{
  "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.5",
  "serialNumber": "urn:uuid:dca9bcb7-5ac0-497f-bb78-b5d5d9008af0",
  "version": 1,
  "metadata": {
    "timestamp": "2026-08-26T19:31:35Z",
    "tools": {
      "components": [
        {
          "type": "application",
          "author": "anchore",
          "name": "syft",
          "version": "1.51.0"
        }
      ]
    },
    "component": {
      "bom-ref": "400bbaee653247cd",
      "type": "container",
      "name": "/w/image.tar",
      "version": "sha256:aa5051063b60afdbc43294b31ccf58c26ce8808a0771ea59251beadffa2d391b"
    },
    "properties": [
      {
        "name": "syft:image:labels:io.buildah.version",
        "value": "1.43.2"
      },
      {
        "name": "syft:image:labels:org.opencontainers.image.description",
        "value": "Container signing, verification and storage in an OCI registry"
      },
      {
        "name": "syft:image:labels:org.opencontainers.image.source",
        "value": "https://index.kapsl.sh"
      },
      {
        "name": "syft:image:labels:org.opencontainers.image.title",
        "value": "cosign"
      },
      {
        "name": "syft:image:labels:org.opencontainers.image.vendor",
        "value": "kapsl"
      },
      {
        "name": "syft:image:labels:org.opencontainers.image.version",
        "value": "3.1.3"
      },
      {
        "name": "syft:image:labels:sh.kapsl.prefix",
        "value": "/kapsl/dist/cosign-3.1.3"
      },
      {
        "name": "syft:image:labels:sh.kapsl.project",
        "value": "cosign"
      },
      {
        "name": "syft:image:labels:sh.kapsl.source-url",
        "value": "https://github.com/sigstore/cosign"
      },
      {
        "name": "syft:image:labels:sh.kapsl.version",
        "value": "3.1.3"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:golang/buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go@v1.36.11-20260415201107-50325440f8f2.1?package-id=fdf918959b0caf25",
      "type": "library",
      "name": "buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go",
      "version": "v1.36.11-20260415201107-50325440f8f2.1",
      "cpe": "cpe:2.3:a:gen:go\\/bufbuild\\/protovalidate\\/protocolbuffers\\/go:v1.36.11-20260415201107-50325440f8f2.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go@v1.36.11-20260415201107-50325440f8f2.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:s6hzCXtND/ICdGPTMGk7C+/BFlr2Jg5GyH0NKf4XGXg="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/cloud.google.com/go/auth@v0.20.0?package-id=a392e4f800224c39",
      "type": "library",
      "name": "cloud.google.com/go/auth",
      "version": "v0.20.0",
      "cpe": "cpe:2.3:a:go:auth:v0.20.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/cloud.google.com/go/auth@v0.20.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:kXTssoVb4azsVDoUiF8KvxAqrsQcQtB53DcSgta74CA="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/cloud.google.com/go/auth/oauth2adapt@v0.2.8?package-id=d19b5dee0102203a",
      "type": "library",
      "name": "cloud.google.com/go/auth/oauth2adapt",
      "version": "v0.2.8",
      "cpe": "cpe:2.3:a:go:auth\\/oauth2adapt:v0.2.8:*:*:*:*:*:*:*",
      "purl": "pkg:golang/cloud.google.com/go/auth/oauth2adapt@v0.2.8",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:keo8NaayQZ6wimpNSmW5OPc283g65QNIiLpZnkHRbnc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/cloud.google.com/go/compute/metadata@v0.9.0?package-id=76f3fdf5d834ea95",
      "type": "library",
      "name": "cloud.google.com/go/compute/metadata",
      "version": "v0.9.0",
      "cpe": "cpe:2.3:a:go:compute\\/metadata:v0.9.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/cloud.google.com/go/compute/metadata@v0.9.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:pDUj4QMoPejqq20dK0Pg2N4yG9zIkYGdBtwLoEkH9Zs="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/cloud.google.com/go/iam@v1.11.0?package-id=3e9591aec7891727",
      "type": "library",
      "name": "cloud.google.com/go/iam",
      "version": "v1.11.0",
      "cpe": "cpe:2.3:a:go:iam:v1.11.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/cloud.google.com/go/iam@v1.11.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:KieQ9Pb+LLPak1O3Rv3GgCxhnmkYf7Xyh0P5HfF1jFM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/cloud.google.com/go/kms@v1.31.0?package-id=5f3b5586ec95a52d",
      "type": "library",
      "name": "cloud.google.com/go/kms",
      "version": "v1.31.0",
      "cpe": "cpe:2.3:a:go:kms:v1.31.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/cloud.google.com/go/kms@v1.31.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:LS8N92OxFDgOLg5NCo3OmbvjtQAIVT5gUHVLKIDHaFE="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/cloud.google.com/go/longrunning@v1.0.0?package-id=86f7c358fa60154f",
      "type": "library",
      "name": "cloud.google.com/go/longrunning",
      "version": "v1.0.0",
      "cpe": "cpe:2.3:a:go:longrunning:v1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/cloud.google.com/go/longrunning@v1.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:lwzWEYD8+NkYV7dhexOz6kmlvajZA70+bW/xMhRVVdY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/connectrpc.com/connect@v1.20.0?package-id=5fe2c6c7a20cb985",
      "type": "library",
      "name": "connectrpc.com/connect",
      "version": "v1.20.0",
      "purl": "pkg:golang/connectrpc.com/connect@v1.20.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:6TNDAB+WeNd2uolWNlYczB5E0KNNaVMNUEx8JEUsPmQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/cuelabs.dev/go/oci/ociregistry@v0.0.0-20251212221603-3adeb8663819?package-id=a6e07281019224fc",
      "type": "library",
      "name": "cuelabs.dev/go/oci/ociregistry",
      "version": "v0.0.0-20251212221603-3adeb8663819",
      "cpe": "cpe:2.3:a:go:oci\\/ociregistry:v0.0.0-20251212221603-3adeb8663819:*:*:*:*:*:*:*",
      "purl": "pkg:golang/cuelabs.dev/go/oci/ociregistry@v0.0.0-20251212221603-3adeb8663819",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Zh+Ur3OsoWpvALHPLT45nOekHkgOt+IOfutBbPqM17I="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/cuelang.org/go@v0.16.1?package-id=27d189ee66f61ee3",
      "type": "library",
      "name": "cuelang.org/go",
      "version": "v0.16.1",
      "purl": "pkg:golang/cuelang.org/go@v0.16.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:iPN1lHZd2J0hjcr8hfq9PnIGk7VfPkKFfxH4de+m9sE="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aliyuncontainerservice/ack-ram-tool/pkg/credentials/provider@v0.14.0?package-id=8ff603e7c559c04c",
      "type": "library",
      "name": "github.com/AliyunContainerService/ack-ram-tool/pkg/credentials/provider",
      "version": "v0.14.0",
      "cpe": "cpe:2.3:a:AliyunContainerService:ack-ram-tool\\/pkg\\/credentials\\/provider:v0.14.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/AliyunContainerService/ack-ram-tool/pkg/credentials/provider@v0.14.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:AliyunContainerService:ack_ram_tool\\/pkg\\/credentials\\/provider:v0.14.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:kcnfY4vljxXliXDBrA9K9lwF8IoEZ4Up6Eg9kWTIm28="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go@v68.0.0%2Bincompatible?package-id=ac2a88a1a45647ec",
      "type": "library",
      "name": "github.com/Azure/azure-sdk-for-go",
      "version": "v68.0.0+incompatible",
      "cpe": "cpe:2.3:a:Azure:azure-sdk-for-go:v68.0.0\\+incompatible:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go@v68.0.0%2Bincompatible",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Azure:azure_sdk_for_go:v68.0.0\\+incompatible:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:fcYLmCpyNYRnvJbPerq7U0hS+6+I79yEDJBqVNcqUzU="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/azcore@v1.22.0?package-id=922e16ef88d1265e",
      "type": "library",
      "name": "github.com/Azure/azure-sdk-for-go/sdk/azcore",
      "version": "v1.22.0",
      "cpe": "cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/azcore:v1.22.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/azcore@v1.22.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/azcore:v1.22.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:aokoqcHvaGjiM3VpjKDfMMnF/8epJ+Q1HLJ7CudztqE="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/azidentity@v1.14.0?package-id=62d91fd3c2093428",
      "type": "library",
      "name": "github.com/Azure/azure-sdk-for-go/sdk/azidentity",
      "version": "v1.14.0",
      "cpe": "cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/azidentity:v1.14.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.14.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/azidentity:v1.14.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:CU4+EJeJi3TKYWEcYuSdWsjzw0nVsK/H0MSQOiPcymU="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/internal@v1.12.0?package-id=86e8a676c3e844a4",
      "type": "library",
      "name": "github.com/Azure/azure-sdk-for-go/sdk/internal",
      "version": "v1.12.0",
      "cpe": "cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/internal:v1.12.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/internal@v1.12.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/internal:v1.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:fhqpLE3UEXi9lPaBRpQ6XuRW0nU7hgg4zlmZZa+a9q4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/security/keyvault/azkeys@v1.5.0?package-id=cf461a9b9ac26eaf",
      "type": "library",
      "name": "github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys",
      "version": "v1.5.0",
      "cpe": "cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/security\\/keyvault\\/azkeys:v1.5.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys@v1.5.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/security\\/keyvault\\/azkeys:v1.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:MaKvxE6D0KkjOg6Wd9M00iqP5PR0kUxCfiezes4JweM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/security/keyvault/internal@v1.2.0?package-id=479affc3f5615590",
      "type": "library",
      "name": "github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal",
      "version": "v1.2.0",
      "cpe": "cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/security\\/keyvault\\/internal:v1.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal@v1.2.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/security\\/keyvault\\/internal:v1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:nCYfgcSyHZXJI8J0IWE5MsCGlb2xp9fJiXyxWgmOFg4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/azure/go-autorest/autorest@v0.11.29?package-id=3495cff582eeeb32",
      "type": "library",
      "name": "github.com/Azure/go-autorest/autorest",
      "version": "v0.11.29",
      "cpe": "cpe:2.3:a:Azure:go-autorest\\/autorest:v0.11.29:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/Azure/go-autorest/autorest@v0.11.29",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Azure:go_autorest\\/autorest:v0.11.29:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:I4+HL/JDvErx2LjyzaVxllw2lRDB5/BT2Bm4g20iqYw="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/azure/go-autorest/autorest/adal@v0.9.23?package-id=81f4ab41493130bf",
      "type": "library",
      "name": "github.com/Azure/go-autorest/autorest/adal",
      "version": "v0.9.23",
      "cpe": "cpe:2.3:a:Azure:go-autorest\\/autorest\\/adal:v0.9.23:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/Azure/go-autorest/autorest/adal@v0.9.23",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Azure:go_autorest\\/autorest\\/adal:v0.9.23:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Yepx8CvFxwNKpH6ja7RZ+sKX+DWYNldbLiALMC3BTz8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/azure/go-autorest/autorest/azure/auth@v0.5.12?package-id=73e148d0a03056d2",
      "type": "library",
      "name": "github.com/Azure/go-autorest/autorest/azure/auth",
      "version": "v0.5.12",
      "cpe": "cpe:2.3:a:Azure:go-autorest\\/autorest\\/azure\\/auth:v0.5.12:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/Azure/go-autorest/autorest/azure/auth@v0.5.12",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Azure:go_autorest\\/autorest\\/azure\\/auth:v0.5.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:wkAZRgT/pn8HhFyzfe9UnqOjJYqlembgCTi72Bm/xKk="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/azure/go-autorest/autorest/azure/cli@v0.4.6?package-id=b7b0a39543ce3fac",
      "type": "library",
      "name": "github.com/Azure/go-autorest/autorest/azure/cli",
      "version": "v0.4.6",
      "cpe": "cpe:2.3:a:Azure:go-autorest\\/autorest\\/azure\\/cli:v0.4.6:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/Azure/go-autorest/autorest/azure/cli@v0.4.6",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Azure:go_autorest\\/autorest\\/azure\\/cli:v0.4.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:w77/uPk80ZET2F+AfQExZyEWtn+0Rk/uw17m9fv5Ajc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/azure/go-autorest/autorest/date@v0.3.0?package-id=d8493bb3fa3c0f35",
      "type": "library",
      "name": "github.com/Azure/go-autorest/autorest/date",
      "version": "v0.3.0",
      "cpe": "cpe:2.3:a:Azure:go-autorest\\/autorest\\/date:v0.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/Azure/go-autorest/autorest/date@v0.3.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Azure:go_autorest\\/autorest\\/date:v0.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:7gUk1U5M/CQbp9WoqinNzJar+8KY+LPI6wiWrP/myHw="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/azure/go-autorest/logger@v0.2.1?package-id=d7ab94aa90b33bbb",
      "type": "library",
      "name": "github.com/Azure/go-autorest/logger",
      "version": "v0.2.1",
      "cpe": "cpe:2.3:a:Azure:go-autorest\\/logger:v0.2.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/Azure/go-autorest/logger@v0.2.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Azure:go_autorest\\/logger:v0.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:IG7i4p/mDa2Ce4TRyAO8IHnVhAVF3RFU+ZtXWSmf4Tg="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/azure/go-autorest/tracing@v0.6.0?package-id=7a9d21ea392d1a85",
      "type": "library",
      "name": "github.com/Azure/go-autorest/tracing",
      "version": "v0.6.0",
      "cpe": "cpe:2.3:a:Azure:go-autorest\\/tracing:v0.6.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/Azure/go-autorest/tracing@v0.6.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:Azure:go_autorest\\/tracing:v0.6.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:TYi4+3m5t6K48TGI9AUdb+IzbnSxvnvUMfuitfgcfuo="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/azuread/microsoft-authentication-library-for-go@v1.7.2?package-id=931fc8ace4a4d2dc",
      "type": "library",
      "name": "github.com/AzureAD/microsoft-authentication-library-for-go",
      "version": "v1.7.2",
      "cpe": "cpe:2.3:a:AzureAD:microsoft-authentication-library-for-go:v1.7.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/AzureAD/microsoft-authentication-library-for-go@v1.7.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:AzureAD:microsoft_authentication_library_for_go:v1.7.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:RHK7bS+HQMslb1sZpAokUt+zTVmue0hKSs2C791hhzU="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/agnivade/levenshtein@v1.2.1?package-id=2aafebacda966396",
      "type": "library",
      "name": "github.com/agnivade/levenshtein",
      "version": "v1.2.1",
      "cpe": "cpe:2.3:a:agnivade:levenshtein:v1.2.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/agnivade/levenshtein@v1.2.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:EHBY3UOn1gwdy/VbFwgo4cxecRznFk7fKWN1KOX7eoM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/alibabacloud-go/alibabacloud-gateway-spi@v0.0.4?package-id=ceaf9add0c168222",
      "type": "library",
      "name": "github.com/alibabacloud-go/alibabacloud-gateway-spi",
      "version": "v0.0.4",
      "cpe": "cpe:2.3:a:alibabacloud-go:alibabacloud-gateway-spi:v0.0.4:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/alibabacloud-go/alibabacloud-gateway-spi@v0.0.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alibabacloud-go:alibabacloud_gateway_spi:v0.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alibabacloud_go:alibabacloud-gateway-spi:v0.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alibabacloud_go:alibabacloud_gateway_spi:v0.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alibabacloud:alibabacloud-gateway-spi:v0.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alibabacloud:alibabacloud_gateway_spi:v0.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:iC9YFYKDGEy3n/FtqJnOkZsene9olVspKmkX5A2YBEo="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/alibabacloud-go/cr-20160607@v1.0.1?package-id=cc0779aefda914e4",
      "type": "library",
      "name": "github.com/alibabacloud-go/cr-20160607",
      "version": "v1.0.1",
      "cpe": "cpe:2.3:a:alibabacloud-go:cr-20160607:v1.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/alibabacloud-go/cr-20160607@v1.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alibabacloud-go:cr_20160607:v1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alibabacloud_go:cr-20160607:v1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alibabacloud_go:cr_20160607:v1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alibabacloud:cr-20160607:v1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alibabacloud:cr_20160607:v1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:WEnP1iPFKJU74ryUKh/YDPHoxMZawqlPajOymyNAkts="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/alibabacloud-go/cr-20181201@v1.0.10?package-id=9749ba74c2732863",
      "type": "library",
      "name": "github.com/alibabacloud-go/cr-20181201",
      "version": "v1.0.10",
      "cpe": "cpe:2.3:a:alibabacloud-go:cr-20181201:v1.0.10:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/alibabacloud-go/cr-20181201@v1.0.10",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alibabacloud-go:cr_20181201:v1.0.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alibabacloud_go:cr-20181201:v1.0.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alibabacloud_go:cr_20181201:v1.0.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alibabacloud:cr-20181201:v1.0.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alibabacloud:cr_20181201:v1.0.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:B60f6S1imsgn2fgC6X6FrVNrONDrbCT0NwYhsJ0C9/c="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/alibabacloud-go/darabonba-openapi@v0.2.1?package-id=c6e2f1bfb83cc1ea",
      "type": "library",
      "name": "github.com/alibabacloud-go/darabonba-openapi",
      "version": "v0.2.1",
      "cpe": "cpe:2.3:a:alibabacloud-go:darabonba-openapi:v0.2.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/alibabacloud-go/darabonba-openapi@v0.2.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alibabacloud-go:darabonba_openapi:v0.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alibabacloud_go:darabonba-openapi:v0.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alibabacloud_go:darabonba_openapi:v0.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alibabacloud:darabonba-openapi:v0.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alibabacloud:darabonba_openapi:v0.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:WyzxxKvhdVDlwpAMOHgAiCJ+NXa6g5ZWPFEzaK/ewwY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/alibabacloud-go/debug@v1.0.0?package-id=e79fa98b07c9c350",
      "type": "library",
      "name": "github.com/alibabacloud-go/debug",
      "version": "v1.0.0",
      "cpe": "cpe:2.3:a:alibabacloud-go:debug:v1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/alibabacloud-go/debug@v1.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alibabacloud_go:debug:v1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alibabacloud:debug:v1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:3eIEQWfay1fB24PQIEzXAswlVJtdQok8f3EVN5VrBnA="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/alibabacloud-go/endpoint-util@v1.1.1?package-id=efdfdc766b3bc0e6",
      "type": "library",
      "name": "github.com/alibabacloud-go/endpoint-util",
      "version": "v1.1.1",
      "cpe": "cpe:2.3:a:alibabacloud-go:endpoint-util:v1.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/alibabacloud-go/endpoint-util@v1.1.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alibabacloud-go:endpoint_util:v1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alibabacloud_go:endpoint-util:v1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alibabacloud_go:endpoint_util:v1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alibabacloud:endpoint-util:v1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alibabacloud:endpoint_util:v1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:ZkBv2/jnghxtU0p+upSU0GGzW1VL9GQdZO3mcSUTUy8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/alibabacloud-go/openapi-util@v0.1.0?package-id=be35d72f9dcaa64e",
      "type": "library",
      "name": "github.com/alibabacloud-go/openapi-util",
      "version": "v0.1.0",
      "cpe": "cpe:2.3:a:alibabacloud-go:openapi-util:v0.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/alibabacloud-go/openapi-util@v0.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alibabacloud-go:openapi_util:v0.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alibabacloud_go:openapi-util:v0.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alibabacloud_go:openapi_util:v0.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alibabacloud:openapi-util:v0.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alibabacloud:openapi_util:v0.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:0z75cIULkDrdEhkLWgi9tnLe+KhAFE/r5Pb3312/eAY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/alibabacloud-go/tea@v1.2.1?package-id=f9cea70e40d19dea",
      "type": "library",
      "name": "github.com/alibabacloud-go/tea",
      "version": "v1.2.1",
      "cpe": "cpe:2.3:a:alibabacloud-go:tea:v1.2.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/alibabacloud-go/tea@v1.2.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alibabacloud_go:tea:v1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alibabacloud:tea:v1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:rFF1LnrAdhaiPmKwH5xwYOKlMh66CqRwPUTzIK74ask="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/alibabacloud-go/tea-utils@v1.4.5?package-id=43a8afd874a3d07f",
      "type": "library",
      "name": "github.com/alibabacloud-go/tea-utils",
      "version": "v1.4.5",
      "cpe": "cpe:2.3:a:alibabacloud-go:tea-utils:v1.4.5:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/alibabacloud-go/tea-utils@v1.4.5",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alibabacloud-go:tea_utils:v1.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alibabacloud_go:tea-utils:v1.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alibabacloud_go:tea_utils:v1.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alibabacloud:tea-utils:v1.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alibabacloud:tea_utils:v1.4.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:h0/6Xd2f3bPE4XHTvkpjwxowIwRCJAJOqY6Eq8f3zfA="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/alibabacloud-go/tea-xml@v1.1.3?package-id=ae5f20bcc16ce430",
      "type": "library",
      "name": "github.com/alibabacloud-go/tea-xml",
      "version": "v1.1.3",
      "cpe": "cpe:2.3:a:alibabacloud-go:tea-xml:v1.1.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/alibabacloud-go/tea-xml@v1.1.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alibabacloud-go:tea_xml:v1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alibabacloud_go:tea-xml:v1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alibabacloud_go:tea_xml:v1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alibabacloud:tea-xml:v1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:alibabacloud:tea_xml:v1.1.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:7LYnm+JbOq2B+T/B0fHC4Ies4/FofC4zHzYtqw7dgt0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aliyun/credentials-go@v1.3.2?package-id=7f3f52ae96e275a8",
      "type": "library",
      "name": "github.com/aliyun/credentials-go",
      "version": "v1.3.2",
      "cpe": "cpe:2.3:a:aliyun:credentials-go:v1.3.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aliyun/credentials-go@v1.3.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aliyun:credentials_go:v1.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:L4WppI9rctC8PdlMgyTkF8bBsy9pyKQEzBD1bHMRl+g="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/asaskevich/govalidator@v0.0.0-20230301143203-a9d515a09cc2?package-id=15c51d1e605be147",
      "type": "library",
      "name": "github.com/asaskevich/govalidator",
      "version": "v0.0.0-20230301143203-a9d515a09cc2",
      "cpe": "cpe:2.3:a:asaskevich:govalidator:v0.0.0-20230301143203-a9d515a09cc2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/asaskevich/govalidator@v0.0.0-20230301143203-a9d515a09cc2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:DklsrG3dyBCFEj5IhUbnKptjxatkF07cF2ak3yi77so="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.42.0?package-id=2371e5c774b7d98e",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2",
      "version": "v1.42.0",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2:v1.42.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.42.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2:v1.42.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:XvXMJTkFQtpBKIWZnmr9ZEOc2InWM2yldjXEJ/bymhA="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.32.25?package-id=3f7fc926c07dd538",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/config",
      "version": "v1.32.25",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/config:v1.32.25:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.32.25",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/config:v1.32.25:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:ACCejvStYoilgwrfegSt5ZntCbPrk52qfwyNcnl3omM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/credentials@v1.19.24?package-id=bd800787838e9f82",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/credentials",
      "version": "v1.19.24",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/credentials:v1.19.24:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/credentials@v1.19.24",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/credentials:v1.19.24:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:2hQqYCV9yqyePQ9o6dCrZc/zO8U3TwPr9mIKlZnPu/I="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.18.29?package-id=0152cad51918262e",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/feature/ec2/imds",
      "version": "v1.18.29",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/feature\\/ec2\\/imds:v1.18.29:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.18.29",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/feature\\/ec2\\/imds:v1.18.29:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:r6qZHbT+wxgWO/e9vYNUEtg7lv5+UN3pRqKhLXvnArg="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.4.29?package-id=237d6b13c4b2423c",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/internal/configsources",
      "version": "v1.4.29",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/configsources:v1.4.29:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.4.29",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/configsources:v1.4.29:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:f3vKqSo13fhTYb+JEcXwXefZQE26I1FB5eTSniU67ko="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.7.29?package-id=4a3c72755116e0f0",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/internal/endpoints/v2",
      "version": "v2.7.29",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/endpoints\\/v2:v2.7.29:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.7.29",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/endpoints\\/v2:v2.7.29:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:RdwIf/CuUsvJX3RgJagbOyotl/cxoLY4xviKuE7p2GY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/v4a@v1.4.30?package-id=f3968b93dd384847",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/internal/v4a",
      "version": "v1.4.30",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/v4a:v1.4.30:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/v4a@v1.4.30",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/v4a:v1.4.30:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:VTGy885W5DKBxWRUJbym9hytNaYzsyaPkCHGRRMAOhU="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ecr@v1.55.3?package-id=a342ab22d7e863c5",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/service/ecr",
      "version": "v1.55.3",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/ecr:v1.55.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ecr@v1.55.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/ecr:v1.55.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:RtGctYMmkTerGClvdY6bHXdtly4FeYw9wz/NPz62LF8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ecrpublic@v1.38.10?package-id=6a21d921b1e1c52b",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/service/ecrpublic",
      "version": "v1.38.10",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/ecrpublic:v1.38.10:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ecrpublic@v1.38.10",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/ecrpublic:v1.38.10:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:1A/sI3LNMi3fhRI5TFLMwwo7ALAALSFVCSGvFlr1Iys="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding@v1.13.12?package-id=0fb21a03701d35cc",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding",
      "version": "v1.13.12",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/accept-encoding:v1.13.12:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding@v1.13.12",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/accept_encoding:v1.13.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:ZD2+BSw9vFsNlKYIasSNt3uDbjqqXIBcM13UJv/Lx2k="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.13.29?package-id=a8ce4a7f189dee4a",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/service/internal/presigned-url",
      "version": "v1.13.29",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/presigned-url:v1.13.29:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.13.29",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/presigned_url:v1.13.29:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:DRebniUGZ2MqiiIVmQJ04vIXr918hubdHMnarSLEWyU="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/kms@v1.53.4?package-id=2b34a7ec624646ff",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/service/kms",
      "version": "v1.53.4",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/kms:v1.53.4:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/kms@v1.53.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/kms:v1.53.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:PEgVSsWtR8NNxsDxFL2Ywisi7R+1EFQARGsT4q3mWwI="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/signin@v1.2.0?package-id=ffdc5cc7d79fc63f",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/service/signin",
      "version": "v1.2.0",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/signin:v1.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/signin@v1.2.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/signin:v1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:3nXpRcFwRCW8n7HgO2QGy0Dc20eQNfBuUemGQhpF8m8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sso@v1.31.3?package-id=5a1db50b9e7772d5",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/service/sso",
      "version": "v1.31.3",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/sso:v1.31.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sso@v1.31.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/sso:v1.31.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:ey1XLTYXb9PcLt4535632o5kCGXNXEhNb620Dqwuylo="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.36.6?package-id=9fa195dea08e673f",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/service/ssooidc",
      "version": "v1.36.6",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/ssooidc:v1.36.6:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.36.6",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/ssooidc:v1.36.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:yLr03zQE/5Eu5l3QU0Si+xMbLMbSDF2YXsigqXngs6g="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sts@v1.43.3?package-id=6b63ef3678481151",
      "type": "library",
      "name": "github.com/aws/aws-sdk-go-v2/service/sts",
      "version": "v1.43.3",
      "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/sts:v1.43.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sts@v1.43.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/sts:v1.43.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:VrIhKRCSK1umelSgB9RghvA9RTUYeQffyAS5ApXehNI="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/smithy-go@v1.27.2?package-id=7eb845f61a6cfa56",
      "type": "library",
      "name": "github.com/aws/smithy-go",
      "version": "v1.27.2",
      "cpe": "cpe:2.3:a:aws:smithy-go:v1.27.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/aws/smithy-go@v1.27.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:aws:smithy_go:v1.27.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:y9NPmSE6am6LjEFPfqHqG/jJk7AauQvhCJONKh7kpzk="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/awslabs/amazon-ecr-credential-helper/ecr-login@v0.12.0?package-id=819a083487855904",
      "type": "library",
      "name": "github.com/awslabs/amazon-ecr-credential-helper/ecr-login",
      "version": "v0.12.0",
      "cpe": "cpe:2.3:a:awslabs:amazon-ecr-credential-helper\\/ecr-login:v0.12.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/awslabs/amazon-ecr-credential-helper/ecr-login@v0.12.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:awslabs:amazon_ecr_credential_helper\\/ecr_login:v0.12.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:JFWXO6QPihCknDdnL6VaQE57km4ZKheHIGd9YiOGcTo="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/blang/semver@v3.5.1%2Bincompatible?package-id=b1f6c2c1ca6d88b6",
      "type": "library",
      "name": "github.com/blang/semver",
      "version": "v3.5.1+incompatible",
      "cpe": "cpe:2.3:a:blang:semver:v3.5.1\\+incompatible:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/blang/semver@v3.5.1%2Bincompatible",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:cQNTCjp13qL8KC3Nbxr/y2Bqb63oX6wdnnjpJbkM4JQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/buildkite/agent/v3@v3.130.0?package-id=03b3edb6e975573c",
      "type": "library",
      "name": "github.com/buildkite/agent/v3",
      "version": "v3.130.0",
      "cpe": "cpe:2.3:a:buildkite:agent\\/v3:v3.130.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/buildkite/agent/v3@v3.130.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:fYo5iTrYAK6OTBWBoF7M627tnCKhZaRTD+Ex186dJZ0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/buildkite/go-pipeline@v0.17.1?package-id=b4ae7468dd5eafae",
      "type": "library",
      "name": "github.com/buildkite/go-pipeline",
      "version": "v0.17.1",
      "cpe": "cpe:2.3:a:buildkite:go-pipeline:v0.17.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/buildkite/go-pipeline@v0.17.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:buildkite:go_pipeline:v0.17.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:m7+a2SF9hLjqsbe6HShmzm9M4rDk4QtanKTF2LD6LG0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/buildkite/interpolate@v0.1.5?package-id=14a899cfaa96172c",
      "type": "library",
      "name": "github.com/buildkite/interpolate",
      "version": "v0.1.5",
      "cpe": "cpe:2.3:a:buildkite:interpolate:v0.1.5:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/buildkite/interpolate@v0.1.5",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:v2Ji3voik69UZlbfoqzx+qfcsOKLA61nHdU79VV+tPU="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/buildkite/roko@v1.4.0?package-id=97a60f2bdea6c173",
      "type": "library",
      "name": "github.com/buildkite/roko",
      "version": "v1.4.0",
      "cpe": "cpe:2.3:a:buildkite:roko:v1.4.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/buildkite/roko@v1.4.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:DxixoCdpNqxu4/1lXrXbfsKbJSd7r1qoxtef/TT2J80="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/cenkalti/backoff/v4@v4.3.0?package-id=9e6a03538c796ef9",
      "type": "library",
      "name": "github.com/cenkalti/backoff/v4",
      "version": "v4.3.0",
      "cpe": "cpe:2.3:a:cenkalti:backoff\\/v4:v4.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/cenkalti/backoff/v4@v4.3.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:MyRJ/UdXutAwSAT+s3wNd7MfTIcy71VQueUuFK343L8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/cenkalti/backoff/v5@v5.0.3?package-id=e457b8de108cb5e7",
      "type": "library",
      "name": "github.com/cenkalti/backoff/v5",
      "version": "v5.0.3",
      "cpe": "cpe:2.3:a:cenkalti:backoff\\/v5:v5.0.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/cenkalti/backoff/v5@v5.0.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:ZN+IMa753KfX5hd8vVaMixjnqRZ3y8CuJKRKj1xcsSM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/cespare/xxhash/v2@v2.3.0?package-id=03e3fd3eab325602",
      "type": "library",
      "name": "github.com/cespare/xxhash/v2",
      "version": "v2.3.0",
      "cpe": "cpe:2.3:a:cespare:xxhash\\/v2:v2.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/cespare/xxhash/v2@v2.3.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:UL815xU9SqsFlibzuggzjXhog7bL6oX9BbNZnL2UFvs="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/chrismellard/docker-credential-acr-env@v0.0.0-20230304212654-82a0ddb27589?package-id=796da91abc5d1b62",
      "type": "library",
      "name": "github.com/chrismellard/docker-credential-acr-env",
      "version": "v0.0.0-20230304212654-82a0ddb27589",
      "cpe": "cpe:2.3:a:chrismellard:docker-credential-acr-env:v0.0.0-20230304212654-82a0ddb27589:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/chrismellard/docker-credential-acr-env@v0.0.0-20230304212654-82a0ddb27589",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:chrismellard:docker_credential_acr_env:v0.0.0-20230304212654-82a0ddb27589:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:krfRl01rzPzxSxyLyrChD+U+MzsBXbm0OwYYB67uF+4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/clbanning/mxj/v2@v2.7.0?package-id=158c7d13c6717a73",
      "type": "library",
      "name": "github.com/clbanning/mxj/v2",
      "version": "v2.7.0",
      "cpe": "cpe:2.3:a:clbanning:mxj\\/v2:v2.7.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/clbanning/mxj/v2@v2.7.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:WA/La7UGCanFe5NpHF0Q3DNtnCsVoxbPKuyBNHWRyME="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/cockroachdb/apd/v3@v3.2.1?package-id=ed69d96cb3dc04ca",
      "type": "library",
      "name": "github.com/cockroachdb/apd/v3",
      "version": "v3.2.1",
      "cpe": "cpe:2.3:a:cockroachdb:apd\\/v3:v3.2.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/cockroachdb/apd/v3@v3.2.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:U+8j7t0axsIgvQUqthuNm82HIrYXodOV2iWLWtEaIwg="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/common-nighthawk/go-figure@v0.0.0-20210622060536-734e95fb86be?package-id=511812ea8077a418",
      "type": "library",
      "name": "github.com/common-nighthawk/go-figure",
      "version": "v0.0.0-20210622060536-734e95fb86be",
      "cpe": "cpe:2.3:a:common-nighthawk:go-figure:v0.0.0-20210622060536-734e95fb86be:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/common-nighthawk/go-figure@v0.0.0-20210622060536-734e95fb86be",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common-nighthawk:go_figure:v0.0.0-20210622060536-734e95fb86be:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common_nighthawk:go-figure:v0.0.0-20210622060536-734e95fb86be:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common_nighthawk:go_figure:v0.0.0-20210622060536-734e95fb86be:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common:go-figure:v0.0.0-20210622060536-734e95fb86be:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:common:go_figure:v0.0.0-20210622060536-734e95fb86be:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:J5BL2kskAlV9ckgEsNQXscjIaLiOYiZ75d4e94E6dcQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/coreos/go-oidc/v3@v3.18.0?package-id=cc8d8682b603fab2",
      "type": "library",
      "name": "github.com/coreos/go-oidc/v3",
      "version": "v3.18.0",
      "cpe": "cpe:2.3:a:coreos:go-oidc\\/v3:v3.18.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/coreos/go-oidc/v3@v3.18.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:coreos:go_oidc\\/v3:v3.18.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:V9orjXynvu5wiC9SemFTWnG4F45v403aIcjWo0d41+A="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/cyberphone/json-canonicalization@v0.0.0-20241213102144-19d51d7fe467?package-id=187a37fef2b39743",
      "type": "library",
      "name": "github.com/cyberphone/json-canonicalization",
      "version": "v0.0.0-20241213102144-19d51d7fe467",
      "cpe": "cpe:2.3:a:cyberphone:json-canonicalization:v0.0.0-20241213102144-19d51d7fe467:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/cyberphone/json-canonicalization@v0.0.0-20241213102144-19d51d7fe467",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:cyberphone:json_canonicalization:v0.0.0-20241213102144-19d51d7fe467:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:uX1JmpONuD549D73r6cgnxyUu18Zb7yHAy5AYU0Pm4Q="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc?package-id=69adc6f604bfc11b",
      "type": "library",
      "name": "github.com/davecgh/go-spew",
      "version": "v1.1.2-0.20180830191138-d8f796af33cc",
      "cpe": "cpe:2.3:a:davecgh:go-spew:v1.1.2-0.20180830191138-d8f796af33cc:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:davecgh:go_spew:v1.1.2-0.20180830191138-d8f796af33cc:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:U9qPSI2PIWSS1VwoXQT9A3Wy9MM3WgvqSxFWenqJduM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/digitorus/pkcs7@v0.0.0-20230818184609-3a137a874352?package-id=04547f61309f459a",
      "type": "library",
      "name": "github.com/digitorus/pkcs7",
      "version": "v0.0.0-20230818184609-3a137a874352",
      "cpe": "cpe:2.3:a:digitorus:pkcs7:v0.0.0-20230818184609-3a137a874352:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/digitorus/pkcs7@v0.0.0-20230818184609-3a137a874352",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:ge14PCmCvPjpMQMIAH7uKg0lrtNSOdpYsRXlwk3QbaE="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/digitorus/timestamp@v0.0.0-20231217203849-220c5c2851b7?package-id=0a53d5e991f3dbba",
      "type": "library",
      "name": "github.com/digitorus/timestamp",
      "version": "v0.0.0-20231217203849-220c5c2851b7",
      "cpe": "cpe:2.3:a:digitorus:timestamp:v0.0.0-20231217203849-220c5c2851b7:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/digitorus/timestamp@v0.0.0-20231217203849-220c5c2851b7",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:lxmTCgmHE1GUYL7P0MlNa00M67axePTq+9nBSGddR8I="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/dimchansky/utfbom@v1.1.1?package-id=ad1bbf0d6c891c7e",
      "type": "library",
      "name": "github.com/dimchansky/utfbom",
      "version": "v1.1.1",
      "cpe": "cpe:2.3:a:dimchansky:utfbom:v1.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/dimchansky/utfbom@v1.1.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:vV6w1AhK4VMnhBno/TPVCoK9U/LP0PkLCS9tbxHdi/U="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/docker/cli@v29.5.3%2Bincompatible?package-id=ee2c7e77666fb3a8",
      "type": "library",
      "name": "github.com/docker/cli",
      "version": "v29.5.3+incompatible",
      "cpe": "cpe:2.3:a:docker:cli:v29.5.3\\+incompatible:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/docker/cli@v29.5.3%2Bincompatible",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:nbEFfz774vBwQ5KRYv7c/AghjReqnGISvrRhzjV0evs="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/docker/docker-credential-helpers@v0.9.5?package-id=9bdf61403a30641a",
      "type": "library",
      "name": "github.com/docker/docker-credential-helpers",
      "version": "v0.9.5",
      "cpe": "cpe:2.3:a:docker:docker-credential-helpers:v0.9.5:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/docker/docker-credential-helpers@v0.9.5",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:docker:docker_credential_helpers:v0.9.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:EFNN8DHvaiK8zVqFA2DT6BjXE0GzfLOZ38ggPTKePkY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/dustin/go-humanize@v1.0.1?package-id=71b46ad1e7cad5b4",
      "type": "library",
      "name": "github.com/dustin/go-humanize",
      "version": "v1.0.1",
      "cpe": "cpe:2.3:a:dustin:go-humanize:v1.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/dustin/go-humanize@v1.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:dustin:go_humanize:v1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:GzkhY7T5VNhEkwH0PVJgjz+fX1rhBrR7pRT3mDkpeCY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/emicklei/go-restful/v3@v3.13.0?package-id=52ac6882d80558d1",
      "type": "library",
      "name": "github.com/emicklei/go-restful/v3",
      "version": "v3.13.0",
      "cpe": "cpe:2.3:a:emicklei:go-restful\\/v3:v3.13.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/emicklei/go-restful/v3@v3.13.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:emicklei:go_restful\\/v3:v3.13.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:C4Bl2xDndpU6nJ4bc1jXd+uTmYPVUwkD6bFY/oTyCes="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/emicklei/proto@v1.14.3?package-id=195b8754dfab58f1",
      "type": "library",
      "name": "github.com/emicklei/proto",
      "version": "v1.14.3",
      "cpe": "cpe:2.3:a:emicklei:proto:v1.14.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/emicklei/proto@v1.14.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:zEhlzNkpP8kN6utonKMzlPfIvy82t5Kb9mufaJxSe1Q="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/felixge/httpsnoop@v1.0.4?package-id=6a1063872351e59f",
      "type": "library",
      "name": "github.com/felixge/httpsnoop",
      "version": "v1.0.4",
      "cpe": "cpe:2.3:a:felixge:httpsnoop:v1.0.4:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/felixge/httpsnoop@v1.0.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:NFTV2Zj1bL4mc9sqWACXbQFVBBg2W3GPvqp8/ESS2Wg="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/fsnotify/fsnotify@v1.10.1?package-id=229a8f2c9a83b044",
      "type": "library",
      "name": "github.com/fsnotify/fsnotify",
      "version": "v1.10.1",
      "cpe": "cpe:2.3:a:fsnotify:fsnotify:v1.10.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/fsnotify/fsnotify@v1.10.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:b0/UzAf9yR5rhf3RPm9gf3ehBPpf0oZKIjtpKrx59Ho="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/fxamacker/cbor/v2@v2.9.0?package-id=7b493e026cce240a",
      "type": "library",
      "name": "github.com/fxamacker/cbor/v2",
      "version": "v2.9.0",
      "cpe": "cpe:2.3:a:fxamacker:cbor\\/v2:v2.9.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/fxamacker/cbor/v2@v2.9.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:NpKPmjDBgUfBms6tr6JZkTHtfFGcMKsw3eGcmD/sapM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-chi/chi/v5@v5.3.0?package-id=4ad8662f10d971b9",
      "type": "library",
      "name": "github.com/go-chi/chi/v5",
      "version": "v5.3.0",
      "cpe": "cpe:2.3:a:go-chi:chi\\/v5:v5.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-chi/chi/v5@v5.3.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_chi:chi\\/v5:v5.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:chi\\/v5:v5.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:halUjDxhshgXHMrao5bB8eNBXo/rnzwr8m5m36glehM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-jose/go-jose/v4@v4.1.4?package-id=f1f52dcbe95f9435",
      "type": "library",
      "name": "github.com/go-jose/go-jose/v4",
      "version": "v4.1.4",
      "cpe": "cpe:2.3:a:go-jose:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-jose/go-jose/v4@v4.1.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go-jose:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_jose:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_jose:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:moDMcTHmvE6Groj34emNPLs/qtYXRVcd6S7NHbHz3kA="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-logr/logr@v1.4.3?package-id=aa84faf04c9a64fd",
      "type": "library",
      "name": "github.com/go-logr/logr",
      "version": "v1.4.3",
      "cpe": "cpe:2.3:a:go-logr:logr:v1.4.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-logr/logr@v1.4.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_logr:logr:v1.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:logr:v1.4.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:CjnDlHq8ikf6E492q6eKboGOC0T8CDaOvkHCIg8idEI="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-logr/stdr@v1.2.2?package-id=82637aa5c1e6e9c6",
      "type": "library",
      "name": "github.com/go-logr/stdr",
      "version": "v1.2.2",
      "cpe": "cpe:2.3:a:go-logr:stdr:v1.2.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-logr/stdr@v1.2.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_logr:stdr:v1.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:stdr:v1.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:hSWxHoqTgW2S2qGc0LTAI563KZ5YKYRhT3MFKZMbjag="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/analysis@v0.25.2?package-id=b75e3517134d186d",
      "type": "library",
      "name": "github.com/go-openapi/analysis",
      "version": "v0.25.2",
      "cpe": "cpe:2.3:a:go-openapi:analysis:v0.25.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/analysis@v0.25.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:analysis:v0.25.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:analysis:v0.25.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:I0vy4n3alz+DHTiN1PRhCb7QZxkK6g5YmswZKv2TKuw="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/errors@v0.22.8?package-id=2c476fe38b928e33",
      "type": "library",
      "name": "github.com/go-openapi/errors",
      "version": "v0.22.8",
      "cpe": "cpe:2.3:a:go-openapi:errors:v0.22.8:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/errors@v0.22.8",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:errors:v0.22.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:errors:v0.22.8:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:oP7sW7TWc3wFFjrzzj0nI83H2qMBkNjNfSd+XRejk/I="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/jsonpointer@v0.23.1?package-id=d31f42f0904aab41",
      "type": "library",
      "name": "github.com/go-openapi/jsonpointer",
      "version": "v0.23.1",
      "cpe": "cpe:2.3:a:go-openapi:jsonpointer:v0.23.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/jsonpointer@v0.23.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:jsonpointer:v0.23.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:jsonpointer:v0.23.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:1HBACs7XIwR2RcmItfdSFlALhGbe6S92p0ry4d1GWg4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/jsonreference@v0.21.6?package-id=199de48f283051ac",
      "type": "library",
      "name": "github.com/go-openapi/jsonreference",
      "version": "v0.21.6",
      "cpe": "cpe:2.3:a:go-openapi:jsonreference:v0.21.6:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/jsonreference@v0.21.6",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:jsonreference:v0.21.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:jsonreference:v0.21.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:NZ5nGfnaM1n4I43Xjm1e5/M2GjOwQwndQz22uhxwD+Y="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/loads@v0.24.0?package-id=92f1de4791e35b03",
      "type": "library",
      "name": "github.com/go-openapi/loads",
      "version": "v0.24.0",
      "cpe": "cpe:2.3:a:go-openapi:loads:v0.24.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/loads@v0.24.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:loads:v0.24.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:loads:v0.24.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:4LLorXRPTzIN9V6ngMUZbAscsBOUBk3Oa8cClu/bFrQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/runtime@v0.32.4?package-id=a562847a4ed31ee6",
      "type": "library",
      "name": "github.com/go-openapi/runtime",
      "version": "v0.32.4",
      "cpe": "cpe:2.3:a:go-openapi:runtime:v0.32.4:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/runtime@v0.32.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:runtime:v0.32.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:runtime:v0.32.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:8ElGj/3goG0itt0nBPP6Cm57ehcYyuHoI3O20nxgvkw="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/runtime/server-middleware@v0.30.0?package-id=e8e012bebca80cc8",
      "type": "library",
      "name": "github.com/go-openapi/runtime/server-middleware",
      "version": "v0.30.0",
      "cpe": "cpe:2.3:a:go-openapi:runtime\\/server-middleware:v0.30.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/runtime/server-middleware@v0.30.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go-openapi:runtime\\/server_middleware:v0.30.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:runtime\\/server-middleware:v0.30.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:runtime\\/server_middleware:v0.30.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:runtime\\/server-middleware:v0.30.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:runtime\\/server_middleware:v0.30.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:8rPoJ/xv7JL8BsovaqboKETlpWBArVh8n+0L/GyePog="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/spec@v0.22.6?package-id=8c6cc9b642724260",
      "type": "library",
      "name": "github.com/go-openapi/spec",
      "version": "v0.22.6",
      "cpe": "cpe:2.3:a:go-openapi:spec:v0.22.6:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/spec@v0.22.6",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:spec:v0.22.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:spec:v0.22.6:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Tyy1pLaNCM8GBCFLoGYLonjJi6zykqyLCjXLc19ZPic="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/strfmt@v0.26.4?package-id=73c288bc697db310",
      "type": "library",
      "name": "github.com/go-openapi/strfmt",
      "version": "v0.26.4",
      "cpe": "cpe:2.3:a:go-openapi:strfmt:v0.26.4:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/strfmt@v0.26.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:strfmt:v0.26.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:strfmt:v0.26.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:yI6IAEfcWow459BD5UzFY430KUwXZwBHrYusPFkhWlc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/swag@v0.26.1?package-id=1ddfda96ee51d00c",
      "type": "library",
      "name": "github.com/go-openapi/swag",
      "version": "v0.26.1",
      "cpe": "cpe:2.3:a:go-openapi:swag:v0.26.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/swag@v0.26.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:swag:v0.26.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:swag:v0.26.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:l5sVEyVpwj+DDYeZyo7wQI/Ebn/mKYIyGB/pFwAfGoQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/swag/cmdutils@v0.26.1?package-id=393346e5cbc5ec4a",
      "type": "library",
      "name": "github.com/go-openapi/swag/cmdutils",
      "version": "v0.26.1",
      "cpe": "cpe:2.3:a:go-openapi:swag\\/cmdutils:v0.26.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/swag/cmdutils@v0.26.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:swag\\/cmdutils:v0.26.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:swag\\/cmdutils:v0.26.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:f2iE1ijYaJ3nuu5PaEMx3zpEhzhZFgivCJObWEObLIQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/swag/conv@v0.27.0?package-id=0a7430cdd518ae99",
      "type": "library",
      "name": "github.com/go-openapi/swag/conv",
      "version": "v0.27.0",
      "cpe": "cpe:2.3:a:go-openapi:swag\\/conv:v0.27.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/swag/conv@v0.27.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:swag\\/conv:v0.27.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:swag\\/conv:v0.27.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:EKOH4feXrvdo8DbSsXSAqRT8fz1epEnS5O2IfXUOzE8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/swag/fileutils@v0.26.1?package-id=74c9d0b178a34404",
      "type": "library",
      "name": "github.com/go-openapi/swag/fileutils",
      "version": "v0.26.1",
      "cpe": "cpe:2.3:a:go-openapi:swag\\/fileutils:v0.26.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/swag/fileutils@v0.26.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:swag\\/fileutils:v0.26.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:swag\\/fileutils:v0.26.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:K1XCM2CGhfNsc6YDt6v7Q5+1e59rftYWdcu/isZhvFw="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/swag/jsonname@v0.26.1?package-id=84bccb93048ea0f1",
      "type": "library",
      "name": "github.com/go-openapi/swag/jsonname",
      "version": "v0.26.1",
      "cpe": "cpe:2.3:a:go-openapi:swag\\/jsonname:v0.26.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/swag/jsonname@v0.26.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:swag\\/jsonname:v0.26.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:swag\\/jsonname:v0.26.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:VReupaV6WxlAsCn0e4DUfgV6bPmINnPpyJDLqSfNPcE="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/swag/jsonutils@v0.26.1?package-id=d06d0215c564a74f",
      "type": "library",
      "name": "github.com/go-openapi/swag/jsonutils",
      "version": "v0.26.1",
      "cpe": "cpe:2.3:a:go-openapi:swag\\/jsonutils:v0.26.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/swag/jsonutils@v0.26.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:swag\\/jsonutils:v0.26.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:swag\\/jsonutils:v0.26.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:2hdBfFkHg+7Wrz2VsCbeyR6hzkRDs7AztnMR2u84yOY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/swag/loading@v0.26.1?package-id=f921ac782596e396",
      "type": "library",
      "name": "github.com/go-openapi/swag/loading",
      "version": "v0.26.1",
      "cpe": "cpe:2.3:a:go-openapi:swag\\/loading:v0.26.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/swag/loading@v0.26.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:swag\\/loading:v0.26.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:swag\\/loading:v0.26.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:E9K4wqXeROlhjFQ13K9zMz6ojFGXIggGe+ad1odrK9w="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/swag/mangling@v0.26.1?package-id=e43526744260532f",
      "type": "library",
      "name": "github.com/go-openapi/swag/mangling",
      "version": "v0.26.1",
      "cpe": "cpe:2.3:a:go-openapi:swag\\/mangling:v0.26.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/swag/mangling@v0.26.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:swag\\/mangling:v0.26.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:swag\\/mangling:v0.26.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:gpYI4WuPKFJJVjV5cDLGlDVJhFIxYjQc7yN5eEb4CqM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/swag/netutils@v0.26.1?package-id=06239d4665aace70",
      "type": "library",
      "name": "github.com/go-openapi/swag/netutils",
      "version": "v0.26.1",
      "cpe": "cpe:2.3:a:go-openapi:swag\\/netutils:v0.26.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/swag/netutils@v0.26.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:swag\\/netutils:v0.26.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:swag\\/netutils:v0.26.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:BNctoc39WTAUMxyAs355fExOPzMZtPbZ0ZZ1Am2FR5M="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/swag/stringutils@v0.26.1?package-id=083852796c1a311d",
      "type": "library",
      "name": "github.com/go-openapi/swag/stringutils",
      "version": "v0.26.1",
      "cpe": "cpe:2.3:a:go-openapi:swag\\/stringutils:v0.26.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/swag/stringutils@v0.26.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:swag\\/stringutils:v0.26.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:swag\\/stringutils:v0.26.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:f88uYyTso7TnHrKM/bUBsQ5e2wKf37cpgo6pvbzd9yU="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/swag/typeutils@v0.27.0?package-id=8e1bac53fe7d0d20",
      "type": "library",
      "name": "github.com/go-openapi/swag/typeutils",
      "version": "v0.27.0",
      "cpe": "cpe:2.3:a:go-openapi:swag\\/typeutils:v0.27.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/swag/typeutils@v0.27.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:swag\\/typeutils:v0.27.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:swag\\/typeutils:v0.27.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:aCf4MSGo8NLwZP8Q6t32DWLJSvl/WwNqgmEG+xJ6v2o="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/swag/yamlutils@v0.26.1?package-id=e4566cc8e15e8232",
      "type": "library",
      "name": "github.com/go-openapi/swag/yamlutils",
      "version": "v0.26.1",
      "cpe": "cpe:2.3:a:go-openapi:swag\\/yamlutils:v0.26.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/swag/yamlutils@v0.26.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:swag\\/yamlutils:v0.26.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:swag\\/yamlutils:v0.26.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:0TSLK+lXs9vfIhAWzBeI/lOzEnIoot6WTCO1aAeWFTk="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/validate@v0.26.0?package-id=4a02c0fb29ff27a2",
      "type": "library",
      "name": "github.com/go-openapi/validate",
      "version": "v0.26.0",
      "cpe": "cpe:2.3:a:go-openapi:validate:v0.26.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-openapi/validate@v0.26.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_openapi:validate:v0.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:validate:v0.26.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:dxWzQ3F+vb1SajqUxHjwb5T4mTpSHmdrtv5Bi7+ZNhw="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/go-viper/mapstructure/v2@v2.5.0?package-id=07db9719af0549c7",
      "type": "library",
      "name": "github.com/go-viper/mapstructure/v2",
      "version": "v2.5.0",
      "cpe": "cpe:2.3:a:go-viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/go-viper/mapstructure/v2@v2.5.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go_viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:vM5IJoUAy3d7zRSVtIwQgBj7BiWtMPfmPEgAXnvj1Ro="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/gobwas/glob@v0.2.3?package-id=952e7f60298c6ec9",
      "type": "library",
      "name": "github.com/gobwas/glob",
      "version": "v0.2.3",
      "cpe": "cpe:2.3:a:gobwas:glob:v0.2.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/gobwas/glob@v0.2.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:A4xDbljILXROh+kObIiy5kIaPYD8e96x1tgBhUI5J+Y="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/golang-jwt/jwt/v4@v4.5.2?package-id=1f4d37e10a8e1365",
      "type": "library",
      "name": "github.com/golang-jwt/jwt/v4",
      "version": "v4.5.2",
      "cpe": "cpe:2.3:a:golang-jwt:jwt\\/v4:v4.5.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/golang-jwt/jwt/v4@v4.5.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:golang_jwt:jwt\\/v4:v4.5.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:golang:jwt\\/v4:v4.5.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:YtQM7lnr8iZ+j5q71MGKkNw9Mn7AjHM68uc9g5fXeUI="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/golang-jwt/jwt/v5@v5.3.1?package-id=eca7d46278e0ea86",
      "type": "library",
      "name": "github.com/golang-jwt/jwt/v5",
      "version": "v5.3.1",
      "cpe": "cpe:2.3:a:golang-jwt:jwt\\/v5:v5.3.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/golang-jwt/jwt/v5@v5.3.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:golang_jwt:jwt\\/v5:v5.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:golang:jwt\\/v5:v5.3.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:kYf81DTWFe7t+1VvL7eS+jKFVWaUnK9cB1qbwn63YCY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/golang/snappy@v0.0.4?package-id=f915fd3a0be0630f",
      "type": "library",
      "name": "github.com/golang/snappy",
      "version": "v0.0.4",
      "cpe": "cpe:2.3:a:golang:snappy:v0.0.4:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/golang/snappy@v0.0.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:yAGX7huGHXlcLOEtBnF4w7FQwA26wojNCwOYAEhLjQM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/google/certificate-transparency-go@v1.3.3?package-id=dcd443ce3571ffff",
      "type": "library",
      "name": "github.com/google/certificate-transparency-go",
      "version": "v1.3.3",
      "cpe": "cpe:2.3:a:google:certificate-transparency-go:v1.3.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/google/certificate-transparency-go@v1.3.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:certificate_transparency_go:v1.3.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:hq/rSxztSkXN2tx/3jQqF6Xc0O565UQPdHrOWvZwybo="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/google/gnostic-models@v0.7.0?package-id=dbe808a4f3603fb6",
      "type": "library",
      "name": "github.com/google/gnostic-models",
      "version": "v0.7.0",
      "cpe": "cpe:2.3:a:google:gnostic-models:v0.7.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/google/gnostic-models@v0.7.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:gnostic_models:v0.7.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:qwTtogB15McXDaNqTZdzPJRHvaVJlAl+HVQnLmJEJxo="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/google/go-cmp@v0.7.0?package-id=a6eeb30e96b1d8f4",
      "type": "library",
      "name": "github.com/google/go-cmp",
      "version": "v0.7.0",
      "cpe": "cpe:2.3:a:google:go-cmp:v0.7.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/google/go-cmp@v0.7.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:go_cmp:v0.7.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/google/go-containerregistry@v0.21.7?package-id=0741b44c84cecfa8",
      "type": "library",
      "name": "github.com/google/go-containerregistry",
      "version": "v0.21.7",
      "cpe": "cpe:2.3:a:google:go-containerregistry:v0.21.7:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/google/go-containerregistry@v0.21.7",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:go_containerregistry:v0.21.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:/vPFuVXDjtFREsVArW+0h1CIl5urnOhzei4X2DMW9IU="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/google/go-github/v88@v88.0.0?package-id=7adc98f1ca0ac39c",
      "type": "library",
      "name": "github.com/google/go-github/v88",
      "version": "v88.0.0",
      "cpe": "cpe:2.3:a:google:go-github\\/v88:v88.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/google/go-github/v88@v88.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:go_github\\/v88:v88.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:dZA9IKkPK1eXZj4ypngnpRj5FwdpTv4whix2PrQMP7M="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/google/go-querystring@v1.2.0?package-id=3a372cbb42cc4a04",
      "type": "library",
      "name": "github.com/google/go-querystring",
      "version": "v1.2.0",
      "cpe": "cpe:2.3:a:google:go-querystring:v1.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/google/go-querystring@v1.2.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:go_querystring:v1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:yhqkPbu2/OH+V9BfpCVPZkNmUXhb2gBxJArfhIxNtP0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/google/s2a-go@v0.1.9?package-id=9518ec43ef34e687",
      "type": "library",
      "name": "github.com/google/s2a-go",
      "version": "v0.1.9",
      "cpe": "cpe:2.3:a:google:s2a-go:v0.1.9:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/google/s2a-go@v0.1.9",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:google:s2a_go:v0.1.9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:LGD7gtMgezd8a/Xak7mEWL0PjoTQFvpRudN895yqKW0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/google/uuid@v1.6.0?package-id=dc5864b6765511af",
      "type": "library",
      "name": "github.com/google/uuid",
      "version": "v1.6.0",
      "cpe": "cpe:2.3:a:google:uuid:v1.6.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/google/uuid@v1.6.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.16?package-id=5a358adb80cea1d3",
      "type": "library",
      "name": "github.com/googleapis/enterprise-certificate-proxy",
      "version": "v0.3.16",
      "cpe": "cpe:2.3:a:googleapis:enterprise-certificate-proxy:v0.3.16:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.16",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:googleapis:enterprise_certificate_proxy:v0.3.16:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:F/VPrx0YPBdksZJQdCAp0WUsqnNmZpUZszzfYt0M5Dw="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/googleapis/gax-go/v2@v2.22.0?package-id=419308522457d213",
      "type": "library",
      "name": "github.com/googleapis/gax-go/v2",
      "version": "v2.22.0",
      "cpe": "cpe:2.3:a:googleapis:gax-go\\/v2:v2.22.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/googleapis/gax-go/v2@v2.22.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:googleapis:gax_go\\/v2:v2.22.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:PjIWBpgGIVKGoCXuiCoP64altEJCj3/Ei+kSU5vlZD4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.29.0?package-id=69dc871b879916c0",
      "type": "library",
      "name": "github.com/grpc-ecosystem/grpc-gateway/v2",
      "version": "v2.29.0",
      "cpe": "cpe:2.3:a:grpc-ecosystem:grpc-gateway\\/v2:v2.29.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.29.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:grpc-ecosystem:grpc_gateway\\/v2:v2.29.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:grpc_ecosystem:grpc-gateway\\/v2:v2.29.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:grpc_ecosystem:grpc_gateway\\/v2:v2.29.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:grpc:grpc-gateway\\/v2:v2.29.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:grpc:grpc_gateway\\/v2:v2.29.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:5VipnvEpbqr2gA2VbM+nYVbkIF28c5ZQfqCBQ5g2xfk="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/hashicorp/errwrap@v1.1.0?package-id=f0290b42b5ad8b61",
      "type": "library",
      "name": "github.com/hashicorp/errwrap",
      "version": "v1.1.0",
      "cpe": "cpe:2.3:a:hashicorp:errwrap:v1.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/hashicorp/errwrap@v1.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:OxrOeh75EUXMY8TBjag2fzXGZ40LB6IKw45YeGUDY2I="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2?package-id=7954cc41120f0369",
      "type": "library",
      "name": "github.com/hashicorp/go-cleanhttp",
      "version": "v0.5.2",
      "cpe": "cpe:2.3:a:hashicorp:go-cleanhttp:v0.5.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hashicorp:go_cleanhttp:v0.5.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:035FKYIWjmULyFRBKPs8TBQoi0x6d9G4xc9neXJWAZQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1?package-id=78aee277f4baa3dd",
      "type": "library",
      "name": "github.com/hashicorp/go-multierror",
      "version": "v1.1.1",
      "cpe": "cpe:2.3:a:hashicorp:go-multierror:v1.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hashicorp:go_multierror:v1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:H5DkEtf6CXdFp0N0Em5UCwQpXMWke8IA0+lD48awMYo="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/hashicorp/go-retryablehttp@v0.7.8?package-id=47d50f93dbaa7c56",
      "type": "library",
      "name": "github.com/hashicorp/go-retryablehttp",
      "version": "v0.7.8",
      "cpe": "cpe:2.3:a:hashicorp:retryablehttp:v0.7.8:*:*:*:*:go:*:*",
      "purl": "pkg:golang/github.com/hashicorp/go-retryablehttp@v0.7.8",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:ylXZWnqa7Lhqpk0L1P1LzDtGcCR0rPVUrx/c8Unxc48="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/hashicorp/go-rootcerts@v1.0.2?package-id=86ea813c14a1f1a5",
      "type": "library",
      "name": "github.com/hashicorp/go-rootcerts",
      "version": "v1.0.2",
      "cpe": "cpe:2.3:a:hashicorp:go-rootcerts:v1.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/hashicorp/go-rootcerts@v1.0.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hashicorp:go_rootcerts:v1.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:jzhAVGtqPKbwpyCPELlgNWhE1znq+qwJtW5Oi2viEzc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/hashicorp/go-secure-stdlib/parseutil@v0.2.0?package-id=7e61e36872d4d3c6",
      "type": "library",
      "name": "github.com/hashicorp/go-secure-stdlib/parseutil",
      "version": "v0.2.0",
      "cpe": "cpe:2.3:a:hashicorp:go-secure-stdlib\\/parseutil:v0.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/hashicorp/go-secure-stdlib/parseutil@v0.2.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hashicorp:go_secure_stdlib\\/parseutil:v0.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:U+kC2dOhMFQctRfhK0gRctKAPTloZdMU5ZJxaesJ/VM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/hashicorp/go-secure-stdlib/strutil@v0.1.2?package-id=b2f7324b05a7df6c",
      "type": "library",
      "name": "github.com/hashicorp/go-secure-stdlib/strutil",
      "version": "v0.1.2",
      "cpe": "cpe:2.3:a:hashicorp:go-secure-stdlib\\/strutil:v0.1.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/hashicorp/go-secure-stdlib/strutil@v0.1.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hashicorp:go_secure_stdlib\\/strutil:v0.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:kes8mmyCpxJsI7FTwtzRqEy9CdjCtrXrXGuOpxEA7Ts="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/hashicorp/go-sockaddr@v1.0.7?package-id=3108a7a308050962",
      "type": "library",
      "name": "github.com/hashicorp/go-sockaddr",
      "version": "v1.0.7",
      "cpe": "cpe:2.3:a:hashicorp:go-sockaddr:v1.0.7:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/hashicorp/go-sockaddr@v1.0.7",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:hashicorp:go_sockaddr:v1.0.7:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:G+pTkSO01HpR5qCxg7lxfsFEZaG+C0VssTy/9dbT+Fw="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/hashicorp/hcl@v1.0.1-vault-7?package-id=7df7649f7d67b6b7",
      "type": "library",
      "name": "github.com/hashicorp/hcl",
      "version": "v1.0.1-vault-7",
      "cpe": "cpe:2.3:a:hashicorp:hcl:v1.0.1-vault-7:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/hashicorp/hcl@v1.0.1-vault-7",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:ag5OxFVy3QYTFTJODRzTKVZ6xvdfLLCA1cy/Y6xGI0I="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/hashicorp/vault/api@v1.22.0?package-id=773bd0110050979f",
      "type": "library",
      "name": "github.com/hashicorp/vault/api",
      "version": "v1.22.0",
      "cpe": "cpe:2.3:a:hashicorp:vault\\/api:v1.22.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/hashicorp/vault/api@v1.22.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:+HYFquE35/B74fHoIeXlZIP2YADVboaPjaSicHEZiH0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/in-toto/attestation@v1.2.0?package-id=b7ef61f8a65289a4",
      "type": "library",
      "name": "github.com/in-toto/attestation",
      "version": "v1.2.0",
      "cpe": "cpe:2.3:a:in-toto:attestation:v1.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/in-toto/attestation@v1.2.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:in_toto:attestation:v1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:in:attestation:v1.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:aPRUZ3azbqD7yEBD5fP3TD8Dszf+YHo284SOcpahjQk="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/in-toto/in-toto-golang@v0.11.0?package-id=913bc22ceb2d6b08",
      "type": "library",
      "name": "github.com/in-toto/in-toto-golang",
      "version": "v0.11.0",
      "cpe": "cpe:2.3:a:in-toto:in-toto-golang:v0.11.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/in-toto/in-toto-golang@v0.11.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:in-toto:in_toto_golang:v0.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:in_toto:in-toto-golang:v0.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:in_toto:in_toto_golang:v0.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:in:in-toto-golang:v0.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:in:in_toto_golang:v0.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:nfidMYBFx+E0lnmX5KUnN2Pdm8zdNKal1ayjJuzzRoA="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/jedisct1/go-minisign@v0.0.0-20230811132847-661be99b8267?package-id=2054b6140d18050f",
      "type": "library",
      "name": "github.com/jedisct1/go-minisign",
      "version": "v0.0.0-20230811132847-661be99b8267",
      "cpe": "cpe:2.3:a:jedisct1:go-minisign:v0.0.0-20230811132847-661be99b8267:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/jedisct1/go-minisign@v0.0.0-20230811132847-661be99b8267",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:jedisct1:go_minisign:v0.0.0-20230811132847-661be99b8267:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:TMtDYDHKYY15rFihtRfck/bfFqNfvcabqvXAFQfAUpY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/jellydator/ttlcache/v3@v3.4.0?package-id=808c10d1e10a803b",
      "type": "library",
      "name": "github.com/jellydator/ttlcache/v3",
      "version": "v3.4.0",
      "cpe": "cpe:2.3:a:jellydator:ttlcache\\/v3:v3.4.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/jellydator/ttlcache/v3@v3.4.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:YS4P125qQS0tNhtL6aeYkheEaB/m8HCqdMMP4mnWdTY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/json-iterator/go@v1.1.12?package-id=153eace73b87577b",
      "type": "library",
      "name": "github.com/json-iterator/go",
      "version": "v1.1.12",
      "cpe": "cpe:2.3:a:json-iterator:go:v1.1.12:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/json-iterator/go@v1.1.12",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json_iterator:go:v1.1.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:json:go:v1.1.12:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:PV8peI4a0ysnczrg+LtxykD8LfKY9ML6u2jnxaEnrnM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/klauspost/compress@v1.18.6?package-id=33e312400c940a30",
      "type": "library",
      "name": "github.com/klauspost/compress",
      "version": "v1.18.6",
      "cpe": "cpe:2.3:a:klauspost:compress:v1.18.6:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/klauspost/compress@v1.18.6",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:2jupLlAwFm95+YDR+NwD2MEfFO9d4z4Prjl1XXDjuao="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/kylelemons/godebug@v1.1.0?package-id=0fba8463d47302dc",
      "type": "library",
      "name": "github.com/kylelemons/godebug",
      "version": "v1.1.0",
      "cpe": "cpe:2.3:a:kylelemons:godebug:v1.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/kylelemons/godebug@v1.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:RPNrshWIDI6G2gRW9EHilWtl7Z6Sb1BR0xunSBf0SNc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/lestrrat-go/blackmagic@v1.0.4?package-id=4cf2450b788b9df3",
      "type": "library",
      "name": "github.com/lestrrat-go/blackmagic",
      "version": "v1.0.4",
      "cpe": "cpe:2.3:a:lestrrat-go:blackmagic:v1.0.4:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/lestrrat-go/blackmagic@v1.0.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lestrrat_go:blackmagic:v1.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lestrrat:blackmagic:v1.0.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:IwQibdnf8l2KoO+qC3uT4OaTWsW7tuRQXy9TRN9QanA="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/lestrrat-go/dsig@v1.2.1?package-id=f1739d6fc26179f2",
      "type": "library",
      "name": "github.com/lestrrat-go/dsig",
      "version": "v1.2.1",
      "cpe": "cpe:2.3:a:lestrrat-go:dsig:v1.2.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/lestrrat-go/dsig@v1.2.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lestrrat_go:dsig:v1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lestrrat:dsig:v1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:MwxzZhE4+4fguHi+uDALKVlC3Cn+O1QU1Q/F8D7hVIc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/lestrrat-go/httpcc@v1.0.1?package-id=51b5af44b46ad59a",
      "type": "library",
      "name": "github.com/lestrrat-go/httpcc",
      "version": "v1.0.1",
      "cpe": "cpe:2.3:a:lestrrat-go:httpcc:v1.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/lestrrat-go/httpcc@v1.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lestrrat_go:httpcc:v1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lestrrat:httpcc:v1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:ydWCStUeJLkpYyjLDHihupbn2tYmZ7m22BGkcvZZrIE="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/lestrrat-go/httprc/v3@v3.0.5?package-id=15c7f4302b2b5718",
      "type": "library",
      "name": "github.com/lestrrat-go/httprc/v3",
      "version": "v3.0.5",
      "cpe": "cpe:2.3:a:lestrrat-go:httprc\\/v3:v3.0.5:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/lestrrat-go/httprc/v3@v3.0.5",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lestrrat_go:httprc\\/v3:v3.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lestrrat:httprc\\/v3:v3.0.5:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:S+Mb4L2I+bM6JGTibLmxExhyTOqnXjqx+zi9MoXw/TM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/lestrrat-go/jwx/v3@v3.1.1?package-id=bde1f9beaa69394e",
      "type": "library",
      "name": "github.com/lestrrat-go/jwx/v3",
      "version": "v3.1.1",
      "cpe": "cpe:2.3:a:lestrrat-go:jwx\\/v3:v3.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/lestrrat-go/jwx/v3@v3.1.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lestrrat_go:jwx\\/v3:v3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lestrrat:jwx\\/v3:v3.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:yd9AdPmZ4INnQ7k42IrzXYpnEG803+SrQ6hdMvzHJzw="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/lestrrat-go/option/v2@v2.0.0?package-id=1373c4c66537c562",
      "type": "library",
      "name": "github.com/lestrrat-go/option/v2",
      "version": "v2.0.0",
      "cpe": "cpe:2.3:a:lestrrat-go:option\\/v2:v2.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/lestrrat-go/option/v2@v2.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lestrrat_go:option\\/v2:v2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:lestrrat:option\\/v2:v2.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:XxrcaJESE1fokHy3FpaQ/cXW8ZsIdWcdFzzLOcID3Ss="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/letsencrypt/boulder@v0.20260309.0?package-id=5d59486e3c034faa",
      "type": "library",
      "name": "github.com/letsencrypt/boulder",
      "version": "v0.20260309.0",
      "cpe": "cpe:2.3:a:letsencrypt:boulder:v0.20260309.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/letsencrypt/boulder@v0.20260309.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:kZynrxK3QfqLGx6hhoz+Rfs3hgltJs1p9Mp+4+VwnY0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0?package-id=efefa25f639ada35",
      "type": "library",
      "name": "github.com/mitchellh/go-homedir",
      "version": "v1.1.0",
      "cpe": "cpe:2.3:a:mitchellh:go-homedir:v1.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mitchellh:go_homedir:v1.1.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:lukF9ziXFxDFPkA1vsr5zpc1XuPDn/wFntq5mG+4E0Y="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1?package-id=c55dd7a23f6f8fef",
      "type": "library",
      "name": "github.com/mitchellh/go-wordwrap",
      "version": "v1.0.1",
      "cpe": "cpe:2.3:a:mitchellh:go-wordwrap:v1.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mitchellh:go_wordwrap:v1.0.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:TLuKupo69TCn6TQSyGxwI1EblZZEsQ0vMlAFQflz0v0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/mitchellh/mapstructure@v1.5.1-0.20231216201459-8508981c8b6c?package-id=f9003262f18e4152",
      "type": "library",
      "name": "github.com/mitchellh/mapstructure",
      "version": "v1.5.1-0.20231216201459-8508981c8b6c",
      "cpe": "cpe:2.3:a:mitchellh:mapstructure:v1.5.1-0.20231216201459-8508981c8b6c:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/mitchellh/mapstructure@v1.5.1-0.20231216201459-8508981c8b6c",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:cqn374mizHuIWj+OSJCajGr/phAmuMug9qIX3l9CflE="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/moby/term@v0.5.2?package-id=9dfaf03e5d4fae63",
      "type": "library",
      "name": "github.com/moby/term",
      "version": "v0.5.2",
      "cpe": "cpe:2.3:a:moby:term:v0.5.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/moby/term@v0.5.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:6qk3FJAFDs6i/q3W/pQ97SX192qKfZgGjCQqfCJkgzQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd?package-id=83b39540f6fd8320",
      "type": "library",
      "name": "github.com/modern-go/concurrent",
      "version": "v0.0.0-20180306012644-bacd9c7ef1dd",
      "cpe": "cpe:2.3:a:modern-go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:modern_go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:modern:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:TRLaZ9cD/w8PVh93nsPXa1VrQ6jlwL5oN8l14QlcNfg="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee?package-id=db3e6b3d47fd8305",
      "type": "library",
      "name": "github.com/modern-go/reflect2",
      "version": "v1.0.3-0.20250322232337-35a7c28c31ee",
      "cpe": "cpe:2.3:a:modern-go:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:modern_go:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:modern:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:W5t00kpgFdJifH4BDsTlE89Zl93FEloxaWZfGcifgq8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/mozillazg/docker-credential-acr-helper@v0.4.0?package-id=c25caaf5fbcee8a7",
      "type": "library",
      "name": "github.com/mozillazg/docker-credential-acr-helper",
      "version": "v0.4.0",
      "cpe": "cpe:2.3:a:mozillazg:docker-credential-acr-helper:v0.4.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/mozillazg/docker-credential-acr-helper@v0.4.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:mozillazg:docker_credential_acr_helper:v0.4.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Uoh3Z9CcpEDnLiozDx+D7oDgRq7X+R296vAqAumnOcw="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822?package-id=4c4f7553d13dd1c6",
      "type": "library",
      "name": "github.com/munnerz/goautoneg",
      "version": "v0.0.0-20191010083416-a7dc8b61c822",
      "cpe": "cpe:2.3:a:munnerz:goautoneg:v0.0.0-20191010083416-a7dc8b61c822:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:C3w9PqII01/Oq1c1nUAm88MOHcQC9l5mIlSMApZMrHA="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/natefinch/atomic@v1.0.1?package-id=14efe978cd014cb5",
      "type": "library",
      "name": "github.com/natefinch/atomic",
      "version": "v1.0.1",
      "cpe": "cpe:2.3:a:natefinch:atomic:v1.0.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/natefinch/atomic@v1.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:ZPYKxkqQOx3KZ+RsbnP/YsgvxWQPGxjC0oBt2AhwV0A="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/nozzle/throttler@v0.0.0-20180817012639-2ea982251481?package-id=37c93cbdeb579ec7",
      "type": "library",
      "name": "github.com/nozzle/throttler",
      "version": "v0.0.0-20180817012639-2ea982251481",
      "cpe": "cpe:2.3:a:nozzle:throttler:v0.0.0-20180817012639-2ea982251481:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/nozzle/throttler@v0.0.0-20180817012639-2ea982251481",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Up6+btDp321ZG5/zdSLo48H9Iaq0UQGthrhWC6pCxzE="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/oklog/ulid/v2@v2.1.1?package-id=2202d85f665017d2",
      "type": "library",
      "name": "github.com/oklog/ulid/v2",
      "version": "v2.1.1",
      "cpe": "cpe:2.3:a:oklog:ulid\\/v2:v2.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/oklog/ulid/v2@v2.1.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:suPZ4ARWLOJLegGFiZZ1dFAkqzhMjL3J1TzI+5wHz8s="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/oleiade/reflections@v1.1.0?package-id=717b55a3596cc981",
      "type": "library",
      "name": "github.com/oleiade/reflections",
      "version": "v1.1.0",
      "cpe": "cpe:2.3:a:oleiade:reflections:v1.1.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/oleiade/reflections@v1.1.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:D+I/UsXQB4esMathlt0kkZRJZdUDmhv5zGi/HOwYTWo="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/open-policy-agent/opa@v1.17.1?package-id=8220279c711f7956",
      "type": "library",
      "name": "github.com/open-policy-agent/opa",
      "version": "v1.17.1",
      "cpe": "cpe:2.3:a:open-policy-agent:opa:v1.17.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/open-policy-agent/opa@v1.17.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:open_policy_agent:opa:v1.17.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:open-policy:opa:v1.17.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:open_policy:opa:v1.17.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:open:opa:v1.17.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:wO0MOux/VCqY41aVAD6Toe1p3A7O7DlRZ1RHmYSpoS8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0?package-id=8bb86ee4aeac4079",
      "type": "library",
      "name": "github.com/opencontainers/go-digest",
      "version": "v1.0.0",
      "cpe": "cpe:2.3:a:opencontainers:go-digest:v1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:opencontainers:go_digest:v1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:apOUWs51W5PlhuyGyz9FCeeBIOUDA/6nW8Oi/yOhh5U="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/opencontainers/image-spec@v1.1.1?package-id=5a3844b4ae2d4080",
      "type": "library",
      "name": "github.com/opencontainers/image-spec",
      "version": "v1.1.1",
      "cpe": "cpe:2.3:a:opencontainers:image-spec:v1.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/opencontainers/image-spec@v1.1.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:opencontainers:image_spec:v1.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:y0fUlFfIZhPF1W537XOLg0/fcx6zcHCJwooC2xJA040="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/pborman/uuid@v1.2.1?package-id=6554c2158441d98c",
      "type": "library",
      "name": "github.com/pborman/uuid",
      "version": "v1.2.1",
      "cpe": "cpe:2.3:a:pborman:uuid:v1.2.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/pborman/uuid@v1.2.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:+ZZIw58t/ozdjRaXh/3awHfmWRbzYxJoAdNJxe/3pvw="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/pelletier/go-toml/v2@v2.2.4?package-id=a26ed28deb4272d1",
      "type": "library",
      "name": "github.com/pelletier/go-toml/v2",
      "version": "v2.2.4",
      "cpe": "cpe:2.3:a:pelletier:go-toml\\/v2:v2.2.4:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/pelletier/go-toml/v2@v2.2.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:pelletier:go_toml\\/v2:v2.2.4:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:mye9XuhQ6gvn5h28+VilKrrPoQVanw5PMw/TB0t5Ec4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/pkg/browser@v0.0.0-20240102092130-5ac0b6a4141c?package-id=b7e3ad8d8c43ec37",
      "type": "library",
      "name": "github.com/pkg/browser",
      "version": "v0.0.0-20240102092130-5ac0b6a4141c",
      "cpe": "cpe:2.3:a:pkg:browser:v0.0.0-20240102092130-5ac0b6a4141c:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/pkg/browser@v0.0.0-20240102092130-5ac0b6a4141c",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:+mdjkGKdHQG3305AYmdv1U2eRNDiU2ErMBj1gwrq8eQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/pkg/errors@v0.9.1?package-id=046f062fab71eed6",
      "type": "library",
      "name": "github.com/pkg/errors",
      "version": "v0.9.1",
      "cpe": "cpe:2.3:a:pkg:errors:v0.9.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/pkg/errors@v0.9.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:FEBLx1zS214owpjy7qsBeixbURkuhQAwrK5UwLGTwt4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/protocolbuffers/txtpbfmt@v0.0.0-20260217160748-a481f6a22f94?package-id=cecc0cbd68f637b4",
      "type": "library",
      "name": "github.com/protocolbuffers/txtpbfmt",
      "version": "v0.0.0-20260217160748-a481f6a22f94",
      "cpe": "cpe:2.3:a:protocolbuffers:txtpbfmt:v0.0.0-20260217160748-a481f6a22f94:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/protocolbuffers/txtpbfmt@v0.0.0-20260217160748-a481f6a22f94",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:2PC6Ql3jipz1KvBlqUHjjk6v4aMwE86mfDu1XMH0LR8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/rcrowley/go-metrics@v0.0.0-20250401214520-65e299d6c5c9?package-id=e997b5499975778f",
      "type": "library",
      "name": "github.com/rcrowley/go-metrics",
      "version": "v0.0.0-20250401214520-65e299d6c5c9",
      "cpe": "cpe:2.3:a:rcrowley:go-metrics:v0.0.0-20250401214520-65e299d6c5c9:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/rcrowley/go-metrics@v0.0.0-20250401214520-65e299d6c5c9",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rcrowley:go_metrics:v0.0.0-20250401214520-65e299d6c5c9:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:bsUq1dX0N8AOIL7EB/X911+m4EHsnWEHeJ0c+3TTBrg="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/rogpeppe/go-internal@v1.14.1?package-id=f910e0e3147cc87a",
      "type": "library",
      "name": "github.com/rogpeppe/go-internal",
      "version": "v1.14.1",
      "cpe": "cpe:2.3:a:rogpeppe:go-internal:v1.14.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/rogpeppe/go-internal@v1.14.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:rogpeppe:go_internal:v1.14.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:UQB4HGPB6osV0SQTLymcB4TgvyWu6ZyliaW0tI/otEQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/ryanuber/go-glob@v1.0.0?package-id=146465e284eca96d",
      "type": "library",
      "name": "github.com/ryanuber/go-glob",
      "version": "v1.0.0",
      "cpe": "cpe:2.3:a:ryanuber:go-glob:v1.0.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/ryanuber/go-glob@v1.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:ryanuber:go_glob:v1.0.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:iQh3xXAumdQ+4Ufa5b25cRpC5TYKlno6hsv6Cb3pkBk="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/sagikazarmark/locafero@v0.11.0?package-id=2ec4efd879d9f231",
      "type": "library",
      "name": "github.com/sagikazarmark/locafero",
      "version": "v0.11.0",
      "cpe": "cpe:2.3:a:sagikazarmark:locafero:v0.11.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/sagikazarmark/locafero@v0.11.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:1iurJgmM9G3PA/I+wWYIOw/5SyBtxapeHDcg+AAIFXc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/sassoftware/relic@v7.2.1%2Bincompatible?package-id=a32366c2e9e32396",
      "type": "library",
      "name": "github.com/sassoftware/relic",
      "version": "v7.2.1+incompatible",
      "cpe": "cpe:2.3:a:sassoftware:relic:v7.2.1\\+incompatible:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/sassoftware/relic@v7.2.1%2Bincompatible",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Pwyh1F3I0r4clFJXkSI8bOyJINGqpgjJU3DYAZeI05A="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.11.0?package-id=a2dfb463e51ff073",
      "type": "library",
      "name": "github.com/secure-systems-lab/go-securesystemslib",
      "version": "v0.11.0",
      "cpe": "cpe:2.3:a:secure-systems-lab:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.11.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:secure-systems-lab:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:secure_systems_lab:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:secure_systems_lab:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:secure-systems:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:secure-systems:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:secure_systems:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:secure_systems:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:secure:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:secure:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:iuCR9kcMFD4QurdKrGvPLoKZLv9YvwPYVr0473BdtFs="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/shibumi/go-pathspec@v1.3.0?package-id=a48037a2f23214ab",
      "type": "library",
      "name": "github.com/shibumi/go-pathspec",
      "version": "v1.3.0",
      "cpe": "cpe:2.3:a:shibumi:go-pathspec:v1.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/shibumi/go-pathspec@v1.3.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:shibumi:go_pathspec:v1.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:QUyMZhFo0Md5B8zV8x2tesohbb5kfbpTi9rBnKh5dkI="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/sigstore/cosign/v3@v3.1.3?package-id=2b8c6de0a2f2fe17",
      "type": "library",
      "name": "github.com/sigstore/cosign/v3",
      "version": "v3.1.3",
      "cpe": "cpe:2.3:a:sigstore:cosign\\/v3:v3.1.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/sigstore/cosign/v3@v3.1.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/sigstore/protobuf-specs@v0.5.1?package-id=3cb97be52ca9c304",
      "type": "library",
      "name": "github.com/sigstore/protobuf-specs",
      "version": "v0.5.1",
      "cpe": "cpe:2.3:a:sigstore:protobuf-specs:v0.5.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/sigstore/protobuf-specs@v0.5.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sigstore:protobuf_specs:v0.5.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:/5OPaNuolRJmQfeZLayJGFXMpsRJEdgC6ah1/+7Px7U="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/sigstore/rekor@v1.5.3?package-id=fc096d3903be43da",
      "type": "library",
      "name": "github.com/sigstore/rekor",
      "version": "v1.5.3",
      "cpe": "cpe:2.3:a:sigstore:rekor:v1.5.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/sigstore/rekor@v1.5.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:0Tyolw3zreRgm7PUW8dccFLXGBThi08278jI8EXNSr4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/sigstore/rekor-tiles/v2@v2.3.0?package-id=eed15d9a8e74d5b8",
      "type": "library",
      "name": "github.com/sigstore/rekor-tiles/v2",
      "version": "v2.3.0",
      "cpe": "cpe:2.3:a:sigstore:rekor-tiles\\/v2:v2.3.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/sigstore/rekor-tiles/v2@v2.3.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sigstore:rekor_tiles\\/v2:v2.3.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:HhMgH61UP0t899V8Fjt7pz1YdgOBptbaQdnCF+79cdc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/sigstore/sigstore@v1.10.8?package-id=5bf9076a07478af3",
      "type": "library",
      "name": "github.com/sigstore/sigstore",
      "version": "v1.10.8",
      "cpe": "cpe:2.3:a:sigstore:sigstore:v1.10.8:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/sigstore/sigstore@v1.10.8",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:1Mgkxvkw4AXMfIP1DOjc6kw0GkUgA8pGVpveN/EfOq4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/sigstore/sigstore-go@v1.2.2?package-id=4f6c8ccb0e798cee",
      "type": "library",
      "name": "github.com/sigstore/sigstore-go",
      "version": "v1.2.2",
      "cpe": "cpe:2.3:a:sigstore:sigstore-go:v1.2.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/sigstore/sigstore-go@v1.2.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sigstore:sigstore_go:v1.2.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:xAJ8hxaoecC0HKBYVbrwUjkeAI+GJYu6vLqbxDlD2Q0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/aws@v1.10.8?package-id=f1cb309ba6bdefae",
      "type": "library",
      "name": "github.com/sigstore/sigstore/pkg/signature/kms/aws",
      "version": "v1.10.8",
      "cpe": "cpe:2.3:a:sigstore:sigstore\\/pkg\\/signature\\/kms\\/aws:v1.10.8:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/aws@v1.10.8",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:tofVQ+UWJgad/69I5zbqxdFCN5gpIn9tRQP7iBzIpBw="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/azure@v1.10.8?package-id=b2421c6ae63063f8",
      "type": "library",
      "name": "github.com/sigstore/sigstore/pkg/signature/kms/azure",
      "version": "v1.10.8",
      "cpe": "cpe:2.3:a:sigstore:sigstore\\/pkg\\/signature\\/kms\\/azure:v1.10.8:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/azure@v1.10.8",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:8Mt7J36GcUEmbiJaiFhz2tud5ZIgkfVVCe2H/WJCHmw="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/gcp@v1.10.8?package-id=919f7f534084681a",
      "type": "library",
      "name": "github.com/sigstore/sigstore/pkg/signature/kms/gcp",
      "version": "v1.10.8",
      "cpe": "cpe:2.3:a:sigstore:sigstore\\/pkg\\/signature\\/kms\\/gcp:v1.10.8:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/gcp@v1.10.8",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:MxpAIMZVzn0Tpbarc9ax1I498oQBp7oYSMgoMSsOmKI="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/hashivault@v1.10.8?package-id=9587a1821e2df0c1",
      "type": "library",
      "name": "github.com/sigstore/sigstore/pkg/signature/kms/hashivault",
      "version": "v1.10.8",
      "cpe": "cpe:2.3:a:sigstore:sigstore\\/pkg\\/signature\\/kms\\/hashivault:v1.10.8:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/hashivault@v1.10.8",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:1DGe4/clcdOnkz5MINEczWlmEvjUtZd+AjPPT/cBhQ8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/sigstore/timestamp-authority/v2@v2.1.2?package-id=31a6131b5f5820d1",
      "type": "library",
      "name": "github.com/sigstore/timestamp-authority/v2",
      "version": "v2.1.2",
      "cpe": "cpe:2.3:a:sigstore:timestamp-authority\\/v2:v2.1.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/sigstore/timestamp-authority/v2@v2.1.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:sigstore:timestamp_authority\\/v2:v2.1.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:7DDhnknLL4w8VwomyvW2W8qblOS9LDR8oihna+jc7Ls="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/sirupsen/logrus@v1.9.4?package-id=c2211289616b1950",
      "type": "library",
      "name": "github.com/sirupsen/logrus",
      "version": "v1.9.4",
      "cpe": "cpe:2.3:a:turbopuffer:logrus:v1.9.4:*:*:*:*:go:*:*",
      "purl": "pkg:golang/github.com/sirupsen/logrus@v1.9.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:TsZE7l11zFCLZnZ+teH4Umoq5BhEIfIzfRDZ1Uzql2w="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/sourcegraph/conc@v0.3.1-0.20240121214520-5f936abd7ae8?package-id=5c200e90f8f1bf78",
      "type": "library",
      "name": "github.com/sourcegraph/conc",
      "version": "v0.3.1-0.20240121214520-5f936abd7ae8",
      "cpe": "cpe:2.3:a:sourcegraph:conc:v0.3.1-0.20240121214520-5f936abd7ae8:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/sourcegraph/conc@v0.3.1-0.20240121214520-5f936abd7ae8",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:+jumHNA0Wrelhe64i8F6HNlS8pkoyMv5sreGx2Ry5Rw="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/spf13/afero@v1.15.0?package-id=0e2dcd7bce622b56",
      "type": "library",
      "name": "github.com/spf13/afero",
      "version": "v1.15.0",
      "cpe": "cpe:2.3:a:spf13:afero:v1.15.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/spf13/afero@v1.15.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:b/YBCLWAJdFWJTN9cLhiXXcD7mzKn9Dm86dNnfyQw1I="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/spf13/cast@v1.10.0?package-id=cb68cf4d44cf8988",
      "type": "library",
      "name": "github.com/spf13/cast",
      "version": "v1.10.0",
      "cpe": "cpe:2.3:a:spf13:cast:v1.10.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/spf13/cast@v1.10.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:h2x0u2shc1QuLHfxi+cTJvs30+ZAHOGRic8uyGTDWxY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/spf13/cobra@v1.10.2?package-id=7debcf7c91f9f7f8",
      "type": "library",
      "name": "github.com/spf13/cobra",
      "version": "v1.10.2",
      "cpe": "cpe:2.3:a:spf13:cobra:v1.10.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/spf13/cobra@v1.10.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:DMTTonx5m65Ic0GOoRY2c16WCbHxOOw6xxezuLaBpcU="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/spf13/pflag@v1.0.10?package-id=8ac2d08657389c59",
      "type": "library",
      "name": "github.com/spf13/pflag",
      "version": "v1.0.10",
      "cpe": "cpe:2.3:a:spf13:pflag:v1.0.10:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/spf13/pflag@v1.0.10",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:4EBh2KAYBwaONj6b2Ye1GiHfwjqyROoF4RwYO+vPwFk="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/spf13/viper@v1.21.0?package-id=5ebbbe2e69715b91",
      "type": "library",
      "name": "github.com/spf13/viper",
      "version": "v1.21.0",
      "cpe": "cpe:2.3:a:spf13:viper:v1.21.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/spf13/viper@v1.21.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:x5S+0EU27Lbphp4UKm1C+1oQO+rKx36vfCoaVebLFSU="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/spiffe/go-spiffe/v2@v2.7.0?package-id=3d68f63d85740104",
      "type": "library",
      "name": "github.com/spiffe/go-spiffe/v2",
      "version": "v2.7.0",
      "cpe": "cpe:2.3:a:spiffe:go-spiffe\\/v2:v2.7.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/spiffe/go-spiffe/v2@v2.7.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:spiffe:go_spiffe\\/v2:v2.7.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:uXe1MflJoHw58wAUvxVlcM7WpKtijWG7I1UidcGh6g4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/subosito/gotenv@v1.6.0?package-id=666ffa46a542ddcb",
      "type": "library",
      "name": "github.com/subosito/gotenv",
      "version": "v1.6.0",
      "cpe": "cpe:2.3:a:subosito:gotenv:v1.6.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/subosito/gotenv@v1.6.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:9NlTDc1FTs4qu0DDq7AEtTPNw6SVm7uBMsUCUjABIf8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/syndtr/goleveldb@v1.0.1-0.20220721030215-126854af5e6d?package-id=969aad993310bb66",
      "type": "library",
      "name": "github.com/syndtr/goleveldb",
      "version": "v1.0.1-0.20220721030215-126854af5e6d",
      "cpe": "cpe:2.3:a:syndtr:goleveldb:v1.0.1-0.20220721030215-126854af5e6d:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/syndtr/goleveldb@v1.0.1-0.20220721030215-126854af5e6d",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:vfofYNRScrDdvS342BElfbETmL1Aiz3i2t0zfRj16Hs="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/tchap/go-patricia/v2@v2.3.3?package-id=043f1321a050cd0f",
      "type": "library",
      "name": "github.com/tchap/go-patricia/v2",
      "version": "v2.3.3",
      "cpe": "cpe:2.3:a:tchap:go-patricia\\/v2:v2.3.3:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/tchap/go-patricia/v2@v2.3.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:tchap:go_patricia\\/v2:v2.3.3:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:xfNEsODumaEcCcY3gI0hYPZ/PcpVv5ju6RMAhgwZDDc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/theupdateframework/go-tuf@v0.7.0?package-id=cbf9a02a050cf8bb",
      "type": "library",
      "name": "github.com/theupdateframework/go-tuf",
      "version": "v0.7.0",
      "cpe": "cpe:2.3:a:theupdateframework:go-tuf:v0.7.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/theupdateframework/go-tuf@v0.7.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:theupdateframework:go_tuf:v0.7.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:CqbQFrWo1ae3/I0UCblSbczevCCbS31Qvs5LdxRWqRI="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/theupdateframework/go-tuf/v2@v2.4.2?package-id=86fcae7909a1a935",
      "type": "library",
      "name": "github.com/theupdateframework/go-tuf/v2",
      "version": "v2.4.2",
      "cpe": "cpe:2.3:a:theupdateframework:go-tuf\\/v2:v2.4.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/theupdateframework/go-tuf/v2@v2.4.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:theupdateframework:go_tuf\\/v2:v2.4.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:w7976/W8uTwlsegP5nRymlpjPgrwSh+AXUf85is6nJk="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/titanous/rocacheck@v0.0.0-20171023193734-afe73141d399?package-id=4070efe9537240e7",
      "type": "library",
      "name": "github.com/titanous/rocacheck",
      "version": "v0.0.0-20171023193734-afe73141d399",
      "cpe": "cpe:2.3:a:titanous:rocacheck:v0.0.0-20171023193734-afe73141d399:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/titanous/rocacheck@v0.0.0-20171023193734-afe73141d399",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:e/5i7d4oYZ+C1wj2THlRK+oAhjeS/TRQwMfkIuet3w0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/tjfoc/gmsm@v1.4.1?package-id=5f94f6f359639f96",
      "type": "library",
      "name": "github.com/tjfoc/gmsm",
      "version": "v1.4.1",
      "cpe": "cpe:2.3:a:tjfoc:gmsm:v1.4.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/tjfoc/gmsm@v1.4.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:aMe1GlZb+0bLjn+cKTPEvvn9oUEBlJitaZiiBwsbgho="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/transparency-dev/formats@v0.1.1?package-id=799a3f87c5323a2a",
      "type": "library",
      "name": "github.com/transparency-dev/formats",
      "version": "v0.1.1",
      "cpe": "cpe:2.3:a:transparency-dev:formats:v0.1.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/transparency-dev/formats@v0.1.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transparency_dev:formats:v0.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transparency:formats:v0.1.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:4bVHJc+KdBgpA1OJD1yjI+g0i5Z1graCppTMH8lWKJI="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/transparency-dev/merkle@v0.0.2?package-id=fc313fc8f57fa868",
      "type": "library",
      "name": "github.com/transparency-dev/merkle",
      "version": "v0.0.2",
      "cpe": "cpe:2.3:a:transparency-dev:merkle:v0.0.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/transparency-dev/merkle@v0.0.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transparency_dev:merkle:v0.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:transparency:merkle:v0.0.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Q9nBoQcZcgPamMkGn7ghV8XiTZ/kRxn1yCG81+twTK4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/valyala/fastjson@v1.6.10?package-id=a577c6f329e08d69",
      "type": "library",
      "name": "github.com/valyala/fastjson",
      "version": "v1.6.10",
      "cpe": "cpe:2.3:a:valyala:fastjson:v1.6.10:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/valyala/fastjson@v1.6.10",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:/yjJg8jaVQdYR3arGxPE2X5z89xrlhS0eGXdv+ADTh4="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/vektah/gqlparser/v2@v2.5.33?package-id=8d4906dceb70fea6",
      "type": "library",
      "name": "github.com/vektah/gqlparser/v2",
      "version": "v2.5.33",
      "cpe": "cpe:2.3:a:vektah:gqlparser\\/v2:v2.5.33:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/vektah/gqlparser/v2@v2.5.33",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:lRp8aIeNUNbimf/axZd7ETg24q06hBtPaas+TcvI/7E="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/withfig/autocomplete-tools/integrations/cobra@v1.2.1?package-id=fd2df6a6e732ef8b",
      "type": "library",
      "name": "github.com/withfig/autocomplete-tools/integrations/cobra",
      "version": "v1.2.1",
      "cpe": "cpe:2.3:a:withfig:autocomplete-tools\\/integrations\\/cobra:v1.2.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/withfig/autocomplete-tools/integrations/cobra@v1.2.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:withfig:autocomplete_tools\\/integrations\\/cobra:v1.2.1:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:+dBg5k7nuTE38VVdoroRsT0Z88fmvdYrI2EjzJst35I="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/x448/float16@v0.8.4?package-id=c7c95b56ac8b9c37",
      "type": "library",
      "name": "github.com/x448/float16",
      "version": "v0.8.4",
      "cpe": "cpe:2.3:a:x448:float16:v0.8.4:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/x448/float16@v0.8.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:qLwI1I70+NjRFUR3zs1JPUCgaCXSh3SW62uAKT1mSBM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb?package-id=92d61dc46cd3d1ce",
      "type": "library",
      "name": "github.com/xeipuuv/gojsonpointer",
      "version": "v0.0.0-20190905194746-02993c407bfb",
      "cpe": "cpe:2.3:a:xeipuuv:gojsonpointer:v0.0.0-20190905194746-02993c407bfb:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:zGWFAtiMcyryUHoUjUJX0/lt1H2+i2Ka2n+D3DImSNo="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415?package-id=11dc93c8ce033033",
      "type": "library",
      "name": "github.com/xeipuuv/gojsonreference",
      "version": "v0.0.0-20180127040603-bd5ef7bd5415",
      "cpe": "cpe:2.3:a:xeipuuv:gojsonreference:v0.0.0-20180127040603-bd5ef7bd5415:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:EzJWgHovont7NscjpAxXsDA8S8BMYve8Y5+7cuRE7R0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/yashtewari/glob-intersection@v0.2.0?package-id=408ab9182ff6273e",
      "type": "library",
      "name": "github.com/yashtewari/glob-intersection",
      "version": "v0.2.0",
      "cpe": "cpe:2.3:a:yashtewari:glob-intersection:v0.2.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/yashtewari/glob-intersection@v0.2.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:yashtewari:glob_intersection:v0.2.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:8iuHdN88yYuCzCdjt0gDe+6bAhUwBeEWqThExu54RFg="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/youmark/pkcs8@v0.0.0-20240726163527-a2c0da244d78?package-id=0f62f09306b41e58",
      "type": "library",
      "name": "github.com/youmark/pkcs8",
      "version": "v0.0.0-20240726163527-a2c0da244d78",
      "cpe": "cpe:2.3:a:youmark:pkcs8:v0.0.0-20240726163527-a2c0da244d78:*:*:*:*:*:*:*",
      "purl": "pkg:golang/github.com/youmark/pkcs8@v0.0.0-20240726163527-a2c0da244d78",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:ilQV1hzziu+LLM3zUTJ0trRztfwgjqKnBWNtSRkbmwM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/gitlab.com/gitlab-org/api/client-go@v1.46.0?package-id=315d981993eacb3f",
      "type": "library",
      "name": "gitlab.com/gitlab-org/api/client-go",
      "version": "v1.46.0",
      "cpe": "cpe:2.3:a:gitlab-org:api\\/client-go:v1.46.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/gitlab.com/gitlab-org/api/client-go@v1.46.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gitlab-org:api\\/client_go:v1.46.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gitlab_org:api\\/client-go:v1.46.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gitlab_org:api\\/client_go:v1.46.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gitlab:api\\/client-go:v1.46.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:gitlab:api\\/client_go:v1.46.0:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:YxBWFZIFYKcGESCb9fpkwzouo+apyB9pr/XTWzNoL24="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1?package-id=a4da7b3d60eccd62",
      "type": "library",
      "name": "go.opentelemetry.io/auto/sdk",
      "version": "v1.2.1",
      "cpe": "cpe:2.3:a:auto:sdk:v1.2.1:*:*:*:*:*:*:*",
      "purl": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:jXsnJ4Lmnqd11kwkBV2LgLoFMZKizbCi5fNZ/ipaZ64="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.68.0?package-id=63ff9719b65bd4d5",
      "type": "library",
      "name": "go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc",
      "version": "v0.68.0",
      "cpe": "cpe:2.3:a:contrib:instrumentation\\/google.golang.org\\/grpc\\/otelgrpc:v0.68.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.68.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:0Qx7VGBacMm9ZENQ7TnNObTYI4ShC+lHI16seduaxZo="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.68.0?package-id=2d121bea3c3d3161",
      "type": "library",
      "name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp",
      "version": "v0.68.0",
      "cpe": "cpe:2.3:a:contrib:instrumentation\\/net\\/http\\/otelhttp:v0.68.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.68.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:CqXxU8VOmDefoh0+ztfGaymYbhdB/tT3zs79QaZTNGY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/go.opentelemetry.io/otel@v1.44.0?package-id=03298614b7e24903",
      "type": "library",
      "name": "go.opentelemetry.io/otel",
      "version": "v1.44.0",
      "cpe": "cpe:2.3:a:opentelemetry:opentelemetry:v1.44.0:*:*:*:*:go:*:*",
      "purl": "pkg:golang/go.opentelemetry.io/otel@v1.44.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:JjwHmHpA4iZ3wBxluu2fbbE7j4kqlE8jXyAyPXH7HqU="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/go.opentelemetry.io/otel/metric@v1.44.0?package-id=f0a0df59daafecd1",
      "type": "library",
      "name": "go.opentelemetry.io/otel/metric",
      "version": "v1.44.0",
      "cpe": "cpe:2.3:a:otel:metric:v1.44.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/go.opentelemetry.io/otel/metric@v1.44.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:1w0gILTcHdr3YI+ixLyjemwrVnsMURbTZFrSYCdDdmc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/go.opentelemetry.io/otel/trace@v1.44.0?package-id=978b2182927f57b5",
      "type": "library",
      "name": "go.opentelemetry.io/otel/trace",
      "version": "v1.44.0",
      "cpe": "cpe:2.3:a:otel:trace:v1.44.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/go.opentelemetry.io/otel/trace@v1.44.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:jxF5CsGYCe74MCRx2X4g7WsY/VBKRqqpNvXlX/6gtIk="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/go.uber.org/multierr@v1.11.0?package-id=979cfe4d5cbd9d81",
      "type": "library",
      "name": "go.uber.org/multierr",
      "version": "v1.11.0",
      "purl": "pkg:golang/go.uber.org/multierr@v1.11.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:blXXJkSxSSfBVBlC76pxqeO+LN3aDfLQo+309xJstO0="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/go.uber.org/zap@v1.28.0?package-id=5981572e2275acb0",
      "type": "library",
      "name": "go.uber.org/zap",
      "version": "v1.28.0",
      "purl": "pkg:golang/go.uber.org/zap@v1.28.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:IZzaP1Fv73/T/pBMLk4VutPl36uNC+OSUh3JLG3FIjo="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/go.yaml.in/yaml/v2@v2.4.4?package-id=4eba4fad8964f523",
      "type": "library",
      "name": "go.yaml.in/yaml/v2",
      "version": "v2.4.4",
      "cpe": "cpe:2.3:a:yaml:v2:v2.4.4:*:*:*:*:*:*:*",
      "purl": "pkg:golang/go.yaml.in/yaml/v2@v2.4.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:tuyd0P+2Ont/d6e2rl3be67goVK4R6deVxCUX5vyPaQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/go.yaml.in/yaml/v3@v3.0.4?package-id=78223f68bc68dbec",
      "type": "library",
      "name": "go.yaml.in/yaml/v3",
      "version": "v3.0.4",
      "cpe": "cpe:2.3:a:yaml:v3:v3.0.4:*:*:*:*:*:*:*",
      "purl": "pkg:golang/go.yaml.in/yaml/v3@v3.0.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:tfq32ie2Jv2UxXFdLJdh3jXuOzWiL1fo0bu/FbuKpbc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/crypto@v0.53.0?package-id=ea88281ba5918552",
      "type": "library",
      "name": "golang.org/x/crypto",
      "version": "v0.53.0",
      "cpe": "cpe:2.3:a:golang:crypto:v0.53.0:*:*:*:*:go:*:*",
      "purl": "pkg:golang/golang.org/x/crypto@v0.53.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:go:ssh:v0.53.0:*:*:*:*:go:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:QZ4Muo8THX6CizN2vPPd5fBGHyogrdK9fG4wLPFUsto="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/mod@v0.37.0?package-id=def735d5f79b4bd2",
      "type": "library",
      "name": "golang.org/x/mod",
      "version": "v0.37.0",
      "cpe": "cpe:2.3:a:golang:x\\/mod:v0.37.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/golang.org/x/mod@v0.37.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:vF1DjpVEshcIqoEaauuHebaLk1O1forxjxBaVn884JQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/net@v0.56.0?package-id=f56ebac45b6aeff8",
      "type": "library",
      "name": "golang.org/x/net",
      "version": "v0.56.0",
      "cpe": "cpe:2.3:a:golang:networking:v0.56.0:*:*:*:*:go:*:*",
      "purl": "pkg:golang/golang.org/x/net@v0.56.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:golang:net:v0.56.0:*:*:*:*:go:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Rw8j/hFzGvJUZwNBXnAtf5sVDVt+65SK2C7IxCxZt5o="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/oauth2@v0.36.0?package-id=9f2e71d4b1c1d5eb",
      "type": "library",
      "name": "golang.org/x/oauth2",
      "version": "v0.36.0",
      "cpe": "cpe:2.3:a:golang:x\\/oauth2:v0.36.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/golang.org/x/oauth2@v0.36.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:peZ/1z27fi9hUOFCAZaHyrpWG5lwe0RJEEEeH0ThlIs="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/sync@v0.21.0?package-id=8c9ca2d1284c59b8",
      "type": "library",
      "name": "golang.org/x/sync",
      "version": "v0.21.0",
      "cpe": "cpe:2.3:a:golang:x\\/sync:v0.21.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/golang.org/x/sync@v0.21.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:HLII4xRRTtCRkxYp4HNFF0Js/Og6q2i++KXbg0gHCwM="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/sys@v0.46.0?package-id=cf50f8ab814b086d",
      "type": "library",
      "name": "golang.org/x/sys",
      "version": "v0.46.0",
      "cpe": "cpe:2.3:a:golang:x\\/sys:v0.46.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/golang.org/x/sys@v0.46.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:noSf2Fq6F8DBgS+LysIkx7rIExoNHJsxOAtPp4rthXw="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/term@v0.44.0?package-id=2b562b787ff7049c",
      "type": "library",
      "name": "golang.org/x/term",
      "version": "v0.44.0",
      "cpe": "cpe:2.3:a:golang:x\\/term:v0.44.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/golang.org/x/term@v0.44.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:0rLvDRCtNj0gZkyIXhCyOb2OAzEhLVqc4B+hrsBhrmc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/text@v0.38.0?package-id=5ac5a1f322dbd932",
      "type": "library",
      "name": "golang.org/x/text",
      "version": "v0.38.0",
      "cpe": "cpe:2.3:a:golang:text:v0.38.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/golang.org/x/text@v0.38.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:sXmwo9DwP3OK9EZ7PqAdaooSGozfl/3a6/xJcbzPRhE="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/time@v0.15.0?package-id=4010ca636ee2055b",
      "type": "library",
      "name": "golang.org/x/time",
      "version": "v0.15.0",
      "cpe": "cpe:2.3:a:golang:x\\/time:v0.15.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/golang.org/x/time@v0.15.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:bbrp8t3bGUeFOx08pvsMYRTCVSMk89u4tKbNOZbp88U="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/google.golang.org/api@v0.284.0?package-id=397a7ccc0d6388b6",
      "type": "library",
      "name": "google.golang.org/api",
      "version": "v0.284.0",
      "cpe": "cpe:2.3:a:google:api:v0.284.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/google.golang.org/api@v0.284.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:i+cKTgeQRcRySkP7QTl5PDO7/pAm8EcMFIUMlNbk4Vc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/google.golang.org/genproto@v0.0.0-20260406210006-6f92a3bedf2d?package-id=5dccfc345a523d86",
      "type": "library",
      "name": "google.golang.org/genproto",
      "version": "v0.0.0-20260406210006-6f92a3bedf2d",
      "cpe": "cpe:2.3:a:google:genproto:v0.0.0-20260406210006-6f92a3bedf2d:*:*:*:*:*:*:*",
      "purl": "pkg:golang/google.golang.org/genproto@v0.0.0-20260406210006-6f92a3bedf2d",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:N1Ec54vZnIPd7MnxRiYLW+oY4fDR4BOS/LrssdD9+ek="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260526163538-3dc84a4a5aaa?package-id=96c91d04affecbf7",
      "type": "library",
      "name": "google.golang.org/genproto/googleapis/api",
      "version": "v0.0.0-20260526163538-3dc84a4a5aaa",
      "cpe": "cpe:2.3:a:google:genproto:v0.0.0-20260526163538-3dc84a4a5aaa:*:*:*:*:*:*:*",
      "purl": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260526163538-3dc84a4a5aaa",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Kjn0N0tCrDgiAFW+lGO4JZ3ck44CehvJQMAwj9QF0G8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260526163538-3dc84a4a5aaa?package-id=b1e93837960e9650",
      "type": "library",
      "name": "google.golang.org/genproto/googleapis/rpc",
      "version": "v0.0.0-20260526163538-3dc84a4a5aaa",
      "cpe": "cpe:2.3:a:google:genproto:v0.0.0-20260526163538-3dc84a4a5aaa:*:*:*:*:*:*:*",
      "purl": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260526163538-3dc84a4a5aaa",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:mZHHdPZl0dbGHCflZgAq/Q468DWVFcU2whhB2KAo8fk="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/google.golang.org/grpc@v1.82.0?package-id=ac71eb66fbfcc3ad",
      "type": "library",
      "name": "google.golang.org/grpc",
      "version": "v1.82.0",
      "cpe": "cpe:2.3:a:google:grpc:v1.82.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/google.golang.org/grpc@v1.82.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:vguDnZUPjE26w09A63VoxZPnvPjB5Riyc0mkXPFmAIU="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/google.golang.org/protobuf@v1.36.12-0.20260120151049-f2248ac996af?package-id=a3ec2a3fb8d58dca",
      "type": "library",
      "name": "google.golang.org/protobuf",
      "version": "v1.36.12-0.20260120151049-f2248ac996af",
      "cpe": "cpe:2.3:a:google:protobuf:v1.36.12-0.20260120151049-f2248ac996af:*:*:*:*:*:*:*",
      "purl": "pkg:golang/google.golang.org/protobuf@v1.36.12-0.20260120151049-f2248ac996af",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:+5/Sw3GsDNlEmu7TfklWKPdQ0Ykja5VEmq2i817+jbI="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/gopkg.in/evanphx/json-patch.v4@v4.13.0?package-id=2f7e65ea96afa90a",
      "type": "library",
      "name": "gopkg.in/evanphx/json-patch.v4",
      "version": "v4.13.0",
      "purl": "pkg:golang/gopkg.in/evanphx/json-patch.v4@v4.13.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:czT3CmqEaQ1aanPc5SdlgQrrEIb8w/wwCvWWnfEbYzo="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/gopkg.in/inf.v0@v0.9.1?package-id=7720b9d4eb4421cb",
      "type": "library",
      "name": "gopkg.in/inf.v0",
      "version": "v0.9.1",
      "purl": "pkg:golang/gopkg.in/inf.v0@v0.9.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:73M5CoZyi3ZLMOyDlQh031Cx6N9NDJ2Vvfl76EDAgDc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/gopkg.in/ini.v1@v1.67.3?package-id=a7db605f7da5e28e",
      "type": "library",
      "name": "gopkg.in/ini.v1",
      "version": "v1.67.3",
      "purl": "pkg:golang/gopkg.in/ini.v1@v1.67.3",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:iM9Lhz5MRSGhHVGGwCuzG9KO8PoirCXj/m/qTmOJJQw="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/gopkg.in/yaml.v3@v3.0.1?package-id=b41b52b8851e8e82",
      "type": "library",
      "name": "gopkg.in/yaml.v3",
      "version": "v3.0.1",
      "cpe": "cpe:2.3:a:yaml_project:yaml:v3.0.1:*:*:*:*:go:*:*",
      "purl": "pkg:golang/gopkg.in/yaml.v3@v3.0.1",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/k8s.io/api@v0.36.2?package-id=efc34f03059d84ff",
      "type": "library",
      "name": "k8s.io/api",
      "version": "v0.36.2",
      "purl": "pkg:golang/k8s.io/api@v0.36.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:TF6YDLIzKfccK7cq9YpTcGX8TJmEkHVRv78DM51fRYY="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/k8s.io/apimachinery@v0.36.2?package-id=84699aa6c19a0f86",
      "type": "library",
      "name": "k8s.io/apimachinery",
      "version": "v0.36.2",
      "purl": "pkg:golang/k8s.io/apimachinery@v0.36.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:0PE/W/WNy1UX61NLbXY5TMbJ6UwLL6E6lAPkYrKFxbQ="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/k8s.io/client-go@v0.36.2?package-id=1520a69320d5c00e",
      "type": "library",
      "name": "k8s.io/client-go",
      "version": "v0.36.2",
      "purl": "pkg:golang/k8s.io/client-go@v0.36.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:bfgxmFKc9CgqsgX4xKLAAdmTQlWee7Ob/HlDOrJ5TBI="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/k8s.io/klog/v2@v2.140.0?package-id=743e87864f54144e",
      "type": "library",
      "name": "k8s.io/klog/v2",
      "version": "v2.140.0",
      "cpe": "cpe:2.3:a:klog:v2:v2.140.0:*:*:*:*:*:*:*",
      "purl": "pkg:golang/k8s.io/klog/v2@v2.140.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:Tf+J3AH7xnUzZyVVXhTgGhEKnFqye14aadWv7bzXdzc="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20260317180543-43fb72c5454a?package-id=56acb0975afefa1d",
      "type": "library",
      "name": "k8s.io/kube-openapi",
      "version": "v0.0.0-20260317180543-43fb72c5454a",
      "purl": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20260317180543-43fb72c5454a",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:xCeOEAOoGYl2jnJoHkC3hkbPJgdATINPMAxaynU2Ovg="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/k8s.io/utils@v0.0.0-20260210185600-b8788abfbbc2?package-id=863c2c50b9a2b5c3",
      "type": "library",
      "name": "k8s.io/utils",
      "version": "v0.0.0-20260210185600-b8788abfbbc2",
      "purl": "pkg:golang/k8s.io/utils@v0.0.0-20260210185600-b8788abfbbc2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:AZYQSJemyQB5eRxqcPky+/7EdBj0xi3g0ZcxxJ7vbWU="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/sigs.k8s.io/json@v0.0.0-20250730193827-2d320260d730?package-id=32aac6725df08cc9",
      "type": "library",
      "name": "sigs.k8s.io/json",
      "version": "v0.0.0-20250730193827-2d320260d730",
      "purl": "pkg:golang/sigs.k8s.io/json@v0.0.0-20250730193827-2d320260d730",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:IpInykpT6ceI+QxKBbEflcR5EXP7sU1kvOlxwZh5txg="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/sigs.k8s.io/randfill@v1.0.0?package-id=84b15a8f6a4143b8",
      "type": "library",
      "name": "sigs.k8s.io/randfill",
      "version": "v1.0.0",
      "purl": "pkg:golang/sigs.k8s.io/randfill@v1.0.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:JfjMILfT8A6RbawdsK2JXGBR5AQVfd+9TbzrlneTyrU="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/sigs.k8s.io/release-utils@v0.12.4?package-id=7c058053dbe135e7",
      "type": "library",
      "name": "sigs.k8s.io/release-utils",
      "version": "v0.12.4",
      "purl": "pkg:golang/sigs.k8s.io/release-utils@v0.12.4",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:kuG6WTWGCKx5uUrJwl2uFErOKOw+4Ba8WrPmOQh5J3g="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/sigs.k8s.io/structured-merge-diff/v6@v6.3.2?package-id=6e27d88a9fbc2db8",
      "type": "library",
      "name": "sigs.k8s.io/structured-merge-diff/v6",
      "version": "v6.3.2",
      "cpe": "cpe:2.3:a:structured-merge-diff:v6:v6.3.2:*:*:*:*:*:*:*",
      "purl": "pkg:golang/sigs.k8s.io/structured-merge-diff/v6@v6.3.2",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:structured_merge_diff:v6:v6.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:structured-merge:v6:v6.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:structured_merge:v6:v6.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:cpe23",
          "value": "cpe:2.3:a:structured:v6:v6.3.2:*:*:*:*:*:*:*"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:kwVWMx5yS1CrnFWA/2QHyRVJ8jM6dBA80uLmm0wJkk8="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/sigs.k8s.io/yaml@v1.6.0?package-id=d2ba1fafdec96557",
      "type": "library",
      "name": "sigs.k8s.io/yaml",
      "version": "v1.6.0",
      "purl": "pkg:golang/sigs.k8s.io/yaml@v1.6.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:architecture",
          "value": "amd64"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        },
        {
          "name": "syft:metadata:h1Digest",
          "value": "h1:G8fkbMSAFqgEFgh4b1wmtzDnioxFCUgTZhlbj5P9QYs="
        },
        {
          "name": "syft:metadata:mainModule",
          "value": "github.com/sigstore/cosign/v3"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/stdlib@1.27.0?package-id=20e22cd40a04f35e",
      "type": "library",
      "name": "stdlib",
      "version": "go1.27.0",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "cpe": "cpe:2.3:a:golang:go:1.27.0:-:*:*:*:*:*:*",
      "purl": "pkg:golang/stdlib@1.27.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "go-module-binary-cataloger"
        },
        {
          "name": "syft:package:language",
          "value": "go"
        },
        {
          "name": "syft:package:type",
          "value": "go-module"
        },
        {
          "name": "syft:package:metadataType",
          "value": "go-module-buildinfo-entry"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:b6f6f32cc6b0abfbaa05396a9a85cc353897ab7aadf81cdf0e32fb4cff4a1efa"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/cosign"
        },
        {
          "name": "syft:metadata:goCompiledVersion",
          "value": "go1.27.0"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:golang/github.com/sigstore/cosign/v3@v3.1.3?package-id=2b8c6de0a2f2fe17",
      "dependsOn": [
        "pkg:golang/buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go@v1.36.11-20260415201107-50325440f8f2.1?package-id=fdf918959b0caf25",
        "pkg:golang/cloud.google.com/go/auth/oauth2adapt@v0.2.8?package-id=d19b5dee0102203a",
        "pkg:golang/cloud.google.com/go/auth@v0.20.0?package-id=a392e4f800224c39",
        "pkg:golang/cloud.google.com/go/compute/metadata@v0.9.0?package-id=76f3fdf5d834ea95",
        "pkg:golang/cloud.google.com/go/iam@v1.11.0?package-id=3e9591aec7891727",
        "pkg:golang/cloud.google.com/go/kms@v1.31.0?package-id=5f3b5586ec95a52d",
        "pkg:golang/cloud.google.com/go/longrunning@v1.0.0?package-id=86f7c358fa60154f",
        "pkg:golang/connectrpc.com/connect@v1.20.0?package-id=5fe2c6c7a20cb985",
        "pkg:golang/cuelabs.dev/go/oci/ociregistry@v0.0.0-20251212221603-3adeb8663819?package-id=a6e07281019224fc",
        "pkg:golang/cuelang.org/go@v0.16.1?package-id=27d189ee66f61ee3",
        "pkg:golang/github.com/agnivade/levenshtein@v1.2.1?package-id=2aafebacda966396",
        "pkg:golang/github.com/alibabacloud-go/alibabacloud-gateway-spi@v0.0.4?package-id=ceaf9add0c168222",
        "pkg:golang/github.com/alibabacloud-go/cr-20160607@v1.0.1?package-id=cc0779aefda914e4",
        "pkg:golang/github.com/alibabacloud-go/cr-20181201@v1.0.10?package-id=9749ba74c2732863",
        "pkg:golang/github.com/alibabacloud-go/darabonba-openapi@v0.2.1?package-id=c6e2f1bfb83cc1ea",
        "pkg:golang/github.com/alibabacloud-go/debug@v1.0.0?package-id=e79fa98b07c9c350",
        "pkg:golang/github.com/alibabacloud-go/endpoint-util@v1.1.1?package-id=efdfdc766b3bc0e6",
        "pkg:golang/github.com/alibabacloud-go/openapi-util@v0.1.0?package-id=be35d72f9dcaa64e",
        "pkg:golang/github.com/alibabacloud-go/tea-utils@v1.4.5?package-id=43a8afd874a3d07f",
        "pkg:golang/github.com/alibabacloud-go/tea-xml@v1.1.3?package-id=ae5f20bcc16ce430",
        "pkg:golang/github.com/alibabacloud-go/tea@v1.2.1?package-id=f9cea70e40d19dea",
        "pkg:golang/github.com/aliyun/credentials-go@v1.3.2?package-id=7f3f52ae96e275a8",
        "pkg:golang/github.com/aliyuncontainerservice/ack-ram-tool/pkg/credentials/provider@v0.14.0?package-id=8ff603e7c559c04c",
        "pkg:golang/github.com/asaskevich/govalidator@v0.0.0-20230301143203-a9d515a09cc2?package-id=15c51d1e605be147",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.32.25?package-id=3f7fc926c07dd538",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/credentials@v1.19.24?package-id=bd800787838e9f82",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.18.29?package-id=0152cad51918262e",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.4.29?package-id=237d6b13c4b2423c",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.7.29?package-id=4a3c72755116e0f0",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/v4a@v1.4.30?package-id=f3968b93dd384847",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ecr@v1.55.3?package-id=a342ab22d7e863c5",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ecrpublic@v1.38.10?package-id=6a21d921b1e1c52b",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding@v1.13.12?package-id=0fb21a03701d35cc",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.13.29?package-id=a8ce4a7f189dee4a",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/kms@v1.53.4?package-id=2b34a7ec624646ff",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/signin@v1.2.0?package-id=ffdc5cc7d79fc63f",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sso@v1.31.3?package-id=5a1db50b9e7772d5",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.36.6?package-id=9fa195dea08e673f",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sts@v1.43.3?package-id=6b63ef3678481151",
        "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.42.0?package-id=2371e5c774b7d98e",
        "pkg:golang/github.com/aws/smithy-go@v1.27.2?package-id=7eb845f61a6cfa56",
        "pkg:golang/github.com/awslabs/amazon-ecr-credential-helper/ecr-login@v0.12.0?package-id=819a083487855904",
        "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/azcore@v1.22.0?package-id=922e16ef88d1265e",
        "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/azidentity@v1.14.0?package-id=62d91fd3c2093428",
        "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/internal@v1.12.0?package-id=86e8a676c3e844a4",
        "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/security/keyvault/azkeys@v1.5.0?package-id=cf461a9b9ac26eaf",
        "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/security/keyvault/internal@v1.2.0?package-id=479affc3f5615590",
        "pkg:golang/github.com/azure/azure-sdk-for-go@v68.0.0%2Bincompatible?package-id=ac2a88a1a45647ec",
        "pkg:golang/github.com/azure/go-autorest/autorest/adal@v0.9.23?package-id=81f4ab41493130bf",
        "pkg:golang/github.com/azure/go-autorest/autorest/azure/auth@v0.5.12?package-id=73e148d0a03056d2",
        "pkg:golang/github.com/azure/go-autorest/autorest/azure/cli@v0.4.6?package-id=b7b0a39543ce3fac",
        "pkg:golang/github.com/azure/go-autorest/autorest/date@v0.3.0?package-id=d8493bb3fa3c0f35",
        "pkg:golang/github.com/azure/go-autorest/autorest@v0.11.29?package-id=3495cff582eeeb32",
        "pkg:golang/github.com/azure/go-autorest/logger@v0.2.1?package-id=d7ab94aa90b33bbb",
        "pkg:golang/github.com/azure/go-autorest/tracing@v0.6.0?package-id=7a9d21ea392d1a85",
        "pkg:golang/github.com/azuread/microsoft-authentication-library-for-go@v1.7.2?package-id=931fc8ace4a4d2dc",
        "pkg:golang/github.com/blang/semver@v3.5.1%2Bincompatible?package-id=b1f6c2c1ca6d88b6",
        "pkg:golang/github.com/buildkite/agent/v3@v3.130.0?package-id=03b3edb6e975573c",
        "pkg:golang/github.com/buildkite/go-pipeline@v0.17.1?package-id=b4ae7468dd5eafae",
        "pkg:golang/github.com/buildkite/interpolate@v0.1.5?package-id=14a899cfaa96172c",
        "pkg:golang/github.com/buildkite/roko@v1.4.0?package-id=97a60f2bdea6c173",
        "pkg:golang/github.com/cenkalti/backoff/v4@v4.3.0?package-id=9e6a03538c796ef9",
        "pkg:golang/github.com/cenkalti/backoff/v5@v5.0.3?package-id=e457b8de108cb5e7",
        "pkg:golang/github.com/cespare/xxhash/v2@v2.3.0?package-id=03e3fd3eab325602",
        "pkg:golang/github.com/chrismellard/docker-credential-acr-env@v0.0.0-20230304212654-82a0ddb27589?package-id=796da91abc5d1b62",
        "pkg:golang/github.com/clbanning/mxj/v2@v2.7.0?package-id=158c7d13c6717a73",
        "pkg:golang/github.com/cockroachdb/apd/v3@v3.2.1?package-id=ed69d96cb3dc04ca",
        "pkg:golang/github.com/common-nighthawk/go-figure@v0.0.0-20210622060536-734e95fb86be?package-id=511812ea8077a418",
        "pkg:golang/github.com/coreos/go-oidc/v3@v3.18.0?package-id=cc8d8682b603fab2",
        "pkg:golang/github.com/cyberphone/json-canonicalization@v0.0.0-20241213102144-19d51d7fe467?package-id=187a37fef2b39743",
        "pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc?package-id=69adc6f604bfc11b",
        "pkg:golang/github.com/digitorus/pkcs7@v0.0.0-20230818184609-3a137a874352?package-id=04547f61309f459a",
        "pkg:golang/github.com/digitorus/timestamp@v0.0.0-20231217203849-220c5c2851b7?package-id=0a53d5e991f3dbba",
        "pkg:golang/github.com/dimchansky/utfbom@v1.1.1?package-id=ad1bbf0d6c891c7e",
        "pkg:golang/github.com/docker/cli@v29.5.3%2Bincompatible?package-id=ee2c7e77666fb3a8",
        "pkg:golang/github.com/docker/docker-credential-helpers@v0.9.5?package-id=9bdf61403a30641a",
        "pkg:golang/github.com/dustin/go-humanize@v1.0.1?package-id=71b46ad1e7cad5b4",
        "pkg:golang/github.com/emicklei/go-restful/v3@v3.13.0?package-id=52ac6882d80558d1",
        "pkg:golang/github.com/emicklei/proto@v1.14.3?package-id=195b8754dfab58f1",
        "pkg:golang/github.com/felixge/httpsnoop@v1.0.4?package-id=6a1063872351e59f",
        "pkg:golang/github.com/fsnotify/fsnotify@v1.10.1?package-id=229a8f2c9a83b044",
        "pkg:golang/github.com/fxamacker/cbor/v2@v2.9.0?package-id=7b493e026cce240a",
        "pkg:golang/github.com/go-chi/chi/v5@v5.3.0?package-id=4ad8662f10d971b9",
        "pkg:golang/github.com/go-jose/go-jose/v4@v4.1.4?package-id=f1f52dcbe95f9435",
        "pkg:golang/github.com/go-logr/logr@v1.4.3?package-id=aa84faf04c9a64fd",
        "pkg:golang/github.com/go-logr/stdr@v1.2.2?package-id=82637aa5c1e6e9c6",
        "pkg:golang/github.com/go-openapi/analysis@v0.25.2?package-id=b75e3517134d186d",
        "pkg:golang/github.com/go-openapi/errors@v0.22.8?package-id=2c476fe38b928e33",
        "pkg:golang/github.com/go-openapi/jsonpointer@v0.23.1?package-id=d31f42f0904aab41",
        "pkg:golang/github.com/go-openapi/jsonreference@v0.21.6?package-id=199de48f283051ac",
        "pkg:golang/github.com/go-openapi/loads@v0.24.0?package-id=92f1de4791e35b03",
        "pkg:golang/github.com/go-openapi/runtime/server-middleware@v0.30.0?package-id=e8e012bebca80cc8",
        "pkg:golang/github.com/go-openapi/runtime@v0.32.4?package-id=a562847a4ed31ee6",
        "pkg:golang/github.com/go-openapi/spec@v0.22.6?package-id=8c6cc9b642724260",
        "pkg:golang/github.com/go-openapi/strfmt@v0.26.4?package-id=73c288bc697db310",
        "pkg:golang/github.com/go-openapi/swag/cmdutils@v0.26.1?package-id=393346e5cbc5ec4a",
        "pkg:golang/github.com/go-openapi/swag/conv@v0.27.0?package-id=0a7430cdd518ae99",
        "pkg:golang/github.com/go-openapi/swag/fileutils@v0.26.1?package-id=74c9d0b178a34404",
        "pkg:golang/github.com/go-openapi/swag/jsonname@v0.26.1?package-id=84bccb93048ea0f1",
        "pkg:golang/github.com/go-openapi/swag/jsonutils@v0.26.1?package-id=d06d0215c564a74f",
        "pkg:golang/github.com/go-openapi/swag/loading@v0.26.1?package-id=f921ac782596e396",
        "pkg:golang/github.com/go-openapi/swag/mangling@v0.26.1?package-id=e43526744260532f",
        "pkg:golang/github.com/go-openapi/swag/netutils@v0.26.1?package-id=06239d4665aace70",
        "pkg:golang/github.com/go-openapi/swag/stringutils@v0.26.1?package-id=083852796c1a311d",
        "pkg:golang/github.com/go-openapi/swag/typeutils@v0.27.0?package-id=8e1bac53fe7d0d20",
        "pkg:golang/github.com/go-openapi/swag/yamlutils@v0.26.1?package-id=e4566cc8e15e8232",
        "pkg:golang/github.com/go-openapi/swag@v0.26.1?package-id=1ddfda96ee51d00c",
        "pkg:golang/github.com/go-openapi/validate@v0.26.0?package-id=4a02c0fb29ff27a2",
        "pkg:golang/github.com/go-viper/mapstructure/v2@v2.5.0?package-id=07db9719af0549c7",
        "pkg:golang/github.com/gobwas/glob@v0.2.3?package-id=952e7f60298c6ec9",
        "pkg:golang/github.com/golang-jwt/jwt/v4@v4.5.2?package-id=1f4d37e10a8e1365",
        "pkg:golang/github.com/golang-jwt/jwt/v5@v5.3.1?package-id=eca7d46278e0ea86",
        "pkg:golang/github.com/golang/snappy@v0.0.4?package-id=f915fd3a0be0630f",
        "pkg:golang/github.com/google/certificate-transparency-go@v1.3.3?package-id=dcd443ce3571ffff",
        "pkg:golang/github.com/google/gnostic-models@v0.7.0?package-id=dbe808a4f3603fb6",
        "pkg:golang/github.com/google/go-cmp@v0.7.0?package-id=a6eeb30e96b1d8f4",
        "pkg:golang/github.com/google/go-containerregistry@v0.21.7?package-id=0741b44c84cecfa8",
        "pkg:golang/github.com/google/go-github/v88@v88.0.0?package-id=7adc98f1ca0ac39c",
        "pkg:golang/github.com/google/go-querystring@v1.2.0?package-id=3a372cbb42cc4a04",
        "pkg:golang/github.com/google/s2a-go@v0.1.9?package-id=9518ec43ef34e687",
        "pkg:golang/github.com/google/uuid@v1.6.0?package-id=dc5864b6765511af",
        "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.16?package-id=5a358adb80cea1d3",
        "pkg:golang/github.com/googleapis/gax-go/v2@v2.22.0?package-id=419308522457d213",
        "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.29.0?package-id=69dc871b879916c0",
        "pkg:golang/github.com/hashicorp/errwrap@v1.1.0?package-id=f0290b42b5ad8b61",
        "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2?package-id=7954cc41120f0369",
        "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1?package-id=78aee277f4baa3dd",
        "pkg:golang/github.com/hashicorp/go-retryablehttp@v0.7.8?package-id=47d50f93dbaa7c56",
        "pkg:golang/github.com/hashicorp/go-rootcerts@v1.0.2?package-id=86ea813c14a1f1a5",
        "pkg:golang/github.com/hashicorp/go-secure-stdlib/parseutil@v0.2.0?package-id=7e61e36872d4d3c6",
        "pkg:golang/github.com/hashicorp/go-secure-stdlib/strutil@v0.1.2?package-id=b2f7324b05a7df6c",
        "pkg:golang/github.com/hashicorp/go-sockaddr@v1.0.7?package-id=3108a7a308050962",
        "pkg:golang/github.com/hashicorp/hcl@v1.0.1-vault-7?package-id=7df7649f7d67b6b7",
        "pkg:golang/github.com/hashicorp/vault/api@v1.22.0?package-id=773bd0110050979f",
        "pkg:golang/github.com/in-toto/attestation@v1.2.0?package-id=b7ef61f8a65289a4",
        "pkg:golang/github.com/in-toto/in-toto-golang@v0.11.0?package-id=913bc22ceb2d6b08",
        "pkg:golang/github.com/jedisct1/go-minisign@v0.0.0-20230811132847-661be99b8267?package-id=2054b6140d18050f",
        "pkg:golang/github.com/jellydator/ttlcache/v3@v3.4.0?package-id=808c10d1e10a803b",
        "pkg:golang/github.com/json-iterator/go@v1.1.12?package-id=153eace73b87577b",
        "pkg:golang/github.com/klauspost/compress@v1.18.6?package-id=33e312400c940a30",
        "pkg:golang/github.com/kylelemons/godebug@v1.1.0?package-id=0fba8463d47302dc",
        "pkg:golang/github.com/lestrrat-go/blackmagic@v1.0.4?package-id=4cf2450b788b9df3",
        "pkg:golang/github.com/lestrrat-go/dsig@v1.2.1?package-id=f1739d6fc26179f2",
        "pkg:golang/github.com/lestrrat-go/httpcc@v1.0.1?package-id=51b5af44b46ad59a",
        "pkg:golang/github.com/lestrrat-go/httprc/v3@v3.0.5?package-id=15c7f4302b2b5718",
        "pkg:golang/github.com/lestrrat-go/jwx/v3@v3.1.1?package-id=bde1f9beaa69394e",
        "pkg:golang/github.com/lestrrat-go/option/v2@v2.0.0?package-id=1373c4c66537c562",
        "pkg:golang/github.com/letsencrypt/boulder@v0.20260309.0?package-id=5d59486e3c034faa",
        "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0?package-id=efefa25f639ada35",
        "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1?package-id=c55dd7a23f6f8fef",
        "pkg:golang/github.com/mitchellh/mapstructure@v1.5.1-0.20231216201459-8508981c8b6c?package-id=f9003262f18e4152",
        "pkg:golang/github.com/moby/term@v0.5.2?package-id=9dfaf03e5d4fae63",
        "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd?package-id=83b39540f6fd8320",
        "pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee?package-id=db3e6b3d47fd8305",
        "pkg:golang/github.com/mozillazg/docker-credential-acr-helper@v0.4.0?package-id=c25caaf5fbcee8a7",
        "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822?package-id=4c4f7553d13dd1c6",
        "pkg:golang/github.com/natefinch/atomic@v1.0.1?package-id=14efe978cd014cb5",
        "pkg:golang/github.com/nozzle/throttler@v0.0.0-20180817012639-2ea982251481?package-id=37c93cbdeb579ec7",
        "pkg:golang/github.com/oklog/ulid/v2@v2.1.1?package-id=2202d85f665017d2",
        "pkg:golang/github.com/oleiade/reflections@v1.1.0?package-id=717b55a3596cc981",
        "pkg:golang/github.com/open-policy-agent/opa@v1.17.1?package-id=8220279c711f7956",
        "pkg:golang/github.com/opencontainers/go-digest@v1.0.0?package-id=8bb86ee4aeac4079",
        "pkg:golang/github.com/opencontainers/image-spec@v1.1.1?package-id=5a3844b4ae2d4080",
        "pkg:golang/github.com/pborman/uuid@v1.2.1?package-id=6554c2158441d98c",
        "pkg:golang/github.com/pelletier/go-toml/v2@v2.2.4?package-id=a26ed28deb4272d1",
        "pkg:golang/github.com/pkg/browser@v0.0.0-20240102092130-5ac0b6a4141c?package-id=b7e3ad8d8c43ec37",
        "pkg:golang/github.com/pkg/errors@v0.9.1?package-id=046f062fab71eed6",
        "pkg:golang/github.com/protocolbuffers/txtpbfmt@v0.0.0-20260217160748-a481f6a22f94?package-id=cecc0cbd68f637b4",
        "pkg:golang/github.com/rcrowley/go-metrics@v0.0.0-20250401214520-65e299d6c5c9?package-id=e997b5499975778f",
        "pkg:golang/github.com/rogpeppe/go-internal@v1.14.1?package-id=f910e0e3147cc87a",
        "pkg:golang/github.com/ryanuber/go-glob@v1.0.0?package-id=146465e284eca96d",
        "pkg:golang/github.com/sagikazarmark/locafero@v0.11.0?package-id=2ec4efd879d9f231",
        "pkg:golang/github.com/sassoftware/relic@v7.2.1%2Bincompatible?package-id=a32366c2e9e32396",
        "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.11.0?package-id=a2dfb463e51ff073",
        "pkg:golang/github.com/shibumi/go-pathspec@v1.3.0?package-id=a48037a2f23214ab",
        "pkg:golang/github.com/sigstore/protobuf-specs@v0.5.1?package-id=3cb97be52ca9c304",
        "pkg:golang/github.com/sigstore/rekor-tiles/v2@v2.3.0?package-id=eed15d9a8e74d5b8",
        "pkg:golang/github.com/sigstore/rekor@v1.5.3?package-id=fc096d3903be43da",
        "pkg:golang/github.com/sigstore/sigstore-go@v1.2.2?package-id=4f6c8ccb0e798cee",
        "pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/aws@v1.10.8?package-id=f1cb309ba6bdefae",
        "pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/azure@v1.10.8?package-id=b2421c6ae63063f8",
        "pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/gcp@v1.10.8?package-id=919f7f534084681a",
        "pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/hashivault@v1.10.8?package-id=9587a1821e2df0c1",
        "pkg:golang/github.com/sigstore/sigstore@v1.10.8?package-id=5bf9076a07478af3",
        "pkg:golang/github.com/sigstore/timestamp-authority/v2@v2.1.2?package-id=31a6131b5f5820d1",
        "pkg:golang/github.com/sirupsen/logrus@v1.9.4?package-id=c2211289616b1950",
        "pkg:golang/github.com/sourcegraph/conc@v0.3.1-0.20240121214520-5f936abd7ae8?package-id=5c200e90f8f1bf78",
        "pkg:golang/github.com/spf13/afero@v1.15.0?package-id=0e2dcd7bce622b56",
        "pkg:golang/github.com/spf13/cast@v1.10.0?package-id=cb68cf4d44cf8988",
        "pkg:golang/github.com/spf13/cobra@v1.10.2?package-id=7debcf7c91f9f7f8",
        "pkg:golang/github.com/spf13/pflag@v1.0.10?package-id=8ac2d08657389c59",
        "pkg:golang/github.com/spf13/viper@v1.21.0?package-id=5ebbbe2e69715b91",
        "pkg:golang/github.com/spiffe/go-spiffe/v2@v2.7.0?package-id=3d68f63d85740104",
        "pkg:golang/github.com/subosito/gotenv@v1.6.0?package-id=666ffa46a542ddcb",
        "pkg:golang/github.com/syndtr/goleveldb@v1.0.1-0.20220721030215-126854af5e6d?package-id=969aad993310bb66",
        "pkg:golang/github.com/tchap/go-patricia/v2@v2.3.3?package-id=043f1321a050cd0f",
        "pkg:golang/github.com/theupdateframework/go-tuf/v2@v2.4.2?package-id=86fcae7909a1a935",
        "pkg:golang/github.com/theupdateframework/go-tuf@v0.7.0?package-id=cbf9a02a050cf8bb",
        "pkg:golang/github.com/titanous/rocacheck@v0.0.0-20171023193734-afe73141d399?package-id=4070efe9537240e7",
        "pkg:golang/github.com/tjfoc/gmsm@v1.4.1?package-id=5f94f6f359639f96",
        "pkg:golang/github.com/transparency-dev/formats@v0.1.1?package-id=799a3f87c5323a2a",
        "pkg:golang/github.com/transparency-dev/merkle@v0.0.2?package-id=fc313fc8f57fa868",
        "pkg:golang/github.com/valyala/fastjson@v1.6.10?package-id=a577c6f329e08d69",
        "pkg:golang/github.com/vektah/gqlparser/v2@v2.5.33?package-id=8d4906dceb70fea6",
        "pkg:golang/github.com/withfig/autocomplete-tools/integrations/cobra@v1.2.1?package-id=fd2df6a6e732ef8b",
        "pkg:golang/github.com/x448/float16@v0.8.4?package-id=c7c95b56ac8b9c37",
        "pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb?package-id=92d61dc46cd3d1ce",
        "pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415?package-id=11dc93c8ce033033",
        "pkg:golang/github.com/yashtewari/glob-intersection@v0.2.0?package-id=408ab9182ff6273e",
        "pkg:golang/github.com/youmark/pkcs8@v0.0.0-20240726163527-a2c0da244d78?package-id=0f62f09306b41e58",
        "pkg:golang/gitlab.com/gitlab-org/api/client-go@v1.46.0?package-id=315d981993eacb3f",
        "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1?package-id=a4da7b3d60eccd62",
        "pkg:golang/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.68.0?package-id=63ff9719b65bd4d5",
        "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.68.0?package-id=2d121bea3c3d3161",
        "pkg:golang/go.opentelemetry.io/otel/metric@v1.44.0?package-id=f0a0df59daafecd1",
        "pkg:golang/go.opentelemetry.io/otel/trace@v1.44.0?package-id=978b2182927f57b5",
        "pkg:golang/go.opentelemetry.io/otel@v1.44.0?package-id=03298614b7e24903",
        "pkg:golang/go.uber.org/multierr@v1.11.0?package-id=979cfe4d5cbd9d81",
        "pkg:golang/go.uber.org/zap@v1.28.0?package-id=5981572e2275acb0",
        "pkg:golang/go.yaml.in/yaml/v2@v2.4.4?package-id=4eba4fad8964f523",
        "pkg:golang/go.yaml.in/yaml/v3@v3.0.4?package-id=78223f68bc68dbec",
        "pkg:golang/golang.org/x/crypto@v0.53.0?package-id=ea88281ba5918552",
        "pkg:golang/golang.org/x/mod@v0.37.0?package-id=def735d5f79b4bd2",
        "pkg:golang/golang.org/x/net@v0.56.0?package-id=f56ebac45b6aeff8",
        "pkg:golang/golang.org/x/oauth2@v0.36.0?package-id=9f2e71d4b1c1d5eb",
        "pkg:golang/golang.org/x/sync@v0.21.0?package-id=8c9ca2d1284c59b8",
        "pkg:golang/golang.org/x/sys@v0.46.0?package-id=cf50f8ab814b086d",
        "pkg:golang/golang.org/x/term@v0.44.0?package-id=2b562b787ff7049c",
        "pkg:golang/golang.org/x/text@v0.38.0?package-id=5ac5a1f322dbd932",
        "pkg:golang/golang.org/x/time@v0.15.0?package-id=4010ca636ee2055b",
        "pkg:golang/google.golang.org/api@v0.284.0?package-id=397a7ccc0d6388b6",
        "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260526163538-3dc84a4a5aaa?package-id=96c91d04affecbf7",
        "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260526163538-3dc84a4a5aaa?package-id=b1e93837960e9650",
        "pkg:golang/google.golang.org/genproto@v0.0.0-20260406210006-6f92a3bedf2d?package-id=5dccfc345a523d86",
        "pkg:golang/google.golang.org/grpc@v1.82.0?package-id=ac71eb66fbfcc3ad",
        "pkg:golang/google.golang.org/protobuf@v1.36.12-0.20260120151049-f2248ac996af?package-id=a3ec2a3fb8d58dca",
        "pkg:golang/gopkg.in/evanphx/json-patch.v4@v4.13.0?package-id=2f7e65ea96afa90a",
        "pkg:golang/gopkg.in/inf.v0@v0.9.1?package-id=7720b9d4eb4421cb",
        "pkg:golang/gopkg.in/ini.v1@v1.67.3?package-id=a7db605f7da5e28e",
        "pkg:golang/gopkg.in/yaml.v3@v3.0.1?package-id=b41b52b8851e8e82",
        "pkg:golang/k8s.io/api@v0.36.2?package-id=efc34f03059d84ff",
        "pkg:golang/k8s.io/apimachinery@v0.36.2?package-id=84699aa6c19a0f86",
        "pkg:golang/k8s.io/client-go@v0.36.2?package-id=1520a69320d5c00e",
        "pkg:golang/k8s.io/klog/v2@v2.140.0?package-id=743e87864f54144e",
        "pkg:golang/k8s.io/kube-openapi@v0.0.0-20260317180543-43fb72c5454a?package-id=56acb0975afefa1d",
        "pkg:golang/k8s.io/utils@v0.0.0-20260210185600-b8788abfbbc2?package-id=863c2c50b9a2b5c3",
        "pkg:golang/sigs.k8s.io/json@v0.0.0-20250730193827-2d320260d730?package-id=32aac6725df08cc9",
        "pkg:golang/sigs.k8s.io/randfill@v1.0.0?package-id=84b15a8f6a4143b8",
        "pkg:golang/sigs.k8s.io/release-utils@v0.12.4?package-id=7c058053dbe135e7",
        "pkg:golang/sigs.k8s.io/structured-merge-diff/v6@v6.3.2?package-id=6e27d88a9fbc2db8",
        "pkg:golang/sigs.k8s.io/yaml@v1.6.0?package-id=d2ba1fafdec96557",
        "pkg:golang/stdlib@1.27.0?package-id=20e22cd40a04f35e"
      ]
    }
  ]
}