.com/Azure/go-autorest/autorest",
   "version": "v0.11.29",
   "cpe": "cpe:2.3:a:Azure:go-autorest\\/autorest:v0.11.29:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/Azure/go-autorest/autorest@v0.11.29",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:Azure:go_autorest\\/autorest:v0.11.29:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:I4+HL/JDvErx2LjyzaVxllw2lRDB5/BT2Bm4g20iqYw="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/azure/go-autorest/autorest/adal@v0.9.23?package-id=5eb144b6609117f4",
   "type": "library",
   "name": "github.com/Azure/go-autorest/autorest/adal",
   "version": "v0.9.23",
   "cpe": "cpe:2.3:a:Azure:go-autorest\\/autorest\\/adal:v0.9.23:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/Azure/go-autorest/autorest/adal@v0.9.23",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:Azure:go_autorest\\/autorest\\/adal:v0.9.23:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:Yepx8CvFxwNKpH6ja7RZ+sKX+DWYNldbLiALMC3BTz8="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/azure/go-autorest/autorest/azure/auth@v0.5.12?package-id=5e92ecfa216862c1",
   "type": "library",
   "name": "github.com/Azure/go-autorest/autorest/azure/auth",
   "version": "v0.5.12",
   "cpe": "cpe:2.3:a:Azure:go-autorest\\/autorest\\/azure\\/auth:v0.5.12:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/Azure/go-autorest/autorest/azure/auth@v0.5.12",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:Azure:go_autorest\\/autorest\\/azure\\/auth:v0.5.12:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:wkAZRgT/pn8HhFyzfe9UnqOjJYqlembgCTi72Bm/xKk="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/azure/go-autorest/autorest/azure/cli@v0.4.6?package-id=bfed234bb8793eae",
   "type": "library",
   "name": "github.com/Azure/go-autorest/autorest/azure/cli",
   "version": "v0.4.6",
   "cpe": "cpe:2.3:a:Azure:go-autorest\\/autorest\\/azure\\/cli:v0.4.6:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/Azure/go-autorest/autorest/azure/cli@v0.4.6",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:Azure:go_autorest\\/autorest\\/azure\\/cli:v0.4.6:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:w77/uPk80ZET2F+AfQExZyEWtn+0Rk/uw17m9fv5Ajc="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/azure/go-autorest/autorest/date@v0.3.0?package-id=fed0aadd01548458",
   "type": "library",
   "name": "github.com/Azure/go-autorest/autorest/date",
   "version": "v0.3.0",
   "cpe": "cpe:2.3:a:Azure:go-autorest\\/autorest\\/date:v0.3.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/Azure/go-autorest/autorest/date@v0.3.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:Azure:go_autorest\\/autorest\\/date:v0.3.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:7gUk1U5M/CQbp9WoqinNzJar+8KY+LPI6wiWrP/myHw="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/azure/go-autorest/logger@v0.2.1?package-id=f671e4a6f026fc13",
   "type": "library",
   "name": "github.com/Azure/go-autorest/logger",
   "version": "v0.2.1",
   "cpe": "cpe:2.3:a:Azure:go-autorest\\/logger:v0.2.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/Azure/go-autorest/logger@v0.2.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:Azure:go_autorest\\/logger:v0.2.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:IG7i4p/mDa2Ce4TRyAO8IHnVhAVF3RFU+ZtXWSmf4Tg="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/azure/go-autorest/tracing@v0.6.0?package-id=c33059cc940478df",
   "type": "library",
   "name": "github.com/Azure/go-autorest/tracing",
   "version": "v0.6.0",
   "cpe": "cpe:2.3:a:Azure:go-autorest\\/tracing:v0.6.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/Azure/go-autorest/tracing@v0.6.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:Azure:go_autorest\\/tracing:v0.6.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:TYi4+3m5t6K48TGI9AUdb+IzbnSxvnvUMfuitfgcfuo="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/azuread/microsoft-authentication-library-for-go@v1.7.2?package-id=61d13bcdfbc863db",
   "type": "library",
   "name": "github.com/AzureAD/microsoft-authentication-library-for-go",
   "version": "v1.7.2",
   "cpe": "cpe:2.3:a:AzureAD:microsoft-authentication-library-for-go:v1.7.2:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/AzureAD/microsoft-authentication-library-for-go@v1.7.2",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:AzureAD:microsoft_authentication_library_for_go:v1.7.2:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:RHK7bS+HQMslb1sZpAokUt+zTVmue0hKSs2C791hhzU="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/agnivade/levenshtein@v1.2.1?package-id=94dae46fe05e4cbf",
   "type": "library",
   "name": "github.com/agnivade/levenshtein",
   "version": "v1.2.1",
   "cpe": "cpe:2.3:a:agnivade:levenshtein:v1.2.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/agnivade/levenshtein@v1.2.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:EHBY3UOn1gwdy/VbFwgo4cxecRznFk7fKWN1KOX7eoM="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/alibabacloud-go/alibabacloud-gateway-spi@v0.0.4?package-id=73d2509d242ecaa0",
   "type": "library",
   "name": "github.com/alibabacloud-go/alibabacloud-gateway-spi",
   "version": "v0.0.4",
   "cpe": "cpe:2.3:a:alibabacloud-go:alibabacloud-gateway-spi:v0.0.4:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/alibabacloud-go/alibabacloud-gateway-spi@v0.0.4",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud-go:alibabacloud_gateway_spi:v0.0.4:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud_go:alibabacloud-gateway-spi:v0.0.4:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud_go:alibabacloud_gateway_spi:v0.0.4:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud:alibabacloud-gateway-spi:v0.0.4:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud:alibabacloud_gateway_spi:v0.0.4:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:iC9YFYKDGEy3n/FtqJnOkZsene9olVspKmkX5A2YBEo="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/alibabacloud-go/cr-20160607@v1.0.1?package-id=eb41c1a044ace166",
   "type": "library",
   "name": "github.com/alibabacloud-go/cr-20160607",
   "version": "v1.0.1",
   "cpe": "cpe:2.3:a:alibabacloud-go:cr-20160607:v1.0.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/alibabacloud-go/cr-20160607@v1.0.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud-go:cr_20160607:v1.0.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud_go:cr-20160607:v1.0.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud_go:cr_20160607:v1.0.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud:cr-20160607:v1.0.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud:cr_20160607:v1.0.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:WEnP1iPFKJU74ryUKh/YDPHoxMZawqlPajOymyNAkts="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/alibabacloud-go/cr-20181201@v1.0.10?package-id=ab7a7ad525a5b9b2",
   "type": "library",
   "name": "github.com/alibabacloud-go/cr-20181201",
   "version": "v1.0.10",
   "cpe": "cpe:2.3:a:alibabacloud-go:cr-20181201:v1.0.10:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/alibabacloud-go/cr-20181201@v1.0.10",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud-go:cr_20181201:v1.0.10:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud_go:cr-20181201:v1.0.10:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud_go:cr_20181201:v1.0.10:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud:cr-20181201:v1.0.10:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud:cr_20181201:v1.0.10:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:B60f6S1imsgn2fgC6X6FrVNrONDrbCT0NwYhsJ0C9/c="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/alibabacloud-go/darabonba-openapi@v0.2.1?package-id=4e4a7ae2febb57a0",
   "type": "library",
   "name": "github.com/alibabacloud-go/darabonba-openapi",
   "version": "v0.2.1",
   "cpe": "cpe:2.3:a:alibabacloud-go:darabonba-openapi:v0.2.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/alibabacloud-go/darabonba-openapi@v0.2.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud-go:darabonba_openapi:v0.2.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud_go:darabonba-openapi:v0.2.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud_go:darabonba_openapi:v0.2.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud:darabonba-openapi:v0.2.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud:darabonba_openapi:v0.2.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:WyzxxKvhdVDlwpAMOHgAiCJ+NXa6g5ZWPFEzaK/ewwY="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/alibabacloud-go/debug@v1.0.0?package-id=49999def820b9b03",
   "type": "library",
   "name": "github.com/alibabacloud-go/debug",
   "version": "v1.0.0",
   "cpe": "cpe:2.3:a:alibabacloud-go:debug:v1.0.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/alibabacloud-go/debug@v1.0.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud_go:debug:v1.0.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud:debug:v1.0.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:3eIEQWfay1fB24PQIEzXAswlVJtdQok8f3EVN5VrBnA="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/alibabacloud-go/endpoint-util@v1.1.1?package-id=8b30d66f42a2ef07",
   "type": "library",
   "name": "github.com/alibabacloud-go/endpoint-util",
   "version": "v1.1.1",
   "cpe": "cpe:2.3:a:alibabacloud-go:endpoint-util:v1.1.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/alibabacloud-go/endpoint-util@v1.1.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud-go:endpoint_util:v1.1.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud_go:endpoint-util:v1.1.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud_go:endpoint_util:v1.1.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud:endpoint-util:v1.1.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud:endpoint_util:v1.1.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:ZkBv2/jnghxtU0p+upSU0GGzW1VL9GQdZO3mcSUTUy8="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/alibabacloud-go/openapi-util@v0.1.0?package-id=34a7623ed6786c58",
   "type": "library",
   "name": "github.com/alibabacloud-go/openapi-util",
   "version": "v0.1.0",
   "cpe": "cpe:2.3:a:alibabacloud-go:openapi-util:v0.1.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/alibabacloud-go/openapi-util@v0.1.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud-go:openapi_util:v0.1.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud_go:openapi-util:v0.1.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud_go:openapi_util:v0.1.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud:openapi-util:v0.1.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud:openapi_util:v0.1.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:0z75cIULkDrdEhkLWgi9tnLe+KhAFE/r5Pb3312/eAY="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/alibabacloud-go/tea@v1.2.1?package-id=95e6dec8db56d73f",
   "type": "library",
   "name": "github.com/alibabacloud-go/tea",
   "version": "v1.2.1",
   "cpe": "cpe:2.3:a:alibabacloud-go:tea:v1.2.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/alibabacloud-go/tea@v1.2.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud_go:tea:v1.2.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud:tea:v1.2.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:rFF1LnrAdhaiPmKwH5xwYOKlMh66CqRwPUTzIK74ask="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/alibabacloud-go/tea-utils@v1.4.5?package-id=bac3a2aa7240a705",
   "type": "library",
   "name": "github.com/alibabacloud-go/tea-utils",
   "version": "v1.4.5",
   "cpe": "cpe:2.3:a:alibabacloud-go:tea-utils:v1.4.5:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/alibabacloud-go/tea-utils@v1.4.5",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud-go:tea_utils:v1.4.5:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud_go:tea-utils:v1.4.5:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud_go:tea_utils:v1.4.5:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud:tea-utils:v1.4.5:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud:tea_utils:v1.4.5:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:h0/6Xd2f3bPE4XHTvkpjwxowIwRCJAJOqY6Eq8f3zfA="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/alibabacloud-go/tea-xml@v1.1.3?package-id=9b0b9c8c3f0e577b",
   "type": "library",
   "name": "github.com/alibabacloud-go/tea-xml",
   "version": "v1.1.3",
   "cpe": "cpe:2.3:a:alibabacloud-go:tea-xml:v1.1.3:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/alibabacloud-go/tea-xml@v1.1.3",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud-go:tea_xml:v1.1.3:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud_go:tea-xml:v1.1.3:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud_go:tea_xml:v1.1.3:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud:tea-xml:v1.1.3:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:alibabacloud:tea_xml:v1.1.3:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:7LYnm+JbOq2B+T/B0fHC4Ies4/FofC4zHzYtqw7dgt0="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/aliyun/credentials-go@v1.3.2?package-id=d845e297c39151fd",
   "type": "library",
   "name": "github.com/aliyun/credentials-go",
   "version": "v1.3.2",
   "cpe": "cpe:2.3:a:aliyun:credentials-go:v1.3.2:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/aliyun/credentials-go@v1.3.2",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:aliyun:credentials_go:v1.3.2:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:L4WppI9rctC8PdlMgyTkF8bBsy9pyKQEzBD1bHMRl+g="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/asaskevich/govalidator@v0.0.0-20230301143203-a9d515a09cc2?package-id=1bdb27047039c472",
   "type": "library",
   "name": "github.com/asaskevich/govalidator",
   "version": "v0.0.0-20230301143203-a9d515a09cc2",
   "cpe": "cpe:2.3:a:asaskevich:govalidator:v0.0.0-20230301143203-a9d515a09cc2:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/asaskevich/govalidator@v0.0.0-20230301143203-a9d515a09cc2",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:DklsrG3dyBCFEj5IhUbnKptjxatkF07cF2ak3yi77so="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.42.0?package-id=7898fe582b87e3b0",
   "type": "library",
   "name": "github.com/aws/aws-sdk-go-v2",
   "version": "v1.42.0",
   "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2:v1.42.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.42.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:aws:aws_sdk_go_v2:v1.42.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:XvXMJTkFQtpBKIWZnmr9ZEOc2InWM2yldjXEJ/bymhA="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.32.25?package-id=5978e734f3259484",
   "type": "library",
   "name": "github.com/aws/aws-sdk-go-v2/config",
   "version": "v1.32.25",
   "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/config:v1.32.25:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.32.25",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/config:v1.32.25:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:ACCejvStYoilgwrfegSt5ZntCbPrk52qfwyNcnl3omM="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/credentials@v1.19.24?package-id=ec5d398e2cdc1126",
   "type": "library",
   "name": "github.com/aws/aws-sdk-go-v2/credentials",
   "version": "v1.19.24",
   "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/credentials:v1.19.24:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/credentials@v1.19.24",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/credentials:v1.19.24:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:2hQqYCV9yqyePQ9o6dCrZc/zO8U3TwPr9mIKlZnPu/I="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.18.29?package-id=196d652d3ffe1aae",
   "type": "library",
   "name": "github.com/aws/aws-sdk-go-v2/feature/ec2/imds",
   "version": "v1.18.29",
   "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/feature\\/ec2\\/imds:v1.18.29:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.18.29",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/feature\\/ec2\\/imds:v1.18.29:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:r6qZHbT+wxgWO/e9vYNUEtg7lv5+UN3pRqKhLXvnArg="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.4.29?package-id=2d645fc5a9aa13fb",
   "type": "library",
   "name": "github.com/aws/aws-sdk-go-v2/internal/configsources",
   "version": "v1.4.29",
   "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/configsources:v1.4.29:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.4.29",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/configsources:v1.4.29:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:f3vKqSo13fhTYb+JEcXwXefZQE26I1FB5eTSniU67ko="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.7.29?package-id=eec4094c80e418b9",
   "type": "library",
   "name": "github.com/aws/aws-sdk-go-v2/internal/endpoints/v2",
   "version": "v2.7.29",
   "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/endpoints\\/v2:v2.7.29:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.7.29",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/endpoints\\/v2:v2.7.29:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:RdwIf/CuUsvJX3RgJagbOyotl/cxoLY4xviKuE7p2GY="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/v4a@v1.4.30?package-id=34eade5515ff40ab",
   "type": "library",
   "name": "github.com/aws/aws-sdk-go-v2/internal/v4a",
   "version": "v1.4.30",
   "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/v4a:v1.4.30:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/v4a@v1.4.30",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/v4a:v1.4.30:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:VTGy885W5DKBxWRUJbym9hytNaYzsyaPkCHGRRMAOhU="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ecr@v1.55.3?package-id=8d8972a88b6a94f7",
   "type": "library",
   "name": "github.com/aws/aws-sdk-go-v2/service/ecr",
   "version": "v1.55.3",
   "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/ecr:v1.55.3:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ecr@v1.55.3",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/ecr:v1.55.3:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:RtGctYMmkTerGClvdY6bHXdtly4FeYw9wz/NPz62LF8="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ecrpublic@v1.38.10?package-id=4ec1a35fe707f4f4",
   "type": "library",
   "name": "github.com/aws/aws-sdk-go-v2/service/ecrpublic",
   "version": "v1.38.10",
   "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/ecrpublic:v1.38.10:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ecrpublic@v1.38.10",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/ecrpublic:v1.38.10:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:1A/sI3LNMi3fhRI5TFLMwwo7ALAALSFVCSGvFlr1Iys="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding@v1.13.12?package-id=0d17ff214c472fa3",
   "type": "library",
   "name": "github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding",
   "version": "v1.13.12",
   "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/accept-encoding:v1.13.12:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding@v1.13.12",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/accept_encoding:v1.13.12:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:ZD2+BSw9vFsNlKYIasSNt3uDbjqqXIBcM13UJv/Lx2k="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.13.29?package-id=686db321667755f2",
   "type": "library",
   "name": "github.com/aws/aws-sdk-go-v2/service/internal/presigned-url",
   "version": "v1.13.29",
   "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/presigned-url:v1.13.29:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.13.29",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/presigned_url:v1.13.29:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:DRebniUGZ2MqiiIVmQJ04vIXr918hubdHMnarSLEWyU="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/kms@v1.53.4?package-id=aca05c3be9a70332",
   "type": "library",
   "name": "github.com/aws/aws-sdk-go-v2/service/kms",
   "version": "v1.53.4",
   "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/kms:v1.53.4:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/kms@v1.53.4",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/kms:v1.53.4:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:PEgVSsWtR8NNxsDxFL2Ywisi7R+1EFQARGsT4q3mWwI="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/signin@v1.2.0?package-id=3ad2bcad45a7b37c",
   "type": "library",
   "name": "github.com/aws/aws-sdk-go-v2/service/signin",
   "version": "v1.2.0",
   "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/signin:v1.2.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/signin@v1.2.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/signin:v1.2.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:3nXpRcFwRCW8n7HgO2QGy0Dc20eQNfBuUemGQhpF8m8="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sso@v1.31.3?package-id=3e0e749166469e02",
   "type": "library",
   "name": "github.com/aws/aws-sdk-go-v2/service/sso",
   "version": "v1.31.3",
   "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/sso:v1.31.3:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sso@v1.31.3",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/sso:v1.31.3:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:ey1XLTYXb9PcLt4535632o5kCGXNXEhNb620Dqwuylo="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.36.6?package-id=d0e182cd8a9ba30f",
   "type": "library",
   "name": "github.com/aws/aws-sdk-go-v2/service/ssooidc",
   "version": "v1.36.6",
   "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/ssooidc:v1.36.6:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.36.6",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/ssooidc:v1.36.6:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:yLr03zQE/5Eu5l3QU0Si+xMbLMbSDF2YXsigqXngs6g="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sts@v1.43.3?package-id=a83b5edfea862e6e",
   "type": "library",
   "name": "github.com/aws/aws-sdk-go-v2/service/sts",
   "version": "v1.43.3",
   "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/sts:v1.43.3:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sts@v1.43.3",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/sts:v1.43.3:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:VrIhKRCSK1umelSgB9RghvA9RTUYeQffyAS5ApXehNI="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/aws/smithy-go@v1.27.2?package-id=281c3e5b156683d2",
   "type": "library",
   "name": "github.com/aws/smithy-go",
   "version": "v1.27.2",
   "cpe": "cpe:2.3:a:aws:smithy-go:v1.27.2:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/aws/smithy-go@v1.27.2",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:aws:smithy_go:v1.27.2:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:y9NPmSE6am6LjEFPfqHqG/jJk7AauQvhCJONKh7kpzk="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/awslabs/amazon-ecr-credential-helper/ecr-login@v0.12.0?package-id=d0e7d5ab307d3738",
   "type": "library",
   "name": "github.com/awslabs/amazon-ecr-credential-helper/ecr-login",
   "version": "v0.12.0",
   "cpe": "cpe:2.3:a:awslabs:amazon-ecr-credential-helper\\/ecr-login:v0.12.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/awslabs/amazon-ecr-credential-helper/ecr-login@v0.12.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:awslabs:amazon_ecr_credential_helper\\/ecr_login:v0.12.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:JFWXO6QPihCknDdnL6VaQE57km4ZKheHIGd9YiOGcTo="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/blang/semver@v3.5.1%2Bincompatible?package-id=046a18af6d3c301f",
   "type": "library",
   "name": "github.com/blang/semver",
   "version": "v3.5.1+incompatible",
   "cpe": "cpe:2.3:a:blang:semver:v3.5.1\\+incompatible:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/blang/semver@v3.5.1%2Bincompatible",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:cQNTCjp13qL8KC3Nbxr/y2Bqb63oX6wdnnjpJbkM4JQ="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/buildkite/agent/v3@v3.130.0?package-id=0d548d71b0f80cde",
   "type": "library",
   "name": "github.com/buildkite/agent/v3",
   "version": "v3.130.0",
   "cpe": "cpe:2.3:a:buildkite:agent\\/v3:v3.130.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/buildkite/agent/v3@v3.130.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:fYo5iTrYAK6OTBWBoF7M627tnCKhZaRTD+Ex186dJZ0="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/buildkite/go-pipeline@v0.17.1?package-id=20755089ffe31e4b",
   "type": "library",
   "name": "github.com/buildkite/go-pipeline",
   "version": "v0.17.1",
   "cpe": "cpe:2.3:a:buildkite:go-pipeline:v0.17.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/buildkite/go-pipeline@v0.17.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:buildkite:go_pipeline:v0.17.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:m7+a2SF9hLjqsbe6HShmzm9M4rDk4QtanKTF2LD6LG0="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/buildkite/interpolate@v0.1.5?package-id=3157bae8dcf50e68",
   "type": "library",
   "name": "github.com/buildkite/interpolate",
   "version": "v0.1.5",
   "cpe": "cpe:2.3:a:buildkite:interpolate:v0.1.5:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/buildkite/interpolate@v0.1.5",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:v2Ji3voik69UZlbfoqzx+qfcsOKLA61nHdU79VV+tPU="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/buildkite/roko@v1.4.0?package-id=126de29d4a48b03b",
   "type": "library",
   "name": "github.com/buildkite/roko",
   "version": "v1.4.0",
   "cpe": "cpe:2.3:a:buildkite:roko:v1.4.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/buildkite/roko@v1.4.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:DxixoCdpNqxu4/1lXrXbfsKbJSd7r1qoxtef/TT2J80="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/cenkalti/backoff/v4@v4.3.0?package-id=201d621af5cef62b",
   "type": "library",
   "name": "github.com/cenkalti/backoff/v4",
   "version": "v4.3.0",
   "cpe": "cpe:2.3:a:cenkalti:backoff\\/v4:v4.3.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/cenkalti/backoff/v4@v4.3.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:MyRJ/UdXutAwSAT+s3wNd7MfTIcy71VQueUuFK343L8="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/cenkalti/backoff/v5@v5.0.3?package-id=e81204a905e86718",
   "type": "library",
   "name": "github.com/cenkalti/backoff/v5",
   "version": "v5.0.3",
   "cpe": "cpe:2.3:a:cenkalti:backoff\\/v5:v5.0.3:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/cenkalti/backoff/v5@v5.0.3",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:ZN+IMa753KfX5hd8vVaMixjnqRZ3y8CuJKRKj1xcsSM="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/cespare/xxhash/v2@v2.3.0?package-id=7038dcac893ab5dd",
   "type": "library",
   "name": "github.com/cespare/xxhash/v2",
   "version": "v2.3.0",
   "cpe": "cpe:2.3:a:cespare:xxhash\\/v2:v2.3.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/cespare/xxhash/v2@v2.3.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:UL815xU9SqsFlibzuggzjXhog7bL6oX9BbNZnL2UFvs="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/chrismellard/docker-credential-acr-env@v0.0.0-20230304212654-82a0ddb27589?package-id=60fb42954f769e71",
   "type": "library",
   "name": "github.com/chrismellard/docker-credential-acr-env",
   "version": "v0.0.0-20230304212654-82a0ddb27589",
   "cpe": "cpe:2.3:a:chrismellard:docker-credential-acr-env:v0.0.0-20230304212654-82a0ddb27589:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/chrismellard/docker-credential-acr-env@v0.0.0-20230304212654-82a0ddb27589",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:chrismellard:docker_credential_acr_env:v0.0.0-20230304212654-82a0ddb27589:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:krfRl01rzPzxSxyLyrChD+U+MzsBXbm0OwYYB67uF+4="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/clbanning/mxj/v2@v2.7.0?package-id=3d5e9e9af244980b",
   "type": "library",
   "name": "github.com/clbanning/mxj/v2",
   "version": "v2.7.0",
   "cpe": "cpe:2.3:a:clbanning:mxj\\/v2:v2.7.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/clbanning/mxj/v2@v2.7.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:WA/La7UGCanFe5NpHF0Q3DNtnCsVoxbPKuyBNHWRyME="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/cockroachdb/apd/v3@v3.2.1?package-id=f452d6455cfced72",
   "type": "library",
   "name": "github.com/cockroachdb/apd/v3",
   "version": "v3.2.1",
   "cpe": "cpe:2.3:a:cockroachdb:apd\\/v3:v3.2.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/cockroachdb/apd/v3@v3.2.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:U+8j7t0axsIgvQUqthuNm82HIrYXodOV2iWLWtEaIwg="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/common-nighthawk/go-figure@v0.0.0-20210622060536-734e95fb86be?package-id=767f97690d0c955c",
   "type": "library",
   "name": "github.com/common-nighthawk/go-figure",
   "version": "v0.0.0-20210622060536-734e95fb86be",
   "cpe": "cpe:2.3:a:common-nighthawk:go-figure:v0.0.0-20210622060536-734e95fb86be:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/common-nighthawk/go-figure@v0.0.0-20210622060536-734e95fb86be",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:common-nighthawk:go_figure:v0.0.0-20210622060536-734e95fb86be:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:common_nighthawk:go-figure:v0.0.0-20210622060536-734e95fb86be:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:common_nighthawk:go_figure:v0.0.0-20210622060536-734e95fb86be:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:common:go-figure:v0.0.0-20210622060536-734e95fb86be:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:common:go_figure:v0.0.0-20210622060536-734e95fb86be:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:J5BL2kskAlV9ckgEsNQXscjIaLiOYiZ75d4e94E6dcQ="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/coreos/go-oidc/v3@v3.18.0?package-id=380299470e22e77c",
   "type": "library",
   "name": "github.com/coreos/go-oidc/v3",
   "version": "v3.18.0",
   "cpe": "cpe:2.3:a:coreos:go-oidc\\/v3:v3.18.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/coreos/go-oidc/v3@v3.18.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:coreos:go_oidc\\/v3:v3.18.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:V9orjXynvu5wiC9SemFTWnG4F45v403aIcjWo0d41+A="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/cyberphone/json-canonicalization@v0.0.0-20241213102144-19d51d7fe467?package-id=1720b651c9f6ed47",
   "type": "library",
   "name": "github.com/cyberphone/json-canonicalization",
   "version": "v0.0.0-20241213102144-19d51d7fe467",
   "cpe": "cpe:2.3:a:cyberphone:json-canonicalization:v0.0.0-20241213102144-19d51d7fe467:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/cyberphone/json-canonicalization@v0.0.0-20241213102144-19d51d7fe467",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:cyberphone:json_canonicalization:v0.0.0-20241213102144-19d51d7fe467:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:uX1JmpONuD549D73r6cgnxyUu18Zb7yHAy5AYU0Pm4Q="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc?package-id=345f8a5999f6d12b",
   "type": "library",
   "name": "github.com/davecgh/go-spew",
   "version": "v1.1.2-0.20180830191138-d8f796af33cc",
   "cpe": "cpe:2.3:a:davecgh:go-spew:v1.1.2-0.20180830191138-d8f796af33cc:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:davecgh:go_spew:v1.1.2-0.20180830191138-d8f796af33cc:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:U9qPSI2PIWSS1VwoXQT9A3Wy9MM3WgvqSxFWenqJduM="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/digitorus/pkcs7@v0.0.0-20230818184609-3a137a874352?package-id=d7944e57e70a318b",
   "type": "library",
   "name": "github.com/digitorus/pkcs7",
   "version": "v0.0.0-20230818184609-3a137a874352",
   "cpe": "cpe:2.3:a:digitorus:pkcs7:v0.0.0-20230818184609-3a137a874352:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/digitorus/pkcs7@v0.0.0-20230818184609-3a137a874352",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:ge14PCmCvPjpMQMIAH7uKg0lrtNSOdpYsRXlwk3QbaE="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/digitorus/timestamp@v0.0.0-20231217203849-220c5c2851b7?package-id=621e908c9adb9f9c",
   "type": "library",
   "name": "github.com/digitorus/timestamp",
   "version": "v0.0.0-20231217203849-220c5c2851b7",
   "cpe": "cpe:2.3:a:digitorus:timestamp:v0.0.0-20231217203849-220c5c2851b7:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/digitorus/timestamp@v0.0.0-20231217203849-220c5c2851b7",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:lxmTCgmHE1GUYL7P0MlNa00M67axePTq+9nBSGddR8I="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/dimchansky/utfbom@v1.1.1?package-id=ab183bbbde635621",
   "type": "library",
   "name": "github.com/dimchansky/utfbom",
   "version": "v1.1.1",
   "cpe": "cpe:2.3:a:dimchansky:utfbom:v1.1.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/dimchansky/utfbom@v1.1.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:vV6w1AhK4VMnhBno/TPVCoK9U/LP0PkLCS9tbxHdi/U="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/docker/cli@v29.5.3%2Bincompatible?package-id=b7fb350239e201b3",
   "type": "library",
   "name": "github.com/docker/cli",
   "version": "v29.5.3+incompatible",
   "cpe": "cpe:2.3:a:docker:cli:v29.5.3\\+incompatible:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/docker/cli@v29.5.3%2Bincompatible",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:nbEFfz774vBwQ5KRYv7c/AghjReqnGISvrRhzjV0evs="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/docker/docker-credential-helpers@v0.9.5?package-id=0c7b4e68660fb9cc",
   "type": "library",
   "name": "github.com/docker/docker-credential-helpers",
   "version": "v0.9.5",
   "cpe": "cpe:2.3:a:docker:docker-credential-helpers:v0.9.5:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/docker/docker-credential-helpers@v0.9.5",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:docker:docker_credential_helpers:v0.9.5:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:EFNN8DHvaiK8zVqFA2DT6BjXE0GzfLOZ38ggPTKePkY="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/dustin/go-humanize@v1.0.1?package-id=1f1782276acc76bc",
   "type": "library",
   "name": "github.com/dustin/go-humanize",
   "version": "v1.0.1",
   "cpe": "cpe:2.3:a:dustin:go-humanize:v1.0.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/dustin/go-humanize@v1.0.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:dustin:go_humanize:v1.0.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:GzkhY7T5VNhEkwH0PVJgjz+fX1rhBrR7pRT3mDkpeCY="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/emicklei/go-restful/v3@v3.13.0?package-id=a4605b36ba23e106",
   "type": "library",
   "name": "github.com/emicklei/go-restful/v3",
   "version": "v3.13.0",
   "cpe": "cpe:2.3:a:emicklei:go-restful\\/v3:v3.13.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/emicklei/go-restful/v3@v3.13.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:emicklei:go_restful\\/v3:v3.13.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:C4Bl2xDndpU6nJ4bc1jXd+uTmYPVUwkD6bFY/oTyCes="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/emicklei/proto@v1.14.3?package-id=ff633a58ac74c12b",
   "type": "library",
   "name": "github.com/emicklei/proto",
   "version": "v1.14.3",
   "cpe": "cpe:2.3:a:emicklei:proto:v1.14.3:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/emicklei/proto@v1.14.3",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:zEhlzNkpP8kN6utonKMzlPfIvy82t5Kb9mufaJxSe1Q="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/felixge/httpsnoop@v1.0.4?package-id=a1a69b07ab68f8e8",
   "type": "library",
   "name": "github.com/felixge/httpsnoop",
   "version": "v1.0.4",
   "cpe": "cpe:2.3:a:felixge:httpsnoop:v1.0.4:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/felixge/httpsnoop@v1.0.4",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:NFTV2Zj1bL4mc9sqWACXbQFVBBg2W3GPvqp8/ESS2Wg="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/fsnotify/fsnotify@v1.10.1?package-id=5b9f4d19dd31a533",
   "type": "library",
   "name": "github.com/fsnotify/fsnotify",
   "version": "v1.10.1",
   "cpe": "cpe:2.3:a:fsnotify:fsnotify:v1.10.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/fsnotify/fsnotify@v1.10.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:b0/UzAf9yR5rhf3RPm9gf3ehBPpf0oZKIjtpKrx59Ho="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/fxamacker/cbor/v2@v2.9.0?package-id=15a9ee55208bbc09",
   "type": "library",
   "name": "github.com/fxamacker/cbor/v2",
   "version": "v2.9.0",
   "cpe": "cpe:2.3:a:fxamacker:cbor\\/v2:v2.9.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/fxamacker/cbor/v2@v2.9.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:NpKPmjDBgUfBms6tr6JZkTHtfFGcMKsw3eGcmD/sapM="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/go-chi/chi/v5@v5.3.0?package-id=51c4b90e00bd9053",
   "type": "library",
   "name": "github.com/go-chi/chi/v5",
   "version": "v5.3.0",
   "cpe": "cpe:2.3:a:go-chi:chi\\/v5:v5.3.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/go-chi/chi/v5@v5.3.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_chi:chi\\/v5:v5.3.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:chi\\/v5:v5.3.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:halUjDxhshgXHMrao5bB8eNBXo/rnzwr8m5m36glehM="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/go-jose/go-jose/v4@v4.1.4?package-id=69ddb3eddbbf05e7",
   "type": "library",
   "name": "github.com/go-jose/go-jose/v4",
   "version": "v4.1.4",
   "cpe": "cpe:2.3:a:go-jose:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/go-jose/go-jose/v4@v4.1.4",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go-jose:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_jose:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_jose:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:moDMcTHmvE6Groj34emNPLs/qtYXRVcd6S7NHbHz3kA="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/go-logr/logr@v1.4.3?package-id=d6a486f8e27868b3",
   "type": "library",
   "name": "github.com/go-logr/logr",
   "version": "v1.4.3",
   "cpe": "cpe:2.3:a:go-logr:logr:v1.4.3:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/go-logr/logr@v1.4.3",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_logr:logr:v1.4.3:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:logr:v1.4.3:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:CjnDlHq8ikf6E492q6eKboGOC0T8CDaOvkHCIg8idEI="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/go-logr/stdr@v1.2.2?package-id=ebb5c0aa5eb80de8",
   "type": "library",
   "name": "github.com/go-logr/stdr",
   "version": "v1.2.2",
   "cpe": "cpe:2.3:a:go-logr:stdr:v1.2.2:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/go-logr/stdr@v1.2.2",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_logr:stdr:v1.2.2:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:stdr:v1.2.2:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:hSWxHoqTgW2S2qGc0LTAI563KZ5YKYRhT3MFKZMbjag="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/go-openapi/analysis@v0.25.2?package-id=f8eed8b6e6f16e69",
   "type": "library",
   "name": "github.com/go-openapi/analysis",
   "version": "v0.25.2",
   "cpe": "cpe:2.3:a:go-openapi:analysis:v0.25.2:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/go-openapi/analysis@v0.25.2",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_openapi:analysis:v0.25.2:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:analysis:v0.25.2:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:I0vy4n3alz+DHTiN1PRhCb7QZxkK6g5YmswZKv2TKuw="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/go-openapi/errors@v0.22.8?package-id=3430941fc07a8a1f",
   "type": "library",
   "name": "github.com/go-openapi/errors",
   "version": "v0.22.8",
   "cpe": "cpe:2.3:a:go-openapi:errors:v0.22.8:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/go-openapi/errors@v0.22.8",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_openapi:errors:v0.22.8:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:errors:v0.22.8:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:oP7sW7TWc3wFFjrzzj0nI83H2qMBkNjNfSd+XRejk/I="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/go-openapi/jsonpointer@v0.23.1?package-id=927fe6d48d56c2ff",
   "type": "library",
   "name": "github.com/go-openapi/jsonpointer",
   "version": "v0.23.1",
   "cpe": "cpe:2.3:a:go-openapi:jsonpointer:v0.23.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/go-openapi/jsonpointer@v0.23.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_openapi:jsonpointer:v0.23.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:jsonpointer:v0.23.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:1HBACs7XIwR2RcmItfdSFlALhGbe6S92p0ry4d1GWg4="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/go-openapi/jsonreference@v0.21.6?package-id=b6e0dc7a084bbb66",
   "type": "library",
   "name": "github.com/go-openapi/jsonreference",
   "version": "v0.21.6",
   "cpe": "cpe:2.3:a:go-openapi:jsonreference:v0.21.6:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/go-openapi/jsonreference@v0.21.6",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_openapi:jsonreference:v0.21.6:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:jsonreference:v0.21.6:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:NZ5nGfnaM1n4I43Xjm1e5/M2GjOwQwndQz22uhxwD+Y="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/go-openapi/loads@v0.24.0?package-id=05752e6c06ecf7c4",
   "type": "library",
   "name": "github.com/go-openapi/loads",
   "version": "v0.24.0",
   "cpe": "cpe:2.3:a:go-openapi:loads:v0.24.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/go-openapi/loads@v0.24.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_openapi:loads:v0.24.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:loads:v0.24.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:4LLorXRPTzIN9V6ngMUZbAscsBOUBk3Oa8cClu/bFrQ="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/go-openapi/runtime@v0.32.4?package-id=8965e4ae2efa7d3f",
   "type": "library",
   "name": "github.com/go-openapi/runtime",
   "version": "v0.32.4",
   "cpe": "cpe:2.3:a:go-openapi:runtime:v0.32.4:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/go-openapi/runtime@v0.32.4",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_openapi:runtime:v0.32.4:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:runtime:v0.32.4:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:8ElGj/3goG0itt0nBPP6Cm57ehcYyuHoI3O20nxgvkw="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/go-openapi/runtime/server-middleware@v0.30.0?package-id=7ab1a89be8d80eb4",
   "type": "library",
   "name": "github.com/go-openapi/runtime/server-middleware",
   "version": "v0.30.0",
   "cpe": "cpe:2.3:a:go-openapi:runtime\\/server-middleware:v0.30.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/go-openapi/runtime/server-middleware@v0.30.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go-openapi:runtime\\/server_middleware:v0.30.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_openapi:runtime\\/server-middleware:v0.30.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_openapi:runtime\\/server_middleware:v0.30.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:runtime\\/server-middleware:v0.30.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:runtime\\/server_middleware:v0.30.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:8rPoJ/xv7JL8BsovaqboKETlpWBArVh8n+0L/GyePog="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/go-openapi/spec@v0.22.6?package-id=eaa5ef6fdf40f459",
   "type": "library",
   "name": "github.com/go-openapi/spec",
   "version": "v0.22.6",
   "cpe": "cpe:2.3:a:go-openapi:spec:v0.22.6:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/go-openapi/spec@v0.22.6",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_openapi:spec:v0.22.6:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:spec:v0.22.6:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:Tyy1pLaNCM8GBCFLoGYLonjJi6zykqyLCjXLc19ZPic="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/go-openapi/strfmt@v0.26.4?package-id=b1b8f0a17d2e8b1c",
   "type": "library",
   "name": "github.com/go-openapi/strfmt",
   "version": "v0.26.4",
   "cpe": "cpe:2.3:a:go-openapi:strfmt:v0.26.4:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/go-openapi/strfmt@v0.26.4",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_openapi:strfmt:v0.26.4:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:strfmt:v0.26.4:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:yI6IAEfcWow459BD5UzFY430KUwXZwBHrYusPFkhWlc="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/go-openapi/swag@v0.26.1?package-id=4630c50819929617",
   "type": "library",
   "name": "github.com/go-openapi/swag",
   "version": "v0.26.1",
   "cpe": "cpe:2.3:a:go-openapi:swag:v0.26.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/go-openapi/swag@v0.26.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_openapi:swag:v0.26.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:swag:v0.26.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:l5sVEyVpwj+DDYeZyo7wQI/Ebn/mKYIyGB/pFwAfGoQ="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/go-openapi/swag/cmdutils@v0.26.1?package-id=18122809478fe840",
   "type": "library",
   "name": "github.com/go-openapi/swag/cmdutils",
   "version": "v0.26.1",
   "cpe": "cpe:2.3:a:go-openapi:swag\\/cmdutils:v0.26.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/go-openapi/swag/cmdutils@v0.26.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_openapi:swag\\/cmdutils:v0.26.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:swag\\/cmdutils:v0.26.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:f2iE1ijYaJ3nuu5PaEMx3zpEhzhZFgivCJObWEObLIQ="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/go-openapi/swag/conv@v0.27.0?package-id=4ee5b2eaa87717af",
   "type": "library",
   "name": "github.com/go-openapi/swag/conv",
   "version": "v0.27.0",
   "cpe": "cpe:2.3:a:go-openapi:swag\\/conv:v0.27.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/go-openapi/swag/conv@v0.27.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_openapi:swag\\/conv:v0.27.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:swag\\/conv:v0.27.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:EKOH4feXrvdo8DbSsXSAqRT8fz1epEnS5O2IfXUOzE8="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/go-openapi/swag/fileutils@v0.26.1?package-id=3699846e42bf6319",
   "type": "library",
   "name": "github.com/go-openapi/swag/fileutils",
   "version": "v0.26.1",
   "cpe": "cpe:2.3:a:go-openapi:swag\\/fileutils:v0.26.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/go-openapi/swag/fileutils@v0.26.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_openapi:swag\\/fileutils:v0.26.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:swag\\/fileutils:v0.26.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:K1XCM2CGhfNsc6YDt6v7Q5+1e59rftYWdcu/isZhvFw="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/go-openapi/swag/jsonname@v0.26.1?package-id=92e5294eb440b9ad",
   "type": "library",
   "name": "github.com/go-openapi/swag/jsonname",
   "version": "v0.26.1",
   "cpe": "cpe:2.3:a:go-openapi:swag\\/jsonname:v0.26.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/go-openapi/swag/jsonname@v0.26.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_openapi:swag\\/jsonname:v0.26.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:swag\\/jsonname:v0.26.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:VReupaV6WxlAsCn0e4DUfgV6bPmINnPpyJDLqSfNPcE="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/go-openapi/swag/jsonutils@v0.26.1?package-id=b2747811bb865f81",
   "type": "library",
   "name": "github.com/go-openapi/swag/jsonutils",
   "version": "v0.26.1",
   "cpe": "cpe:2.3:a:go-openapi:swag\\/jsonutils:v0.26.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/go-openapi/swag/jsonutils@v0.26.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_openapi:swag\\/jsonutils:v0.26.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:swag\\/jsonutils:v0.26.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:2hdBfFkHg+7Wrz2VsCbeyR6hzkRDs7AztnMR2u84yOY="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/go-openapi/swag/loading@v0.26.1?package-id=784ef260627fffa9",
   "type": "library",
   "name": "github.com/go-openapi/swag/loading",
   "version": "v0.26.1",
   "cpe": "cpe:2.3:a:go-openapi:swag\\/loading:v0.26.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/go-openapi/swag/loading@v0.26.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_openapi:swag\\/loading:v0.26.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:swag\\/loading:v0.26.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:E9K4wqXeROlhjFQ13K9zMz6ojFGXIggGe+ad1odrK9w="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/go-openapi/swag/mangling@v0.26.1?package-id=299bb791bc644a68",
   "type": "library",
   "name": "github.com/go-openapi/swag/mangling",
   "version": "v0.26.1",
   "cpe": "cpe:2.3:a:go-openapi:swag\\/mangling:v0.26.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/go-openapi/swag/mangling@v0.26.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_openapi:swag\\/mangling:v0.26.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:swag\\/mangling:v0.26.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:gpYI4WuPKFJJVjV5cDLGlDVJhFIxYjQc7yN5eEb4CqM="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/go-openapi/swag/netutils@v0.26.1?package-id=83c931ce8211accf",
   "type": "library",
   "name": "github.com/go-openapi/swag/netutils",
   "version": "v0.26.1",
   "cpe": "cpe:2.3:a:go-openapi:swag\\/netutils:v0.26.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/go-openapi/swag/netutils@v0.26.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_openapi:swag\\/netutils:v0.26.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:swag\\/netutils:v0.26.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:BNctoc39WTAUMxyAs355fExOPzMZtPbZ0ZZ1Am2FR5M="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/go-openapi/swag/stringutils@v0.26.1?package-id=ee190fb893682355",
   "type": "library",
   "name": "github.com/go-openapi/swag/stringutils",
   "version": "v0.26.1",
   "cpe": "cpe:2.3:a:go-openapi:swag\\/stringutils:v0.26.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/go-openapi/swag/stringutils@v0.26.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_openapi:swag\\/stringutils:v0.26.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:swag\\/stringutils:v0.26.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:f88uYyTso7TnHrKM/bUBsQ5e2wKf37cpgo6pvbzd9yU="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/go-openapi/swag/typeutils@v0.27.0?package-id=2158a5eaf0168dbe",
   "type": "library",
   "name": "github.com/go-openapi/swag/typeutils",
   "version": "v0.27.0",
   "cpe": "cpe:2.3:a:go-openapi:swag\\/typeutils:v0.27.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/go-openapi/swag/typeutils@v0.27.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_openapi:swag\\/typeutils:v0.27.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:swag\\/typeutils:v0.27.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:aCf4MSGo8NLwZP8Q6t32DWLJSvl/WwNqgmEG+xJ6v2o="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/go-openapi/swag/yamlutils@v0.26.1?package-id=b9e88ae886b7636e",
   "type": "library",
   "name": "github.com/go-openapi/swag/yamlutils",
   "version": "v0.26.1",
   "cpe": "cpe:2.3:a:go-openapi:swag\\/yamlutils:v0.26.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/go-openapi/swag/yamlutils@v0.26.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_openapi:swag\\/yamlutils:v0.26.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:swag\\/yamlutils:v0.26.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:0TSLK+lXs9vfIhAWzBeI/lOzEnIoot6WTCO1aAeWFTk="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/go-openapi/validate@v0.26.0?package-id=5d80bfe41237998a",
   "type": "library",
   "name": "github.com/go-openapi/validate",
   "version": "v0.26.0",
   "cpe": "cpe:2.3:a:go-openapi:validate:v0.26.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/go-openapi/validate@v0.26.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_openapi:validate:v0.26.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:validate:v0.26.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:dxWzQ3F+vb1SajqUxHjwb5T4mTpSHmdrtv5Bi7+ZNhw="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/go-viper/mapstructure/v2@v2.5.0?package-id=b71ffbaff5223217",
   "type": "library",
   "name": "github.com/go-viper/mapstructure/v2",
   "version": "v2.5.0",
   "cpe": "cpe:2.3:a:go-viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/go-viper/mapstructure/v2@v2.5.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go_viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:vM5IJoUAy3d7zRSVtIwQgBj7BiWtMPfmPEgAXnvj1Ro="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/gobwas/glob@v0.2.3?package-id=2bc51a11e90f180a",
   "type": "library",
   "name": "github.com/gobwas/glob",
   "version": "v0.2.3",
   "cpe": "cpe:2.3:a:gobwas:glob:v0.2.3:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/gobwas/glob@v0.2.3",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:A4xDbljILXROh+kObIiy5kIaPYD8e96x1tgBhUI5J+Y="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/golang-jwt/jwt/v4@v4.5.2?package-id=88c436e801da4b8e",
   "type": "library",
   "name": "github.com/golang-jwt/jwt/v4",
   "version": "v4.5.2",
   "cpe": "cpe:2.3:a:golang-jwt:jwt\\/v4:v4.5.2:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/golang-jwt/jwt/v4@v4.5.2",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:golang_jwt:jwt\\/v4:v4.5.2:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:golang:jwt\\/v4:v4.5.2:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:YtQM7lnr8iZ+j5q71MGKkNw9Mn7AjHM68uc9g5fXeUI="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/golang-jwt/jwt/v5@v5.3.1?package-id=67c906452a60d24d",
   "type": "library",
   "name": "github.com/golang-jwt/jwt/v5",
   "version": "v5.3.1",
   "cpe": "cpe:2.3:a:golang-jwt:jwt\\/v5:v5.3.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/golang-jwt/jwt/v5@v5.3.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:golang_jwt:jwt\\/v5:v5.3.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:golang:jwt\\/v5:v5.3.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:kYf81DTWFe7t+1VvL7eS+jKFVWaUnK9cB1qbwn63YCY="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/golang/snappy@v0.0.4?package-id=acacdf27f2303032",
   "type": "library",
   "name": "github.com/golang/snappy",
   "version": "v0.0.4",
   "cpe": "cpe:2.3:a:golang:snappy:v0.0.4:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/golang/snappy@v0.0.4",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:yAGX7huGHXlcLOEtBnF4w7FQwA26wojNCwOYAEhLjQM="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/google/certificate-transparency-go@v1.3.3?package-id=d9d194730476b99d",
   "type": "library",
   "name": "github.com/google/certificate-transparency-go",
   "version": "v1.3.3",
   "cpe": "cpe:2.3:a:google:certificate-transparency-go:v1.3.3:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/google/certificate-transparency-go@v1.3.3",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:google:certificate_transparency_go:v1.3.3:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:hq/rSxztSkXN2tx/3jQqF6Xc0O565UQPdHrOWvZwybo="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/google/gnostic-models@v0.7.0?package-id=408571aa76e36d50",
   "type": "library",
   "name": "github.com/google/gnostic-models",
   "version": "v0.7.0",
   "cpe": "cpe:2.3:a:google:gnostic-models:v0.7.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/google/gnostic-models@v0.7.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:google:gnostic_models:v0.7.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:qwTtogB15McXDaNqTZdzPJRHvaVJlAl+HVQnLmJEJxo="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/google/go-cmp@v0.7.0?package-id=b318e402d7dc5f23",
   "type": "library",
   "name": "github.com/google/go-cmp",
   "version": "v0.7.0",
   "cpe": "cpe:2.3:a:google:go-cmp:v0.7.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/google/go-cmp@v0.7.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:google:go_cmp:v0.7.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/google/go-containerregistry@v0.21.7?package-id=47c4b93a892d3606",
   "type": "library",
   "name": "github.com/google/go-containerregistry",
   "version": "v0.21.7",
   "cpe": "cpe:2.3:a:google:go-containerregistry:v0.21.7:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/google/go-containerregistry@v0.21.7",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:google:go_containerregistry:v0.21.7:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:/vPFuVXDjtFREsVArW+0h1CIl5urnOhzei4X2DMW9IU="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/google/go-github/v88@v88.0.0?package-id=953143721eff4316",
   "type": "library",
   "name": "github.com/google/go-github/v88",
   "version": "v88.0.0",
   "cpe": "cpe:2.3:a:google:go-github\\/v88:v88.0.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/google/go-github/v88@v88.0.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:google:go_github\\/v88:v88.0.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:dZA9IKkPK1eXZj4ypngnpRj5FwdpTv4whix2PrQMP7M="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/google/go-querystring@v1.2.0?package-id=6a6a3350b295910a",
   "type": "library",
   "name": "github.com/google/go-querystring",
   "version": "v1.2.0",
   "cpe": "cpe:2.3:a:google:go-querystring:v1.2.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/google/go-querystring@v1.2.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:google:go_querystring:v1.2.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:yhqkPbu2/OH+V9BfpCVPZkNmUXhb2gBxJArfhIxNtP0="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/google/s2a-go@v0.1.9?package-id=c922a3d76dc159b9",
   "type": "library",
   "name": "github.com/google/s2a-go",
   "version": "v0.1.9",
   "cpe": "cpe:2.3:a:google:s2a-go:v0.1.9:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/google/s2a-go@v0.1.9",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:google:s2a_go:v0.1.9:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:LGD7gtMgezd8a/Xak7mEWL0PjoTQFvpRudN895yqKW0="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/google/uuid@v1.6.0?package-id=a173c5fbeb07a3e4",
   "type": "library",
   "name": "github.com/google/uuid",
   "version": "v1.6.0",
   "cpe": "cpe:2.3:a:google:uuid:v1.6.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/google/uuid@v1.6.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.16?package-id=94685279e0b06dff",
   "type": "library",
   "name": "github.com/googleapis/enterprise-certificate-proxy",
   "version": "v0.3.16",
   "cpe": "cpe:2.3:a:googleapis:enterprise-certificate-proxy:v0.3.16:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.16",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:googleapis:enterprise_certificate_proxy:v0.3.16:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:F/VPrx0YPBdksZJQdCAp0WUsqnNmZpUZszzfYt0M5Dw="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/googleapis/gax-go/v2@v2.22.0?package-id=26ecb8312b6047e1",
   "type": "library",
   "name": "github.com/googleapis/gax-go/v2",
   "version": "v2.22.0",
   "cpe": "cpe:2.3:a:googleapis:gax-go\\/v2:v2.22.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/googleapis/gax-go/v2@v2.22.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:googleapis:gax_go\\/v2:v2.22.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:PjIWBpgGIVKGoCXuiCoP64altEJCj3/Ei+kSU5vlZD4="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.29.0?package-id=7ac09969e36dc78c",
   "type": "library",
   "name": "github.com/grpc-ecosystem/grpc-gateway/v2",
   "version": "v2.29.0",
   "cpe": "cpe:2.3:a:grpc-ecosystem:grpc-gateway\\/v2:v2.29.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.29.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:grpc-ecosystem:grpc_gateway\\/v2:v2.29.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:grpc_ecosystem:grpc-gateway\\/v2:v2.29.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:grpc_ecosystem:grpc_gateway\\/v2:v2.29.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:grpc:grpc-gateway\\/v2:v2.29.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:grpc:grpc_gateway\\/v2:v2.29.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:5VipnvEpbqr2gA2VbM+nYVbkIF28c5ZQfqCBQ5g2xfk="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/hashicorp/errwrap@v1.1.0?package-id=c2626883d362e9d6",
   "type": "library",
   "name": "github.com/hashicorp/errwrap",
   "version": "v1.1.0",
   "cpe": "cpe:2.3:a:hashicorp:errwrap:v1.1.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/hashicorp/errwrap@v1.1.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:OxrOeh75EUXMY8TBjag2fzXGZ40LB6IKw45YeGUDY2I="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2?package-id=859c03b20a36ada9",
   "type": "library",
   "name": "github.com/hashicorp/go-cleanhttp",
   "version": "v0.5.2",
   "cpe": "cpe:2.3:a:hashicorp:go-cleanhttp:v0.5.2:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:hashicorp:go_cleanhttp:v0.5.2:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:035FKYIWjmULyFRBKPs8TBQoi0x6d9G4xc9neXJWAZQ="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1?package-id=dced9c9d87c01579",
   "type": "library",
   "name": "github.com/hashicorp/go-multierror",
   "version": "v1.1.1",
   "cpe": "cpe:2.3:a:hashicorp:go-multierror:v1.1.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:hashicorp:go_multierror:v1.1.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:H5DkEtf6CXdFp0N0Em5UCwQpXMWke8IA0+lD48awMYo="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/hashicorp/go-retryablehttp@v0.7.8?package-id=c7fa566fa3a7d259",
   "type": "library",
   "name": "github.com/hashicorp/go-retryablehttp",
   "version": "v0.7.8",
   "cpe": "cpe:2.3:a:hashicorp:retryablehttp:v0.7.8:*:*:*:*:go:*:*",
   "purl": "pkg:golang/github.com/hashicorp/go-retryablehttp@v0.7.8",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:ylXZWnqa7Lhqpk0L1P1LzDtGcCR0rPVUrx/c8Unxc48="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/hashicorp/go-rootcerts@v1.0.2?package-id=465da26d75766a14",
   "type": "library",
   "name": "github.com/hashicorp/go-rootcerts",
   "version": "v1.0.2",
   "cpe": "cpe:2.3:a:hashicorp:go-rootcerts:v1.0.2:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/hashicorp/go-rootcerts@v1.0.2",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:hashicorp:go_rootcerts:v1.0.2:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:jzhAVGtqPKbwpyCPELlgNWhE1znq+qwJtW5Oi2viEzc="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/hashicorp/go-secure-stdlib/parseutil@v0.2.0?package-id=73508351f1d4e0a7",
   "type": "library",
   "name": "github.com/hashicorp/go-secure-stdlib/parseutil",
   "version": "v0.2.0",
   "cpe": "cpe:2.3:a:hashicorp:go-secure-stdlib\\/parseutil:v0.2.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/hashicorp/go-secure-stdlib/parseutil@v0.2.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:hashicorp:go_secure_stdlib\\/parseutil:v0.2.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:U+kC2dOhMFQctRfhK0gRctKAPTloZdMU5ZJxaesJ/VM="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/hashicorp/go-secure-stdlib/strutil@v0.1.2?package-id=ba44261b7a073dc0",
   "type": "library",
   "name": "github.com/hashicorp/go-secure-stdlib/strutil",
   "version": "v0.1.2",
   "cpe": "cpe:2.3:a:hashicorp:go-secure-stdlib\\/strutil:v0.1.2:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/hashicorp/go-secure-stdlib/strutil@v0.1.2",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:hashicorp:go_secure_stdlib\\/strutil:v0.1.2:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:kes8mmyCpxJsI7FTwtzRqEy9CdjCtrXrXGuOpxEA7Ts="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/hashicorp/go-sockaddr@v1.0.7?package-id=9b79a99bbbab1028",
   "type": "library",
   "name": "github.com/hashicorp/go-sockaddr",
   "version": "v1.0.7",
   "cpe": "cpe:2.3:a:hashicorp:go-sockaddr:v1.0.7:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/hashicorp/go-sockaddr@v1.0.7",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:hashicorp:go_sockaddr:v1.0.7:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:G+pTkSO01HpR5qCxg7lxfsFEZaG+C0VssTy/9dbT+Fw="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/hashicorp/hcl@v1.0.1-vault-7?package-id=0952d33311d7d3dc",
   "type": "library",
   "name": "github.com/hashicorp/hcl",
   "version": "v1.0.1-vault-7",
   "cpe": "cpe:2.3:a:hashicorp:hcl:v1.0.1-vault-7:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/hashicorp/hcl@v1.0.1-vault-7",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:ag5OxFVy3QYTFTJODRzTKVZ6xvdfLLCA1cy/Y6xGI0I="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/hashicorp/vault/api@v1.22.0?package-id=0c7fe11fdb27f7ac",
   "type": "library",
   "name": "github.com/hashicorp/vault/api",
   "version": "v1.22.0",
   "cpe": "cpe:2.3:a:hashicorp:vault\\/api:v1.22.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/hashicorp/vault/api@v1.22.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:+HYFquE35/B74fHoIeXlZIP2YADVboaPjaSicHEZiH0="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/in-toto/attestation@v1.2.0?package-id=d043c919e0787f8f",
   "type": "library",
   "name": "github.com/in-toto/attestation",
   "version": "v1.2.0",
   "cpe": "cpe:2.3:a:in-toto:attestation:v1.2.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/in-toto/attestation@v1.2.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:in_toto:attestation:v1.2.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:in:attestation:v1.2.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:aPRUZ3azbqD7yEBD5fP3TD8Dszf+YHo284SOcpahjQk="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/in-toto/in-toto-golang@v0.11.0?package-id=5645f1b35b73b036",
   "type": "library",
   "name": "github.com/in-toto/in-toto-golang",
   "version": "v0.11.0",
   "cpe": "cpe:2.3:a:in-toto:in-toto-golang:v0.11.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/in-toto/in-toto-golang@v0.11.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:in-toto:in_toto_golang:v0.11.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:in_toto:in-toto-golang:v0.11.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:in_toto:in_toto_golang:v0.11.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:in:in-toto-golang:v0.11.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:in:in_toto_golang:v0.11.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:nfidMYBFx+E0lnmX5KUnN2Pdm8zdNKal1ayjJuzzRoA="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/jedisct1/go-minisign@v0.0.0-20230811132847-661be99b8267?package-id=7e889392d09f8231",
   "type": "library",
   "name": "github.com/jedisct1/go-minisign",
   "version": "v0.0.0-20230811132847-661be99b8267",
   "cpe": "cpe:2.3:a:jedisct1:go-minisign:v0.0.0-20230811132847-661be99b8267:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/jedisct1/go-minisign@v0.0.0-20230811132847-661be99b8267",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:jedisct1:go_minisign:v0.0.0-20230811132847-661be99b8267:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:TMtDYDHKYY15rFihtRfck/bfFqNfvcabqvXAFQfAUpY="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/jellydator/ttlcache/v3@v3.4.0?package-id=a8520e0d719ab988",
   "type": "library",
   "name": "github.com/jellydator/ttlcache/v3",
   "version": "v3.4.0",
   "cpe": "cpe:2.3:a:jellydator:ttlcache\\/v3:v3.4.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/jellydator/ttlcache/v3@v3.4.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:YS4P125qQS0tNhtL6aeYkheEaB/m8HCqdMMP4mnWdTY="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/json-iterator/go@v1.1.12?package-id=988ca552553b69b3",
   "type": "library",
   "name": "github.com/json-iterator/go",
   "version": "v1.1.12",
   "cpe": "cpe:2.3:a:json-iterator:go:v1.1.12:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/json-iterator/go@v1.1.12",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:json_iterator:go:v1.1.12:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:json:go:v1.1.12:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:PV8peI4a0ysnczrg+LtxykD8LfKY9ML6u2jnxaEnrnM="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/klauspost/compress@v1.18.6?package-id=5d95bf3c6357005e",
   "type": "library",
   "name": "github.com/klauspost/compress",
   "version": "v1.18.6",
   "cpe": "cpe:2.3:a:klauspost:compress:v1.18.6:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/klauspost/compress@v1.18.6",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:2jupLlAwFm95+YDR+NwD2MEfFO9d4z4Prjl1XXDjuao="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/kylelemons/godebug@v1.1.0?package-id=18af238b58cbd8f5",
   "type": "library",
   "name": "github.com/kylelemons/godebug",
   "version": "v1.1.0",
   "cpe": "cpe:2.3:a:kylelemons:godebug:v1.1.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/kylelemons/godebug@v1.1.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:RPNrshWIDI6G2gRW9EHilWtl7Z6Sb1BR0xunSBf0SNc="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/lestrrat-go/blackmagic@v1.0.4?package-id=e36545799877c993",
   "type": "library",
   "name": "github.com/lestrrat-go/blackmagic",
   "version": "v1.0.4",
   "cpe": "cpe:2.3:a:lestrrat-go:blackmagic:v1.0.4:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/lestrrat-go/blackmagic@v1.0.4",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:lestrrat_go:blackmagic:v1.0.4:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:lestrrat:blackmagic:v1.0.4:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:IwQibdnf8l2KoO+qC3uT4OaTWsW7tuRQXy9TRN9QanA="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/lestrrat-go/dsig@v1.2.1?package-id=03ccded2d8d8e921",
   "type": "library",
   "name": "github.com/lestrrat-go/dsig",
   "version": "v1.2.1",
   "cpe": "cpe:2.3:a:lestrrat-go:dsig:v1.2.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/lestrrat-go/dsig@v1.2.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:lestrrat_go:dsig:v1.2.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:lestrrat:dsig:v1.2.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:MwxzZhE4+4fguHi+uDALKVlC3Cn+O1QU1Q/F8D7hVIc="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/lestrrat-go/httpcc@v1.0.1?package-id=69c127570297f0b7",
   "type": "library",
   "name": "github.com/lestrrat-go/httpcc",
   "version": "v1.0.1",
   "cpe": "cpe:2.3:a:lestrrat-go:httpcc:v1.0.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/lestrrat-go/httpcc@v1.0.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:lestrrat_go:httpcc:v1.0.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:lestrrat:httpcc:v1.0.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:ydWCStUeJLkpYyjLDHihupbn2tYmZ7m22BGkcvZZrIE="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/lestrrat-go/httprc/v3@v3.0.5?package-id=0a4f0cf013a930fb",
   "type": "library",
   "name": "github.com/lestrrat-go/httprc/v3",
   "version": "v3.0.5",
   "cpe": "cpe:2.3:a:lestrrat-go:httprc\\/v3:v3.0.5:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/lestrrat-go/httprc/v3@v3.0.5",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:lestrrat_go:httprc\\/v3:v3.0.5:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:lestrrat:httprc\\/v3:v3.0.5:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:S+Mb4L2I+bM6JGTibLmxExhyTOqnXjqx+zi9MoXw/TM="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/lestrrat-go/jwx/v3@v3.1.1?package-id=119a0c8b128a8b66",
   "type": "library",
   "name": "github.com/lestrrat-go/jwx/v3",
   "version": "v3.1.1",
   "cpe": "cpe:2.3:a:lestrrat-go:jwx\\/v3:v3.1.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/lestrrat-go/jwx/v3@v3.1.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:lestrrat_go:jwx\\/v3:v3.1.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:lestrrat:jwx\\/v3:v3.1.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:yd9AdPmZ4INnQ7k42IrzXYpnEG803+SrQ6hdMvzHJzw="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/lestrrat-go/option/v2@v2.0.0?package-id=5c3a8daa99666b38",
   "type": "library",
   "name": "github.com/lestrrat-go/option/v2",
   "version": "v2.0.0",
   "cpe": "cpe:2.3:a:lestrrat-go:option\\/v2:v2.0.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/lestrrat-go/option/v2@v2.0.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:lestrrat_go:option\\/v2:v2.0.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:lestrrat:option\\/v2:v2.0.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:XxrcaJESE1fokHy3FpaQ/cXW8ZsIdWcdFzzLOcID3Ss="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/letsencrypt/boulder@v0.20260309.0?package-id=2d6e2f60fc0ccea8",
   "type": "library",
   "name": "github.com/letsencrypt/boulder",
   "version": "v0.20260309.0",
   "cpe": "cpe:2.3:a:letsencrypt:boulder:v0.20260309.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/letsencrypt/boulder@v0.20260309.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:kZynrxK3QfqLGx6hhoz+Rfs3hgltJs1p9Mp+4+VwnY0="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0?package-id=ce2f749369c8eda7",
   "type": "library",
   "name": "github.com/mitchellh/go-homedir",
   "version": "v1.1.0",
   "cpe": "cpe:2.3:a:mitchellh:go-homedir:v1.1.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:mitchellh:go_homedir:v1.1.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:lukF9ziXFxDFPkA1vsr5zpc1XuPDn/wFntq5mG+4E0Y="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1?package-id=5c251b1341fdcb11",
   "type": "library",
   "name": "github.com/mitchellh/go-wordwrap",
   "version": "v1.0.1",
   "cpe": "cpe:2.3:a:mitchellh:go-wordwrap:v1.0.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:mitchellh:go_wordwrap:v1.0.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:TLuKupo69TCn6TQSyGxwI1EblZZEsQ0vMlAFQflz0v0="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/mitchellh/mapstructure@v1.5.1-0.20231216201459-8508981c8b6c?package-id=57e63875ccf34473",
   "type": "library",
   "name": "github.com/mitchellh/mapstructure",
   "version": "v1.5.1-0.20231216201459-8508981c8b6c",
   "cpe": "cpe:2.3:a:mitchellh:mapstructure:v1.5.1-0.20231216201459-8508981c8b6c:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/mitchellh/mapstructure@v1.5.1-0.20231216201459-8508981c8b6c",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:cqn374mizHuIWj+OSJCajGr/phAmuMug9qIX3l9CflE="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/moby/term@v0.5.2?package-id=b55135a477e57abd",
   "type": "library",
   "name": "github.com/moby/term",
   "version": "v0.5.2",
   "cpe": "cpe:2.3:a:moby:term:v0.5.2:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/moby/term@v0.5.2",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:6qk3FJAFDs6i/q3W/pQ97SX192qKfZgGjCQqfCJkgzQ="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd?package-id=a0e7ceeae2a13ddd",
   "type": "library",
   "name": "github.com/modern-go/concurrent",
   "version": "v0.0.0-20180306012644-bacd9c7ef1dd",
   "cpe": "cpe:2.3:a:modern-go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:modern_go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:modern:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:TRLaZ9cD/w8PVh93nsPXa1VrQ6jlwL5oN8l14QlcNfg="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee?package-id=114d31e545a346dd",
   "type": "library",
   "name": "github.com/modern-go/reflect2",
   "version": "v1.0.3-0.20250322232337-35a7c28c31ee",
   "cpe": "cpe:2.3:a:modern-go:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:modern_go:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:modern:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:W5t00kpgFdJifH4BDsTlE89Zl93FEloxaWZfGcifgq8="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/mozillazg/docker-credential-acr-helper@v0.4.0?package-id=46af7d7a2f597cef",
   "type": "library",
   "name": "github.com/mozillazg/docker-credential-acr-helper",
   "version": "v0.4.0",
   "cpe": "cpe:2.3:a:mozillazg:docker-credential-acr-helper:v0.4.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/mozillazg/docker-credential-acr-helper@v0.4.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:mozillazg:docker_credential_acr_helper:v0.4.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:Uoh3Z9CcpEDnLiozDx+D7oDgRq7X+R296vAqAumnOcw="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822?package-id=d67a0622bd36e12a",
   "type": "library",
   "name": "github.com/munnerz/goautoneg",
   "version": "v0.0.0-20191010083416-a7dc8b61c822",
   "cpe": "cpe:2.3:a:munnerz:goautoneg:v0.0.0-20191010083416-a7dc8b61c822:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:C3w9PqII01/Oq1c1nUAm88MOHcQC9l5mIlSMApZMrHA="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/natefinch/atomic@v1.0.1?package-id=9fae13b1fd8373eb",
   "type": "library",
   "name": "github.com/natefinch/atomic",
   "version": "v1.0.1",
   "cpe": "cpe:2.3:a:natefinch:atomic:v1.0.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/natefinch/atomic@v1.0.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:ZPYKxkqQOx3KZ+RsbnP/YsgvxWQPGxjC0oBt2AhwV0A="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/nozzle/throttler@v0.0.0-20180817012639-2ea982251481?package-id=096b22c9da3dd040",
   "type": "library",
   "name": "github.com/nozzle/throttler",
   "version": "v0.0.0-20180817012639-2ea982251481",
   "cpe": "cpe:2.3:a:nozzle:throttler:v0.0.0-20180817012639-2ea982251481:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/nozzle/throttler@v0.0.0-20180817012639-2ea982251481",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:Up6+btDp321ZG5/zdSLo48H9Iaq0UQGthrhWC6pCxzE="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/oklog/ulid/v2@v2.1.1?package-id=f6639e6a9b4f0c30",
   "type": "library",
   "name": "github.com/oklog/ulid/v2",
   "version": "v2.1.1",
   "cpe": "cpe:2.3:a:oklog:ulid\\/v2:v2.1.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/oklog/ulid/v2@v2.1.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:suPZ4ARWLOJLegGFiZZ1dFAkqzhMjL3J1TzI+5wHz8s="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/oleiade/reflections@v1.1.0?package-id=5b1d9a4f3ae4e35d",
   "type": "library",
   "name": "github.com/oleiade/reflections",
   "version": "v1.1.0",
   "cpe": "cpe:2.3:a:oleiade:reflections:v1.1.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/oleiade/reflections@v1.1.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:D+I/UsXQB4esMathlt0kkZRJZdUDmhv5zGi/HOwYTWo="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/open-policy-agent/opa@v1.17.1?package-id=0cbb9478224de581",
   "type": "library",
   "name": "github.com/open-policy-agent/opa",
   "version": "v1.17.1",
   "cpe": "cpe:2.3:a:open-policy-agent:opa:v1.17.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/open-policy-agent/opa@v1.17.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:open_policy_agent:opa:v1.17.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:open-policy:opa:v1.17.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:open_policy:opa:v1.17.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:open:opa:v1.17.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:wO0MOux/VCqY41aVAD6Toe1p3A7O7DlRZ1RHmYSpoS8="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0?package-id=aca3354742b7840c",
   "type": "library",
   "name": "github.com/opencontainers/go-digest",
   "version": "v1.0.0",
   "cpe": "cpe:2.3:a:opencontainers:go-digest:v1.0.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:opencontainers:go_digest:v1.0.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:apOUWs51W5PlhuyGyz9FCeeBIOUDA/6nW8Oi/yOhh5U="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/opencontainers/image-spec@v1.1.1?package-id=d07baa12f8d500ae",
   "type": "library",
   "name": "github.com/opencontainers/image-spec",
   "version": "v1.1.1",
   "cpe": "cpe:2.3:a:opencontainers:image-spec:v1.1.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/opencontainers/image-spec@v1.1.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:opencontainers:image_spec:v1.1.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:y0fUlFfIZhPF1W537XOLg0/fcx6zcHCJwooC2xJA040="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/pborman/uuid@v1.2.1?package-id=4ade655fdf30926e",
   "type": "library",
   "name": "github.com/pborman/uuid",
   "version": "v1.2.1",
   "cpe": "cpe:2.3:a:pborman:uuid:v1.2.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/pborman/uuid@v1.2.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:+ZZIw58t/ozdjRaXh/3awHfmWRbzYxJoAdNJxe/3pvw="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/pelletier/go-toml/v2@v2.2.4?package-id=7c3899181b81ee15",
   "type": "library",
   "name": "github.com/pelletier/go-toml/v2",
   "version": "v2.2.4",
   "cpe": "cpe:2.3:a:pelletier:go-toml\\/v2:v2.2.4:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/pelletier/go-toml/v2@v2.2.4",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:pelletier:go_toml\\/v2:v2.2.4:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:mye9XuhQ6gvn5h28+VilKrrPoQVanw5PMw/TB0t5Ec4="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/pkg/browser@v0.0.0-20240102092130-5ac0b6a4141c?package-id=0aedf880a0b8c9dd",
   "type": "library",
   "name": "github.com/pkg/browser",
   "version": "v0.0.0-20240102092130-5ac0b6a4141c",
   "cpe": "cpe:2.3:a:pkg:browser:v0.0.0-20240102092130-5ac0b6a4141c:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/pkg/browser@v0.0.0-20240102092130-5ac0b6a4141c",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:+mdjkGKdHQG3305AYmdv1U2eRNDiU2ErMBj1gwrq8eQ="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/pkg/errors@v0.9.1?package-id=d366da323550e641",
   "type": "library",
   "name": "github.com/pkg/errors",
   "version": "v0.9.1",
   "cpe": "cpe:2.3:a:pkg:errors:v0.9.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/pkg/errors@v0.9.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:FEBLx1zS214owpjy7qsBeixbURkuhQAwrK5UwLGTwt4="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/protocolbuffers/txtpbfmt@v0.0.0-20260217160748-a481f6a22f94?package-id=60f138a43a94d840",
   "type": "library",
   "name": "github.com/protocolbuffers/txtpbfmt",
   "version": "v0.0.0-20260217160748-a481f6a22f94",
   "cpe": "cpe:2.3:a:protocolbuffers:txtpbfmt:v0.0.0-20260217160748-a481f6a22f94:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/protocolbuffers/txtpbfmt@v0.0.0-20260217160748-a481f6a22f94",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:2PC6Ql3jipz1KvBlqUHjjk6v4aMwE86mfDu1XMH0LR8="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/rcrowley/go-metrics@v0.0.0-20250401214520-65e299d6c5c9?package-id=93f6538abd73ab42",
   "type": "library",
   "name": "github.com/rcrowley/go-metrics",
   "version": "v0.0.0-20250401214520-65e299d6c5c9",
   "cpe": "cpe:2.3:a:rcrowley:go-metrics:v0.0.0-20250401214520-65e299d6c5c9:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/rcrowley/go-metrics@v0.0.0-20250401214520-65e299d6c5c9",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:rcrowley:go_metrics:v0.0.0-20250401214520-65e299d6c5c9:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:bsUq1dX0N8AOIL7EB/X911+m4EHsnWEHeJ0c+3TTBrg="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/rogpeppe/go-internal@v1.14.1?package-id=8dd0db75d3233724",
   "type": "library",
   "name": "github.com/rogpeppe/go-internal",
   "version": "v1.14.1",
   "cpe": "cpe:2.3:a:rogpeppe:go-internal:v1.14.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/rogpeppe/go-internal@v1.14.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:rogpeppe:go_internal:v1.14.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:UQB4HGPB6osV0SQTLymcB4TgvyWu6ZyliaW0tI/otEQ="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/ryanuber/go-glob@v1.0.0?package-id=e664db5e7143ffc0",
   "type": "library",
   "name": "github.com/ryanuber/go-glob",
   "version": "v1.0.0",
   "cpe": "cpe:2.3:a:ryanuber:go-glob:v1.0.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/ryanuber/go-glob@v1.0.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:ryanuber:go_glob:v1.0.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:iQh3xXAumdQ+4Ufa5b25cRpC5TYKlno6hsv6Cb3pkBk="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/sagikazarmark/locafero@v0.11.0?package-id=2a62bc3ccebd4629",
   "type": "library",
   "name": "github.com/sagikazarmark/locafero",
   "version": "v0.11.0",
   "cpe": "cpe:2.3:a:sagikazarmark:locafero:v0.11.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/sagikazarmark/locafero@v0.11.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:1iurJgmM9G3PA/I+wWYIOw/5SyBtxapeHDcg+AAIFXc="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/sassoftware/relic@v7.2.1%2Bincompatible?package-id=914d70008142cb1a",
   "type": "library",
   "name": "github.com/sassoftware/relic",
   "version": "v7.2.1+incompatible",
   "cpe": "cpe:2.3:a:sassoftware:relic:v7.2.1\\+incompatible:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/sassoftware/relic@v7.2.1%2Bincompatible",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:Pwyh1F3I0r4clFJXkSI8bOyJINGqpgjJU3DYAZeI05A="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.11.0?package-id=27fdbe74b866f0a7",
   "type": "library",
   "name": "github.com/secure-systems-lab/go-securesystemslib",
   "version": "v0.11.0",
   "cpe": "cpe:2.3:a:secure-systems-lab:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.11.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:secure-systems-lab:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:secure_systems_lab:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:secure_systems_lab:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:secure-systems:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:secure-systems:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:secure_systems:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:secure_systems:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:secure:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:secure:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:iuCR9kcMFD4QurdKrGvPLoKZLv9YvwPYVr0473BdtFs="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/shibumi/go-pathspec@v1.3.0?package-id=4bfbadde48b40dd6",
   "type": "library",
   "name": "github.com/shibumi/go-pathspec",
   "version": "v1.3.0",
   "cpe": "cpe:2.3:a:shibumi:go-pathspec:v1.3.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/shibumi/go-pathspec@v1.3.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:shibumi:go_pathspec:v1.3.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:QUyMZhFo0Md5B8zV8x2tesohbb5kfbpTi9rBnKh5dkI="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/sigstore/cosign/v3@v3.1.3?package-id=a6cdfc047d26d785",
   "type": "library",
   "name": "github.com/sigstore/cosign/v3",
   "version": "v3.1.3",
   "cpe": "cpe:2.3:a:sigstore:cosign\\/v3:v3.1.3:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/sigstore/cosign/v3@v3.1.3",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/sigstore/protobuf-specs@v0.5.1?package-id=47d45065892af9d3",
   "type": "library",
   "name": "github.com/sigstore/protobuf-specs",
   "version": "v0.5.1",
   "cpe": "cpe:2.3:a:sigstore:protobuf-specs:v0.5.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/sigstore/protobuf-specs@v0.5.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:sigstore:protobuf_specs:v0.5.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:/5OPaNuolRJmQfeZLayJGFXMpsRJEdgC6ah1/+7Px7U="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/sigstore/rekor@v1.5.3?package-id=8f03b9f379f7b159",
   "type": "library",
   "name": "github.com/sigstore/rekor",
   "version": "v1.5.3",
   "cpe": "cpe:2.3:a:sigstore:rekor:v1.5.3:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/sigstore/rekor@v1.5.3",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:0Tyolw3zreRgm7PUW8dccFLXGBThi08278jI8EXNSr4="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/sigstore/rekor-tiles/v2@v2.3.0?package-id=424881d084b8754b",
   "type": "library",
   "name": "github.com/sigstore/rekor-tiles/v2",
   "version": "v2.3.0",
   "cpe": "cpe:2.3:a:sigstore:rekor-tiles\\/v2:v2.3.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/sigstore/rekor-tiles/v2@v2.3.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:sigstore:rekor_tiles\\/v2:v2.3.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:HhMgH61UP0t899V8Fjt7pz1YdgOBptbaQdnCF+79cdc="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/sigstore/sigstore@v1.10.8?package-id=3333458acb616200",
   "type": "library",
   "name": "github.com/sigstore/sigstore",
   "version": "v1.10.8",
   "cpe": "cpe:2.3:a:sigstore:sigstore:v1.10.8:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/sigstore/sigstore@v1.10.8",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:1Mgkxvkw4AXMfIP1DOjc6kw0GkUgA8pGVpveN/EfOq4="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/sigstore/sigstore-go@v1.2.2?package-id=a51ab5cd2a23eb48",
   "type": "library",
   "name": "github.com/sigstore/sigstore-go",
   "version": "v1.2.2",
   "cpe": "cpe:2.3:a:sigstore:sigstore-go:v1.2.2:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/sigstore/sigstore-go@v1.2.2",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:sigstore:sigstore_go:v1.2.2:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:xAJ8hxaoecC0HKBYVbrwUjkeAI+GJYu6vLqbxDlD2Q0="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/aws@v1.10.8?package-id=515e30e10408c432",
   "type": "library",
   "name": "github.com/sigstore/sigstore/pkg/signature/kms/aws",
   "version": "v1.10.8",
   "cpe": "cpe:2.3:a:sigstore:sigstore\\/pkg\\/signature\\/kms\\/aws:v1.10.8:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/aws@v1.10.8",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:tofVQ+UWJgad/69I5zbqxdFCN5gpIn9tRQP7iBzIpBw="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/azure@v1.10.8?package-id=0f2b8c7db84c87a8",
   "type": "library",
   "name": "github.com/sigstore/sigstore/pkg/signature/kms/azure",
   "version": "v1.10.8",
   "cpe": "cpe:2.3:a:sigstore:sigstore\\/pkg\\/signature\\/kms\\/azure:v1.10.8:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/azure@v1.10.8",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:8Mt7J36GcUEmbiJaiFhz2tud5ZIgkfVVCe2H/WJCHmw="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/gcp@v1.10.8?package-id=7c2e20890c7f0e73",
   "type": "library",
   "name": "github.com/sigstore/sigstore/pkg/signature/kms/gcp",
   "version": "v1.10.8",
   "cpe": "cpe:2.3:a:sigstore:sigstore\\/pkg\\/signature\\/kms\\/gcp:v1.10.8:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/gcp@v1.10.8",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:MxpAIMZVzn0Tpbarc9ax1I498oQBp7oYSMgoMSsOmKI="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/hashivault@v1.10.8?package-id=9feec893451ac5fb",
   "type": "library",
   "name": "github.com/sigstore/sigstore/pkg/signature/kms/hashivault",
   "version": "v1.10.8",
   "cpe": "cpe:2.3:a:sigstore:sigstore\\/pkg\\/signature\\/kms\\/hashivault:v1.10.8:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/hashivault@v1.10.8",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:1DGe4/clcdOnkz5MINEczWlmEvjUtZd+AjPPT/cBhQ8="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/sigstore/timestamp-authority/v2@v2.1.2?package-id=40105442aa67efe9",
   "type": "library",
   "name": "github.com/sigstore/timestamp-authority/v2",
   "version": "v2.1.2",
   "cpe": "cpe:2.3:a:sigstore:timestamp-authority\\/v2:v2.1.2:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/sigstore/timestamp-authority/v2@v2.1.2",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:sigstore:timestamp_authority\\/v2:v2.1.2:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:7DDhnknLL4w8VwomyvW2W8qblOS9LDR8oihna+jc7Ls="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/sirupsen/logrus@v1.9.4?package-id=3dbbbf0c8684732b",
   "type": "library",
   "name": "github.com/sirupsen/logrus",
   "version": "v1.9.4",
   "cpe": "cpe:2.3:a:turbopuffer:logrus:v1.9.4:*:*:*:*:go:*:*",
   "purl": "pkg:golang/github.com/sirupsen/logrus@v1.9.4",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:TsZE7l11zFCLZnZ+teH4Umoq5BhEIfIzfRDZ1Uzql2w="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/sourcegraph/conc@v0.3.1-0.20240121214520-5f936abd7ae8?package-id=6b34989a43897cb2",
   "type": "library",
   "name": "github.com/sourcegraph/conc",
   "version": "v0.3.1-0.20240121214520-5f936abd7ae8",
   "cpe": "cpe:2.3:a:sourcegraph:conc:v0.3.1-0.20240121214520-5f936abd7ae8:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/sourcegraph/conc@v0.3.1-0.20240121214520-5f936abd7ae8",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:+jumHNA0Wrelhe64i8F6HNlS8pkoyMv5sreGx2Ry5Rw="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/spf13/afero@v1.15.0?package-id=8fe200cc16b7f259",
   "type": "library",
   "name": "github.com/spf13/afero",
   "version": "v1.15.0",
   "cpe": "cpe:2.3:a:spf13:afero:v1.15.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/spf13/afero@v1.15.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:b/YBCLWAJdFWJTN9cLhiXXcD7mzKn9Dm86dNnfyQw1I="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/spf13/cast@v1.10.0?package-id=8c105713c9348a3a",
   "type": "library",
   "name": "github.com/spf13/cast",
   "version": "v1.10.0",
   "cpe": "cpe:2.3:a:spf13:cast:v1.10.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/spf13/cast@v1.10.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:h2x0u2shc1QuLHfxi+cTJvs30+ZAHOGRic8uyGTDWxY="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/spf13/cobra@v1.10.2?package-id=25473f1eaeb02935",
   "type": "library",
   "name": "github.com/spf13/cobra",
   "version": "v1.10.2",
   "cpe": "cpe:2.3:a:spf13:cobra:v1.10.2:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/spf13/cobra@v1.10.2",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:DMTTonx5m65Ic0GOoRY2c16WCbHxOOw6xxezuLaBpcU="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/spf13/pflag@v1.0.10?package-id=9d36b3df3b70008c",
   "type": "library",
   "name": "github.com/spf13/pflag",
   "version": "v1.0.10",
   "cpe": "cpe:2.3:a:spf13:pflag:v1.0.10:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/spf13/pflag@v1.0.10",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:4EBh2KAYBwaONj6b2Ye1GiHfwjqyROoF4RwYO+vPwFk="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/spf13/viper@v1.21.0?package-id=0406ec383e34a5a1",
   "type": "library",
   "name": "github.com/spf13/viper",
   "version": "v1.21.0",
   "cpe": "cpe:2.3:a:spf13:viper:v1.21.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/spf13/viper@v1.21.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:x5S+0EU27Lbphp4UKm1C+1oQO+rKx36vfCoaVebLFSU="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/spiffe/go-spiffe/v2@v2.7.0?package-id=0d4e8df1c8bcd850",
   "type": "library",
   "name": "github.com/spiffe/go-spiffe/v2",
   "version": "v2.7.0",
   "cpe": "cpe:2.3:a:spiffe:go-spiffe\\/v2:v2.7.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/spiffe/go-spiffe/v2@v2.7.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:spiffe:go_spiffe\\/v2:v2.7.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:uXe1MflJoHw58wAUvxVlcM7WpKtijWG7I1UidcGh6g4="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/subosito/gotenv@v1.6.0?package-id=2101bcea85b59942",
   "type": "library",
   "name": "github.com/subosito/gotenv",
   "version": "v1.6.0",
   "cpe": "cpe:2.3:a:subosito:gotenv:v1.6.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/subosito/gotenv@v1.6.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:9NlTDc1FTs4qu0DDq7AEtTPNw6SVm7uBMsUCUjABIf8="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/syndtr/goleveldb@v1.0.1-0.20220721030215-126854af5e6d?package-id=5bc89fad4eb350ee",
   "type": "library",
   "name": "github.com/syndtr/goleveldb",
   "version": "v1.0.1-0.20220721030215-126854af5e6d",
   "cpe": "cpe:2.3:a:syndtr:goleveldb:v1.0.1-0.20220721030215-126854af5e6d:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/syndtr/goleveldb@v1.0.1-0.20220721030215-126854af5e6d",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:vfofYNRScrDdvS342BElfbETmL1Aiz3i2t0zfRj16Hs="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/tchap/go-patricia/v2@v2.3.3?package-id=453c902b0c82ed43",
   "type": "library",
   "name": "github.com/tchap/go-patricia/v2",
   "version": "v2.3.3",
   "cpe": "cpe:2.3:a:tchap:go-patricia\\/v2:v2.3.3:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/tchap/go-patricia/v2@v2.3.3",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:tchap:go_patricia\\/v2:v2.3.3:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:xfNEsODumaEcCcY3gI0hYPZ/PcpVv5ju6RMAhgwZDDc="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/theupdateframework/go-tuf@v0.7.0?package-id=31837e174c64c7db",
   "type": "library",
   "name": "github.com/theupdateframework/go-tuf",
   "version": "v0.7.0",
   "cpe": "cpe:2.3:a:theupdateframework:go-tuf:v0.7.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/theupdateframework/go-tuf@v0.7.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:theupdateframework:go_tuf:v0.7.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:CqbQFrWo1ae3/I0UCblSbczevCCbS31Qvs5LdxRWqRI="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/theupdateframework/go-tuf/v2@v2.4.2?package-id=312df6a6988b235d",
   "type": "library",
   "name": "github.com/theupdateframework/go-tuf/v2",
   "version": "v2.4.2",
   "cpe": "cpe:2.3:a:theupdateframework:go-tuf\\/v2:v2.4.2:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/theupdateframework/go-tuf/v2@v2.4.2",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:theupdateframework:go_tuf\\/v2:v2.4.2:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:w7976/W8uTwlsegP5nRymlpjPgrwSh+AXUf85is6nJk="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/titanous/rocacheck@v0.0.0-20171023193734-afe73141d399?package-id=7a78864b7eb78c93",
   "type": "library",
   "name": "github.com/titanous/rocacheck",
   "version": "v0.0.0-20171023193734-afe73141d399",
   "cpe": "cpe:2.3:a:titanous:rocacheck:v0.0.0-20171023193734-afe73141d399:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/titanous/rocacheck@v0.0.0-20171023193734-afe73141d399",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:e/5i7d4oYZ+C1wj2THlRK+oAhjeS/TRQwMfkIuet3w0="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/tjfoc/gmsm@v1.4.1?package-id=0febd895ade99b6c",
   "type": "library",
   "name": "github.com/tjfoc/gmsm",
   "version": "v1.4.1",
   "cpe": "cpe:2.3:a:tjfoc:gmsm:v1.4.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/tjfoc/gmsm@v1.4.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:aMe1GlZb+0bLjn+cKTPEvvn9oUEBlJitaZiiBwsbgho="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/transparency-dev/formats@v0.1.1?package-id=9d0692917bfc01ec",
   "type": "library",
   "name": "github.com/transparency-dev/formats",
   "version": "v0.1.1",
   "cpe": "cpe:2.3:a:transparency-dev:formats:v0.1.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/transparency-dev/formats@v0.1.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:transparency_dev:formats:v0.1.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:transparency:formats:v0.1.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:4bVHJc+KdBgpA1OJD1yjI+g0i5Z1graCppTMH8lWKJI="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/transparency-dev/merkle@v0.0.2?package-id=ac71f92eec6a881d",
   "type": "library",
   "name": "github.com/transparency-dev/merkle",
   "version": "v0.0.2",
   "cpe": "cpe:2.3:a:transparency-dev:merkle:v0.0.2:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/transparency-dev/merkle@v0.0.2",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:transparency_dev:merkle:v0.0.2:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:transparency:merkle:v0.0.2:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:Q9nBoQcZcgPamMkGn7ghV8XiTZ/kRxn1yCG81+twTK4="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/valyala/fastjson@v1.6.10?package-id=e9c292729a03816b",
   "type": "library",
   "name": "github.com/valyala/fastjson",
   "version": "v1.6.10",
   "cpe": "cpe:2.3:a:valyala:fastjson:v1.6.10:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/valyala/fastjson@v1.6.10",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:/yjJg8jaVQdYR3arGxPE2X5z89xrlhS0eGXdv+ADTh4="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/vektah/gqlparser/v2@v2.5.33?package-id=b5cf6b10b9de640b",
   "type": "library",
   "name": "github.com/vektah/gqlparser/v2",
   "version": "v2.5.33",
   "cpe": "cpe:2.3:a:vektah:gqlparser\\/v2:v2.5.33:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/vektah/gqlparser/v2@v2.5.33",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:lRp8aIeNUNbimf/axZd7ETg24q06hBtPaas+TcvI/7E="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/withfig/autocomplete-tools/integrations/cobra@v1.2.1?package-id=d4536a1413c19db2",
   "type": "library",
   "name": "github.com/withfig/autocomplete-tools/integrations/cobra",
   "version": "v1.2.1",
   "cpe": "cpe:2.3:a:withfig:autocomplete-tools\\/integrations\\/cobra:v1.2.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/withfig/autocomplete-tools/integrations/cobra@v1.2.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:withfig:autocomplete_tools\\/integrations\\/cobra:v1.2.1:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:+dBg5k7nuTE38VVdoroRsT0Z88fmvdYrI2EjzJst35I="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/x448/float16@v0.8.4?package-id=1021eab7294109ba",
   "type": "library",
   "name": "github.com/x448/float16",
   "version": "v0.8.4",
   "cpe": "cpe:2.3:a:x448:float16:v0.8.4:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/x448/float16@v0.8.4",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:qLwI1I70+NjRFUR3zs1JPUCgaCXSh3SW62uAKT1mSBM="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb?package-id=308a9a6c1ee071cb",
   "type": "library",
   "name": "github.com/xeipuuv/gojsonpointer",
   "version": "v0.0.0-20190905194746-02993c407bfb",
   "cpe": "cpe:2.3:a:xeipuuv:gojsonpointer:v0.0.0-20190905194746-02993c407bfb:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:zGWFAtiMcyryUHoUjUJX0/lt1H2+i2Ka2n+D3DImSNo="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415?package-id=35d00f129ec8c3c4",
   "type": "library",
   "name": "github.com/xeipuuv/gojsonreference",
   "version": "v0.0.0-20180127040603-bd5ef7bd5415",
   "cpe": "cpe:2.3:a:xeipuuv:gojsonreference:v0.0.0-20180127040603-bd5ef7bd5415:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:EzJWgHovont7NscjpAxXsDA8S8BMYve8Y5+7cuRE7R0="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/yashtewari/glob-intersection@v0.2.0?package-id=2d333d3491732e74",
   "type": "library",
   "name": "github.com/yashtewari/glob-intersection",
   "version": "v0.2.0",
   "cpe": "cpe:2.3:a:yashtewari:glob-intersection:v0.2.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/yashtewari/glob-intersection@v0.2.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:yashtewari:glob_intersection:v0.2.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:8iuHdN88yYuCzCdjt0gDe+6bAhUwBeEWqThExu54RFg="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/github.com/youmark/pkcs8@v0.0.0-20240726163527-a2c0da244d78?package-id=05ade28cf432113a",
   "type": "library",
   "name": "github.com/youmark/pkcs8",
   "version": "v0.0.0-20240726163527-a2c0da244d78",
   "cpe": "cpe:2.3:a:youmark:pkcs8:v0.0.0-20240726163527-a2c0da244d78:*:*:*:*:*:*:*",
   "purl": "pkg:golang/github.com/youmark/pkcs8@v0.0.0-20240726163527-a2c0da244d78",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:ilQV1hzziu+LLM3zUTJ0trRztfwgjqKnBWNtSRkbmwM="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/gitlab.com/gitlab-org/api/client-go@v1.46.0?package-id=3f8fcbd54c8ca0bd",
   "type": "library",
   "name": "gitlab.com/gitlab-org/api/client-go",
   "version": "v1.46.0",
   "cpe": "cpe:2.3:a:gitlab-org:api\\/client-go:v1.46.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/gitlab.com/gitlab-org/api/client-go@v1.46.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:gitlab-org:api\\/client_go:v1.46.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:gitlab_org:api\\/client-go:v1.46.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:gitlab_org:api\\/client_go:v1.46.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:gitlab:api\\/client-go:v1.46.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:gitlab:api\\/client_go:v1.46.0:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:YxBWFZIFYKcGESCb9fpkwzouo+apyB9pr/XTWzNoL24="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1?package-id=ea9fce2693b1be97",
   "type": "library",
   "name": "go.opentelemetry.io/auto/sdk",
   "version": "v1.2.1",
   "cpe": "cpe:2.3:a:auto:sdk:v1.2.1:*:*:*:*:*:*:*",
   "purl": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:jXsnJ4Lmnqd11kwkBV2LgLoFMZKizbCi5fNZ/ipaZ64="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.68.0?package-id=9a58dafe56f0c983",
   "type": "library",
   "name": "go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc",
   "version": "v0.68.0",
   "cpe": "cpe:2.3:a:contrib:instrumentation\\/google.golang.org\\/grpc\\/otelgrpc:v0.68.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.68.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:0Qx7VGBacMm9ZENQ7TnNObTYI4ShC+lHI16seduaxZo="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.68.0?package-id=cb0e10c9c8f2232a",
   "type": "library",
   "name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp",
   "version": "v0.68.0",
   "cpe": "cpe:2.3:a:contrib:instrumentation\\/net\\/http\\/otelhttp:v0.68.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.68.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:CqXxU8VOmDefoh0+ztfGaymYbhdB/tT3zs79QaZTNGY="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/go.opentelemetry.io/otel@v1.44.0?package-id=b1b6e4fe4021f3d7",
   "type": "library",
   "name": "go.opentelemetry.io/otel",
   "version": "v1.44.0",
   "cpe": "cpe:2.3:a:opentelemetry:opentelemetry:v1.44.0:*:*:*:*:go:*:*",
   "purl": "pkg:golang/go.opentelemetry.io/otel@v1.44.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:JjwHmHpA4iZ3wBxluu2fbbE7j4kqlE8jXyAyPXH7HqU="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/go.opentelemetry.io/otel/metric@v1.44.0?package-id=cb0efebe4e799e0f",
   "type": "library",
   "name": "go.opentelemetry.io/otel/metric",
   "version": "v1.44.0",
   "cpe": "cpe:2.3:a:otel:metric:v1.44.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/go.opentelemetry.io/otel/metric@v1.44.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:1w0gILTcHdr3YI+ixLyjemwrVnsMURbTZFrSYCdDdmc="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/go.opentelemetry.io/otel/trace@v1.44.0?package-id=15276e72dcdbbff3",
   "type": "library",
   "name": "go.opentelemetry.io/otel/trace",
   "version": "v1.44.0",
   "cpe": "cpe:2.3:a:otel:trace:v1.44.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/go.opentelemetry.io/otel/trace@v1.44.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:jxF5CsGYCe74MCRx2X4g7WsY/VBKRqqpNvXlX/6gtIk="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/go.uber.org/multierr@v1.11.0?package-id=3ed9b0bb2b877dc8",
   "type": "library",
   "name": "go.uber.org/multierr",
   "version": "v1.11.0",
   "purl": "pkg:golang/go.uber.org/multierr@v1.11.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:blXXJkSxSSfBVBlC76pxqeO+LN3aDfLQo+309xJstO0="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/go.uber.org/zap@v1.28.0?package-id=afeab19e59e0ba2a",
   "type": "library",
   "name": "go.uber.org/zap",
   "version": "v1.28.0",
   "purl": "pkg:golang/go.uber.org/zap@v1.28.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:IZzaP1Fv73/T/pBMLk4VutPl36uNC+OSUh3JLG3FIjo="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/go.yaml.in/yaml/v2@v2.4.4?package-id=9db42b5f8a6cd472",
   "type": "library",
   "name": "go.yaml.in/yaml/v2",
   "version": "v2.4.4",
   "cpe": "cpe:2.3:a:yaml:v2:v2.4.4:*:*:*:*:*:*:*",
   "purl": "pkg:golang/go.yaml.in/yaml/v2@v2.4.4",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:tuyd0P+2Ont/d6e2rl3be67goVK4R6deVxCUX5vyPaQ="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/go.yaml.in/yaml/v3@v3.0.4?package-id=a35b5a9b6900e37f",
   "type": "library",
   "name": "go.yaml.in/yaml/v3",
   "version": "v3.0.4",
   "cpe": "cpe:2.3:a:yaml:v3:v3.0.4:*:*:*:*:*:*:*",
   "purl": "pkg:golang/go.yaml.in/yaml/v3@v3.0.4",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:tfq32ie2Jv2UxXFdLJdh3jXuOzWiL1fo0bu/FbuKpbc="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/golang.org/x/crypto@v0.53.0?package-id=8edbf720ecb2a051",
   "type": "library",
   "name": "golang.org/x/crypto",
   "version": "v0.53.0",
   "cpe": "cpe:2.3:a:golang:crypto:v0.53.0:*:*:*:*:go:*:*",
   "purl": "pkg:golang/golang.org/x/crypto@v0.53.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:go:ssh:v0.53.0:*:*:*:*:go:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:QZ4Muo8THX6CizN2vPPd5fBGHyogrdK9fG4wLPFUsto="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/golang.org/x/mod@v0.37.0?package-id=b45b1cf1c7143317",
   "type": "library",
   "name": "golang.org/x/mod",
   "version": "v0.37.0",
   "cpe": "cpe:2.3:a:golang:x\\/mod:v0.37.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/golang.org/x/mod@v0.37.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:vF1DjpVEshcIqoEaauuHebaLk1O1forxjxBaVn884JQ="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/golang.org/x/net@v0.56.0?package-id=7bc3abfb3544dc78",
   "type": "library",
   "name": "golang.org/x/net",
   "version": "v0.56.0",
   "cpe": "cpe:2.3:a:golang:networking:v0.56.0:*:*:*:*:go:*:*",
   "purl": "pkg:golang/golang.org/x/net@v0.56.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:golang:net:v0.56.0:*:*:*:*:go:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:Rw8j/hFzGvJUZwNBXnAtf5sVDVt+65SK2C7IxCxZt5o="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/golang.org/x/oauth2@v0.36.0?package-id=e400627f916455ca",
   "type": "library",
   "name": "golang.org/x/oauth2",
   "version": "v0.36.0",
   "cpe": "cpe:2.3:a:golang:x\\/oauth2:v0.36.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/golang.org/x/oauth2@v0.36.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:peZ/1z27fi9hUOFCAZaHyrpWG5lwe0RJEEEeH0ThlIs="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/golang.org/x/sync@v0.21.0?package-id=8b28a454369f9a14",
   "type": "library",
   "name": "golang.org/x/sync",
   "version": "v0.21.0",
   "cpe": "cpe:2.3:a:golang:x\\/sync:v0.21.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/golang.org/x/sync@v0.21.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:HLII4xRRTtCRkxYp4HNFF0Js/Og6q2i++KXbg0gHCwM="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/golang.org/x/sys@v0.46.0?package-id=20bc1aa0d402312e",
   "type": "library",
   "name": "golang.org/x/sys",
   "version": "v0.46.0",
   "cpe": "cpe:2.3:a:golang:x\\/sys:v0.46.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/golang.org/x/sys@v0.46.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:noSf2Fq6F8DBgS+LysIkx7rIExoNHJsxOAtPp4rthXw="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/golang.org/x/term@v0.44.0?package-id=b463e0a447dfa5b2",
   "type": "library",
   "name": "golang.org/x/term",
   "version": "v0.44.0",
   "cpe": "cpe:2.3:a:golang:x\\/term:v0.44.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/golang.org/x/term@v0.44.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:0rLvDRCtNj0gZkyIXhCyOb2OAzEhLVqc4B+hrsBhrmc="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/golang.org/x/text@v0.38.0?package-id=648c9332488f714e",
   "type": "library",
   "name": "golang.org/x/text",
   "version": "v0.38.0",
   "cpe": "cpe:2.3:a:golang:text:v0.38.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/golang.org/x/text@v0.38.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:sXmwo9DwP3OK9EZ7PqAdaooSGozfl/3a6/xJcbzPRhE="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/golang.org/x/time@v0.15.0?package-id=2552a2dc3017ed64",
   "type": "library",
   "name": "golang.org/x/time",
   "version": "v0.15.0",
   "cpe": "cpe:2.3:a:golang:x\\/time:v0.15.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/golang.org/x/time@v0.15.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:bbrp8t3bGUeFOx08pvsMYRTCVSMk89u4tKbNOZbp88U="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/google.golang.org/api@v0.284.0?package-id=3db0e47165485556",
   "type": "library",
   "name": "google.golang.org/api",
   "version": "v0.284.0",
   "cpe": "cpe:2.3:a:google:api:v0.284.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/google.golang.org/api@v0.284.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:i+cKTgeQRcRySkP7QTl5PDO7/pAm8EcMFIUMlNbk4Vc="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/google.golang.org/genproto@v0.0.0-20260406210006-6f92a3bedf2d?package-id=1a0a720556ecf9c9",
   "type": "library",
   "name": "google.golang.org/genproto",
   "version": "v0.0.0-20260406210006-6f92a3bedf2d",
   "cpe": "cpe:2.3:a:google:genproto:v0.0.0-20260406210006-6f92a3bedf2d:*:*:*:*:*:*:*",
   "purl": "pkg:golang/google.golang.org/genproto@v0.0.0-20260406210006-6f92a3bedf2d",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:N1Ec54vZnIPd7MnxRiYLW+oY4fDR4BOS/LrssdD9+ek="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260526163538-3dc84a4a5aaa?package-id=eef6d517a28c83ec",
   "type": "library",
   "name": "google.golang.org/genproto/googleapis/api",
   "version": "v0.0.0-20260526163538-3dc84a4a5aaa",
   "cpe": "cpe:2.3:a:google:genproto:v0.0.0-20260526163538-3dc84a4a5aaa:*:*:*:*:*:*:*",
   "purl": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260526163538-3dc84a4a5aaa",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:Kjn0N0tCrDgiAFW+lGO4JZ3ck44CehvJQMAwj9QF0G8="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260526163538-3dc84a4a5aaa?package-id=85a0363e9bfe36ee",
   "type": "library",
   "name": "google.golang.org/genproto/googleapis/rpc",
   "version": "v0.0.0-20260526163538-3dc84a4a5aaa",
   "cpe": "cpe:2.3:a:google:genproto:v0.0.0-20260526163538-3dc84a4a5aaa:*:*:*:*:*:*:*",
   "purl": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260526163538-3dc84a4a5aaa",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:mZHHdPZl0dbGHCflZgAq/Q468DWVFcU2whhB2KAo8fk="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/google.golang.org/grpc@v1.82.0?package-id=1eda7ac324015627",
   "type": "library",
   "name": "google.golang.org/grpc",
   "version": "v1.82.0",
   "cpe": "cpe:2.3:a:google:grpc:v1.82.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/google.golang.org/grpc@v1.82.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:vguDnZUPjE26w09A63VoxZPnvPjB5Riyc0mkXPFmAIU="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/google.golang.org/protobuf@v1.36.12-0.20260120151049-f2248ac996af?package-id=2d5924eaa88c80d9",
   "type": "library",
   "name": "google.golang.org/protobuf",
   "version": "v1.36.12-0.20260120151049-f2248ac996af",
   "cpe": "cpe:2.3:a:google:protobuf:v1.36.12-0.20260120151049-f2248ac996af:*:*:*:*:*:*:*",
   "purl": "pkg:golang/google.golang.org/protobuf@v1.36.12-0.20260120151049-f2248ac996af",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:+5/Sw3GsDNlEmu7TfklWKPdQ0Ykja5VEmq2i817+jbI="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/gopkg.in/evanphx/json-patch.v4@v4.13.0?package-id=a98a77b639cd2e7f",
   "type": "library",
   "name": "gopkg.in/evanphx/json-patch.v4",
   "version": "v4.13.0",
   "purl": "pkg:golang/gopkg.in/evanphx/json-patch.v4@v4.13.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:czT3CmqEaQ1aanPc5SdlgQrrEIb8w/wwCvWWnfEbYzo="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/gopkg.in/inf.v0@v0.9.1?package-id=e45a57ce1ba4346c",
   "type": "library",
   "name": "gopkg.in/inf.v0",
   "version": "v0.9.1",
   "purl": "pkg:golang/gopkg.in/inf.v0@v0.9.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:73M5CoZyi3ZLMOyDlQh031Cx6N9NDJ2Vvfl76EDAgDc="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/gopkg.in/ini.v1@v1.67.3?package-id=c7b57c3b2c7e64ee",
   "type": "library",
   "name": "gopkg.in/ini.v1",
   "version": "v1.67.3",
   "purl": "pkg:golang/gopkg.in/ini.v1@v1.67.3",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:iM9Lhz5MRSGhHVGGwCuzG9KO8PoirCXj/m/qTmOJJQw="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/gopkg.in/yaml.v3@v3.0.1?package-id=bd2effccad55f898",
   "type": "library",
   "name": "gopkg.in/yaml.v3",
   "version": "v3.0.1",
   "cpe": "cpe:2.3:a:yaml_project:yaml:v3.0.1:*:*:*:*:go:*:*",
   "purl": "pkg:golang/gopkg.in/yaml.v3@v3.0.1",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/k8s.io/api@v0.36.2?package-id=139bbbc0fcb5555d",
   "type": "library",
   "name": "k8s.io/api",
   "version": "v0.36.2",
   "purl": "pkg:golang/k8s.io/api@v0.36.2",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:TF6YDLIzKfccK7cq9YpTcGX8TJmEkHVRv78DM51fRYY="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/k8s.io/apimachinery@v0.36.2?package-id=32735366bcec84c7",
   "type": "library",
   "name": "k8s.io/apimachinery",
   "version": "v0.36.2",
   "purl": "pkg:golang/k8s.io/apimachinery@v0.36.2",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:0PE/W/WNy1UX61NLbXY5TMbJ6UwLL6E6lAPkYrKFxbQ="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/k8s.io/client-go@v0.36.2?package-id=9e978e293b321233",
   "type": "library",
   "name": "k8s.io/client-go",
   "version": "v0.36.2",
   "purl": "pkg:golang/k8s.io/client-go@v0.36.2",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:bfgxmFKc9CgqsgX4xKLAAdmTQlWee7Ob/HlDOrJ5TBI="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/k8s.io/klog/v2@v2.140.0?package-id=a909000b1aef35e0",
   "type": "library",
   "name": "k8s.io/klog/v2",
   "version": "v2.140.0",
   "cpe": "cpe:2.3:a:klog:v2:v2.140.0:*:*:*:*:*:*:*",
   "purl": "pkg:golang/k8s.io/klog/v2@v2.140.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:Tf+J3AH7xnUzZyVVXhTgGhEKnFqye14aadWv7bzXdzc="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20260317180543-43fb72c5454a?package-id=7d96e12f8a3663ad",
   "type": "library",
   "name": "k8s.io/kube-openapi",
   "version": "v0.0.0-20260317180543-43fb72c5454a",
   "purl": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20260317180543-43fb72c5454a",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:xCeOEAOoGYl2jnJoHkC3hkbPJgdATINPMAxaynU2Ovg="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/k8s.io/utils@v0.0.0-20260210185600-b8788abfbbc2?package-id=e7ead362211b852c",
   "type": "library",
   "name": "k8s.io/utils",
   "version": "v0.0.0-20260210185600-b8788abfbbc2",
   "purl": "pkg:golang/k8s.io/utils@v0.0.0-20260210185600-b8788abfbbc2",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:AZYQSJemyQB5eRxqcPky+/7EdBj0xi3g0ZcxxJ7vbWU="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/sigs.k8s.io/json@v0.0.0-20250730193827-2d320260d730?package-id=6593f7a88aa81392",
   "type": "library",
   "name": "sigs.k8s.io/json",
   "version": "v0.0.0-20250730193827-2d320260d730",
   "purl": "pkg:golang/sigs.k8s.io/json@v0.0.0-20250730193827-2d320260d730",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:IpInykpT6ceI+QxKBbEflcR5EXP7sU1kvOlxwZh5txg="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/sigs.k8s.io/randfill@v1.0.0?package-id=e54e63d104b299bf",
   "type": "library",
   "name": "sigs.k8s.io/randfill",
   "version": "v1.0.0",
   "purl": "pkg:golang/sigs.k8s.io/randfill@v1.0.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:JfjMILfT8A6RbawdsK2JXGBR5AQVfd+9TbzrlneTyrU="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/sigs.k8s.io/release-utils@v0.12.4?package-id=1bb18b23079f64a7",
   "type": "library",
   "name": "sigs.k8s.io/release-utils",
   "version": "v0.12.4",
   "purl": "pkg:golang/sigs.k8s.io/release-utils@v0.12.4",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:kuG6WTWGCKx5uUrJwl2uFErOKOw+4Ba8WrPmOQh5J3g="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/sigs.k8s.io/structured-merge-diff/v6@v6.3.2?package-id=29bdac73fc90b8f5",
   "type": "library",
   "name": "sigs.k8s.io/structured-merge-diff/v6",
   "version": "v6.3.2",
   "cpe": "cpe:2.3:a:structured-merge-diff:v6:v6.3.2:*:*:*:*:*:*:*",
   "purl": "pkg:golang/sigs.k8s.io/structured-merge-diff/v6@v6.3.2",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:structured_merge_diff:v6:v6.3.2:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:structured-merge:v6:v6.3.2:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:structured_merge:v6:v6.3.2:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:cpe23",
     "value": "cpe:2.3:a:structured:v6:v6.3.2:*:*:*:*:*:*:*"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:kwVWMx5yS1CrnFWA/2QHyRVJ8jM6dBA80uLmm0wJkk8="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/sigs.k8s.io/yaml@v1.6.0?package-id=33945018743d6925",
   "type": "library",
   "name": "sigs.k8s.io/yaml",
   "version": "v1.6.0",
   "purl": "pkg:golang/sigs.k8s.io/yaml@v1.6.0",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:architecture",
     "value": "arm64"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    },
    {
     "name": "syft:metadata:h1Digest",
     "value": "h1:G8fkbMSAFqgEFgh4b1wmtzDnioxFCUgTZhlbj5P9QYs="
    },
    {
     "name": "syft:metadata:mainModule",
     "value": "github.com/sigstore/cosign/v3"
    }
   ]
  },
  {
   "bom-ref": "pkg:golang/stdlib@1.26.6?package-id=5493a7925f3f056e",
   "type": "library",
   "name": "stdlib",
   "version": "go1.26.6",
   "licenses": [
    {
     "license": {
      "id": "BSD-3-Clause"
     }
    }
   ],
   "cpe": "cpe:2.3:a:golang:go:1.26.6:-:*:*:*:*:*:*",
   "purl": "pkg:golang/stdlib@1.26.6",
   "properties": [
    {
     "name": "syft:package:foundBy",
     "value": "go-module-binary-cataloger"
    },
    {
     "name": "syft:package:language",
     "value": "go"
    },
    {
     "name": "syft:package:type",
     "value": "go-module"
    },
    {
     "name": "syft:package:metadataType",
     "value": "go-module-buildinfo-entry"
    },
    {
     "name": "syft:location:0:layerID",
     "value": "sha256:faf27a49a7277f08e164d6d74c11fd8ef2a09491cd86591d4f321f374f558d59"
    },
    {
     "name": "syft:location:0:path",
     "value": "/bin/cosign"
    },
    {
     "name": "syft:metadata:goCompiledVersion",
     "value": "go1.26.6"
    }
   ]
  },
  {
   "type": "application",
   "name": "cosign",
   "version": "3.1.3",
   "description": "container signing, verification and storage in an OCI registry",
   "properties": []
  }
 ],
 "dependencies": [
  {
   "ref": "pkg:golang/github.com/sigstore/cosign/v3@v3.1.3?package-id=a6cdfc047d26d785",
   "dependsOn": [
    "pkg:golang/buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go@v1.36.11-20260415201107-50325440f8f2.1?package-id=7297573af5cda60e",
    "pkg:golang/cloud.google.com/go/auth/oauth2adapt@v0.2.8?package-id=2b2fee2cfc295c73",
    "pkg:golang/cloud.google.com/go/auth@v0.20.0?package-id=918944dea4086239",
    "pkg:golang/cloud.google.com/go/compute/metadata@v0.9.0?package-id=df2c7c57fb5db4db",
    "pkg:golang/cloud.google.com/go/iam@v1.11.0?package-id=804a417e8649fffc",
    "pkg:golang/cloud.google.com/go/kms@v1.31.0?package-id=f418c1c4ee349307",
    "pkg:golang/cloud.google.com/go/longrunning@v1.0.0?package-id=e9ffcc5f6b7cd2fa",
    "pkg:golang/connectrpc.com/connect@v1.20.0?package-id=e3802a2ca7c359dc",
    "pkg:golang/cuelabs.dev/go/oci/ociregistry@v0.0.0-20251212221603-3adeb8663819?package-id=915251ed8a23fdd3",
    "pkg:golang/cuelang.org/go@v0.16.1?package-id=2d6e73907e206ee3",
    "pkg:golang/github.com/agnivade/levenshtein@v1.2.1?package-id=94dae46fe05e4cbf",
    "pkg:golang/github.com/alibabacloud-go/alibabacloud-gateway-spi@v0.0.4?package-id=73d2509d242ecaa0",
    "pkg:golang/github.com/alibabacloud-go/cr-20160607@v1.0.1?package-id=eb41c1a044ace166",
    "pkg:golang/github.com/alibabacloud-go/cr-20181201@v1.0.10?package-id=ab7a7ad525a5b9b2",
    "pkg:golang/github.com/alibabacloud-go/darabonba-openapi@v0.2.1?package-id=4e4a7ae2febb57a0",
    "pkg:golang/github.com/alibabacloud-go/debug@v1.0.0?package-id=49999def820b9b03",
    "pkg:golang/github.com/alibabacloud-go/endpoint-util@v1.1.1?package-id=8b30d66f42a2ef07",
    "pkg:golang/github.com/alibabacloud-go/openapi-util@v0.1.0?package-id=34a7623ed6786c58",
    "pkg:golang/github.com/alibabacloud-go/tea-utils@v1.4.5?package-id=bac3a2aa7240a705",
    "pkg:golang/github.com/alibabacloud-go/tea-xml@v1.1.3?package-id=9b0b9c8c3f0e577b",
    "pkg:golang/github.com/alibabacloud-go/tea@v1.2.1?package-id=95e6dec8db56d73f",
    "pkg:golang/github.com/aliyun/credentials-go@v1.3.2?package-id=d845e297c39151fd",
    "pkg:golang/github.com/aliyuncontainerservice/ack-ram-tool/pkg/credentials/provider@v0.14.0?package-id=2cdbd42c1b660621",
    "pkg:golang/github.com/asaskevich/govalidator@v0.0.0-20230301143203-a9d515a09cc2?package-id=1bdb27047039c472",
    "pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.32.25?package-id=5978e734f3259484",
    "pkg:golang/github.com/aws/aws-sdk-go-v2/credentials@v1.19.24?package-id=ec5d398e2cdc1126",
    "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.18.29?package-id=196d652d3ffe1aae",
    "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.4.29?package-id=2d645fc5a9aa13fb",
    "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.7.29?package-id=eec4094c80e418b9",
    "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/v4a@v1.4.30?package-id=34eade5515ff40ab",
    "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ecr@v1.55.3?package-id=8d8972a88b6a94f7",
    "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ecrpublic@v1.38.10?package-id=4ec1a35fe707f4f4",
    "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding@v1.13.12?package-id=0d17ff214c472fa3",
    "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.13.29?package-id=686db321667755f2",
    "pkg:golang/github.com/aws/aws-sdk-go-v2/service/kms@v1.53.4?package-id=aca05c3be9a70332",
    "pkg:golang/github.com/aws/aws-sdk-go-v2/service/signin@v1.2.0?package-id=3ad2bcad45a7b37c",
    "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sso@v1.31.3?package-id=3e0e749166469e02",
    "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.36.6?package-id=d0e182cd8a9ba30f",
    "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sts@v1.43.3?package-id=a83b5edfea862e6e",
    "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.42.0?package-id=7898fe582b87e3b0",
    "pkg:golang/github.com/aws/smithy-go@v1.27.2?package-id=281c3e5b156683d2",
    "pkg:golang/github.com/awslabs/amazon-ecr-credential-helper/ecr-login@v0.12.0?package-id=d0e7d5ab307d3738",
    "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/azcore@v1.22.0?package-id=e1b057912e18bb77",
    "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/azidentity@v1.14.0?package-id=403ebcd24ccbbe25",
    "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/internal@v1.12.0?package-id=3b2d7b3d552ed3dd",
    "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/security/keyvault/azkeys@v1.5.0?package-id=7fd5b46980f897c1",
    "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/security/keyvault/internal@v1.2.0?package-id=b83453f651babca1",
    "pkg:golang/github.com/azure/azure-sdk-for-go@v68.0.0%2Bincompatible?package-id=229b422137101ef2",
    "pkg:golang/github.com/azure/go-autorest/autorest/adal@v0.9.23?package-id=5eb144b6609117f4",
    "pkg:golang/github.com/azure/go-autorest/autorest/azure/auth@v0.5.12?package-id=5e92ecfa216862c1",
    "pkg:golang/github.com/azure/go-autorest/autorest/azure/cli@v0.4.6?package-id=bfed234bb8793eae",
    "pkg:golang/github.com/azure/go-autorest/autorest/date@v0.3.0?package-id=fed0aadd01548458",
    "pkg:golang/github.com/azure/go-autorest/autorest@v0.11.29?package-id=05a71e3ca9b7f336",
    "pkg:golang/github.com/azure/go-autorest/logger@v0.2.1?package-id=f671e4a6f026fc13",
    "pkg:golang/github.com/azure/go-autorest/tracing@v0.6.0?package-id=c33059cc940478df",
    "pkg:golang/github.com/azuread/microsoft-authentication-library-for-go@v1.7.2?package-id=61d13bcdfbc863db",
    "pkg:golang/github.com/blang/semver@v3.5.1%2Bincompatible?package-id=046a18af6d3c301f",
    "pkg:golang/github.com/buildkite/agent/v3@v3.130.0?package-id=0d548d71b0f80cde",
    "pkg:golang/github.com/buildkite/go-pipeline@v0.17.1?package-id=20755089ffe31e4b",
    "pkg:golang/github.com/buildkite/interpolate@v0.1.5?package-id=3157bae8dcf50e68",
    "pkg:golang/github.com/buildkite/roko@v1.4.0?package-id=126de29d4a48b03b",
    "pkg:golang/github.com/cenkalti/backoff/v4@v4.3.0?package-id=201d621af5cef62b",
    "pkg:golang/github.com/cenkalti/backoff/v5@v5.0.3?package-id=e81204a905e86718",
    "pkg:golang/github.com/cespare/xxhash/v2@v2.3.0?package-id=7038dcac893ab5dd",
    "pkg:golang/github.com/chrismellard/docker-credential-acr-env@v0.0.0-20230304212654-82a0ddb27589?package-id=60fb42954f769e71",
    "pkg:golang/github.com/clbanning/mxj/v2@v2.7.0?package-id=3d5e9e9af244980b",
    "pkg:golang/github.com/cockroachdb/apd/v3@v3.2.1?package-id=f452d6455cfced72",
    "pkg:golang/github.com/common-nighthawk/go-figure@v0.0.0-20210622060536-734e95fb86be?package-id=767f97690d0c955c",
    "pkg:golang/github.com/coreos/go-oidc/v3@v3.18.0?package-id=380299470e22e77c",
    "pkg:golang/github.com/cyberphone/json-canonicalization@v0.0.0-20241213102144-19d51d7fe467?package-id=1720b651c9f6ed47",
    "pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc?package-id=345f8a5999f6d12b",
    "pkg:golang/github.com/digitorus/pkcs7@v0.0.0-20230818184609-3a137a874352?package-id=d7944e57e70a318b",
    "pkg:golang/github.com/digitorus/timestamp@v0.0.0-20231217203849-220c5c2851b7?package-id=621e908c9adb9f9c",
    "pkg:golang/github.com/dimchansky/utfbom@v1.1.1?package-id=ab183bbbde635621",
    "pkg:golang/github.com/docker/cli@v29.5.3%2Bincompatible?package-id=b7fb350239e201b3",
    "pkg:golang/github.com/docker/docker-credential-helpers@v0.9.5?package-id=0c7b4e68660fb9cc",
    "pkg:golang/github.com/dustin/go-humanize@v1.0.1?package-id=1f1782276acc76bc",
    "pkg:golang/github.com/emicklei/go-restful/v3@v3.13.0?package-id=a4605b36ba23e106",
    "pkg:golang/github.com/emicklei/proto@v1.14.3?package-id=ff633a58ac74c12b",
    "pkg:golang/github.com/felixge/httpsnoop@v1.0.4?package-id=a1a69b07ab68f8e8",
    "pkg:golang/github.com/fsnotify/fsnotify@v1.10.1?package-id=5b9f4d19dd31a533",
    "pkg:golang/github.com/fxamacker/cbor/v2@v2.9.0?package-id=15a9ee55208bbc09",
    "pkg:golang/github.com/go-chi/chi/v5@v5.3.0?package-id=51c4b90e00bd9053",
    "pkg:golang/github.com/go-jose/go-jose/v4@v4.1.4?package-id=69ddb3eddbbf05e7",
    "pkg:golang/github.com/go-logr/logr@v1.4.3?package-id=d6a486f8e27868b3",
    "pkg:golang/github.com/go-logr/stdr@v1.2.2?package-id=ebb5c0aa5eb80de8",
    "pkg:golang/github.com/go-openapi/analysis@v0.25.2?package-id=f8eed8b6e6f16e69",
    "pkg:golang/github.com/go-openapi/errors@v0.22.8?package-id=3430941fc07a8a1f",
    "pkg:golang/github.com/go-openapi/jsonpointer@v0.23.1?package-id=927fe6d48d56c2ff",
    "pkg:golang/github.com/go-openapi/jsonreference@v0.21.6?package-id=b6e0dc7a084bbb66",
    "pkg:golang/github.com/go-openapi/loads@v0.24.0?package-id=05752e6c06ecf7c4",
    "pkg:golang/github.com/go-openapi/runtime/server-middleware@v0.30.0?package-id=7ab1a89be8d80eb4",
    "pkg:golang/github.com/go-openapi/runtime@v0.32.4?package-id=8965e4ae2efa7d3f",
    "pkg:golang/github.com/go-openapi/spec@v0.22.6?package-id=eaa5ef6fdf40f459",
    "pkg:golang/github.com/go-openapi/strfmt@v0.26.4?package-id=b1b8f0a17d2e8b1c",
    "pkg:golang/github.com/go-openapi/swag/cmdutils@v0.26.1?package-id=18122809478fe840",
    "pkg:golang/github.com/go-openapi/swag/conv@v0.27.0?package-id=4ee5b2eaa87717af",
    "pkg:golang/github.com/go-openapi/swag/fileutils@v0.26.1?package-id=3699846e42bf6319",
    "pkg:golang/github.com/go-openapi/swag/jsonname@v0.26.1?package-id=92e5294eb440b9ad",
    "pkg:golang/github.com/go-openapi/swag/jsonutils@v0.26.1?package-id=b2747811bb865f81",
    "pkg:golang/github.com/go-openapi/swag/loading@v0.26.1?package-id=784ef260627fffa9",
    "pkg:golang/github.com/go-openapi/swag/mangling@v0.26.1?package-id=299bb791bc644a68",
    "pkg:golang/github.com/go-openapi/swag/netutils@v0.26.1?package-id=83c931ce8211accf",
    "pkg:golang/github.com/go-openapi/swag/stringutils@v0.26.1?package-id=ee190fb893682355",
    "pkg:golang/github.com/go-openapi/swag/typeutils@v0.27.0?package-id=2158a5eaf0168dbe",
    "pkg:golang/github.com/go-openapi/swag/yamlutils@v0.26.1?package-id=b9e88ae886b7636e",
    "pkg:golang/github.com/go-openapi/swag@v0.26.1?package-id=4630c50819929617",
    "pkg:golang/github.com/go-openapi/validate@v0.26.0?package-id=5d80bfe41237998a",
    "pkg:golang/github.com/go-viper/mapstructure/v2@v2.5.0?package-id=b71ffbaff5223217",
    "pkg:golang/github.com/gobwas/glob@v0.2.3?package-id=2bc51a11e90f180a",
    "pkg:golang/github.com/golang-jwt/jwt/v4@v4.5.2?package-id=88c436e801da4b8e",
    "pkg:golang/github.com/golang-jwt/jwt/v5@v5.3.1?package-id=67c906452a60d24d",
    "pkg:golang/github.com/golang/snappy@v0.0.4?package-id=acacdf27f2303032",
    "pkg:golang/github.com/google/certificate-transparency-go@v1.3.3?package-id=d9d194730476b99d",
    "pkg:golang/github.com/google/gnostic-models@v0.7.0?package-id=408571aa76e36d50",
    "pkg:golang/github.com/google/go-cmp@v0.7.0?package-id=b318e402d7dc5f23",
    "pkg:golang/github.com/google/go-containerregistry@v0.21.7?package-id=47c4b93a892d3606",
    "pkg:golang/github.com/google/go-github/v88@v88.0.0?package-id=953143721eff4316",
    "pkg:golang/github.com/google/go-querystring@v1.2.0?package-id=6a6a3350b295910a",
    "pkg:golang/github.com/google/s2a-go@v0.1.9?package-id=c922a3d76dc159b9",
    "pkg:golang/github.com/google/uuid@v1.6.0?package-id=a173c5fbeb07a3e4",
    "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.16?package-id=94685279e0b06dff",
    "pkg:golang/github.com/googleapis/gax-go/v2@v2.22.0?package-id=26ecb8312b6047e1",
    "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.29.0?package-id=7ac09969e36dc78c",
    "pkg:golang/github.com/hashicorp/errwrap@v1.1.0?package-id=c2626883d362e9d6",
    "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2?package-id=859c03b20a36ada9",
    "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1?package-id=dced9c9d87c01579",
    "pkg:golang/github.com/hashicorp/go-retryablehttp@v0.7.8?package-id=c7fa566fa3a7d259",
    "pkg:golang/github.com/hashicorp/go-rootcerts@v1.0.2?package-id=465da26d75766a14",
    "pkg:golang/github.com/hashicorp/go-secure-stdlib/parseutil@v0.2.0?package-id=73508351f1d4e0a7",
    "pkg:golang/github.com/hashicorp/go-secure-stdlib/strutil@v0.1.2?package-id=ba44261b7a073dc0",
    "pkg:golang/github.com/hashicorp/go-sockaddr@v1.0.7?package-id=9b79a99bbbab1028",
    "pkg:golang/github.com/hashicorp/hcl@v1.0.1-vault-7?package-id=0952d33311d7d3dc",
    "pkg:golang/github.com/hashicorp/vault/api@v1.22.0?package-id=0c7fe11fdb27f7ac",
    "pkg:golang/github.com/in-toto/attestation@v1.2.0?package-id=d043c919e0787f8f",
    "pkg:golang/github.com/in-toto/in-toto-golang@v0.11.0?package-id=5645f1b35b73b036",
    "pkg:golang/github.com/jedisct1/go-minisign@v0.0.0-20230811132847-661be99b8267?package-id=7e889392d09f8231",
    "pkg:golang/github.com/jellydator/ttlcache/v3@v3.4.0?package-id=a8520e0d719ab988",
    "pkg:golang/github.com/json-iterator/go@v1.1.12?package-id=988ca552553b69b3",
    "pkg:golang/github.com/klauspost/compress@v1.18.6?package-id=5d95bf3c6357005e",
    "pkg:golang/github.com/kylelemons/godebug@v1.1.0?package-id=18af238b58cbd8f5",
    "pkg:golang/github.com/lestrrat-go/blackmagic@v1.0.4?package-id=e36545799877c993",
    "pkg:golang/github.com/lestrrat-go/dsig@v1.2.1?package-id=03ccded2d8d8e921",
    "pkg:golang/github.com/lestrrat-go/httpcc@v1.0.1?package-id=69c127570297f0b7",
    "pkg:golang/github.com/lestrrat-go/httprc/v3@v3.0.5?package-id=0a4f0cf013a930fb",
    "pkg:golang/github.com/lestrrat-go/jwx/v3@v3.1.1?package-id=119a0c8b128a8b66",
    "pkg:golang/github.com/lestrrat-go/option/v2@v2.0.0?package-id=5c3a8daa99666b38",
    "pkg:golang/github.com/letsencrypt/boulder@v0.20260309.0?package-id=2d6e2f60fc0ccea8",
    "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0?package-id=ce2f749369c8eda7",
    "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1?package-id=5c251b1341fdcb11",
    "pkg:golang/github.com/mitchellh/mapstructure@v1.5.1-0.20231216201459-8508981c8b6c?package-id=57e63875ccf34473",
    "pkg:golang/github.com/moby/term@v0.5.2?package-id=b55135a477e57abd",
    "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd?package-id=a0e7ceeae2a13ddd",
    "pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee?package-id=114d31e545a346dd",
    "pkg:golang/github.com/mozillazg/docker-credential-acr-helper@v0.4.0?package-id=46af7d7a2f597cef",
    "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822?package-id=d67a0622bd36e12a",
    "pkg:golang/github.com/natefinch/atomic@v1.0.1?package-id=9fae13b1fd8373eb",
    "pkg:golang/github.com/nozzle/throttler@v0.0.0-20180817012639-2ea982251481?package-id=096b22c9da3dd040",
    "pkg:golang/github.com/oklog/ulid/v2@v2.1.1?package-id=f6639e6a9b4f0c30",
    "pkg:golang/github.com/oleiade/reflections@v1.1.0?package-id=5b1d9a4f3ae4e35d",
    "pkg:golang/github.com/open-policy-agent/opa@v1.17.1?package-id=0cbb9478224de581",
    "pkg:golang/github.com/opencontainers/go-digest@v1.0.0?package-id=aca3354742b7840c",
    "pkg:golang/github.com/opencontainers/image-spec@v1.1.1?package-id=d07baa12f8d500ae",
    "pkg:golang/github.com/pborman/uuid@v1.2.1?package-id=4ade655fdf30926e",
    "pkg:golang/github.com/pelletier/go-toml/v2@v2.2.4?package-id=7c3899181b81ee15",
    "pkg:golang/github.com/pkg/browser@v0.0.0-20240102092130-5ac0b6a4141c?package-id=0aedf880a0b8c9dd",
    "pkg:golang/github.com/pkg/errors@v0.9.1?package-id=d366da323550e641",
    "pkg:golang/github.com/protocolbuffers/txtpbfmt@v0.0.0-20260217160748-a481f6a22f94?package-id=60f138a43a94d840",
    "pkg:golang/github.com/rcrowley/go-metrics@v0.0.0-20250401214520-65e299d6c5c9?package-id=93f6538abd73ab42",
    "pkg:golang/github.com/rogpeppe/go-internal@v1.14.1?package-id=8dd0db75d3233724",
    "pkg:golang/github.com/ryanuber/go-glob@v1.0.0?package-id=e664db5e7143ffc0",
    "pkg:golang/github.com/sagikazarmark/locafero@v0.11.0?package-id=2a62bc3ccebd4629",
    "pkg:golang/github.com/sassoftware/relic@v7.2.1%2Bincompatible?package-id=914d70008142cb1a",
    "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.11.0?package-id=27fdbe74b866f0a7",
    "pkg:golang/github.com/shibumi/go-pathspec@v1.3.0?package-id=4bfbadde48b40dd6",
    "pkg:golang/github.com/sigstore/protobuf-specs@v0.5.1?package-id=47d45065892af9d3",
    "pkg:golang/github.com/sigstore/rekor-tiles/v2@v2.3.0?package-id=424881d084b8754b",
    "pkg:golang/github.com/sigstore/rekor@v1.5.3?package-id=8f03b9f379f7b159",
    "pkg:golang/github.com/sigstore/sigstore-go@v1.2.2?package-id=a51ab5cd2a23eb48",
    "pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/aws@v1.10.8?package-id=515e30e10408c432",
    "pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/azure@v1.10.8?package-id=0f2b8c7db84c87a8",
    "pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/gcp@v1.10.8?package-id=7c2e20890c7f0e73",
    "pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/hashivault@v1.10.8?package-id=9feec893451ac5fb",
    "pkg:golang/github.com/sigstore/sigstore@v1.10.8?package-id=3333458acb616200",
    "pkg:golang/github.com/sigstore/timestamp-authority/v2@v2.1.2?package-id=40105442aa67efe9",
    "pkg:golang/github.com/sirupsen/logrus@v1.9.4?package-id=3dbbbf0c8684732b",
    "pkg:golang/github.com/sourcegraph/conc@v0.3.1-0.20240121214520-5f936abd7ae8?package-id=6b34989a43897cb2",
    "pkg:golang/github.com/spf13/afero@v1.15.0?package-id=8fe200cc16b7f259",
    "pkg:golang/github.com/spf13/cast@v1.10.0?package-id=8c105713c9348a3a",
    "pkg:golang/github.com/spf13/cobra@v1.10.2?package-id=25473f1eaeb02935",
    "pkg:golang/github.com/spf13/pflag@v1.0.10?package-id=9d36b3df3b70008c",
    "pkg:golang/github.com/spf13/viper@v1.21.0?package-id=0406ec383e34a5a1",
    "pkg:golang/github.com/spiffe/go-spiffe/v2@v2.7.0?package-id=0d4e8df1c8bcd850",
    "pkg:golang/github.com/subosito/gotenv@v1.6.0?package-id=2101bcea85b59942",
    "pkg:golang/github.com/syndtr/goleveldb@v1.0.1-0.20220721030215-126854af5e6d?package-id=5bc89fad4eb350ee",
    "pkg:golang/github.com/tchap/go-patricia/v2@v2.3.3?package-id=453c902b0c82ed43",
    "pkg:golang/github.com/theupdateframework/go-tuf/v2@v2.4.2?package-id=312df6a6988b235d",
    "pkg:golang/github.com/theupdateframework/go-tuf@v0.7.0?package-id=31837e174c64c7db",
    "pkg:golang/github.com/titanous/rocacheck@v0.0.0-20171023193734-afe73141d399?package-id=7a78864b7eb78c93",
    "pkg:golang/github.com/tjfoc/gmsm@v1.4.1?package-id=0febd895ade99b6c",
    "pkg:golang/github.com/transparency-dev/formats@v0.1.1?package-id=9d0692917bfc01ec",
    "pkg:golang/github.com/transparency-dev/merkle@v0.0.2?package-id=ac71f92eec6a881d",
    "pkg:golang/github.com/valyala/fastjson@v1.6.10?package-id=e9c292729a03816b",
    "pkg:golang/github.com/vektah/gqlparser/v2@v2.5.33?package-id=b5cf6b10b9de640b",
    "pkg:golang/github.com/withfig/autocomplete-tools/integrations/cobra@v1.2.1?package-id=d4536a1413c19db2",
    "pkg:golang/github.com/x448/float16@v0.8.4?package-id=1021eab7294109ba",
    "pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb?package-id=308a9a6c1ee071cb",
    "pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415?package-id=35d00f129ec8c3c4",
    "pkg:golang/github.com/yashtewari/glob-intersection@v0.2.0?package-id=2d333d3491732e74",
    "pkg:golang/github.com/youmark/pkcs8@v0.0.0-20240726163527-a2c0da244d78?package-id=05ade28cf432113a",
    "pkg:golang/gitlab.com/gitlab-org/api/client-go@v1.46.0?package-id=3f8fcbd54c8ca0bd",
    "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1?package-id=ea9fce2693b1be97",
    "pkg:golang/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.68.0?package-id=9a58dafe56f0c983",
    "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.68.0?package-id=cb0e10c9c8f2232a",
    "pkg:golang/go.opentelemetry.io/otel/metric@v1.44.0?package-id=cb0efebe4e799e0f",
    "pkg:golang/go.opentelemetry.io/otel/trace@v1.44.0?package-id=15276e72dcdbbff3",
    "pkg:golang/go.opentelemetry.io/otel@v1.44.0?package-id=b1b6e4fe4021f3d7",
    "pkg:golang/go.uber.org/multierr@v1.11.0?package-id=3ed9b0bb2b877dc8",
    "pkg:golang/go.uber.org/zap@v1.28.0?package-id=afeab19e59e0ba2a",
    "pkg:golang/go.yaml.in/yaml/v2@v2.4.4?package-id=9db42b5f8a6cd472",
    "pkg:golang/go.yaml.in/yaml/v3@v3.0.4?package-id=a35b5a9b6900e37f",
    "pkg:golang/golang.org/x/crypto@v0.53.0?package-id=8edbf720ecb2a051",
    "pkg:golang/golang.org/x/mod@v0.37.0?package-id=b45b1cf1c7143317",
    "pkg:golang/golang.org/x/net@v0.56.0?package-id=7bc3abfb3544dc78",
    "pkg:golang/golang.org/x/oauth2@v0.36.0?package-id=e400627f916455ca",
    "pkg:golang/golang.org/x/sync@v0.21.0?package-id=8b28a454369f9a14",
    "pkg:golang/golang.org/x/sys@v0.46.0?package-id=20bc1aa0d402312e",
    "pkg:golang/golang.org/x/term@v0.44.0?package-id=b463e0a447dfa5b2",
    "pkg:golang/golang.org/x/text@v0.38.0?package-id=648c9332488f714e",
    "pkg:golang/golang.org/x/time@v0.15.0?package-id=2552a2dc3017ed64",
    "pkg:golang/google.golang.org/api@v0.284.0?package-id=3db0e47165485556",
    "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260526163538-3dc84a4a5aaa?package-id=eef6d517a28c83ec",
    "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260526163538-3dc84a4a5aaa?package-id=85a0363e9bfe36ee",
    "pkg:golang/google.golang.org/genproto@v0.0.0-20260406210006-6f92a3bedf2d?package-id=1a0a720556ecf9c9",
    "pkg:golang/google.golang.org/grpc@v1.82.0?package-id=1eda7ac324015627",
    "pkg:golang/google.golang.org/protobuf@v1.36.12-0.20260120151049-f2248ac996af?package-id=2d5924eaa88c80d9",
    "pkg:golang/gopkg.in/evanphx/json-patch.v4@v4.13.0?package-id=a98a77b639cd2e7f",
    "pkg:golang/gopkg.in/inf.v0@v0.9.1?package-id=e45a57ce1ba4346c",
    "pkg:golang/gopkg.in/ini.v1@v1.67.3?package-id=c7b57c3b2c7e64ee",
    "pkg:golang/gopkg.in/yaml.v3@v3.0.1?package-id=bd2effccad55f898",
    "pkg:golang/k8s.io/api@v0.36.2?package-id=139bbbc0fcb5555d",
    "pkg:golang/k8s.io/apimachinery@v0.36.2?package-id=32735366bcec84c7",
    "pkg:golang/k8s.io/client-go@v0.36.2?package-id=9e978e293b321233",
    "pkg:golang/k8s.io/klog/v2@v2.140.0?package-id=a909000b1aef35e0",
    "pkg:golang/k8s.io/kube-openapi@v0.0.0-20260317180543-43fb72c5454a?package-id=7d96e12f8a3663ad",
    "pkg:golang/k8s.io/utils@v0.0.0-20260210185600-b8788abfbbc2?package-id=e7ead362211b852c",
    "pkg:golang/sigs.k8s.io/json@v0.0.0-20250730193827-2d320260d730?package-id=6593f7a88aa81392",
    "pkg:golang/sigs.k8s.io/randfill@v1.0.0?package-id=e54e63d104b299bf",
    "pkg:golang/sigs.k8s.io/release-utils@v0.12.4?package-id=1bb18b23079f64a7",
    "pkg:golang/sigs.k8s.io/structured-merge-diff/v6@v6.3.2?package-id=29bdac73fc90b8f5",
    "pkg:golang/sigs.k8s.io/yaml@v1.6.0?package-id=33945018743d6925",
    "pkg:golang/stdlib@1.26.6?package-id=5493a7925f3f056e"
   ]
  }
 ]
}