npm - @cdxgen/cdxgen-plugins-bin-linux-riscv64 - Versions diffs - 4.0.0 → 4.0.1 - Mend

@cdxgen/cdxgen-plugins-bin-linux-riscv64 4.0.0 → 4.0.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (20) hide show

package/plugins/golem/golem-linux-riscv64 CHANGED Viewed

Binary file

package/plugins/golem/golem-linux-riscv64.sha256 CHANGED Viewed

	@@ -1 +1 @@
1	- ~~665b9f655abe0bb2d1397e2dd7c25b4007ab3b6df195831ee1b4acdcc25d5fcd~~ plugins/golem/golem-linux-riscv64
1	+ d4e3e10f5381bba04a7fd6365ebab7528acc6014fa80fe55bb9da88ab685c730 plugins/golem/golem-linux-riscv64

package/plugins/golem/sbom-golem-postbuild.cdx.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"bomFormat":"CycloneDX","specVersion":"1.7","serialNumber":"urn:uuid:0d01289a-5ff0-4748-a695-cefe1c5da525","version":1,"metadata":{"timestamp":"2026-09-22T12:10:16Z","tools":{"components":[{"group":"@cyclonedx","name":"cdxgen","version":"12.8.4","purl":"pkg:npm/%40cyclonedx/cdxgen@12.8.4","type":"application","bom-ref":"pkg:npm/@cyclonedx/cdxgen@12.8.4","publisher":"OWASP Foundation","authors":[{"name":"OWASP Foundation"}]}]},"authors":[{"name":"OWASP Foundation"}],"lifecycles":[{"phase":"build"}],"component":{"group":"","name":"github.com/cdxgen/cdxgen-plugins-bin/thirdparty/golem","version":"","purl":"pkg:golang/github.com/cdxgen/cdxgen-plugins-bin/thirdparty/golem","bom-ref":"pkg:golang/github.com/cdxgen/cdxgen-plugins-bin/thirdparty/golem","scope":"required","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/go.mod"},{"name":"ModuleGoVersion","value":"1.27.0"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem"}],"type":"application","components":[{"group":"","name":"example.com/golem/simple","version":"","scope":"required","purl":"pkg:golang/example.com/golem/simple","type":"library","bom-ref":"pkg:golang/example.com/golem/simple","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/simple/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/simple"}]},{"group":"","name":"example.com/golem/security","version":"","scope":"required","purl":"pkg:golang/example.com/golem/security","type":"library","bom-ref":"pkg:golang/example.com/golem/security","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/security/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/security"}]},{"group":"","name":"example.com/golem/rta-generic-method","version":"","scope":"required","purl":"pkg:golang/example.com/golem/rta-generic-method","type":"library","bom-ref":"pkg:golang/example.com/golem/rta-generic-method","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/rta-generic-method/go.mod"},{"name":"ModuleGoVersion","value":"1.27"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/rta-generic-method"}]},{"group":"","name":"example.com/golem/rta","version":"","scope":"required","purl":"pkg:golang/example.com/golem/rta","type":"library","bom-ref":"pkg:golang/example.com/golem/rta","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/rta/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/rta"}]},{"group":"","name":"example.com/golem/endpoints-nethttp","version":"","scope":"required","purl":"pkg:golang/example.com/golem/endpoints-nethttp","type":"library","bom-ref":"pkg:golang/example.com/golem/endpoints-nethttp","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/endpoints-nethttp/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/endpoints-nethttp"}]},{"group":"","name":"example.com/golem/endpoints-gin","version":"","scope":"required","purl":"pkg:golang/example.com/golem/endpoints-gin","type":"library","bom-ref":"pkg:golang/example.com/golem/endpoints-gin","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/endpoints-gin/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/endpoints-gin"}]},{"group":"","name":"example.com/golem/endpoints-echo","version":"","scope":"required","purl":"pkg:golang/example.com/golem/endpoints-echo","type":"library","bom-ref":"pkg:golang/example.com/golem/endpoints-echo","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/endpoints-echo/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/endpoints-echo"}]},{"group":"","name":"example.com/golem/endpoints-chi","version":"","scope":"required","purl":"pkg:golang/example.com/golem/endpoints-chi","type":"library","bom-ref":"pkg:golang/example.com/golem/endpoints-chi","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/endpoints-chi/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/endpoints-chi"}]},{"group":"","name":"example.com/golem/endpoints-auth","version":"","scope":"required","purl":"pkg:golang/example.com/golem/endpoints-auth","type":"library","bom-ref":"pkg:golang/example.com/golem/endpoints-auth","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/endpoints-auth/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/endpoints-auth"}]},{"group":"","name":"example.com/golem/dep","version":"","scope":"required","licenses":[{"license":{"name":"CUSTOM","text":{"contentType":"text/plain","content":"Apache-2.0 fixture license\n"},"properties":[{"name":"cdx:license:category","value":"Unstated License"},{"name":"cdx:license:foss","value":"false"},{"name":"cdx:license:osiApproved","value":"false"},{"name":"cdx:license:fsfLibre","value":"false"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:golang/example.com/golem/dep","type":"library","bom-ref":"pkg:golang/example.com/golem/dep","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/dep/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/dep"},{"name":"cdx:license:category","value":"Unstated License"}]},{"group":"","name":"example.com/golem/dataflow","version":"","scope":"required","purl":"pkg:golang/example.com/golem/dataflow","type":"library","bom-ref":"pkg:golang/example.com/golem/dataflow","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/dataflow/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/dataflow"}]},{"group":"","name":"example.com/golem/corpusdep","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpusdep","type":"library","bom-ref":"pkg:golang/example.com/golem/corpusdep","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpusdep/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpusdep"}]},{"group":"","name":"example.com/golem/advanced","version":"","scope":"required","purl":"pkg:golang/example.com/golem/advanced","type":"library","bom-ref":"pkg:golang/example.com/golem/advanced","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/advanced/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/advanced"}]},{"group":"","name":"github.com/gin-gonic/gin","version":"","scope":"required","purl":"pkg:golang/github.com/gin-gonic/gin","type":"library","bom-ref":"pkg:golang/github.com/gin-gonic/gin","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/framework-stubs/gin/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/framework-stubs/gin"}]},{"group":"","name":"github.com/labstack/echo/v4","version":"","scope":"required","purl":"pkg:golang/github.com/labstack/echo/v4","type":"framework","bom-ref":"pkg:golang/github.com/labstack/echo/v4","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/framework-stubs/echo/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/framework-stubs/echo"}]},{"group":"","name":"github.com/go-chi/render","version":"","scope":"required","purl":"pkg:golang/github.com/go-chi/render","type":"framework","bom-ref":"pkg:golang/github.com/go-chi/render","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/framework-stubs/chi-render/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/framework-stubs/chi-render"}]},{"group":"","name":"github.com/go-chi/chi/v5","version":"","scope":"required","purl":"pkg:golang/github.com/go-chi/chi/v5","type":"framework","bom-ref":"pkg:golang/github.com/go-chi/chi/v5","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/framework-stubs/chi/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/framework-stubs/chi"}]},{"group":"","name":"example.com/golem/corpus/wrapper-edge","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/wrapper-edge","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/wrapper-edge","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/wrapper-edge/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/wrapper-edge"}]},{"group":"","name":"example.com/golem/corpus/worker-pool","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/worker-pool","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/worker-pool","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/worker-pool/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/worker-pool"}]},{"group":"","name":"example.com/golem/corpus/value-receiver-field","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/value-receiver-field","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/value-receiver-field","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/value-receiver-field/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/value-receiver-field"}]},{"group":"","name":"example.com/golem/corpus/validate-named-but-not-sanitizing","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/validate-named-but-not-sanitizing","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/validate-named-but-not-sanitizing","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/validate-named-but-not-sanitizing/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/validate-named-but-not-sanitizing"}]},{"group":"","name":"example.com/golem/corpus/uuid-roundtrip","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/uuid-roundtrip","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/uuid-roundtrip","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/uuid-roundtrip/go.mod"},{"name":"ModuleGoVersion","value":"1.27"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/uuid-roundtrip"}]},{"group":"","name":"example.com/golem/corpus/unrelated-value-negative","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/unrelated-value-negative","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/unrelated-value-negative","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/unrelated-value-negative/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/unrelated-value-negative"}]},{"group":"","name":"example.com/golem/corpus/template-injection","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/template-injection","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/template-injection","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/template-injection/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/template-injection"}]},{"group":"","name":"example.com/golem/corpus/struct-field-through-call","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/struct-field-through-call","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/struct-field-through-call","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/struct-field-through-call/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/struct-field-through-call"}]},{"group":"","name":"example.com/golem/corpus/strings-builder","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/strings-builder","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/strings-builder","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/strings-builder/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/strings-builder"}]},{"group":"","name":"example.com/golem/corpus/sqli-parameterized-negative","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/sqli-parameterized-negative","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/sqli-parameterized-negative","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/sqli-parameterized-negative/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/sqli-parameterized-negative"}]},{"group":"","name":"example.com/golem/corpus/sqli-concatenated","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/sqli-concatenated","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/sqli-concatenated","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/sqli-concatenated/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/sqli-concatenated"}]},{"group":"","name":"example.com/golem/corpus/slice-of-pointer","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/slice-of-pointer","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/slice-of-pointer","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/slice-of-pointer/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/slice-of-pointer"}]},{"group":"","name":"example.com/golem/corpus/select-multiplex","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/select-multiplex","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/select-multiplex","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/select-multiplex/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/select-multiplex"}]},{"group":"","name":"example.com/golem/corpus/sanitizer-on-path-negative","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/sanitizer-on-path-negative","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/sanitizer-on-path-negative","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/sanitizer-on-path-negative/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/sanitizer-on-path-negative"}]},{"group":"","name":"example.com/golem/corpus/sanitizer-not-on-path-negative","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/sanitizer-not-on-path-negative","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/sanitizer-not-on-path-negative","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/sanitizer-not-on-path-negative/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/sanitizer-not-on-path-negative"}]},{"group":"","name":"example.com/golem/corpus/sanitizer-dominates","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/sanitizer-dominates","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/sanitizer-dominates","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/sanitizer-dominates/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/sanitizer-dominates"}]},{"group":"","name":"example.com/golem/corpus/request-field-source","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/request-field-source","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/request-field-source","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/request-field-source/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/request-field-source"}]},{"group":"","name":"example.com/golem/corpus/reflect-call","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/reflect-call","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/reflect-call","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/reflect-call/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/reflect-call"}]},{"group":"","name":"example.com/golem/corpus/recursion","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/recursion","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/recursion","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/recursion/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/recursion"}]},{"group":"","name":"example.com/golem/corpus/promoted-field-literal-key","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/promoted-field-literal-key","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/promoted-field-literal-key","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/promoted-field-literal-key/go.mod"},{"name":"ModuleGoVersion","value":"1.27"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/promoted-field-literal-key"}]},{"group":"","name":"example.com/golem/corpus/plugin-open","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/plugin-open","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/plugin-open","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/plugin-open/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/plugin-open"}]},{"group":"","name":"example.com/golem/corpus/mutual-recursion","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/mutual-recursion","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/mutual-recursion","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/mutual-recursion/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/mutual-recursion"}]},{"group":"","name":"example.com/golem/corpus/method-field-flow","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/method-field-flow","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/method-field-flow","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/method-field-flow/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/method-field-flow"}]},{"group":"","name":"example.com/golem/corpus/map-of-struct","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/map-of-struct","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/map-of-struct","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/map-of-struct/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/map-of-struct"}]},{"group":"","name":"example.com/golem/corpus/loop-carried-taint","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/loop-carried-taint","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/loop-carried-taint","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/loop-carried-taint/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/loop-carried-taint"}]},{"group":"","name":"example.com/golem/corpus/logging-secret-negative","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/logging-secret-negative","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/logging-secret-negative","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/logging-secret-negative/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/logging-secret-negative"}]},{"group":"","name":"example.com/golem/corpus/linkname","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/linkname","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/linkname","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/linkname/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/linkname"}]},{"group":"","name":"example.com/golem/corpus/library-no-main","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/library-no-main","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/library-no-main","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/library-no-main/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/library-no-main"}]},{"group":"","name":"example.com/golem/corpus/jsonv2-roundtrip","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/jsonv2-roundtrip","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/jsonv2-roundtrip","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/jsonv2-roundtrip/go.mod"},{"name":"ModuleGoVersion","value":"1.27"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/jsonv2-roundtrip"}]},{"group":"","name":"example.com/golem/corpus/json-roundtrip","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/json-roundtrip","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/json-roundtrip","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/json-roundtrip/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/json-roundtrip"}]},{"group":"","name":"example.com/golem/corpus/io-copy","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/io-copy","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/io-copy","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/io-copy/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/io-copy"}]},{"group":"","name":"example.com/golem/corpus/interface-dispatch","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/interface-dispatch","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/interface-dispatch","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/interface-dispatch/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/interface-dispatch"}]},{"group":"","name":"example.com/golem/corpus/insecure-random","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/insecure-random","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/insecure-random","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/insecure-random/go.mod"},{"name":"ModuleGoVersion","value":"1.22.0"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/insecure-random"}]},{"group":"","name":"example.com/golem/corpus/http-client-ssrf","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/http-client-ssrf","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/http-client-ssrf","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/http-client-ssrf/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/http-client-ssrf"}]},{"group":"","name":"example.com/golem/corpus/handler-func-value","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/handler-func-value","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/handler-func-value","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/handler-func-value/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/handler-func-value"}]},{"group":"","name":"example.com/golem/corpus/goroutine-channel","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/goroutine-channel","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/goroutine-channel","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/goroutine-channel/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/goroutine-channel"}]},{"group":"","name":"example.com/golem/corpus/global-var-carrier","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/global-var-carrier","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/global-var-carrier","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/global-var-carrier/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/global-var-carrier"}]},{"group":"","name":"example.com/golem/corpus/generic-method","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/generic-method","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/generic-method","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/generic-method/go.mod"},{"name":"ModuleGoVersion","value":"1.27"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/generic-method"}]},{"group":"","name":"example.com/golem/corpus/generic-container","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/generic-container","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/generic-container","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/generic-container/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/generic-container"}]},{"group":"","name":"example.com/golem/corpus/generic-constraint-method","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/generic-constraint-method","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/generic-constraint-method","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/generic-constraint-method/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/generic-constraint-method"}]},{"group":"","name":"example.com/golem/corpus/func-param-callback","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/func-param-callback","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/func-param-callback","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/func-param-callback/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/func-param-callback"}]},{"group":"","name":"example.com/golem/corpus/func-field-dispatch","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/func-field-dispatch","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/func-field-dispatch","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/func-field-dispatch/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/func-field-dispatch"}]},{"group":"","name":"example.com/golem/corpus/field-discrimination-negative","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/field-discrimination-negative","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/field-discrimination-negative","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/field-discrimination-negative/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/field-discrimination-negative"}]},{"group":"","name":"example.com/golem/corpus/error-wrapping","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/error-wrapping","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/error-wrapping","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/error-wrapping/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/error-wrapping"}]},{"group":"","name":"example.com/golem/corpus/embedded-struct-promotion","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/embedded-struct-promotion","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/embedded-struct-promotion","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/embedded-struct-promotion/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/embedded-struct-promotion"}]},{"group":"","name":"example.com/golem/corpus/direct-flow","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/direct-flow","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/direct-flow","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/direct-flow/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/direct-flow"}]},{"group":"","name":"example.com/golem/corpus/dep-transitive-2-hops","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/dep-transitive-2-hops","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/dep-transitive-2-hops","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/dep-transitive-2-hops/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/dep-transitive-2-hops"}]},{"group":"","name":"example.com/golem/corpus/dep-only-flow","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/dep-only-flow","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/dep-only-flow","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/dep-only-flow/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/dep-only-flow"}]},{"group":"","name":"example.com/golem/corpus/dep-drops-taint-negative","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/dep-drops-taint-negative","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/dep-drops-taint-negative","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/dep-drops-taint-negative/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/dep-drops-taint-negative"}]},{"group":"","name":"example.com/golem/corpus/defer-taint","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/defer-taint","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/defer-taint","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/defer-taint/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/defer-taint"}]},{"group":"","name":"example.com/golem/corpus/deep-chain-8-levels","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/deep-chain-8-levels","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/deep-chain-8-levels","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/deep-chain-8-levels/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/deep-chain-8-levels"}]},{"group":"","name":"example.com/golem/corpus/context-value","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/context-value","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/context-value","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/context-value/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/context-value"}]},{"group":"","name":"example.com/golem/corpus/const-only-negative","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/const-only-negative","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/const-only-negative","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/const-only-negative/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/const-only-negative"}]},{"group":"","name":"example.com/golem/corpus/closure-capture","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/closure-capture","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/closure-capture","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/closure-capture/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/closure-capture"}]},{"group":"","name":"example.com/golem/corpus/cgo-string-roundtrip","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/cgo-string-roundtrip","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/cgo-string-roundtrip","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/cgo-string-roundtrip/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/cgo-string-roundtrip"}]},{"group":"","name":"example.com/golem/corpus/cgo-callback-export","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/cgo-callback-export","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/cgo-callback-export","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/cgo-callback-export/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/cgo-callback-export"}]},{"group":"","name":"example.com/golem/corpus/bufio-scanner","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/bufio-scanner","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/bufio-scanner","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/bufio-scanner/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/bufio-scanner"}]},{"group":"","name":"github.com/spf13/cobra","version":"","scope":"required","purl":"pkg:golang/github.com/spf13/cobra","type":"library","bom-ref":"pkg:golang/github.com/spf13/cobra","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/rta/stubs/cobra/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/rta/stubs/cobra"}]}]},"properties":[{"name":"cdx:bom:componentTypes","value":"golang"},{"name":"cdx:bom:componentNamespaces","value":"example.com/golem\\ngithub.com/gin-gonic\\ngithub.com/go-chi\\ngithub.com/go-chi/chi\\ngithub.com/labstack/echo\\ngithub.com/spf13\\ngolang.org/x"},{"name":"cdx:bom:componentSrcFiles","value":"go.mod"}]},"components":[{"group":"","name":"golang.org/x/mod","version":"v0.40.0","scope":"required","hashes":[{"alg":"SHA-256","content":"d3fc1e4d690f5860629324d6017ddd923573b4c98103984cd031fa044952ba91"}],"licenses":[{"license":{"name":"CUSTOM","text":{"contentType":"text/plain","content":"Copyright 2009 The Go Authors.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are\nmet:\n\n * Redistributions of source code must retain the above copyright\nnotice, this list of conditions and the following disclaimer.\n * Redistributions in binary form must reproduce the above\ncopyright notice, this list of conditions and the following disclaimer\nin the documentation and/or other materials provided with the\ndistribution.\n * Neither the name of Google LLC nor the names of its\ncontributors may be used to endorse or promote products derived from\nthis software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nOWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\nLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n"},"properties":[{"name":"cdx:license:category","value":"Unstated License"},{"name":"cdx:license:foss","value":"false"},{"name":"cdx:license:osiApproved","value":"false"},{"name":"cdx:license:fsfLibre","value":"false"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:golang/golang.org/x/mod@v0.40.0","type":"library","bom-ref":"pkg:golang/golang.org/x/mod@v0.40.0","properties":[{"name":"SrcGoMod","value":"/home/runner/go/pkg/mod/cache/download/golang.org/x/mod/@v/v0.40.0.mod"},{"name":"ModuleGoVersion","value":"1.25.0"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:creation_time","value":"2026-08-13 19:09:22 +0000 UTC"},{"name":"cdx:go:local_dir","value":"/home/runner/go/pkg/mod/golang.org/x/mod@v0.40.0"},{"name":"SrcFile","value":"go.mod"},{"name":"cdx:license:category","value":"Unstated License"}],"evidence":{"identity":[{"field":"purl","confidence":0.7,"methods":[{"technique":"manifest-analysis","confidence":0.7,"value":"go.mod"}],"concludedValue":"go.mod"}]}},{"group":"","name":"golang.org/x/sync","version":"v0.22.0","scope":"optional","hashes":[{"alg":"SHA-256","content":"f71acdc1d2dfc788e429b36f6bd1692fabc437b7af9c4e3734d3494362c5dfed"}],"licenses":[{"license":{"name":"CUSTOM","text":{"contentType":"text/plain","content":"Copyright 2009 The Go Authors.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are\nmet:\n\n * Redistributions of source code must retain the above copyright\nnotice, this list of conditions and the following disclaimer.\n * Redistributions in binary form must reproduce the above\ncopyright notice, this list of conditions and the following disclaimer\nin the documentation and/or other materials provided with the\ndistribution.\n * Neither the name of Google LLC nor the names of its\ncontributors may be used to endorse or promote products derived from\nthis software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nOWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\nLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n"},"properties":[{"name":"cdx:license:category","value":"Unstated License"},{"name":"cdx:license:foss","value":"false"},{"name":"cdx:license:osiApproved","value":"false"},{"name":"cdx:license:fsfLibre","value":"false"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:golang/golang.org/x/sync@v0.22.0","type":"library","bom-ref":"pkg:golang/golang.org/x/sync@v0.22.0","properties":[{"name":"SrcGoMod","value":"/home/runner/go/pkg/mod/cache/download/golang.org/x/sync/@v/v0.22.0.mod"},{"name":"ModuleGoVersion","value":"1.25.0"},{"name":"cdx:go:indirect","value":"true"},{"name":"cdx:go:creation_time","value":"2026-07-01 17:29:34 +0000 UTC"},{"name":"cdx:go:local_dir","value":"/home/runner/go/pkg/mod/golang.org/x/sync@v0.22.0"},{"name":"SrcFile","value":"go.mod"},{"name":"cdx:license:category","value":"Unstated License"}],"evidence":{"identity":[{"field":"purl","confidence":0.5,"methods":[{"technique":"manifest-analysis","confidence":0.5,"value":"go.mod"}],"concludedValue":"go.mod"}]}},{"group":"","name":"golang.org/x/tools","version":"v0.49.0","scope":"required","hashes":[{"alg":"SHA-256","content":"48935757d0c1293d146ddb6db108db7c994013fabecb7ebefb3a37b8bdcdd0ea"}],"licenses":[{"license":{"name":"CUSTOM","text":{"contentType":"text/plain","content":"Copyright 2009 The Go Authors.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are\nmet:\n\n * Redistributions of source code must retain the above copyright\nnotice, this list of conditions and the following disclaimer.\n * Redistributions in binary form must reproduce the above\ncopyright notice, this list of conditions and the following disclaimer\nin the documentation and/or other materials provided with the\ndistribution.\n * Neither the name of Google LLC nor the names of its\ncontributors may be used to endorse or promote products derived from\nthis software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nOWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\nLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n"},"properties":[{"name":"cdx:license:category","value":"Unstated License"},{"name":"cdx:license:foss","value":"false"},{"name":"cdx:license:osiApproved","value":"false"},{"name":"cdx:license:fsfLibre","value":"false"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:golang/golang.org/x/tools@v0.49.0","type":"library","bom-ref":"pkg:golang/golang.org/x/tools@v0.49.0","properties":[{"name":"SrcGoMod","value":"/home/runner/go/pkg/mod/cache/download/golang.org/x/tools/@v/v0.49.0.mod"},{"name":"ModuleGoVersion","value":"1.25.0"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:creation_time","value":"2026-08-13 14:53:26 +0000 UTC"},{"name":"cdx:go:local_dir","value":"/home/runner/go/pkg/mod/golang.org/x/tools@v0.49.0"},{"name":"SrcFile","value":"go.mod"},{"name":"cdx:license:category","value":"Unstated License"}],"evidence":{"identity":[{"field":"purl","confidence":0.7,"methods":[{"technique":"manifest-analysis","confidence":0.7,"value":"go.mod"}],"concludedValue":"go.mod"}]}},{"group":"","name":"github.com/spf13/cobra","version":"v0.0.0","scope":"required","purl":"pkg:golang/github.com/spf13/cobra@v0.0.0","type":"library","bom-ref":"pkg:golang/github.com/spf13/cobra@v0.0.0","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/rta/stubs/cobra/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/rta/stubs/cobra"}]},{"group":"","name":"github.com/gin-gonic/gin","version":"v0.0.0","scope":"required","purl":"pkg:golang/github.com/gin-gonic/gin@v0.0.0","type":"library","bom-ref":"pkg:golang/github.com/gin-gonic/gin@v0.0.0","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/framework-stubs/gin/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/framework-stubs/gin"}],"tags":["framework"]},{"group":"","name":"github.com/labstack/echo/v4","version":"v4.0.0","scope":"required","purl":"pkg:golang/github.com/labstack/echo/v4@v4.0.0","type":"framework","bom-ref":"pkg:golang/github.com/labstack/echo/v4@v4.0.0","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/framework-stubs/echo/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/framework-stubs/echo"}],"tags":["framework"]},{"group":"","name":"github.com/go-chi/chi/v5","version":"v5.0.0","scope":"required","purl":"pkg:golang/github.com/go-chi/chi/v5@v5.0.0","type":"framework","bom-ref":"pkg:golang/github.com/go-chi/chi/v5@v5.0.0","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/framework-stubs/chi/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/framework-stubs/chi"}],"tags":["framework"]},{"group":"","name":"github.com/go-chi/render","version":"v0.0.0","scope":"required","purl":"pkg:golang/github.com/go-chi/render@v0.0.0","type":"framework","bom-ref":"pkg:golang/github.com/go-chi/render@v0.0.0","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/framework-stubs/chi-render/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/framework-stubs/chi-render"}],"tags":["framework"]},{"group":"","name":"example.com/golem/dep","version":"v0.0.0","scope":"required","licenses":[{"license":{"name":"CUSTOM","text":{"contentType":"text/plain","content":"Apache-2.0 fixture license\n"},"properties":[{"name":"cdx:license:category","value":"Unstated License"},{"name":"cdx:license:foss","value":"false"},{"name":"cdx:license:osiApproved","value":"false"},{"name":"cdx:license:fsfLibre","value":"false"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:golang/example.com/golem/dep@v0.0.0","type":"library","bom-ref":"pkg:golang/example.com/golem/dep@v0.0.0","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/dep/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/dep"},{"name":"cdx:license:category","value":"Unstated License"}]},{"group":"","name":"example.com/golem/corpusdep","version":"v0.0.0","scope":"required","purl":"pkg:golang/example.com/golem/corpusdep@v0.0.0","type":"library","bom-ref":"pkg:golang/example.com/golem/corpusdep@v0.0.0","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpusdep/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpusdep"}]}],"dependencies":[{"ref":"pkg:golang/github.com/cdxgen/cdxgen-plugins-bin/thirdparty/golem","dependsOn":["pkg:golang/golang.org/x/mod@v0.40.0","pkg:golang/golang.org/x/tools@v0.49.0"]},{"ref":"pkg:golang/golang.org/x/mod@v0.40.0","dependsOn":["pkg:golang/golang.org/x/tools@v0.49.0"]},{"ref":"pkg:golang/golang.org/x/sync@v0.22.0","dependsOn":[]},{"ref":"pkg:golang/golang.org/x/tools@v0.49.0","dependsOn":["pkg:golang/golang.org/x/sync@v0.22.0"]}],"annotations":[{"bom-ref":"metadata-annotations","subjects":["pkg:golang/github.com/cdxgen/cdxgen-plugins-bin/thirdparty/golem"],"annotator":{"component":{"group":"@cyclonedx","name":"cdxgen","version":"12.8.4","purl":"pkg:npm/%40cyclonedx/cdxgen@12.8.4","type":"application","bom-ref":"pkg:npm/@cyclonedx/cdxgen@12.8.4","publisher":"OWASP Foundation","authors":[{"name":"OWASP Foundation"}]}},"timestamp":"2026-09-22T12:10:16Z","text":"This Software Bill-of-Materials (SBOM) document was created on Tuesday, September 22, 2026 with cdxgen. The data was captured during the build lifecycle phase. The document describes an application named 'github.com/cdxgen/cdxgen-plugins-bin/thirdparty/golem'. The application also has 75 child modules/components. The package type in this SBOM is golang with 7 purl namespaces described under components. The components were identified from the source files: go.mod."}]}
1	+ {"bomFormat":"CycloneDX","specVersion":"1.7","serialNumber":"urn:uuid:91b1def9-ce4c-4d86-bdb5-d6292ed4f787","version":1,"metadata":{"timestamp":"2026-09-23T21:01:02Z","tools":{"components":[{"group":"@cyclonedx","name":"cdxgen","version":"12.8.4","purl":"pkg:npm/%40cyclonedx/cdxgen@12.8.4","type":"application","bom-ref":"pkg:npm/@cyclonedx/cdxgen@12.8.4","publisher":"OWASP Foundation","authors":[{"name":"OWASP Foundation"}]}]},"authors":[{"name":"OWASP Foundation"}],"lifecycles":[{"phase":"build"}],"component":{"group":"","name":"github.com/cdxgen/cdxgen-plugins-bin/thirdparty/golem","version":"","purl":"pkg:golang/github.com/cdxgen/cdxgen-plugins-bin/thirdparty/golem","bom-ref":"pkg:golang/github.com/cdxgen/cdxgen-plugins-bin/thirdparty/golem","scope":"required","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/go.mod"},{"name":"ModuleGoVersion","value":"1.27.1"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem"}],"type":"application","components":[{"group":"","name":"example.com/golem/simple","version":"","scope":"required","purl":"pkg:golang/example.com/golem/simple","type":"library","bom-ref":"pkg:golang/example.com/golem/simple","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/simple/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/simple"}]},{"group":"","name":"example.com/golem/security","version":"","scope":"required","purl":"pkg:golang/example.com/golem/security","type":"library","bom-ref":"pkg:golang/example.com/golem/security","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/security/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/security"}]},{"group":"","name":"example.com/golem/rta-generic-method","version":"","scope":"required","purl":"pkg:golang/example.com/golem/rta-generic-method","type":"library","bom-ref":"pkg:golang/example.com/golem/rta-generic-method","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/rta-generic-method/go.mod"},{"name":"ModuleGoVersion","value":"1.27"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/rta-generic-method"}]},{"group":"","name":"example.com/golem/rta","version":"","scope":"required","purl":"pkg:golang/example.com/golem/rta","type":"library","bom-ref":"pkg:golang/example.com/golem/rta","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/rta/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/rta"}]},{"group":"","name":"example.com/golem/endpoints-nethttp","version":"","scope":"required","purl":"pkg:golang/example.com/golem/endpoints-nethttp","type":"library","bom-ref":"pkg:golang/example.com/golem/endpoints-nethttp","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/endpoints-nethttp/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/endpoints-nethttp"}]},{"group":"","name":"example.com/golem/endpoints-gin","version":"","scope":"required","purl":"pkg:golang/example.com/golem/endpoints-gin","type":"library","bom-ref":"pkg:golang/example.com/golem/endpoints-gin","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/endpoints-gin/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/endpoints-gin"}]},{"group":"","name":"example.com/golem/endpoints-echo","version":"","scope":"required","purl":"pkg:golang/example.com/golem/endpoints-echo","type":"library","bom-ref":"pkg:golang/example.com/golem/endpoints-echo","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/endpoints-echo/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/endpoints-echo"}]},{"group":"","name":"example.com/golem/endpoints-chi","version":"","scope":"required","purl":"pkg:golang/example.com/golem/endpoints-chi","type":"library","bom-ref":"pkg:golang/example.com/golem/endpoints-chi","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/endpoints-chi/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/endpoints-chi"}]},{"group":"","name":"example.com/golem/endpoints-auth","version":"","scope":"required","purl":"pkg:golang/example.com/golem/endpoints-auth","type":"library","bom-ref":"pkg:golang/example.com/golem/endpoints-auth","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/endpoints-auth/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/endpoints-auth"}]},{"group":"","name":"example.com/golem/dep","version":"","scope":"required","licenses":[{"license":{"name":"CUSTOM","text":{"contentType":"text/plain","content":"Apache-2.0 fixture license\n"},"properties":[{"name":"cdx:license:category","value":"Unstated License"},{"name":"cdx:license:foss","value":"false"},{"name":"cdx:license:osiApproved","value":"false"},{"name":"cdx:license:fsfLibre","value":"false"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:golang/example.com/golem/dep","type":"library","bom-ref":"pkg:golang/example.com/golem/dep","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/dep/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/dep"},{"name":"cdx:license:category","value":"Unstated License"}]},{"group":"","name":"example.com/golem/dataflow","version":"","scope":"required","purl":"pkg:golang/example.com/golem/dataflow","type":"library","bom-ref":"pkg:golang/example.com/golem/dataflow","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/dataflow/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/dataflow"}]},{"group":"","name":"example.com/golem/corpusdep","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpusdep","type":"library","bom-ref":"pkg:golang/example.com/golem/corpusdep","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpusdep/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpusdep"}]},{"group":"","name":"example.com/golem/advanced","version":"","scope":"required","purl":"pkg:golang/example.com/golem/advanced","type":"library","bom-ref":"pkg:golang/example.com/golem/advanced","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/advanced/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/advanced"}]},{"group":"","name":"github.com/gin-gonic/gin","version":"","scope":"required","purl":"pkg:golang/github.com/gin-gonic/gin","type":"library","bom-ref":"pkg:golang/github.com/gin-gonic/gin","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/framework-stubs/gin/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/framework-stubs/gin"}]},{"group":"","name":"github.com/labstack/echo/v4","version":"","scope":"required","purl":"pkg:golang/github.com/labstack/echo/v4","type":"framework","bom-ref":"pkg:golang/github.com/labstack/echo/v4","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/framework-stubs/echo/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/framework-stubs/echo"}]},{"group":"","name":"github.com/go-chi/render","version":"","scope":"required","purl":"pkg:golang/github.com/go-chi/render","type":"framework","bom-ref":"pkg:golang/github.com/go-chi/render","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/framework-stubs/chi-render/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/framework-stubs/chi-render"}]},{"group":"","name":"github.com/go-chi/chi/v5","version":"","scope":"required","purl":"pkg:golang/github.com/go-chi/chi/v5","type":"framework","bom-ref":"pkg:golang/github.com/go-chi/chi/v5","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/framework-stubs/chi/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/framework-stubs/chi"}]},{"group":"","name":"example.com/golem/corpus/wrapper-edge","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/wrapper-edge","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/wrapper-edge","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/wrapper-edge/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/wrapper-edge"}]},{"group":"","name":"example.com/golem/corpus/worker-pool","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/worker-pool","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/worker-pool","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/worker-pool/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/worker-pool"}]},{"group":"","name":"example.com/golem/corpus/value-receiver-field","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/value-receiver-field","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/value-receiver-field","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/value-receiver-field/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/value-receiver-field"}]},{"group":"","name":"example.com/golem/corpus/validate-named-but-not-sanitizing","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/validate-named-but-not-sanitizing","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/validate-named-but-not-sanitizing","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/validate-named-but-not-sanitizing/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/validate-named-but-not-sanitizing"}]},{"group":"","name":"example.com/golem/corpus/uuid-roundtrip","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/uuid-roundtrip","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/uuid-roundtrip","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/uuid-roundtrip/go.mod"},{"name":"ModuleGoVersion","value":"1.27"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/uuid-roundtrip"}]},{"group":"","name":"example.com/golem/corpus/unrelated-value-negative","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/unrelated-value-negative","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/unrelated-value-negative","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/unrelated-value-negative/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/unrelated-value-negative"}]},{"group":"","name":"example.com/golem/corpus/template-injection","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/template-injection","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/template-injection","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/template-injection/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/template-injection"}]},{"group":"","name":"example.com/golem/corpus/struct-field-through-call","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/struct-field-through-call","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/struct-field-through-call","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/struct-field-through-call/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/struct-field-through-call"}]},{"group":"","name":"example.com/golem/corpus/strings-builder","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/strings-builder","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/strings-builder","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/strings-builder/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/strings-builder"}]},{"group":"","name":"example.com/golem/corpus/sqli-parameterized-negative","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/sqli-parameterized-negative","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/sqli-parameterized-negative","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/sqli-parameterized-negative/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/sqli-parameterized-negative"}]},{"group":"","name":"example.com/golem/corpus/sqli-concatenated","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/sqli-concatenated","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/sqli-concatenated","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/sqli-concatenated/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/sqli-concatenated"}]},{"group":"","name":"example.com/golem/corpus/slice-of-pointer","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/slice-of-pointer","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/slice-of-pointer","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/slice-of-pointer/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/slice-of-pointer"}]},{"group":"","name":"example.com/golem/corpus/select-multiplex","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/select-multiplex","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/select-multiplex","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/select-multiplex/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/select-multiplex"}]},{"group":"","name":"example.com/golem/corpus/sanitizer-on-path-negative","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/sanitizer-on-path-negative","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/sanitizer-on-path-negative","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/sanitizer-on-path-negative/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/sanitizer-on-path-negative"}]},{"group":"","name":"example.com/golem/corpus/sanitizer-not-on-path-negative","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/sanitizer-not-on-path-negative","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/sanitizer-not-on-path-negative","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/sanitizer-not-on-path-negative/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/sanitizer-not-on-path-negative"}]},{"group":"","name":"example.com/golem/corpus/sanitizer-dominates","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/sanitizer-dominates","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/sanitizer-dominates","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/sanitizer-dominates/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/sanitizer-dominates"}]},{"group":"","name":"example.com/golem/corpus/request-field-source","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/request-field-source","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/request-field-source","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/request-field-source/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/request-field-source"}]},{"group":"","name":"example.com/golem/corpus/reflect-call","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/reflect-call","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/reflect-call","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/reflect-call/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/reflect-call"}]},{"group":"","name":"example.com/golem/corpus/recursion","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/recursion","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/recursion","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/recursion/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/recursion"}]},{"group":"","name":"example.com/golem/corpus/promoted-field-literal-key","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/promoted-field-literal-key","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/promoted-field-literal-key","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/promoted-field-literal-key/go.mod"},{"name":"ModuleGoVersion","value":"1.27"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/promoted-field-literal-key"}]},{"group":"","name":"example.com/golem/corpus/plugin-open","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/plugin-open","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/plugin-open","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/plugin-open/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/plugin-open"}]},{"group":"","name":"example.com/golem/corpus/mutual-recursion","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/mutual-recursion","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/mutual-recursion","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/mutual-recursion/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/mutual-recursion"}]},{"group":"","name":"example.com/golem/corpus/method-field-flow","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/method-field-flow","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/method-field-flow","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/method-field-flow/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/method-field-flow"}]},{"group":"","name":"example.com/golem/corpus/map-of-struct","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/map-of-struct","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/map-of-struct","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/map-of-struct/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/map-of-struct"}]},{"group":"","name":"example.com/golem/corpus/loop-carried-taint","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/loop-carried-taint","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/loop-carried-taint","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/loop-carried-taint/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/loop-carried-taint"}]},{"group":"","name":"example.com/golem/corpus/logging-secret-negative","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/logging-secret-negative","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/logging-secret-negative","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/logging-secret-negative/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/logging-secret-negative"}]},{"group":"","name":"example.com/golem/corpus/linkname","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/linkname","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/linkname","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/linkname/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/linkname"}]},{"group":"","name":"example.com/golem/corpus/library-no-main","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/library-no-main","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/library-no-main","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/library-no-main/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/library-no-main"}]},{"group":"","name":"example.com/golem/corpus/jsonv2-roundtrip","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/jsonv2-roundtrip","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/jsonv2-roundtrip","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/jsonv2-roundtrip/go.mod"},{"name":"ModuleGoVersion","value":"1.27"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/jsonv2-roundtrip"}]},{"group":"","name":"example.com/golem/corpus/json-roundtrip","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/json-roundtrip","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/json-roundtrip","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/json-roundtrip/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/json-roundtrip"}]},{"group":"","name":"example.com/golem/corpus/io-copy","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/io-copy","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/io-copy","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/io-copy/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/io-copy"}]},{"group":"","name":"example.com/golem/corpus/interface-dispatch","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/interface-dispatch","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/interface-dispatch","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/interface-dispatch/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/interface-dispatch"}]},{"group":"","name":"example.com/golem/corpus/insecure-random","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/insecure-random","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/insecure-random","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/insecure-random/go.mod"},{"name":"ModuleGoVersion","value":"1.22.0"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/insecure-random"}]},{"group":"","name":"example.com/golem/corpus/http-client-ssrf","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/http-client-ssrf","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/http-client-ssrf","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/http-client-ssrf/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/http-client-ssrf"}]},{"group":"","name":"example.com/golem/corpus/handler-func-value","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/handler-func-value","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/handler-func-value","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/handler-func-value/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/handler-func-value"}]},{"group":"","name":"example.com/golem/corpus/goroutine-channel","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/goroutine-channel","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/goroutine-channel","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/goroutine-channel/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/goroutine-channel"}]},{"group":"","name":"example.com/golem/corpus/global-var-carrier","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/global-var-carrier","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/global-var-carrier","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/global-var-carrier/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/global-var-carrier"}]},{"group":"","name":"example.com/golem/corpus/generic-method","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/generic-method","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/generic-method","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/generic-method/go.mod"},{"name":"ModuleGoVersion","value":"1.27"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/generic-method"}]},{"group":"","name":"example.com/golem/corpus/generic-container","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/generic-container","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/generic-container","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/generic-container/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/generic-container"}]},{"group":"","name":"example.com/golem/corpus/generic-constraint-method","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/generic-constraint-method","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/generic-constraint-method","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/generic-constraint-method/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/generic-constraint-method"}]},{"group":"","name":"example.com/golem/corpus/func-param-callback","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/func-param-callback","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/func-param-callback","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/func-param-callback/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/func-param-callback"}]},{"group":"","name":"example.com/golem/corpus/func-field-dispatch","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/func-field-dispatch","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/func-field-dispatch","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/func-field-dispatch/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/func-field-dispatch"}]},{"group":"","name":"example.com/golem/corpus/field-discrimination-negative","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/field-discrimination-negative","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/field-discrimination-negative","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/field-discrimination-negative/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/field-discrimination-negative"}]},{"group":"","name":"example.com/golem/corpus/error-wrapping","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/error-wrapping","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/error-wrapping","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/error-wrapping/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/error-wrapping"}]},{"group":"","name":"example.com/golem/corpus/embedded-struct-promotion","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/embedded-struct-promotion","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/embedded-struct-promotion","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/embedded-struct-promotion/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/embedded-struct-promotion"}]},{"group":"","name":"example.com/golem/corpus/direct-flow","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/direct-flow","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/direct-flow","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/direct-flow/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/direct-flow"}]},{"group":"","name":"example.com/golem/corpus/dep-transitive-2-hops","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/dep-transitive-2-hops","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/dep-transitive-2-hops","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/dep-transitive-2-hops/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/dep-transitive-2-hops"}]},{"group":"","name":"example.com/golem/corpus/dep-only-flow","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/dep-only-flow","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/dep-only-flow","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/dep-only-flow/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/dep-only-flow"}]},{"group":"","name":"example.com/golem/corpus/dep-drops-taint-negative","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/dep-drops-taint-negative","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/dep-drops-taint-negative","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/dep-drops-taint-negative/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/dep-drops-taint-negative"}]},{"group":"","name":"example.com/golem/corpus/defer-taint","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/defer-taint","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/defer-taint","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/defer-taint/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/defer-taint"}]},{"group":"","name":"example.com/golem/corpus/deep-chain-8-levels","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/deep-chain-8-levels","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/deep-chain-8-levels","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/deep-chain-8-levels/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/deep-chain-8-levels"}]},{"group":"","name":"example.com/golem/corpus/context-value","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/context-value","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/context-value","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/context-value/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/context-value"}]},{"group":"","name":"example.com/golem/corpus/const-only-negative","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/const-only-negative","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/const-only-negative","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/const-only-negative/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/const-only-negative"}]},{"group":"","name":"example.com/golem/corpus/closure-capture","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/closure-capture","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/closure-capture","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/closure-capture/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/closure-capture"}]},{"group":"","name":"example.com/golem/corpus/cgo-string-roundtrip","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/cgo-string-roundtrip","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/cgo-string-roundtrip","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/cgo-string-roundtrip/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/cgo-string-roundtrip"}]},{"group":"","name":"example.com/golem/corpus/cgo-callback-export","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/cgo-callback-export","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/cgo-callback-export","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/cgo-callback-export/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/cgo-callback-export"}]},{"group":"","name":"example.com/golem/corpus/bufio-scanner","version":"","scope":"required","purl":"pkg:golang/example.com/golem/corpus/bufio-scanner","type":"library","bom-ref":"pkg:golang/example.com/golem/corpus/bufio-scanner","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/bufio-scanner/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpus/bufio-scanner"}]},{"group":"","name":"github.com/spf13/cobra","version":"","scope":"required","purl":"pkg:golang/github.com/spf13/cobra","type":"library","bom-ref":"pkg:golang/github.com/spf13/cobra","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/rta/stubs/cobra/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/rta/stubs/cobra"}]}]},"properties":[{"name":"cdx:bom:componentTypes","value":"golang"},{"name":"cdx:bom:componentNamespaces","value":"example.com/golem\\ngithub.com/gin-gonic\\ngithub.com/go-chi\\ngithub.com/go-chi/chi\\ngithub.com/labstack/echo\\ngithub.com/spf13\\ngolang.org/x"},{"name":"cdx:bom:componentSrcFiles","value":"go.mod"}]},"components":[{"group":"","name":"golang.org/x/mod","version":"v0.41.0","scope":"required","hashes":[{"alg":"SHA-256","content":"124f6963c44a597c2c5af777ad088762d32a92349457eb35463ee3e07e54afaa"}],"licenses":[{"license":{"name":"CUSTOM","text":{"contentType":"text/plain","content":"Copyright 2009 The Go Authors.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are\nmet:\n\n * Redistributions of source code must retain the above copyright\nnotice, this list of conditions and the following disclaimer.\n * Redistributions in binary form must reproduce the above\ncopyright notice, this list of conditions and the following disclaimer\nin the documentation and/or other materials provided with the\ndistribution.\n * Neither the name of Google LLC nor the names of its\ncontributors may be used to endorse or promote products derived from\nthis software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nOWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\nLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n"},"properties":[{"name":"cdx:license:category","value":"Unstated License"},{"name":"cdx:license:foss","value":"false"},{"name":"cdx:license:osiApproved","value":"false"},{"name":"cdx:license:fsfLibre","value":"false"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:golang/golang.org/x/mod@v0.41.0","type":"library","bom-ref":"pkg:golang/golang.org/x/mod@v0.41.0","properties":[{"name":"SrcGoMod","value":"/home/runner/go/pkg/mod/cache/download/golang.org/x/mod/@v/v0.41.0.mod"},{"name":"ModuleGoVersion","value":"1.26.0"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:creation_time","value":"2026-08-24 20:56:42 +0000 UTC"},{"name":"cdx:go:local_dir","value":"/home/runner/go/pkg/mod/golang.org/x/mod@v0.41.0"},{"name":"SrcFile","value":"go.mod"},{"name":"cdx:license:category","value":"Unstated License"}],"evidence":{"identity":[{"field":"purl","confidence":0.7,"methods":[{"technique":"manifest-analysis","confidence":0.7,"value":"go.mod"}],"concludedValue":"go.mod"}]}},{"group":"","name":"golang.org/x/sync","version":"v0.23.0","scope":"optional","hashes":[{"alg":"SHA-256","content":"b1450e8b386a07188bea9116a6a34b5226899f54a111b67a041aac90f6e3666d"}],"licenses":[{"license":{"name":"CUSTOM","text":{"contentType":"text/plain","content":"Copyright 2009 The Go Authors.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are\nmet:\n\n * Redistributions of source code must retain the above copyright\nnotice, this list of conditions and the following disclaimer.\n * Redistributions in binary form must reproduce the above\ncopyright notice, this list of conditions and the following disclaimer\nin the documentation and/or other materials provided with the\ndistribution.\n * Neither the name of Google LLC nor the names of its\ncontributors may be used to endorse or promote products derived from\nthis software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nOWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\nLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n"},"properties":[{"name":"cdx:license:category","value":"Unstated License"},{"name":"cdx:license:foss","value":"false"},{"name":"cdx:license:osiApproved","value":"false"},{"name":"cdx:license:fsfLibre","value":"false"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:golang/golang.org/x/sync@v0.23.0","type":"library","bom-ref":"pkg:golang/golang.org/x/sync@v0.23.0","properties":[{"name":"SrcGoMod","value":"/home/runner/go/pkg/mod/cache/download/golang.org/x/sync/@v/v0.23.0.mod"},{"name":"ModuleGoVersion","value":"1.26.0"},{"name":"cdx:go:indirect","value":"true"},{"name":"cdx:go:creation_time","value":"2026-08-31 03:04:41 +0000 UTC"},{"name":"cdx:go:local_dir","value":"/home/runner/go/pkg/mod/golang.org/x/sync@v0.23.0"},{"name":"SrcFile","value":"go.mod"},{"name":"cdx:license:category","value":"Unstated License"}],"evidence":{"identity":[{"field":"purl","confidence":0.5,"methods":[{"technique":"manifest-analysis","confidence":0.5,"value":"go.mod"}],"concludedValue":"go.mod"}]}},{"group":"","name":"golang.org/x/tools","version":"v0.50.0","scope":"required","hashes":[{"alg":"SHA-256","content":"eee955330dfcdf53308b91190fa468986c9f7ebe15163b8d6177f605b084015d"}],"licenses":[{"license":{"name":"CUSTOM","text":{"contentType":"text/plain","content":"Copyright 2009 The Go Authors.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are\nmet:\n\n * Redistributions of source code must retain the above copyright\nnotice, this list of conditions and the following disclaimer.\n * Redistributions in binary form must reproduce the above\ncopyright notice, this list of conditions and the following disclaimer\nin the documentation and/or other materials provided with the\ndistribution.\n * Neither the name of Google LLC nor the names of its\ncontributors may be used to endorse or promote products derived from\nthis software without specific prior written permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\nLIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\nA PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\nOWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\nSPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\nLIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\nDATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\nTHEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\nOF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n"},"properties":[{"name":"cdx:license:category","value":"Unstated License"},{"name":"cdx:license:foss","value":"false"},{"name":"cdx:license:osiApproved","value":"false"},{"name":"cdx:license:fsfLibre","value":"false"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:golang/golang.org/x/tools@v0.50.0","type":"library","bom-ref":"pkg:golang/golang.org/x/tools@v0.50.0","properties":[{"name":"SrcGoMod","value":"/home/runner/go/pkg/mod/cache/download/golang.org/x/tools/@v/v0.50.0.mod"},{"name":"ModuleGoVersion","value":"1.26.0"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:creation_time","value":"2026-09-08 19:59:56 +0000 UTC"},{"name":"cdx:go:local_dir","value":"/home/runner/go/pkg/mod/golang.org/x/tools@v0.50.0"},{"name":"SrcFile","value":"go.mod"},{"name":"cdx:license:category","value":"Unstated License"}],"evidence":{"identity":[{"field":"purl","confidence":0.7,"methods":[{"technique":"manifest-analysis","confidence":0.7,"value":"go.mod"}],"concludedValue":"go.mod"}]}},{"group":"","name":"github.com/spf13/cobra","version":"v0.0.0","scope":"required","purl":"pkg:golang/github.com/spf13/cobra@v0.0.0","type":"library","bom-ref":"pkg:golang/github.com/spf13/cobra@v0.0.0","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/rta/stubs/cobra/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/rta/stubs/cobra"}]},{"group":"","name":"github.com/gin-gonic/gin","version":"v0.0.0","scope":"required","purl":"pkg:golang/github.com/gin-gonic/gin@v0.0.0","type":"library","bom-ref":"pkg:golang/github.com/gin-gonic/gin@v0.0.0","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/framework-stubs/gin/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/framework-stubs/gin"}],"tags":["framework"]},{"group":"","name":"github.com/labstack/echo/v4","version":"v4.0.0","scope":"required","purl":"pkg:golang/github.com/labstack/echo/v4@v4.0.0","type":"framework","bom-ref":"pkg:golang/github.com/labstack/echo/v4@v4.0.0","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/framework-stubs/echo/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/framework-stubs/echo"}],"tags":["framework"]},{"group":"","name":"github.com/go-chi/chi/v5","version":"v5.0.0","scope":"required","purl":"pkg:golang/github.com/go-chi/chi/v5@v5.0.0","type":"framework","bom-ref":"pkg:golang/github.com/go-chi/chi/v5@v5.0.0","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/framework-stubs/chi/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/framework-stubs/chi"}],"tags":["framework"]},{"group":"","name":"github.com/go-chi/render","version":"v0.0.0","scope":"required","purl":"pkg:golang/github.com/go-chi/render@v0.0.0","type":"framework","bom-ref":"pkg:golang/github.com/go-chi/render@v0.0.0","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/framework-stubs/chi-render/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/framework-stubs/chi-render"}],"tags":["framework"]},{"group":"","name":"example.com/golem/dep","version":"v0.0.0","scope":"required","licenses":[{"license":{"name":"CUSTOM","text":{"contentType":"text/plain","content":"Apache-2.0 fixture license\n"},"properties":[{"name":"cdx:license:category","value":"Unstated License"},{"name":"cdx:license:foss","value":"false"},{"name":"cdx:license:osiApproved","value":"false"},{"name":"cdx:license:fsfLibre","value":"false"},{"name":"cdx:license:deprecated","value":"false"}]}}],"purl":"pkg:golang/example.com/golem/dep@v0.0.0","type":"library","bom-ref":"pkg:golang/example.com/golem/dep@v0.0.0","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/dep/go.mod"},{"name":"ModuleGoVersion","value":"1.25"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/dep"},{"name":"cdx:license:category","value":"Unstated License"}]},{"group":"","name":"example.com/golem/corpusdep","version":"v0.0.0","scope":"required","purl":"pkg:golang/example.com/golem/corpusdep@v0.0.0","type":"library","bom-ref":"pkg:golang/example.com/golem/corpusdep@v0.0.0","properties":[{"name":"SrcGoMod","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpusdep/go.mod"},{"name":"ModuleGoVersion","value":"1.21"},{"name":"cdx:go:indirect","value":"false"},{"name":"cdx:go:local_dir","value":"/home/runner/work/cdxgen-plugins-bin/cdxgen-plugins-bin/thirdparty/golem/testdata/corpusdep"}]}],"dependencies":[{"ref":"pkg:golang/github.com/cdxgen/cdxgen-plugins-bin/thirdparty/golem","dependsOn":["pkg:golang/golang.org/x/mod@v0.41.0","pkg:golang/golang.org/x/tools@v0.50.0"]},{"ref":"pkg:golang/golang.org/x/mod@v0.41.0","dependsOn":[]},{"ref":"pkg:golang/golang.org/x/sync@v0.23.0","dependsOn":[]},{"ref":"pkg:golang/golang.org/x/tools@v0.50.0","dependsOn":["pkg:golang/golang.org/x/mod@v0.41.0","pkg:golang/golang.org/x/sync@v0.23.0"]}],"annotations":[{"bom-ref":"metadata-annotations","subjects":["pkg:golang/github.com/cdxgen/cdxgen-plugins-bin/thirdparty/golem"],"annotator":{"component":{"group":"@cyclonedx","name":"cdxgen","version":"12.8.4","purl":"pkg:npm/%40cyclonedx/cdxgen@12.8.4","type":"application","bom-ref":"pkg:npm/@cyclonedx/cdxgen@12.8.4","publisher":"OWASP Foundation","authors":[{"name":"OWASP Foundation"}]}},"timestamp":"2026-09-23T21:01:02Z","text":"This Software Bill-of-Materials (SBOM) document was created on Wednesday, September 23, 2026 with cdxgen. The data was captured during the build lifecycle phase. The document describes an application named 'github.com/cdxgen/cdxgen-plugins-bin/thirdparty/golem'. The application also has 75 child modules/components. The package type in this SBOM is golang with 7 purl namespaces described under components. The components were identified from the source files: go.mod."}]}