{"spdxVersion":"SPDX-2.3","dataLicense":"CC0-1.0","SPDXID":"SPDXRef-DOCUMENT","name":"com.github.github/gh-codeql","documentNamespace":"https://spdx.org/spdxdocs/protobom/eaa5b051-faa8-432f-aa08-582da46d6402","creationInfo":{"creators":["Tool: protobom-v0.0.0-20260407150314-74ec19d17753+dirty","Tool: GitHub.com-Dependency-Graph"],"created":"2026-04-08T07:45:47Z"},"packages":[{"name":"actions/checkout","SPDXID":"SPDXRef-githubactions-actions-checkout-2..-75c946","versionInfo":"2.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/checkout@2.%2A.%2A"}]},{"name":"com.github.github/gh-codeql","SPDXID":"SPDXRef-github-github-gh-codeql-main-9c57c1","versionInfo":"main","downloadLocation":"git+https://github.com/github/gh-codeql","filesAnalyzed":false,"licenseDeclared":"MIT","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:github/github/gh-codeql@main"}]}],"relationships":[{"spdxElementId":"SPDXRef-github-github-gh-codeql-main-9c57c1","relatedSpdxElement":"SPDXRef-githubactions-actions-checkout-2..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-DOCUMENT","relatedSpdxElement":"SPDXRef-github-github-gh-codeql-main-9c57c1","relationshipType":"DESCRIBES"}]}