{"spdxVersion":"SPDX-2.3","dataLicense":"CC0-1.0","SPDXID":"SPDXRef-DOCUMENT","name":"com.github.method-security/codeanalyze","documentNamespace":"https://spdx.org/spdxdocs/protobom/d10f2516-f660-4876-b3fb-ca8811ad2870","creationInfo":{"creators":["Tool: protobom-v0.0.0-20260420101536-ffffc1bf4105+dirty","Tool: GitHub.com-Dependency-Graph"],"created":"2026-04-23T02:18:44Z"},"packages":[{"name":"gopkg.in/yaml.v2","SPDXID":"SPDXRef-golang-gopkg.in-yaml.v2-2.4.0-75c946","versionInfo":"2.4.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"Apache-2.0","copyrightText":"Copyright (c) 2006 Kirill Simonov, Copyright 2011-2016 Canonical Ltd.","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/gopkg.in/yaml.v2@2.4.0"}]},{"name":"github.com/palantir/pkg/safeyaml","SPDXID":"SPDXRef-golang-github.compalantirpkg-safeyaml-1.1.0-75c946","versionInfo":"1.1.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"BSD-3-Clause","copyrightText":"Copyright (c) 2012 The Go Authors, Copyright (c) 2014 Sam Ghods, Copyright (c) 2016 Palantir Technologies, Copyright (c) 2016, Palantir Technologies, Inc., Copyright (c) 2019 Palantir Technologies, Copyright (c) YEAR Palantir Technologies","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/palantir/pkg/safeyaml@1.1.0"}]},{"name":"github.com/palantir/pkg/transform","SPDXID":"SPDXRef-golang-github.compalantirpkg-transform-1.1.0-75c946","versionInfo":"1.1.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"BSD-3-Clause","copyrightText":"Copyright (c) 2016 Palantir Technologies, Copyright (c) 2016, Palantir Technologies, Inc., Copyright (c) 2019 Palantir Technologies, Copyright (c) YEAR Palantir Technologies","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/palantir/pkg/transform@1.1.0"}]},{"name":"github.com/palantir/witchcraft-go-tracing","SPDXID":"SPDXRef-golang-github.compalantir-witchcraft-go-tracing-1.36.0-75c946","versionInfo":"1.36.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/palantir/witchcraft-go-tracing@1.36.0"}]},{"name":"github.com/palantir/witchcraft-go-error","SPDXID":"SPDXRef-golang-github.compalantir-witchcraft-go-error-1.37.0-75c946","versionInfo":"1.37.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/palantir/witchcraft-go-error@1.37.0"}]},{"name":"github.com/mattn/go-colorable","SPDXID":"SPDXRef-golang-github.commattn-go-colorable-0.1.13-75c946","versionInfo":"0.1.13","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copyright (c) 2016 Yasuhiro Matsumoto","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/mattn/go-colorable@0.1.13"}]},{"name":"github.com/palantir/pkg/bytesbuffers","SPDXID":"SPDXRef-golang-github.compalantirpkg-bytesbuffers-1.2.0-75c946","versionInfo":"1.2.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/palantir/pkg/bytesbuffers@1.2.0"}]},{"name":"github.com/palantir/pkg/datetime","SPDXID":"SPDXRef-golang-github.compalantirpkg-datetime-1.1.0-75c946","versionInfo":"1.1.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"BSD-3-Clause","copyrightText":"Copyright (c) 2016, Palantir Technologies, Inc., Copyright (c) 2018 Palantir Technologies, Copyright (c) 2019 Palantir Technologies, Copyright (c) YEAR Palantir Technologies","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/palantir/pkg/datetime@1.1.0"}]},{"name":"github.com/palantir/pkg","SPDXID":"SPDXRef-golang-github.compalantir-pkg-1.1.0-75c946","versionInfo":"1.1.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"BSD-3-Clause AND MIT","copyrightText":"Copyright (c) 2016, Palantir Technologies, Inc.","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/palantir/pkg@1.1.0"}]},{"name":"github.com/palantir/pkg/safejson","SPDXID":"SPDXRef-golang-github.compalantirpkg-safejson-1.1.0-75c946","versionInfo":"1.1.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"BSD-3-Clause","copyrightText":"Copyright (c) 2016 Palantir Technologies, Copyright (c) 2016, Palantir Technologies, Inc., Copyright (c) 2019 Palantir Technologies, Copyright (c) YEAR Palantir Technologies","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/palantir/pkg/safejson@1.1.0"}]},{"name":"github.com/palantir/pkg/safelong","SPDXID":"SPDXRef-golang-github.compalantirpkg-safelong-1.1.0-75c946","versionInfo":"1.1.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/palantir/pkg/safelong@1.1.0"}]},{"name":"golang.org/x/sys","SPDXID":"SPDXRef-golang-golang.orgx-sys-0.21.0-75c946","versionInfo":"0.21.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang","copyrightText":"Copyright (c) 2009 The Go Authors, Copyright 2009 The Go Authors, Copyright 2009,2010 The Go Authors, Copyright 2010 The Go Authors, Copyright 2011 The Go Authors, Copyright 2012 The Go Authors, Copyright 2013 The Go Authors, Copyright 2014 The Go Authors, Copyright 2015 The Go Authors, Copyright 2016 The Go Authors, Copyright 2017 The Go Authors, Copyright 2018 The Go Authors, Copyright 2019 The Go Authors, Copyright 2020 The Go Authors, Copyright 2021 The Go Authors, Copyright 2022 The Go Authors, Copyright 2023 The Go Authors, Copyright 2024 The Go Authors","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/golang.org/x/sys@0.21.0"}]},{"name":"github.com/palantir/witchcraft-go-logging","SPDXID":"SPDXRef-golang-github.compalantir-witchcraft-go-logging-1.55.0-75c946","versionInfo":"1.55.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/palantir/witchcraft-go-logging@1.55.0"}]},{"name":"github.com/inconshreveable/mousetrap","SPDXID":"SPDXRef-golang-github.cominconshreveable-mousetrap-1.1.0-75c946","versionInfo":"1.1.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"Apache-2.0","copyrightText":"Copyright 2022 Alan Shreve","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/inconshreveable/mousetrap@1.1.0"}]},{"name":"github.com/spf13/cobra","SPDXID":"SPDXRef-golang-github.comspf13-cobra-1.8.0-75c946","versionInfo":"1.8.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"Apache-2.0","copyrightText":"Copyright 2013-2023 The Cobra Authors","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/spf13/cobra@1.8.0"}]},{"name":"github.com/fatih/color","SPDXID":"SPDXRef-golang-github.comfatih-color-1.17.0-75c946","versionInfo":"1.17.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copyright (c) 2013 Fatih Arslan","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/fatih/color@1.17.0"}]},{"name":"github.com/palantir/witchcraft-go-params","SPDXID":"SPDXRef-golang-github.compalantir-witchcraft-go-params-1.34.0-75c946","versionInfo":"1.34.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/palantir/witchcraft-go-params@1.34.0"}]},{"name":"github.com/Method-Security/pkg","SPDXID":"SPDXRef-golang-github.commethod-security-pkg-0.0.2-75c946","versionInfo":"0.0.2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/method-security/pkg@0.0.2"}]},{"name":"github.com/mattn/go-isatty","SPDXID":"SPDXRef-golang-github.commattn-go-isatty-0.0.20-75c946","versionInfo":"0.0.20","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copyright (c) Yasuhiro MATSUMOTO \u003cmattn.jp@gmail.com\u003e","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/mattn/go-isatty@0.0.20"}]},{"name":"github.com/spf13/pflag","SPDXID":"SPDXRef-golang-github.comspf13-pflag-1.0.5-75c946","versionInfo":"1.0.5","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"BSD-3-Clause","copyrightText":"Copyright (c) 2012 Alex Ogier, Copyright (c) 2012 The Go Authors, Copyright 2009 The Go Authors, Copyright 2010 The Go Authors, Copyright 2012 The Go Authors","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/spf13/pflag@1.0.5"}]},{"name":"actions/checkout","SPDXID":"SPDXRef-githubactions-actions-checkout-4..-75c946","versionInfo":"4.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/checkout@4.%2A.%2A"}]},{"name":"github/codeql-action/analyze","SPDXID":"SPDXRef-githubactions-githubcodeql-action-analyze-3..-75c946","versionInfo":"3.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/github/codeql-action/analyze@3.%2A.%2A"}]},{"name":"github/codeql-action/init","SPDXID":"SPDXRef-githubactions-githubcodeql-action-init-3..-75c946","versionInfo":"3.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/github/codeql-action/init@3.%2A.%2A"}]},{"name":"actions/cache","SPDXID":"SPDXRef-githubactions-actions-cache-4..-75c946","versionInfo":"4.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/cache@4.%2A.%2A"}]},{"name":"actions/checkout","SPDXID":"SPDXRef-githubactions-actions-checkout-4.1.6-75c946","versionInfo":"4.1.6","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/checkout@4.1.6"}]},{"name":"actions/setup-python","SPDXID":"SPDXRef-githubactions-actions-setup-python-5..-75c946","versionInfo":"5.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/setup-python@5.%2A.%2A"}]},{"name":"re-actors/alls-green","SPDXID":"SPDXRef-githubactions-re-actors-alls-green-releasev1-75c946","versionInfo":"release/v1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/re-actors/alls-green@release%2Fv1"}]},{"name":"actions/setup-node","SPDXID":"SPDXRef-githubactions-actions-setup-node-4..-75c946","versionInfo":"4.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/setup-node@4.%2A.%2A"}]},{"name":"actions/checkout","SPDXID":"SPDXRef-githubactions-actions-checkout-3..-75c946","versionInfo":"3.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/checkout@3.%2A.%2A"}]},{"name":"actions/setup-go","SPDXID":"SPDXRef-githubactions-actions-setup-go-5..-75c946","versionInfo":"5.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/setup-go@5.%2A.%2A"}]},{"name":"goreleaser/goreleaser-action","SPDXID":"SPDXRef-githubactions-goreleaser-goreleaser-action-4..-75c946","versionInfo":"4.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/goreleaser/goreleaser-action@4.%2A.%2A"}]},{"name":"easimon/maximize-build-space","SPDXID":"SPDXRef-githubactions-easimon-maximize-build-space-10..-75c946","versionInfo":"10.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/easimon/maximize-build-space@10.%2A.%2A"}]},{"name":"sigstore/cosign-installer","SPDXID":"SPDXRef-githubactions-sigstore-cosign-installer-3.5.0-75c946","versionInfo":"3.5.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/sigstore/cosign-installer@3.5.0"}]},{"name":"anchore/sbom-action/download-syft","SPDXID":"SPDXRef-githubactions-anchoresbom-action-download-syft-0.16.0-75c946","versionInfo":"0.16.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/anchore/sbom-action/download-syft@0.16.0"}]},{"name":"docker/setup-buildx-action","SPDXID":"SPDXRef-githubactions-docker-setup-buildx-action-3..-75c946","versionInfo":"3.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/docker/setup-buildx-action@3.%2A.%2A"}]},{"name":"docker/setup-qemu-action","SPDXID":"SPDXRef-githubactions-docker-setup-qemu-action-3..-75c946","versionInfo":"3.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/docker/setup-qemu-action@3.%2A.%2A"}]},{"name":"actions/upload-artifact","SPDXID":"SPDXRef-githubactions-actions-upload-artifact-4..-75c946","versionInfo":"4.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/upload-artifact@4.%2A.%2A"}]},{"name":"actions/download-artifact","SPDXID":"SPDXRef-githubactions-actions-download-artifact-4..-75c946","versionInfo":"4.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/download-artifact@4.%2A.%2A"}]},{"name":"docker/login-action","SPDXID":"SPDXRef-githubactions-docker-login-action-3..-75c946","versionInfo":"3.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/docker/login-action@3.%2A.%2A"}]},{"name":"com.github.method-security/codeanalyze","SPDXID":"SPDXRef-github-method-security-codeanalyze-develop-6206bc","versionInfo":"develop","downloadLocation":"git+https://github.com/method-security/codeanalyze","filesAnalyzed":false,"licenseDeclared":"Apache-2.0","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:github/method-security/codeanalyze@develop"}]}],"relationships":[{"spdxElementId":"SPDXRef-github-method-security-codeanalyze-develop-6206bc","relatedSpdxElement":"SPDXRef-golang-github.compalantirpkg-transform-1.1.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-method-security-codeanalyze-develop-6206bc","relatedSpdxElement":"SPDXRef-golang-github.compalantir-witchcraft-go-error-1.37.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-method-security-codeanalyze-develop-6206bc","relatedSpdxElement":"SPDXRef-golang-github.compalantirpkg-bytesbuffers-1.2.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-method-security-codeanalyze-develop-6206bc","relatedSpdxElement":"SPDXRef-githubactions-githubcodeql-action-analyze-3..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-method-security-codeanalyze-develop-6206bc","relatedSpdxElement":"SPDXRef-golang-github.commattn-go-colorable-0.1.13-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-method-security-codeanalyze-develop-6206bc","relatedSpdxElement":"SPDXRef-golang-github.comspf13-cobra-1.8.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-method-security-codeanalyze-develop-6206bc","relatedSpdxElement":"SPDXRef-githubactions-githubcodeql-action-init-3..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-method-security-codeanalyze-develop-6206bc","relatedSpdxElement":"SPDXRef-githubactions-docker-login-action-3..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-method-security-codeanalyze-develop-6206bc","relatedSpdxElement":"SPDXRef-githubactions-actions-setup-python-5..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-method-security-codeanalyze-develop-6206bc","relatedSpdxElement":"SPDXRef-golang-gopkg.in-yaml.v2-2.4.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-method-security-codeanalyze-develop-6206bc","relatedSpdxElement":"SPDXRef-golang-github.compalantir-pkg-1.1.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-method-security-codeanalyze-develop-6206bc","relatedSpdxElement":"SPDXRef-golang-github.commattn-go-isatty-0.0.20-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-method-security-codeanalyze-develop-6206bc","relatedSpdxElement":"SPDXRef-githubactions-goreleaser-goreleaser-action-4..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-method-security-codeanalyze-develop-6206bc","relatedSpdxElement":"SPDXRef-githubactions-actions-upload-artifact-4..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-method-security-codeanalyze-develop-6206bc","relatedSpdxElement":"SPDXRef-golang-github.cominconshreveable-mousetrap-1.1.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-method-security-codeanalyze-develop-6206bc","relatedSpdxElement":"SPDXRef-githubactions-actions-checkout-4..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-method-security-codeanalyze-develop-6206bc","relatedSpdxElement":"SPDXRef-githubactions-actions-cache-4..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-method-security-codeanalyze-develop-6206bc","relatedSpdxElement":"SPDXRef-githubactions-re-actors-alls-green-releasev1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-method-security-codeanalyze-develop-6206bc","relatedSpdxElement":"SPDXRef-githubactions-actions-setup-node-4..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-method-security-codeanalyze-develop-6206bc","relatedSpdxElement":"SPDXRef-githubactions-actions-checkout-3..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-method-security-codeanalyze-develop-6206bc","relatedSpdxElement":"SPDXRef-githubactions-actions-download-artifact-4..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-method-security-codeanalyze-develop-6206bc","relatedSpdxElement":"SPDXRef-golang-github.compalantir-witchcraft-go-logging-1.55.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-method-security-codeanalyze-develop-6206bc","relatedSpdxElement":"SPDXRef-golang-github.compalantirpkg-safejson-1.1.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-method-security-codeanalyze-develop-6206bc","relatedSpdxElement":"SPDXRef-golang-github.comfatih-color-1.17.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-method-security-codeanalyze-develop-6206bc","relatedSpdxElement":"SPDXRef-githubactions-sigstore-cosign-installer-3.5.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-method-security-codeanalyze-develop-6206bc","relatedSpdxElement":"SPDXRef-githubactions-docker-setup-buildx-action-3..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-method-security-codeanalyze-develop-6206bc","relatedSpdxElement":"SPDXRef-githubactions-docker-setup-qemu-action-3..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-method-security-codeanalyze-develop-6206bc","relatedSpdxElement":"SPDXRef-golang-github.compalantirpkg-datetime-1.1.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-method-security-codeanalyze-develop-6206bc","relatedSpdxElement":"SPDXRef-golang-github.compalantir-witchcraft-go-params-1.34.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-method-security-codeanalyze-develop-6206bc","relatedSpdxElement":"SPDXRef-golang-github.comspf13-pflag-1.0.5-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-method-security-codeanalyze-develop-6206bc","relatedSpdxElement":"SPDXRef-golang-github.compalantirpkg-safelong-1.1.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-method-security-codeanalyze-develop-6206bc","relatedSpdxElement":"SPDXRef-golang-golang.orgx-sys-0.21.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-method-security-codeanalyze-develop-6206bc","relatedSpdxElement":"SPDXRef-golang-github.compalantirpkg-safeyaml-1.1.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-method-security-codeanalyze-develop-6206bc","relatedSpdxElement":"SPDXRef-golang-github.compalantir-witchcraft-go-tracing-1.36.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-method-security-codeanalyze-develop-6206bc","relatedSpdxElement":"SPDXRef-golang-github.commethod-security-pkg-0.0.2-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-method-security-codeanalyze-develop-6206bc","relatedSpdxElement":"SPDXRef-githubactions-actions-checkout-4.1.6-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-method-security-codeanalyze-develop-6206bc","relatedSpdxElement":"SPDXRef-githubactions-actions-setup-go-5..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-method-security-codeanalyze-develop-6206bc","relatedSpdxElement":"SPDXRef-githubactions-easimon-maximize-build-space-10..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-method-security-codeanalyze-develop-6206bc","relatedSpdxElement":"SPDXRef-githubactions-anchoresbom-action-download-syft-0.16.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-DOCUMENT","relatedSpdxElement":"SPDXRef-github-method-security-codeanalyze-develop-6206bc","relationshipType":"DESCRIBES"}]}