npm - @cdxgen/cdxgen-plugins-bin-linux-riscv64 - Versions diffs - 3.0.0 → 3.0.2 - Mend

@cdxgen/cdxgen-plugins-bin-linux-riscv64 3.0.0 → 3.0.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (20) hide show

package/plugins/golem/sbom-golem-postbuild.cdx.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"bomFormat":"CycloneDX","specVersion":"1.7","serialNumber":"urn:uuid:b88c5d6f-2cad-4747-bea2-d1b70e55f969","version":1,"metadata":{"timestamp":"2026-08-07T16:19:27Z","tools":{"components":[{"group":"@cyclonedx","name":"cdxgen","version":"12.8.2","purl":"pkg:npm/%40cyclonedx/cdxgen@12.8.2","type":"application","bom-ref":"pkg:npm/@cyclonedx/cdxgen@12.8.2","publisher":"OWASP Foundation","authors":[{"name":"OWASP Foundation"}]}]},"authors":[{"name":"OWASP Foundation"}],"lifecycles":[{"phase":"build"}],"component":{"group":"","name":"github.com/cdxgen/cdxgen-plugins-bin/thirdparty/golem","version":"","purl":"pkg:golang/github.com/cdxgen/cdxgen-plugins-bin/thirdparty/golem","bom-ref":"pkg:golang/github.com/cdxgen/cdxgen-plugins-bin/thirdparty/golem","scope":"required","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem"}],"type":"application","components":[{"group":"","name":"example.com/golem/simple","version":"","scope":"required","purl":"pkg:golang/example.com/golem/simple","type":"library","bom-ref":"pkg:golang/example.com/golem/simple","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/simple/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/simple"}]},{"group":"","name":"example.com/golem/security","version":"","scope":"required","purl":"pkg:golang/example.com/golem/security","type":"library","bom-ref":"pkg:golang/example.com/golem/security","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/security/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/security"}]},{"group":"","name":"example.com/golem/rta","version":"","scope":"required","purl":"pkg:golang/example.com/golem/rta","type":"library","bom-ref":"pkg:golang/example.com/golem/rta","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/rta/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/rta"}]},{"group":"","name":"example.com/golem/dep","version":"","scope":"required","licenses":[{"license":{"name":"CUSTOM","text":{"contentType":"text/plain","content":"Apache-2.0 fixture license\n"},"properties":[{"name":"cdx:license:category","value":"Unstated License"},{"name":"cdx:license:foss","value":"false"},{"name":"cdx:license:osiApproved","value":"false"},{"name":"cdx:license:fsfLibre","value":"false"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:golang/example.com/golem/dep","type":"library","bom-ref":"pkg:golang/example.com/golem/dep","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/dep/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/dep"},{"name":"cdx:license:category","value":"Unstated License"}]},{"group":"","name":"example.com/golem/dataflow","version":"","scope":"required","purl":"pkg:golang/example.com/golem/dataflow","type":"library","bom-ref":"pkg:golang/example.com/golem/dataflow","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/dataflow/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/dataflow"}]},{"group":"","name":"example.com/golem/corpusdep","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpusdep","type":"library","bom-ref":"pkg:golang/example.com/golem/corpusdep","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpusdep/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpusdep"}]},{"group":"","name":"example.com/golem/advanced","version":"","scope":"required","purl":"pkg:golang/example.com/golem/advanced","type":"library","bom-ref":"pkg:golang/example.com/golem/advanced","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/advanced/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/advanced"}]},{"group":"","name":"example.com/golem/corpus/wrapper-edge","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/wrapper-edge","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/wrapper-edge","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/wrapper-edge/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/wrapper-edge"}]},{"group":"","name":"example.com/golem/corpus/worker-pool","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/worker-pool","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/worker-pool","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/worker-pool/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/worker-pool"}]},{"group":"","name":"example.com/golem/corpus/validate-named-but-not-sanitizing","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/validate-named-but-not-sanitizing","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/validate-named-but-not-sanitizing","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/validate-named-but-not-sanitizing/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/validate-named-but-not-sanitizing"}]},{"group":"","name":"example.com/golem/corpus/unrelated-value-negative","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/unrelated-value-negative","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/unrelated-value-negative","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/unrelated-value-negative/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/unrelated-value-negative"}]},{"group":"","name":"example.com/golem/corpus/template-injection","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/template-injection","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/template-injection","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/template-injection/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/template-injection"}]},{"group":"","name":"example.com/golem/corpus/struct-field-through-call","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/struct-field-through-call","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/struct-field-through-call","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/struct-field-through-call/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/struct-field-through-call"}]},{"group":"","name":"example.com/golem/corpus/strings-builder","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/strings-builder","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/strings-builder","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/strings-builder/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/strings-builder"}]},{"group":"","name":"example.com/golem/corpus/sqli-parameterized-negative","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/sqli-parameterized-negative","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/sqli-parameterized-negative","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/sqli-parameterized-negative/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/sqli-parameterized-negative"}]},{"group":"","name":"example.com/golem/corpus/sqli-concatenated","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/sqli-concatenated","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/sqli-concatenated","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/sqli-concatenated/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/sqli-concatenated"}]},{"group":"","name":"example.com/golem/corpus/slice-of-pointer","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/slice-of-pointer","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/slice-of-pointer","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/slice-of-pointer/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/slice-of-pointer"}]},{"group":"","name":"example.com/golem/corpus/select-multiplex","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/select-multiplex","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/select-multiplex","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/select-multiplex/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/select-multiplex"}]},{"group":"","name":"example.com/golem/corpus/sanitizer-on-path-negative","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/sanitizer-on-path-negative","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/sanitizer-on-path-negative","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/sanitizer-on-path-negative/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/sanitizer-on-path-negative"}]},{"group":"","name":"example.com/golem/corpus/sanitizer-not-on-path-negative","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/sanitizer-not-on-path-negative","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/sanitizer-not-on-path-negative","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/sanitizer-not-on-path-negative/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/sanitizer-not-on-path-negative"}]},{"group":"","name":"example.com/golem/corpus/sanitizer-dominates","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/sanitizer-dominates","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/sanitizer-dominates","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/sanitizer-dominates/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/sanitizer-dominates"}]},{"group":"","name":"example.com/golem/corpus/request-field-source","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/request-field-source","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/request-field-source","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/request-field-source/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/request-field-source"}]},{"group":"","name":"example.com/golem/corpus/reflect-call","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/reflect-call","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/reflect-call","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/reflect-call/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/reflect-call"}]},{"group":"","name":"example.com/golem/corpus/recursion","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/recursion","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/recursion","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/recursion/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/recursion"}]},{"group":"","name":"example.com/golem/corpus/plugin-open","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/plugin-open","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/plugin-open","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/plugin-open/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/plugin-open"}]},{"group":"","name":"example.com/golem/corpus/mutual-recursion","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/mutual-recursion","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/mutual-recursion","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/mutual-recursion/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/mutual-recursion"}]},{"group":"","name":"example.com/golem/corpus/method-field-flow","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/method-field-flow","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/method-field-flow","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/method-field-flow/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/method-field-flow"}]},{"group":"","name":"example.com/golem/corpus/map-of-struct","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/map-of-struct","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/map-of-struct","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/map-of-struct/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/map-of-struct"}]},{"group":"","name":"example.com/golem/corpus/loop-carried-taint","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/loop-carried-taint","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/loop-carried-taint","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/loop-carried-taint/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/loop-carried-taint"}]},{"group":"","name":"example.com/golem/corpus/logging-secret-negative","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/logging-secret-negative","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/logging-secret-negative","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/logging-secret-negative/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/logging-secret-negative"}]},{"group":"","name":"example.com/golem/corpus/linkname","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/linkname","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/linkname","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/linkname/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/linkname"}]},{"group":"","name":"example.com/golem/corpus/library-no-main","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/library-no-main","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/library-no-main","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/library-no-main/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/library-no-main"}]},{"group":"","name":"example.com/golem/corpus/json-roundtrip","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/json-roundtrip","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/json-roundtrip","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/json-roundtrip/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/json-roundtrip"}]},{"group":"","name":"example.com/golem/corpus/io-copy","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/io-copy","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/io-copy","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/io-copy/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/io-copy"}]},{"group":"","name":"example.com/golem/corpus/interface-dispatch","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/interface-dispatch","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/interface-dispatch","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/interface-dispatch/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/interface-dispatch"}]},{"group":"","name":"example.com/golem/corpus/handler-func-value","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/handler-func-value","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/handler-func-value","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/handler-func-value/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/handler-func-value"}]},{"group":"","name":"example.com/golem/corpus/goroutine-channel","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/goroutine-channel","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/goroutine-channel","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/goroutine-channel/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/goroutine-channel"}]},{"group":"","name":"example.com/golem/corpus/global-var-carrier","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/global-var-carrier","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/global-var-carrier","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/global-var-carrier/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/global-var-carrier"}]},{"group":"","name":"example.com/golem/corpus/generic-container","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/generic-container","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/generic-container","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/generic-container/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/generic-container"}]},{"group":"","name":"example.com/golem/corpus/generic-constraint-method","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/generic-constraint-method","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/generic-constraint-method","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/generic-constraint-method/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/generic-constraint-method"}]},{"group":"","name":"example.com/golem/corpus/func-field-dispatch","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/func-field-dispatch","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/func-field-dispatch","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/func-field-dispatch/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/func-field-dispatch"}]},{"group":"","name":"example.com/golem/corpus/field-discrimination-negative","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/field-discrimination-negative","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/field-discrimination-negative","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/field-discrimination-negative/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/field-discrimination-negative"}]},{"group":"","name":"example.com/golem/corpus/error-wrapping","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/error-wrapping","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/error-wrapping","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/error-wrapping/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/error-wrapping"}]},{"group":"","name":"example.com/golem/corpus/embedded-struct-promotion","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/embedded-struct-promotion","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/embedded-struct-promotion","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/embedded-struct-promotion/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/embedded-struct-promotion"}]},{"group":"","name":"example.com/golem/corpus/direct-flow","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/direct-flow","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/direct-flow","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/direct-flow/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/direct-flow"}]},{"group":"","name":"example.com/golem/corpus/dep-transitive-2-hops","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/dep-transitive-2-hops","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/dep-transitive-2-hops","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/dep-transitive-2-hops/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/dep-transitive-2-hops"}]},{"group":"","name":"example.com/golem/corpus/dep-only-flow","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/dep-only-flow","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/dep-only-flow","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/dep-only-flow/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/dep-only-flow"}]},{"group":"","name":"example.com/golem/corpus/dep-drops-taint-negative","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/dep-drops-taint-negative","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/dep-drops-taint-negative","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/dep-drops-taint-negative/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/dep-drops-taint-negative"}]},{"group":"","name":"example.com/golem/corpus/defer-taint","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/defer-taint","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/defer-taint","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/defer-taint/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/defer-taint"}]},{"group":"","name":"example.com/golem/corpus/deep-chain-8-levels","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/deep-chain-8-levels","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/deep-chain-8-levels","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/deep-chain-8-levels/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/deep-chain-8-levels"}]},{"group":"","name":"example.com/golem/corpus/context-value","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/context-value","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/context-value","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/context-value/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/context-value"}]},{"group":"","name":"example.com/golem/corpus/const-only-negative","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/const-only-negative","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/const-only-negative","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/const-only-negative/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/const-only-negative"}]},{"group":"","name":"example.com/golem/corpus/closure-capture","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/closure-capture","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/closure-capture","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/closure-capture/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/closure-capture"}]},{"group":"","name":"example.com/golem/corpus/cgo-string-roundtrip","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/cgo-string-roundtrip","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/cgo-string-roundtrip","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/cgo-string-roundtrip/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/cgo-string-roundtrip"}]},{"group":"","name":"example.com/golem/corpus/cgo-callback-export","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/cgo-callback-export","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/cgo-callback-export","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/cgo-callback-export/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/cgo-callback-export"}]},{"group":"","name":"example.com/golem/corpus/bufio-scanner","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/bufio-scanner","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/bufio-scanner","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/bufio-scanner/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/bufio-scanner"}]},{"group":"","name":"github.com/spf13/cobra","version":"","scope":"required","purl":"pkg:golang/github.com/spf13/cobra","type":"library","bom-ref":"pkg:golang/github.com/spf13/cobra","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/rta/stubs/cobra/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/rta/stubs/cobra"}]}]},"properties":[{"name":"cdx:bom:componentTypes","value":"golang"},{"name":"cdx:bom:componentNamespaces","value":"example.com/golem\\ngithub.com/spf13\\ngolang.org/x"},{"name":"cdx:bom:componentSrcFiles","value":"go.mod"}]},"components":[{"group":"","name":"golang.org/x/mod","version":"v0.30.0","scope":"required","hashes":[{"alg":"SHA-256","content":"940b1fe4ed84bc979214c881c570e48bbb02800c4451c6475e85cc293e0624a7"}],"licenses":[{"license":{"name":"CUSTOM","text":{"contentType":"text/plain","content":"Copyright 2009 The Go Authors.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are\nmet:\n\n * Redistributions of source code must retain the above copyright\nnotice, this list of conditions and the following disclaimer.\n * Redistributions in binary form must reproduce the above\ncopyright notice, this list of conditions and the following disclaimer\nin the documentation and/or other materials provided with the\ndistribution.\n * Neither the name of Google LLC nor the names of its\ncontributors may be used to endorse or promote products derived from\nthis software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nOWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\nLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n"},"properties":[{"name":"cdx:license:category","value":"Unstated License"},{"name":"cdx:license:foss","value":"false"},{"name":"cdx:license:osiApproved","value":"false"},{"name":"cdx:license:fsfLibre","value":"false"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:golang/golang.org/x/mod@v0.30.0","type":"library","bom-ref":"pkg:golang/golang.org/x/mod@v0.30.0","properties":[{"name":"SrcGoMod","value":"/home/runner/go/pkg/mod/cache/download/golang.org/x/mod/@v/v0.30.0.mod"},{"name":"ModuleGoVersion","value":"1.24.0"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:creation_time","value":"2025-11-11 15:05:13 +0000 UTC"},{"name":"cdx:go:local_dir","value":"/home/runner/go/pkg/mod/golang.org/x/mod@v0.30.0"},{"name":"SrcFile","value":"go.mod"},{"name":"cdx:license:category","value":"Unstated License"}],"evidence":{"identity":[{"field":"purl","confidence":0.7,"methods":[{"technique":"manifest-analysis","confidence":0.7,"value":"go.mod"}],"concludedValue":"go.mod"}]}},{"group":"","name":"golang.org/x/sync","version":"v0.18.0","scope":"optional","hashes":[{"alg":"SHA-256","content":"f4a4c75e64a7a06aee2e9c058d5497d2534d03be42ca488c1026e8bcd4d9a862"}],"licenses":[{"license":{"name":"CUSTOM","text":{"contentType":"text/plain","content":"Copyright 2009 The Go Authors.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are\nmet:\n\n * Redistributions of source code must retain the above copyright\nnotice, this list of conditions and the following disclaimer.\n * Redistributions in binary form must reproduce the above\ncopyright notice, this list of conditions and the following disclaimer\nin the documentation and/or other materials provided with the\ndistribution.\n * Neither the name of Google LLC nor the names of its\ncontributors may be used to endorse or promote products derived from\nthis software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nOWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\nLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n"},"properties":[{"name":"cdx:license:category","value":"Unstated License"},{"name":"cdx:license:foss","value":"false"},{"name":"cdx:license:osiApproved","value":"false"},{"name":"cdx:license:fsfLibre","value":"false"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:golang/golang.org/x/sync@v0.18.0","type":"library","bom-ref":"pkg:golang/golang.org/x/sync@v0.18.0","properties":[{"name":"SrcGoMod","value":"/home/runner/go/pkg/mod/cache/download/golang.org/x/sync/@v/v0.18.0.mod"},{"name":"ModuleGoVersion","value":"1.24.0"},{"name":"cdx:go:indirect","value":"true"},{"name":"cdx:go:creation_time","value":"2025-10-21 17:44:11 +0000 UTC"},{"name":"cdx:go:local_dir","value":"/home/runner/go/pkg/mod/golang.org/x/sync@v0.18.0"},{"name":"SrcFile","value":"go.mod"},{"name":"cdx:license:category","value":"Unstated License"}],"evidence":{"identity":[{"field":"purl","confidence":0.5,"methods":[{"technique":"manifest-analysis","confidence":0.5,"value":"go.mod"}],"concludedValue":"go.mod"}]}},{"group":"","name":"golang.org/x/tools","version":"v0.39.0","scope":"required","hashes":[{"alg":"SHA-256","content":"26779f6e40cfc83f14536908e5fb9ff195f8ff251e87d5bcefb65e04e37152a4"}],"licenses":[{"license":{"name":"CUSTOM","text":{"contentType":"text/plain","content":"Copyright 2009 The Go Authors.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are\nmet:\n\n * Redistributions of source code must retain the above copyright\nnotice, this list of conditions and the following disclaimer.\n * Redistributions in binary form must reproduce the above\ncopyright notice, this list of conditions and the following disclaimer\nin the documentation and/or other materials provided with the\ndistribution.\n * Neither the name of Google LLC nor the names of its\ncontributors may be used to endorse or promote products derived from\nthis software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nOWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\nLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n"},"properties":[{"name":"cdx:license:category","value":"Unstated License"},{"name":"cdx:license:foss","value":"false"},{"name":"cdx:license:osiApproved","value":"false"},{"name":"cdx:license:fsfLibre","value":"false"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:golang/golang.org/x/tools@v0.39.0","type":"library","bom-ref":"pkg:golang/golang.org/x/tools@v0.39.0","properties":[{"name":"SrcGoMod","value":"/home/runner/go/pkg/mod/cache/download/golang.org/x/tools/@v/v0.39.0.mod"},{"name":"ModuleGoVersion","value":"1.24.0"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:creation_time","value":"2025-11-12 22:16:42 +0000 UTC"},{"name":"cdx:go:local_dir","value":"/home/runner/go/pkg/mod/golang.org/x/tools@v0.39.0"},{"name":"SrcFile","value":"go.mod"},{"name":"cdx:license:category","value":"Unstated License"}],"evidence":{"identity":[{"field":"purl","confidence":0.7,"methods":[{"technique":"manifest-analysis","confidence":0.7,"value":"go.mod"}],"concludedValue":"go.mod"}]}},{"group":"","name":"github.com/spf13/cobra","version":"v0.0.0","scope":"required","purl":"pkg:golang/github.com/spf13/cobra@v0.0.0","type":"library","bom-ref":"pkg:golang/github.com/spf13/cobra@v0.0.0","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/rta/stubs/cobra/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/rta/stubs/cobra"}]},{"group":"","name":"example.com/golem/dep","version":"v0.0.0","scope":"required","licenses":[{"license":{"name":"CUSTOM","text":{"contentType":"text/plain","content":"Apache-2.0 fixture license\n"},"properties":[{"name":"cdx:license:category","value":"Unstated License"},{"name":"cdx:license:foss","value":"false"},{"name":"cdx:license:osiApproved","value":"false"},{"name":"cdx:license:fsfLibre","value":"false"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:golang/example.com/golem/dep@v0.0.0","type":"library","bom-ref":"pkg:golang/example.com/golem/dep@v0.0.0","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/dep/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/dep"},{"name":"cdx:license:category","value":"Unstated License"}]},{"group":"","name":"example.com/golem/corpusdep","version":"v0.0.0","scope":"required","purl":"pkg:golang/example.com/golem/corpusdep@v0.0.0","type":"library","bom-ref":"pkg:golang/example.com/golem/corpusdep@v0.0.0","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpusdep/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpusdep"}]}],"dependencies":[{"ref":"pkg:golang/github.com/cdxgen/cdxgen-plugins-bin/thirdparty/golem","dependsOn":["pkg:golang/golang.org/x/mod@v0.30.0","pkg:golang/golang.org/x/tools@v0.39.0"]},{"ref":"pkg:golang/golang.org/x/mod@v0.30.0","dependsOn":[]},{"ref":"pkg:golang/golang.org/x/sync@v0.18.0","dependsOn":[]},{"ref":"pkg:golang/golang.org/x/tools@v0.39.0","dependsOn":["pkg:golang/golang.org/x/mod@v0.30.0","pkg:golang/golang.org/x/sync@v0.18.0"]}],"annotations":[{"bom-ref":"metadata-annotations","subjects":["pkg:golang/github.com/cdxgen/cdxgen-plugins-bin/thirdparty/golem"],"annotator":{"component":{"group":"@cyclonedx","name":"cdxgen","version":"12.8.2","purl":"pkg:npm/%40cyclonedx/cdxgen@12.8.2","type":"application","bom-ref":"pkg:npm/@cyclonedx/cdxgen@12.8.2","publisher":"OWASP Foundation","authors":[{"name":"OWASP Foundation"}]}},"timestamp":"2026-08-07T16:19:27Z","text":"This Software Bill-of-Materials (SBOM) document was created on Friday, August 7, 2026 with cdxgen. The data was captured during the build lifecycle phase. The document describes an application named 'github.com/cdxgen/cdxgen-plugins-bin/thirdparty/golem'. The application also has 57 child modules/components. The package type in this SBOM is golang with 3 purl namespaces described under components. The components were identified from the source files: go.mod."}]}
1	+ {"bomFormat":"CycloneDX","specVersion":"1.7","serialNumber":"urn:uuid:c0690380-49e3-4e3a-8282-7d3a54c5c87b","version":1,"metadata":{"timestamp":"2026-08-10T15:41:44Z","tools":{"components":[{"group":"@cyclonedx","name":"cdxgen","version":"12.8.2","purl":"pkg:npm/%40cyclonedx/cdxgen@12.8.2","type":"application","bom-ref":"pkg:npm/@cyclonedx/cdxgen@12.8.2","publisher":"OWASP Foundation","authors":[{"name":"OWASP Foundation"}]}]},"authors":[{"name":"OWASP Foundation"}],"lifecycles":[{"phase":"build"}],"component":{"group":"","name":"github.com/cdxgen/cdxgen-plugins-bin/thirdparty/golem","version":"","purl":"pkg:golang/github.com/cdxgen/cdxgen-plugins-bin/thirdparty/golem","bom-ref":"pkg:golang/github.com/cdxgen/cdxgen-plugins-bin/thirdparty/golem","scope":"required","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem"}],"type":"application","components":[{"group":"","name":"example.com/golem/simple","version":"","scope":"required","purl":"pkg:golang/example.com/golem/simple","type":"library","bom-ref":"pkg:golang/example.com/golem/simple","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/simple/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/simple"}]},{"group":"","name":"example.com/golem/security","version":"","scope":"required","purl":"pkg:golang/example.com/golem/security","type":"library","bom-ref":"pkg:golang/example.com/golem/security","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/security/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/security"}]},{"group":"","name":"example.com/golem/rta","version":"","scope":"required","purl":"pkg:golang/example.com/golem/rta","type":"library","bom-ref":"pkg:golang/example.com/golem/rta","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/rta/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/rta"}]},{"group":"","name":"example.com/golem/dep","version":"","scope":"required","licenses":[{"license":{"name":"CUSTOM","text":{"contentType":"text/plain","content":"Apache-2.0 fixture license\n"},"properties":[{"name":"cdx:license:category","value":"Unstated License"},{"name":"cdx:license:foss","value":"false"},{"name":"cdx:license:osiApproved","value":"false"},{"name":"cdx:license:fsfLibre","value":"false"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:golang/example.com/golem/dep","type":"library","bom-ref":"pkg:golang/example.com/golem/dep","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/dep/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/dep"},{"name":"cdx:license:category","value":"Unstated License"}]},{"group":"","name":"example.com/golem/dataflow","version":"","scope":"required","purl":"pkg:golang/example.com/golem/dataflow","type":"library","bom-ref":"pkg:golang/example.com/golem/dataflow","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/dataflow/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/dataflow"}]},{"group":"","name":"example.com/golem/corpusdep","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpusdep","type":"library","bom-ref":"pkg:golang/example.com/golem/corpusdep","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpusdep/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpusdep"}]},{"group":"","name":"example.com/golem/advanced","version":"","scope":"required","purl":"pkg:golang/example.com/golem/advanced","type":"library","bom-ref":"pkg:golang/example.com/golem/advanced","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/advanced/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/advanced"}]},{"group":"","name":"example.com/golem/corpus/wrapper-edge","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/wrapper-edge","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/wrapper-edge","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/wrapper-edge/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/wrapper-edge"}]},{"group":"","name":"example.com/golem/corpus/worker-pool","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/worker-pool","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/worker-pool","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/worker-pool/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/worker-pool"}]},{"group":"","name":"example.com/golem/corpus/validate-named-but-not-sanitizing","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/validate-named-but-not-sanitizing","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/validate-named-but-not-sanitizing","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/validate-named-but-not-sanitizing/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/validate-named-but-not-sanitizing"}]},{"group":"","name":"example.com/golem/corpus/unrelated-value-negative","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/unrelated-value-negative","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/unrelated-value-negative","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/unrelated-value-negative/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/unrelated-value-negative"}]},{"group":"","name":"example.com/golem/corpus/template-injection","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/template-injection","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/template-injection","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/template-injection/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/template-injection"}]},{"group":"","name":"example.com/golem/corpus/struct-field-through-call","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/struct-field-through-call","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/struct-field-through-call","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/struct-field-through-call/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/struct-field-through-call"}]},{"group":"","name":"example.com/golem/corpus/strings-builder","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/strings-builder","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/strings-builder","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/strings-builder/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/strings-builder"}]},{"group":"","name":"example.com/golem/corpus/sqli-parameterized-negative","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/sqli-parameterized-negative","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/sqli-parameterized-negative","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/sqli-parameterized-negative/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/sqli-parameterized-negative"}]},{"group":"","name":"example.com/golem/corpus/sqli-concatenated","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/sqli-concatenated","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/sqli-concatenated","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/sqli-concatenated/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/sqli-concatenated"}]},{"group":"","name":"example.com/golem/corpus/slice-of-pointer","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/slice-of-pointer","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/slice-of-pointer","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/slice-of-pointer/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/slice-of-pointer"}]},{"group":"","name":"example.com/golem/corpus/select-multiplex","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/select-multiplex","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/select-multiplex","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/select-multiplex/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/select-multiplex"}]},{"group":"","name":"example.com/golem/corpus/sanitizer-on-path-negative","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/sanitizer-on-path-negative","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/sanitizer-on-path-negative","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/sanitizer-on-path-negative/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/sanitizer-on-path-negative"}]},{"group":"","name":"example.com/golem/corpus/sanitizer-not-on-path-negative","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/sanitizer-not-on-path-negative","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/sanitizer-not-on-path-negative","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/sanitizer-not-on-path-negative/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/sanitizer-not-on-path-negative"}]},{"group":"","name":"example.com/golem/corpus/sanitizer-dominates","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/sanitizer-dominates","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/sanitizer-dominates","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/sanitizer-dominates/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/sanitizer-dominates"}]},{"group":"","name":"example.com/golem/corpus/request-field-source","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/request-field-source","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/request-field-source","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/request-field-source/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/request-field-source"}]},{"group":"","name":"example.com/golem/corpus/reflect-call","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/reflect-call","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/reflect-call","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/reflect-call/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/reflect-call"}]},{"group":"","name":"example.com/golem/corpus/recursion","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/recursion","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/recursion","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/recursion/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/recursion"}]},{"group":"","name":"example.com/golem/corpus/plugin-open","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/plugin-open","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/plugin-open","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/plugin-open/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/plugin-open"}]},{"group":"","name":"example.com/golem/corpus/mutual-recursion","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/mutual-recursion","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/mutual-recursion","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/mutual-recursion/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/mutual-recursion"}]},{"group":"","name":"example.com/golem/corpus/method-field-flow","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/method-field-flow","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/method-field-flow","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/method-field-flow/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/method-field-flow"}]},{"group":"","name":"example.com/golem/corpus/map-of-struct","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/map-of-struct","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/map-of-struct","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/map-of-struct/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/map-of-struct"}]},{"group":"","name":"example.com/golem/corpus/loop-carried-taint","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/loop-carried-taint","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/loop-carried-taint","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/loop-carried-taint/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/loop-carried-taint"}]},{"group":"","name":"example.com/golem/corpus/logging-secret-negative","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/logging-secret-negative","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/logging-secret-negative","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/logging-secret-negative/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/logging-secret-negative"}]},{"group":"","name":"example.com/golem/corpus/linkname","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/linkname","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/linkname","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/linkname/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/linkname"}]},{"group":"","name":"example.com/golem/corpus/library-no-main","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/library-no-main","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/library-no-main","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/library-no-main/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/library-no-main"}]},{"group":"","name":"example.com/golem/corpus/json-roundtrip","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/json-roundtrip","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/json-roundtrip","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/json-roundtrip/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/json-roundtrip"}]},{"group":"","name":"example.com/golem/corpus/io-copy","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/io-copy","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/io-copy","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/io-copy/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/io-copy"}]},{"group":"","name":"example.com/golem/corpus/interface-dispatch","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/interface-dispatch","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/interface-dispatch","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/interface-dispatch/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/interface-dispatch"}]},{"group":"","name":"example.com/golem/corpus/handler-func-value","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/handler-func-value","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/handler-func-value","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/handler-func-value/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/handler-func-value"}]},{"group":"","name":"example.com/golem/corpus/goroutine-channel","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/goroutine-channel","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/goroutine-channel","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/goroutine-channel/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/goroutine-channel"}]},{"group":"","name":"example.com/golem/corpus/global-var-carrier","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/global-var-carrier","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/global-var-carrier","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/global-var-carrier/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/global-var-carrier"}]},{"group":"","name":"example.com/golem/corpus/generic-container","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/generic-container","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/generic-container","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/generic-container/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/generic-container"}]},{"group":"","name":"example.com/golem/corpus/generic-constraint-method","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/generic-constraint-method","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/generic-constraint-method","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/generic-constraint-method/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/generic-constraint-method"}]},{"group":"","name":"example.com/golem/corpus/func-field-dispatch","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/func-field-dispatch","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/func-field-dispatch","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/func-field-dispatch/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/func-field-dispatch"}]},{"group":"","name":"example.com/golem/corpus/field-discrimination-negative","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/field-discrimination-negative","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/field-discrimination-negative","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/field-discrimination-negative/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/field-discrimination-negative"}]},{"group":"","name":"example.com/golem/corpus/error-wrapping","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/error-wrapping","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/error-wrapping","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/error-wrapping/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/error-wrapping"}]},{"group":"","name":"example.com/golem/corpus/embedded-struct-promotion","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/embedded-struct-promotion","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/embedded-struct-promotion","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/embedded-struct-promotion/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/embedded-struct-promotion"}]},{"group":"","name":"example.com/golem/corpus/direct-flow","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/direct-flow","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/direct-flow","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/direct-flow/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/direct-flow"}]},{"group":"","name":"example.com/golem/corpus/dep-transitive-2-hops","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/dep-transitive-2-hops","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/dep-transitive-2-hops","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/dep-transitive-2-hops/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/dep-transitive-2-hops"}]},{"group":"","name":"example.com/golem/corpus/dep-only-flow","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/dep-only-flow","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/dep-only-flow","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/dep-only-flow/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/dep-only-flow"}]},{"group":"","name":"example.com/golem/corpus/dep-drops-taint-negative","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/dep-drops-taint-negative","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/dep-drops-taint-negative","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/dep-drops-taint-negative/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/dep-drops-taint-negative"}]},{"group":"","name":"example.com/golem/corpus/defer-taint","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/defer-taint","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/defer-taint","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/defer-taint/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/defer-taint"}]},{"group":"","name":"example.com/golem/corpus/deep-chain-8-levels","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/deep-chain-8-levels","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/deep-chain-8-levels","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/deep-chain-8-levels/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/deep-chain-8-levels"}]},{"group":"","name":"example.com/golem/corpus/context-value","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/context-value","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/context-value","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/context-value/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/context-value"}]},{"group":"","name":"example.com/golem/corpus/const-only-negative","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/const-only-negative","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/const-only-negative","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/const-only-negative/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/const-only-negative"}]},{"group":"","name":"example.com/golem/corpus/closure-capture","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/closure-capture","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/closure-capture","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/closure-capture/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/closure-capture"}]},{"group":"","name":"example.com/golem/corpus/cgo-string-roundtrip","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/cgo-string-roundtrip","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/cgo-string-roundtrip","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/cgo-string-roundtrip/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/cgo-string-roundtrip"}]},{"group":"","name":"example.com/golem/corpus/cgo-callback-export","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/cgo-callback-export","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/cgo-callback-export","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/cgo-callback-export/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/cgo-callback-export"}]},{"group":"","name":"example.com/golem/corpus/bufio-scanner","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/bufio-scanner","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/bufio-scanner","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/bufio-scanner/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/bufio-scanner"}]},{"group":"","name":"github.com/spf13/cobra","version":"","scope":"required","purl":"pkg:golang/github.com/spf13/cobra","type":"library","bom-ref":"pkg:golang/github.com/spf13/cobra","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/rta/stubs/cobra/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/rta/stubs/cobra"}]}]},"properties":[{"name":"cdx:bom:componentTypes","value":"golang"},{"name":"cdx:bom:componentNamespaces","value":"example.com/golem\\ngithub.com/spf13\\ngolang.org/x"},{"name":"cdx:bom:componentSrcFiles","value":"go.mod"}]},"components":[{"group":"","name":"golang.org/x/mod","version":"v0.30.0","scope":"required","hashes":[{"alg":"SHA-256","content":"940b1fe4ed84bc979214c881c570e48bbb02800c4451c6475e85cc293e0624a7"}],"licenses":[{"license":{"name":"CUSTOM","text":{"contentType":"text/plain","content":"Copyright 2009 The Go Authors.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are\nmet:\n\n * Redistributions of source code must retain the above copyright\nnotice, this list of conditions and the following disclaimer.\n * Redistributions in binary form must reproduce the above\ncopyright notice, this list of conditions and the following disclaimer\nin the documentation and/or other materials provided with the\ndistribution.\n * Neither the name of Google LLC nor the names of its\ncontributors may be used to endorse or promote products derived from\nthis software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nOWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\nLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n"},"properties":[{"name":"cdx:license:category","value":"Unstated License"},{"name":"cdx:license:foss","value":"false"},{"name":"cdx:license:osiApproved","value":"false"},{"name":"cdx:license:fsfLibre","value":"false"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:golang/golang.org/x/mod@v0.30.0","type":"library","bom-ref":"pkg:golang/golang.org/x/mod@v0.30.0","properties":[{"name":"SrcGoMod","value":"/home/runner/go/pkg/mod/cache/download/golang.org/x/mod/@v/v0.30.0.mod"},{"name":"ModuleGoVersion","value":"1.24.0"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:creation_time","value":"2025-11-11 15:05:13 +0000 UTC"},{"name":"cdx:go:local_dir","value":"/home/runner/go/pkg/mod/golang.org/x/mod@v0.30.0"},{"name":"SrcFile","value":"go.mod"},{"name":"cdx:license:category","value":"Unstated License"}],"evidence":{"identity":[{"field":"purl","confidence":0.7,"methods":[{"technique":"manifest-analysis","confidence":0.7,"value":"go.mod"}],"concludedValue":"go.mod"}]}},{"group":"","name":"golang.org/x/sync","version":"v0.18.0","scope":"optional","hashes":[{"alg":"SHA-256","content":"f4a4c75e64a7a06aee2e9c058d5497d2534d03be42ca488c1026e8bcd4d9a862"}],"licenses":[{"license":{"name":"CUSTOM","text":{"contentType":"text/plain","content":"Copyright 2009 The Go Authors.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are\nmet:\n\n * Redistributions of source code must retain the above copyright\nnotice, this list of conditions and the following disclaimer.\n * Redistributions in binary form must reproduce the above\ncopyright notice, this list of conditions and the following disclaimer\nin the documentation and/or other materials provided with the\ndistribution.\n * Neither the name of Google LLC nor the names of its\ncontributors may be used to endorse or promote products derived from\nthis software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nOWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\nLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n"},"properties":[{"name":"cdx:license:category","value":"Unstated License"},{"name":"cdx:license:foss","value":"false"},{"name":"cdx:license:osiApproved","value":"false"},{"name":"cdx:license:fsfLibre","value":"false"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:golang/golang.org/x/sync@v0.18.0","type":"library","bom-ref":"pkg:golang/golang.org/x/sync@v0.18.0","properties":[{"name":"SrcGoMod","value":"/home/runner/go/pkg/mod/cache/download/golang.org/x/sync/@v/v0.18.0.mod"},{"name":"ModuleGoVersion","value":"1.24.0"},{"name":"cdx:go:indirect","value":"true"},{"name":"cdx:go:creation_time","value":"2025-10-21 17:44:11 +0000 UTC"},{"name":"cdx:go:local_dir","value":"/home/runner/go/pkg/mod/golang.org/x/sync@v0.18.0"},{"name":"SrcFile","value":"go.mod"},{"name":"cdx:license:category","value":"Unstated License"}],"evidence":{"identity":[{"field":"purl","confidence":0.5,"methods":[{"technique":"manifest-analysis","confidence":0.5,"value":"go.mod"}],"concludedValue":"go.mod"}]}},{"group":"","name":"golang.org/x/tools","version":"v0.39.0","scope":"required","hashes":[{"alg":"SHA-256","content":"26779f6e40cfc83f14536908e5fb9ff195f8ff251e87d5bcefb65e04e37152a4"}],"licenses":[{"license":{"name":"CUSTOM","text":{"contentType":"text/plain","content":"Copyright 2009 The Go Authors.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are\nmet:\n\n * Redistributions of source code must retain the above copyright\nnotice, this list of conditions and the following disclaimer.\n * Redistributions in binary form must reproduce the above\ncopyright notice, this list of conditions and the following disclaimer\nin the documentation and/or other materials provided with the\ndistribution.\n * Neither the name of Google LLC nor the names of its\ncontributors may be used to endorse or promote products derived from\nthis software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nOWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\nLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n"},"properties":[{"name":"cdx:license:category","value":"Unstated License"},{"name":"cdx:license:foss","value":"false"},{"name":"cdx:license:osiApproved","value":"false"},{"name":"cdx:license:fsfLibre","value":"false"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:golang/golang.org/x/tools@v0.39.0","type":"library","bom-ref":"pkg:golang/golang.org/x/tools@v0.39.0","properties":[{"name":"SrcGoMod","value":"/home/runner/go/pkg/mod/cache/download/golang.org/x/tools/@v/v0.39.0.mod"},{"name":"ModuleGoVersion","value":"1.24.0"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:creation_time","value":"2025-11-12 22:16:42 +0000 UTC"},{"name":"cdx:go:local_dir","value":"/home/runner/go/pkg/mod/golang.org/x/tools@v0.39.0"},{"name":"SrcFile","value":"go.mod"},{"name":"cdx:license:category","value":"Unstated License"}],"evidence":{"identity":[{"field":"purl","confidence":0.7,"methods":[{"technique":"manifest-analysis","confidence":0.7,"value":"go.mod"}],"concludedValue":"go.mod"}]}},{"group":"","name":"github.com/spf13/cobra","version":"v0.0.0","scope":"required","purl":"pkg:golang/github.com/spf13/cobra@v0.0.0","type":"library","bom-ref":"pkg:golang/github.com/spf13/cobra@v0.0.0","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/rta/stubs/cobra/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/rta/stubs/cobra"}]},{"group":"","name":"example.com/golem/dep","version":"v0.0.0","scope":"required","licenses":[{"license":{"name":"CUSTOM","text":{"contentType":"text/plain","content":"Apache-2.0 fixture license\n"},"properties":[{"name":"cdx:license:category","value":"Unstated License"},{"name":"cdx:license:foss","value":"false"},{"name":"cdx:license:osiApproved","value":"false"},{"name":"cdx:license:fsfLibre","value":"false"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:golang/example.com/golem/dep@v0.0.0","type":"library","bom-ref":"pkg:golang/example.com/golem/dep@v0.0.0","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/dep/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/dep"},{"name":"cdx:license:category","value":"Unstated License"}]},{"group":"","name":"example.com/golem/corpusdep","version":"v0.0.0","scope":"required","purl":"pkg:golang/example.com/golem/corpusdep@v0.0.0","type":"library","bom-ref":"pkg:golang/example.com/golem/corpusdep@v0.0.0","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpusdep/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpusdep"}]}],"dependencies":[{"ref":"pkg:golang/github.com/cdxgen/cdxgen-plugins-bin/thirdparty/golem","dependsOn":["pkg:golang/golang.org/x/mod@v0.30.0","pkg:golang/golang.org/x/tools@v0.39.0"]},{"ref":"pkg:golang/golang.org/x/mod@v0.30.0","dependsOn":[]},{"ref":"pkg:golang/golang.org/x/sync@v0.18.0","dependsOn":[]},{"ref":"pkg:golang/golang.org/x/tools@v0.39.0","dependsOn":["pkg:golang/golang.org/x/mod@v0.30.0","pkg:golang/golang.org/x/sync@v0.18.0"]}],"annotations":[{"bom-ref":"metadata-annotations","subjects":["pkg:golang/github.com/cdxgen/cdxgen-plugins-bin/thirdparty/golem"],"annotator":{"component":{"group":"@cyclonedx","name":"cdxgen","version":"12.8.2","purl":"pkg:npm/%40cyclonedx/cdxgen@12.8.2","type":"application","bom-ref":"pkg:npm/@cyclonedx/cdxgen@12.8.2","publisher":"OWASP Foundation","authors":[{"name":"OWASP Foundation"}]}},"timestamp":"2026-08-10T15:41:44Z","text":"This Software Bill-of-Materials (SBOM) document was created on Monday, August 10, 2026 with cdxgen. The data was captured during the build lifecycle phase. The document describes an application named 'github.com/cdxgen/cdxgen-plugins-bin/thirdparty/golem'. The application also has 57 child modules/components. The package type in this SBOM is golang with 3 purl namespaces described under components. The components were identified from the source files: go.mod."}]}

package/plugins/plugins-manifest.json CHANGED Viewed

@@ -1,8 +1,8 @@
 {
-  "generatedAt": "2026-08-07T16:27:37.081Z",
+  "generatedAt": "2026-08-10T15:51:29.230Z",
   "package": {
     "name": "@cdxgen/cdxgen-plugins-bin",
-    "version": "3.0.0",
+    "version": "3.0.2",
     "repository": "git+https://github.com/cdxgen/cdxgen-plugins-bin.git",
     "homepage": "https://github.com/cdxgen/cdxgen-plugins-bin#readme"
   },
@@ -11,7 +11,7 @@
       "name": "trivy",
       "version": "v0.68.2",
       "binaryPath": "plugins/trivy/trivy-cdxgen-linux-riscv64",
-      "sha256": "ac9a8017d5bb6248f56cd76db5d0c45837cb59a46bfb0f742b4e86bfa0668a79",
+      "sha256": "e8251a0160ab5e0a3d19bcb226f1857f652fe1fa031b16510c938183a24bcd3d",
       "sbomFile": "plugins/trivy/sbom-trivy-postbuild.cdx.json",
       "component": {
         "type": "application",
@@ -64,24 +64,24 @@
         "hashes": [
           {
             "alg": "SHA-256",
-            "content": "ac9a8017d5bb6248f56cd76db5d0c45837cb59a46bfb0f742b4e86bfa0668a79"
+            "content": "e8251a0160ab5e0a3d19bcb226f1857f652fe1fa031b16510c938183a24bcd3d"
           }
         ]
       }
     },
     {
       "name": "trustinspector",
-      "version": "3.0.0",
+      "version": "3.0.2",
       "binaryPath": "plugins/trustinspector/trustinspector-cdxgen-linux-riscv64",
-      "sha256": "10cb6c6e28513f62e77c5d210b7fbf4944b2f5e889647a4483f498da87a715ed",
+      "sha256": "2479d143e92e026079661cafa660b40cd8371a6fa808ce7f3b86026491dea785",
       "sbomFile": "plugins/trustinspector/sbom-trustinspector-postbuild.cdx.json",
       "component": {
         "type": "application",
         "name": "trustinspector",
-        "version": "3.0.0",
+        "version": "3.0.2",
         "description": "cdxgen trust-material inspection helper for repository keys, certificate stores, macOS code-signing, notarization, and Windows trust policy inventory.",
-        "purl": "pkg:generic/github.com/cdxgen/cdxgen-plugins-bin/trustinspector-cdxgen@3.0.0",
-        "bom-ref": "pkg:generic/github.com/cdxgen/cdxgen-plugins-bin/trustinspector-cdxgen@3.0.0",
+        "purl": "pkg:generic/github.com/cdxgen/cdxgen-plugins-bin/trustinspector-cdxgen@3.0.2",
+        "bom-ref": "pkg:generic/github.com/cdxgen/cdxgen-plugins-bin/trustinspector-cdxgen@3.0.2",
         "licenses": [
           {
             "license": {
@@ -126,24 +126,24 @@
         "hashes": [
           {
             "alg": "SHA-256",
-            "content": "10cb6c6e28513f62e77c5d210b7fbf4944b2f5e889647a4483f498da87a715ed"
+            "content": "2479d143e92e026079661cafa660b40cd8371a6fa808ce7f3b86026491dea785"
           }
         ]
       }
     },
     {
       "name": "golem",
-      "version": "3.0.0",
+      "version": "3.0.2",
       "binaryPath": "plugins/golem/golem-linux-riscv64",
-      "sha256": "57f09a5b5ac19dec2969d89732e8f39ac1aadd827da5515a99fa662e8a723997",
+      "sha256": "73d0acf7edd0e8a90e57e62b922ae642c51026a89639c189431a105c3a36a850",
       "sbomFile": "plugins/golem/sbom-golem-postbuild.cdx.json",
       "component": {
         "type": "application",
         "name": "golem",
-        "version": "3.0.0",
+        "version": "3.0.2",
         "description": "Go Library Evidence Mapper (golem) extracts semantic Go source evidence and optional call graphs for cdxgen.",
-        "purl": "pkg:generic/github.com/cdxgen/cdxgen-plugins-bin/golem@3.0.0",
-        "bom-ref": "pkg:generic/github.com/cdxgen/cdxgen-plugins-bin/golem@3.0.0",
+        "purl": "pkg:generic/github.com/cdxgen/cdxgen-plugins-bin/golem@3.0.2",
+        "bom-ref": "pkg:generic/github.com/cdxgen/cdxgen-plugins-bin/golem@3.0.2",
         "licenses": [
           {
             "license": {
@@ -188,24 +188,24 @@
         "hashes": [
           {
             "alg": "SHA-256",
-            "content": "57f09a5b5ac19dec2969d89732e8f39ac1aadd827da5515a99fa662e8a723997"
+            "content": "73d0acf7edd0e8a90e57e62b922ae642c51026a89639c189431a105c3a36a850"
           }
         ]
       }
     },
     {
       "name": "rusi",
-      "version": "3.0.0",
+      "version": "3.0.2",
       "binaryPath": "plugins/rusi/rusi-linux-riscv64",
-      "sha256": "5ae37ddfc498e753ee828fb9139a73a8ec8235272d563d0e2592ab892593694a",
+      "sha256": "f9a159a51a59cef2451404fd1b86bfbb126d612b1675ffd60bf041eac4e01fb7",
       "sbomFile": "plugins/rusi/sbom-rusi-postbuild.cdx.json",
       "component": {
         "type": "application",
         "name": "rusi",
-        "version": "3.0.0",
+        "version": "3.0.2",
         "description": "Rust Source Inspector (rusi) extracts semantic Rust source evidence, call graphs, and optional data-flow findings for cdxgen.",
-        "purl": "pkg:generic/github.com/cdxgen/cdxgen-plugins-bin/rusi@3.0.0",
-        "bom-ref": "pkg:generic/github.com/cdxgen/cdxgen-plugins-bin/rusi@3.0.0",
+        "purl": "pkg:generic/github.com/cdxgen/cdxgen-plugins-bin/rusi@3.0.2",
+        "bom-ref": "pkg:generic/github.com/cdxgen/cdxgen-plugins-bin/rusi@3.0.2",
         "licenses": [
           {
             "license": {
@@ -250,7 +250,7 @@
         "hashes": [
           {
             "alg": "SHA-256",
-            "content": "5ae37ddfc498e753ee828fb9139a73a8ec8235272d563d0e2592ab892593694a"
+            "content": "f9a159a51a59cef2451404fd1b86bfbb126d612b1675ffd60bf041eac4e01fb7"
           }
         ]
       }

package/plugins/rusi/rusi-linux-riscv64 CHANGED Viewed

Binary file

package/plugins/rusi/rusi-linux-riscv64.sha256 CHANGED Viewed

	@@ -1 +1 @@
1	- ~~5ae37ddfc498e753ee828fb9139a73a8ec8235272d563d0e2592ab892593694a~~ plugins/rusi/rusi-linux-riscv64
1	+ f9a159a51a59cef2451404fd1b86bfbb126d612b1675ffd60bf041eac4e01fb7 plugins/rusi/rusi-linux-riscv64