diff --git a/.gitignore b/.gitignore index 25177c4b..50a69abc 100644 --- a/.gitignore +++ b/.gitignore @@ -9,4 +9,4 @@ unit-tests-result.json build target .npmrc -src/providers/tree-sitter-requirements.wasm +src/providers/*.wasm diff --git a/README.md b/README.md index a01da90b..13b3b5c2 100644 --- a/README.md +++ b/README.md @@ -256,8 +256,11 @@ Excluding a package from any analysis can be achieved by marking the package for ] } ``` + + +
  • +Golang users can add in go.mod a comment with // exhortignore next to the package to be ignored, or to "piggyback" on existing comment ( e.g - // indirect), for example: -Golang users can add in go.mod a comment with //exhortignore next to the package to be ignored, or to "piggyback" on existing comment ( e.g - //indirect) , for example: ```go module github.com/trustify-da/SaaSi/deployer @@ -266,7 +269,7 @@ go 1.19 require ( github.com/gin-gonic/gin v1.9.1 github.com/google/uuid v1.1.2 - github.com/jessevdk/go-flags v1.5.0 //exhortignore + github.com/jessevdk/go-flags v1.5.0 // exhortignore github.com/kr/pretty v0.3.1 gopkg.in/yaml.v2 v2.4.0 k8s.io/apimachinery v0.26.1 @@ -274,14 +277,20 @@ require ( ) require ( - github.com/davecgh/go-spew v1.1.1 // indirect exhortignore + github.com/davecgh/go-spew v1.1.1 // indirect; exhortignore github.com/emicklei/go-restful/v3 v3.9.0 // indirect - github.com/go-logr/logr v1.2.3 // indirect //exhortignore + github.com/go-logr/logr v1.2.3 // indirect; exhortignore ) ``` +NOTE: It is important to format exhortignore markers on indirect dependencies as shown above, otherwise the Go tooling (as well as this library) may incorrectly parse dependencies marked as indirect as being direct dependencies instead. +
  • + + +
  • Python pip users can add in requirements.txt a comment with #exhortignore(or # exhortignore) to the right of the same artifact to be ignored, for example: + ```properties anyio==3.6.2 asgiref==3.4.1 @@ -312,11 +321,14 @@ Werkzeug==2.0.3 zipp==3.6.0 ``` +
  • +
  • Gradle users can add in build.gradle a comment with //exhortignore next to the package to be ignored: + ```build.gradle plugins { -id 'java' + id 'java' } group = 'groupName' @@ -336,7 +348,6 @@ test { All of the 5 above examples are valid for marking a package to be ignored
  • -

    Customization

    diff --git a/package-lock.json b/package-lock.json index 64468568..1e471bdd 100644 --- a/package-lock.json +++ b/package-lock.json @@ -18,8 +18,9 @@ "https-proxy-agent": "^7.0.6", "node-fetch": "^3.3.2", "packageurl-js": "~1.0.2", + "tree-sitter-gomod": "github:strum355/tree-sitter-go-mod#56326f2ad478892ace58ff247a97d492a3cbcdda", "tree-sitter-requirements": "github:Strum355/tree-sitter-requirements#d0261ee76b84253997fe70d7d397e78c006c3801", - "web-tree-sitter": "^0.26.6", + "web-tree-sitter": "^0.26.7", "yargs": "^18.0.0" }, "bin": { @@ -447,6 +448,27 @@ "node": "^12.22.0 || ^14.17.0 || >=16.0.0" } }, + "node_modules/@gar/promise-retry": { + "version": "1.0.2", + "resolved": "https://registry.npmjs.org/@gar/promise-retry/-/promise-retry-1.0.2.tgz", + "integrity": "sha512-Lm/ZLhDZcBECta3TmCQSngiQykFdfw+QtI1/GYMsZd4l3nG+P8WLB16XuS7WaBGLQ+9E+cOcWQsth9cayuGt8g==", + "license": "MIT", + "dependencies": { + "retry": "^0.13.1" + }, + "engines": { + "node": "^20.17.0 || >=22.9.0" + } + }, + "node_modules/@gar/promise-retry/node_modules/retry": { + "version": "0.13.1", + "resolved": "https://registry.npmjs.org/retry/-/retry-0.13.1.tgz", + "integrity": "sha512-XQBQ3I8W1Cge0Seh+6gjj03LbmRFWuoszgK9ooCpwYIrhhoO80pfq4cUkU5DkknwfOfFteRwlZ56PYOGYyFWdg==", + "license": "MIT", + "engines": { + "node": ">= 4" + } + }, "node_modules/@humanwhocodes/config-array": { "version": "0.13.0", "resolved": "https://registry.npmjs.org/@humanwhocodes/config-array/-/config-array-0.13.0.tgz", @@ -676,6 +698,18 @@ "url": "https://github.com/chalk/wrap-ansi?sponsor=1" } }, + "node_modules/@isaacs/fs-minipass": { + "version": "4.0.1", + "resolved": "https://registry.npmjs.org/@isaacs/fs-minipass/-/fs-minipass-4.0.1.tgz", + "integrity": "sha512-wgm9Ehl2jpeqP3zw/7mo3kRHFp5MEDhqAdwy1fTGkHAwnkGOVsgpvQhL8B5n1qlb01jV3n/bI0ZfZp5lWA1k4w==", + "license": "ISC", + "dependencies": { + "minipass": "^7.0.4" + }, + "engines": { + "node": ">=18.0.0" + } + }, "node_modules/@istanbuljs/schema": { "version": "0.1.3", "resolved": "https://registry.npmjs.org/@istanbuljs/schema/-/schema-0.1.3.tgz", @@ -2726,7 +2760,6 @@ "resolved": "https://registry.npmjs.org/env-paths/-/env-paths-2.2.1.tgz", "integrity": "sha512-+h1lkLKhZMTYjog1VEpJNG7NZJWcuc2DDk/qsqSTRRCOXiLjeQ1d1/udrUGhqMxUgAlwKNZ0cf2uqan5GLuS2A==", "license": "MIT", - "optional": true, "engines": { "node": ">=6" } @@ -3305,8 +3338,7 @@ "version": "3.1.3", "resolved": "https://registry.npmjs.org/exponential-backoff/-/exponential-backoff-3.1.3.tgz", "integrity": "sha512-ZgEeZXj30q+I0EN+CbSSpIyPaJ5HVQD18Z1m+u1FXbAeT94mr1zw50q4q6jiiC447Nl/YTcIYSAftiGqetwXCA==", - "license": "Apache-2.0", - "optional": true + "license": "Apache-2.0" }, "node_modules/extend": { "version": "3.0.2", @@ -3549,7 +3581,6 @@ "resolved": "https://registry.npmjs.org/fs-minipass/-/fs-minipass-3.0.3.tgz", "integrity": "sha512-XUBA9XClHbnJWSfBzjkm6RvPsyg3sryZt06BEQoXcF7EK/xpGaQYJgQKDJSUH5SGZ76Y7pFx1QBnXz09rU5Fbw==", "license": "ISC", - "optional": true, "dependencies": { "minipass": "^7.0.3" }, @@ -3855,8 +3886,7 @@ "version": "4.2.11", "resolved": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.11.tgz", "integrity": "sha512-RbJ5/jmFcNNCcDV5o9eTnBLJ/HszWV0P73bc+Ff4nS/rJj+YaS6IGyiOL0VoBYX+l1Wrl3k63h/KrH+nhJ0XvQ==", - "license": "ISC", - "optional": true + "license": "ISC" }, "node_modules/graphemer": { "version": "1.4.0", @@ -4003,15 +4033,13 @@ "version": "4.2.0", "resolved": "https://registry.npmjs.org/http-cache-semantics/-/http-cache-semantics-4.2.0.tgz", "integrity": "sha512-dTxcvPXqPvXBQpq5dUr6mEMJX4oIEFv6bwom3FDwKRDsuIjjJGANqhBuoAn9c1RQJIdAKav33ED65E2ys+87QQ==", - "license": "BSD-2-Clause", - "optional": true + "license": "BSD-2-Clause" }, "node_modules/http-proxy-agent": { "version": "7.0.2", "resolved": "https://registry.npmjs.org/http-proxy-agent/-/http-proxy-agent-7.0.2.tgz", "integrity": "sha512-T1gkAiYYDWYx3V5Bmyu7HcfcvL7mUrTWiM6yOfa3PIphViJ/gFPbvidQ+veqSOHci/PxBcDabeUNCzpOODJZig==", "license": "MIT", - "optional": true, "dependencies": { "agent-base": "^7.1.0", "debug": "^4.3.4" @@ -4098,7 +4126,6 @@ "version": "0.1.4", "resolved": "https://registry.npmjs.org/imurmurhash/-/imurmurhash-0.1.4.tgz", "integrity": "sha512-JmXMZ6wuvDmLiHEml9ykzqO6lwFbof0GG4IkcGaENdCRDDmMVnny7s5HsIgHCbaq0w2MyPhDqkhTUgS2LU2PHA==", - "devOptional": true, "license": "MIT", "engines": { "node": ">=0.8.19" @@ -4160,7 +4187,6 @@ "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.1.0.tgz", "integrity": "sha512-XXADHxXmvT9+CRxhXg56LJovE+bmWnEWB78LB83VZTprKTmaC5QfruXocxzTZ2Kl0DNwKuBdlIhjL8LeY8Sf8Q==", "license": "MIT", - "optional": true, "engines": { "node": ">= 12" } @@ -5010,7 +5036,6 @@ "version": "7.1.3", "resolved": "https://registry.npmjs.org/minipass/-/minipass-7.1.3.tgz", "integrity": "sha512-tEBHqDnIoM/1rXME1zgka9g6Q2lcoCkxHLuc7ODJ5BxbP5d4c2Z5cGgtXAku59200Cx7diuHTOYfSBD8n6mm8A==", - "devOptional": true, "license": "BlueOak-1.0.0", "engines": { "node": ">=16 || 14 >=14.17" @@ -5021,7 +5046,6 @@ "resolved": "https://registry.npmjs.org/minipass-collect/-/minipass-collect-2.0.1.tgz", "integrity": "sha512-D7V8PO9oaz7PWGLbCACuI1qEOsq7UKfLotx/C0Aet43fCUB/wfQ7DYeq2oR/svFJGYDHPr38SHATeaj/ZoKHKw==", "license": "ISC", - "optional": true, "dependencies": { "minipass": "^7.0.3" }, @@ -5052,7 +5076,6 @@ "resolved": "https://registry.npmjs.org/minipass-flush/-/minipass-flush-1.0.5.tgz", "integrity": "sha512-JmQSYYpPUqX5Jyn1mXaRwOda1uQ8HP5KAT/oDSLCzt1BYRhQU0/hDtsB1ufZfEEzMZ9aAVmsBw8+FWsIXlClWw==", "license": "ISC", - "optional": true, "dependencies": { "minipass": "^3.0.0" }, @@ -5065,7 +5088,6 @@ "resolved": "https://registry.npmjs.org/minipass/-/minipass-3.3.6.tgz", "integrity": "sha512-DxiNidxSEK+tHG6zOIklvNOwm3hvCrbUrdtzY74U6HKTJxvIDfOUL5W5P2Ghd3DTkhhKPYGqeNUIh5qcM4YBfw==", "license": "ISC", - "optional": true, "dependencies": { "yallist": "^4.0.0" }, @@ -5077,15 +5099,13 @@ "version": "4.0.0", "resolved": "https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz", "integrity": "sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==", - "license": "ISC", - "optional": true + "license": "ISC" }, "node_modules/minipass-pipeline": { "version": "1.2.4", "resolved": "https://registry.npmjs.org/minipass-pipeline/-/minipass-pipeline-1.2.4.tgz", "integrity": "sha512-xuIq7cIOt09RPRJ19gdi4b+RiNvDFYe5JH+ggNvBqGqpQXcru3PcRmOZuHBKWK1Txf9+cQ+HMVN4d6z46LZP7A==", "license": "ISC", - "optional": true, "dependencies": { "minipass": "^3.0.0" }, @@ -5098,7 +5118,6 @@ "resolved": "https://registry.npmjs.org/minipass/-/minipass-3.3.6.tgz", "integrity": "sha512-DxiNidxSEK+tHG6zOIklvNOwm3hvCrbUrdtzY74U6HKTJxvIDfOUL5W5P2Ghd3DTkhhKPYGqeNUIh5qcM4YBfw==", "license": "ISC", - "optional": true, "dependencies": { "yallist": "^4.0.0" }, @@ -5110,8 +5129,7 @@ "version": "4.0.0", "resolved": "https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz", "integrity": "sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==", - "license": "ISC", - "optional": true + "license": "ISC" }, "node_modules/minipass-sized": { "version": "1.0.3", @@ -6872,7 +6890,6 @@ "resolved": "https://registry.npmjs.org/smart-buffer/-/smart-buffer-4.2.0.tgz", "integrity": "sha512-94hK0Hh8rPqQl2xXc3HsaBoOXKV20MToPkcXvwbISWLEs+64sBq5kFgn2kJDHb1Pry9yrP0dxrCI9RRci7RXKg==", "license": "MIT", - "optional": true, "engines": { "node": ">= 6.0.0", "npm": ">= 3.0.0" @@ -6896,7 +6913,6 @@ "resolved": "https://registry.npmjs.org/socks/-/socks-2.8.7.tgz", "integrity": "sha512-HLpt+uLy/pxB+bum/9DzAgiKS8CX1EvbWxI4zlmgGCExImLdiad2iCwXT5Z4c9c3Eq8rP2318mPW2c+QbtjK8A==", "license": "MIT", - "optional": true, "dependencies": { "ip-address": "^10.0.1", "smart-buffer": "^4.2.0" @@ -6911,7 +6927,6 @@ "resolved": "https://registry.npmjs.org/socks-proxy-agent/-/socks-proxy-agent-8.0.5.tgz", "integrity": "sha512-HehCEsotFqbPW9sJ8WVYB6UbmIMv7kUUORIF2Nncq4VQvBfNBLibW9YZR5dlYCSUhwcD628pRllm7n+E+YTzJw==", "license": "MIT", - "optional": true, "dependencies": { "agent-base": "^7.1.2", "debug": "^4.3.4", @@ -7414,7 +7429,6 @@ "version": "0.2.15", "resolved": "https://registry.npmjs.org/tinyglobby/-/tinyglobby-0.2.15.tgz", "integrity": "sha512-j2Zq4NyQYG5XMST4cbs02Ak8iJUdxRM0XI5QyxXuZOzKOINmWurp3smXu3y5wDcJrptwpSjgXHzIQxR0omXljQ==", - "dev": true, "license": "MIT", "dependencies": { "fdir": "^6.5.0", @@ -7431,7 +7445,6 @@ "version": "6.5.0", "resolved": "https://registry.npmjs.org/fdir/-/fdir-6.5.0.tgz", "integrity": "sha512-tIbYtZbucOs0BRGqPJkshJUYdL+SDH7dVM8gjy+ERp3WAUjLEFJE+02kanyHtwjWOnwrKYBiwAmM0p4kLJAnXg==", - "dev": true, "license": "MIT", "engines": { "node": ">=12.0.0" @@ -7449,7 +7462,6 @@ "version": "4.0.3", "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.3.tgz", "integrity": "sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q==", - "dev": true, "license": "MIT", "engines": { "node": ">=12" @@ -7504,6 +7516,430 @@ "node": ">=16" } }, + "node_modules/tree-sitter": { + "version": "0.22.4", + "resolved": "https://registry.npmjs.org/tree-sitter/-/tree-sitter-0.22.4.tgz", + "integrity": "sha512-usbHZP9/oxNsUY65MQUsduGRqDHQOou1cagUSwjhoSYAmSahjQDAVsh9s+SlZkn8X8+O1FULRGwHu7AFP3kjzg==", + "hasInstallScript": true, + "license": "MIT", + "peer": true, + "dependencies": { + "node-addon-api": "^8.3.0", + "node-gyp-build": "^4.8.4" + } + }, + "node_modules/tree-sitter-gomod": { + "version": "1.1.1", + "resolved": "git+ssh://git@github.com/strum355/tree-sitter-go-mod.git#56326f2ad478892ace58ff247a97d492a3cbcdda", + "integrity": "sha512-NQ/6pAjcjy7cmhQGOMFMXO3mf0PEwwKHXir0yz3h82NX/04Z6Q0FtAq2bAFNZz6bQ+kzX1snJAMRVy+NT9+w5A==", + "hasInstallScript": true, + "license": "MIT", + "dependencies": { + "node-addon-api": "^8.0.0", + "node-gyp": "^12.2.0", + "node-gyp-build": "^4.8.1" + }, + "peerDependencies": { + "tree-sitter": "^0.22.4" + }, + "peerDependenciesMeta": { + "tree_sitter": { + "optional": true + } + } + }, + "node_modules/tree-sitter-gomod/node_modules/@npmcli/agent": { + "version": "4.0.0", + "resolved": "https://registry.npmjs.org/@npmcli/agent/-/agent-4.0.0.tgz", + "integrity": "sha512-kAQTcEN9E8ERLVg5AsGwLNoFb+oEG6engbqAU2P43gD4JEIkNGMHdVQ096FsOAAYpZPB0RSt0zgInKIAS1l5QA==", + "license": "ISC", + "dependencies": { + "agent-base": "^7.1.0", + "http-proxy-agent": "^7.0.0", + "https-proxy-agent": "^7.0.1", + "lru-cache": "^11.2.1", + "socks-proxy-agent": "^8.0.3" + }, + "engines": { + "node": "^20.17.0 || >=22.9.0" + } + }, + "node_modules/tree-sitter-gomod/node_modules/@npmcli/fs": { + "version": "5.0.0", + "resolved": "https://registry.npmjs.org/@npmcli/fs/-/fs-5.0.0.tgz", + "integrity": "sha512-7OsC1gNORBEawOa5+j2pXN9vsicaIOH5cPXxoR6fJOmH6/EXpJB2CajXOu1fPRFun2m1lktEFX11+P89hqO/og==", + "license": "ISC", + "dependencies": { + "semver": "^7.3.5" + }, + "engines": { + "node": "^20.17.0 || >=22.9.0" + } + }, + "node_modules/tree-sitter-gomod/node_modules/abbrev": { + "version": "4.0.0", + "resolved": "https://registry.npmjs.org/abbrev/-/abbrev-4.0.0.tgz", + "integrity": "sha512-a1wflyaL0tHtJSmLSOVybYhy22vRih4eduhhrkcjgrWGnRfrZtovJ2FRjxuTtkkj47O/baf0R86QU5OuYpz8fA==", + "license": "ISC", + "engines": { + "node": "^20.17.0 || >=22.9.0" + } + }, + "node_modules/tree-sitter-gomod/node_modules/balanced-match": { + "version": "4.0.4", + "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-4.0.4.tgz", + "integrity": "sha512-BLrgEcRTwX2o6gGxGOCNyMvGSp35YofuYzw9h1IMTRmKqttAZZVU67bdb9Pr2vUHA8+j3i2tJfjO6C6+4myGTA==", + "license": "MIT", + "engines": { + "node": "18 || 20 || >=22" + } + }, + "node_modules/tree-sitter-gomod/node_modules/brace-expansion": { + "version": "5.0.4", + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.4.tgz", + "integrity": "sha512-h+DEnpVvxmfVefa4jFbCf5HdH5YMDXRsmKflpf1pILZWRFlTbJpxeU55nJl4Smt5HQaGzg1o6RHFPJaOqnmBDg==", + "license": "MIT", + "dependencies": { + "balanced-match": "^4.0.2" + }, + "engines": { + "node": "18 || 20 || >=22" + } + }, + "node_modules/tree-sitter-gomod/node_modules/cacache": { + "version": "20.0.3", + "resolved": "https://registry.npmjs.org/cacache/-/cacache-20.0.3.tgz", + "integrity": "sha512-3pUp4e8hv07k1QlijZu6Kn7c9+ZpWWk4j3F8N3xPuCExULobqJydKYOTj1FTq58srkJsXvO7LbGAH4C0ZU3WGw==", + "license": "ISC", + "dependencies": { + "@npmcli/fs": "^5.0.0", + "fs-minipass": "^3.0.0", + "glob": "^13.0.0", + "lru-cache": "^11.1.0", + "minipass": "^7.0.3", + "minipass-collect": "^2.0.1", + "minipass-flush": "^1.0.5", + "minipass-pipeline": "^1.2.4", + "p-map": "^7.0.2", + "ssri": "^13.0.0", + "unique-filename": "^5.0.0" + }, + "engines": { + "node": "^20.17.0 || >=22.9.0" + } + }, + "node_modules/tree-sitter-gomod/node_modules/chownr": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/chownr/-/chownr-3.0.0.tgz", + "integrity": "sha512-+IxzY9BZOQd/XuYPRmrvEVjF/nqj5kgT4kEq7VofrDoM1MxoRjEWkrCC3EtLi59TVawxTAn+orJwFQcrqEN1+g==", + "license": "BlueOak-1.0.0", + "engines": { + "node": ">=18" + } + }, + "node_modules/tree-sitter-gomod/node_modules/glob": { + "version": "13.0.6", + "resolved": "https://registry.npmjs.org/glob/-/glob-13.0.6.tgz", + "integrity": "sha512-Wjlyrolmm8uDpm/ogGyXZXb1Z+Ca2B8NbJwqBVg0axK9GbBeoS7yGV6vjXnYdGm6X53iehEuxxbyiKp8QmN4Vw==", + "license": "BlueOak-1.0.0", + "dependencies": { + "minimatch": "^10.2.2", + "minipass": "^7.1.3", + "path-scurry": "^2.0.2" + }, + "engines": { + "node": "18 || 20 || >=22" + }, + "funding": { + "url": "https://github.com/sponsors/isaacs" + } + }, + "node_modules/tree-sitter-gomod/node_modules/iconv-lite": { + "version": "0.7.2", + "resolved": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.7.2.tgz", + "integrity": "sha512-im9DjEDQ55s9fL4EYzOAv0yMqmMBSZp6G0VvFyTMPKWxiSBHUj9NW/qqLmXUwXrrM7AvqSlTCfvqRb0cM8yYqw==", + "license": "MIT", + "optional": true, + "dependencies": { + "safer-buffer": ">= 2.1.2 < 3.0.0" + }, + "engines": { + "node": ">=0.10.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/express" + } + }, + "node_modules/tree-sitter-gomod/node_modules/isexe": { + "version": "4.0.0", + "resolved": "https://registry.npmjs.org/isexe/-/isexe-4.0.0.tgz", + "integrity": "sha512-FFUtZMpoZ8RqHS3XeXEmHWLA4thH+ZxCv2lOiPIn1Xc7CxrqhWzNSDzD+/chS/zbYezmiwWLdQC09JdQKmthOw==", + "license": "BlueOak-1.0.0", + "engines": { + "node": ">=20" + } + }, + "node_modules/tree-sitter-gomod/node_modules/lru-cache": { + "version": "11.2.6", + "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-11.2.6.tgz", + "integrity": "sha512-ESL2CrkS/2wTPfuend7Zhkzo2u0daGJ/A2VucJOgQ/C48S/zB8MMeMHSGKYpXhIjbPxfuezITkaBH1wqv00DDQ==", + "license": "BlueOak-1.0.0", + "engines": { + "node": "20 || >=22" + } + }, + "node_modules/tree-sitter-gomod/node_modules/make-fetch-happen": { + "version": "15.0.4", + "resolved": "https://registry.npmjs.org/make-fetch-happen/-/make-fetch-happen-15.0.4.tgz", + "integrity": "sha512-vM2sG+wbVeVGYcCm16mM3d5fuem9oC28n436HjsGO3LcxoTI8LNVa4rwZDn3f76+cWyT4GGJDxjTYU1I2nr6zw==", + "license": "ISC", + "dependencies": { + "@gar/promise-retry": "^1.0.0", + "@npmcli/agent": "^4.0.0", + "cacache": "^20.0.1", + "http-cache-semantics": "^4.1.1", + "minipass": "^7.0.2", + "minipass-fetch": "^5.0.0", + "minipass-flush": "^1.0.5", + "minipass-pipeline": "^1.2.4", + "negotiator": "^1.0.0", + "proc-log": "^6.0.0", + "ssri": "^13.0.0" + }, + "engines": { + "node": "^20.17.0 || >=22.9.0" + } + }, + "node_modules/tree-sitter-gomod/node_modules/minimatch": { + "version": "10.2.4", + "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-10.2.4.tgz", + "integrity": "sha512-oRjTw/97aTBN0RHbYCdtF1MQfvusSIBQM0IZEgzl6426+8jSC0nF1a/GmnVLpfB9yyr6g6FTqWqiZVbxrtaCIg==", + "license": "BlueOak-1.0.0", + "dependencies": { + "brace-expansion": "^5.0.2" + }, + "engines": { + "node": "18 || 20 || >=22" + }, + "funding": { + "url": "https://github.com/sponsors/isaacs" + } + }, + "node_modules/tree-sitter-gomod/node_modules/minipass-fetch": { + "version": "5.0.2", + "resolved": "https://registry.npmjs.org/minipass-fetch/-/minipass-fetch-5.0.2.tgz", + "integrity": "sha512-2d0q2a8eCi2IRg/IGubCNRJoYbA1+YPXAzQVRFmB45gdGZafyivnZ5YSEfo3JikbjGxOdntGFvBQGqaSMXlAFQ==", + "license": "MIT", + "dependencies": { + "minipass": "^7.0.3", + "minipass-sized": "^2.0.0", + "minizlib": "^3.0.1" + }, + "engines": { + "node": "^20.17.0 || >=22.9.0" + }, + "optionalDependencies": { + "iconv-lite": "^0.7.2" + } + }, + "node_modules/tree-sitter-gomod/node_modules/minipass-sized": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/minipass-sized/-/minipass-sized-2.0.0.tgz", + "integrity": "sha512-zSsHhto5BcUVM2m1LurnXY6M//cGhVaegT71OfOXoprxT6o780GZd792ea6FfrQkuU4usHZIUczAQMRUE2plzA==", + "license": "ISC", + "dependencies": { + "minipass": "^7.1.2" + }, + "engines": { + "node": ">=8" + } + }, + "node_modules/tree-sitter-gomod/node_modules/minizlib": { + "version": "3.1.0", + "resolved": "https://registry.npmjs.org/minizlib/-/minizlib-3.1.0.tgz", + "integrity": "sha512-KZxYo1BUkWD2TVFLr0MQoM8vUUigWD3LlD83a/75BqC+4qE0Hb1Vo5v1FgcfaNXvfXzr+5EhQ6ing/CaBijTlw==", + "license": "MIT", + "dependencies": { + "minipass": "^7.1.2" + }, + "engines": { + "node": ">= 18" + } + }, + "node_modules/tree-sitter-gomod/node_modules/negotiator": { + "version": "1.0.0", + "resolved": "https://registry.npmjs.org/negotiator/-/negotiator-1.0.0.tgz", + "integrity": "sha512-8Ofs/AUQh8MaEcrlq5xOX0CQ9ypTF5dl78mjlMNfOK08fzpgTHQRQPBxcPlEtIw0yRpws+Zo/3r+5WRby7u3Gg==", + "license": "MIT", + "engines": { + "node": ">= 0.6" + } + }, + "node_modules/tree-sitter-gomod/node_modules/node-gyp": { + "version": "12.2.0", + "resolved": "https://registry.npmjs.org/node-gyp/-/node-gyp-12.2.0.tgz", + "integrity": "sha512-q23WdzrQv48KozXlr0U1v9dwO/k59NHeSzn6loGcasyf0UnSrtzs8kRxM+mfwJSf0DkX0s43hcqgnSO4/VNthQ==", + "license": "MIT", + "dependencies": { + "env-paths": "^2.2.0", + "exponential-backoff": "^3.1.1", + "graceful-fs": "^4.2.6", + "make-fetch-happen": "^15.0.0", + "nopt": "^9.0.0", + "proc-log": "^6.0.0", + "semver": "^7.3.5", + "tar": "^7.5.4", + "tinyglobby": "^0.2.12", + "which": "^6.0.0" + }, + "bin": { + "node-gyp": "bin/node-gyp.js" + }, + "engines": { + "node": "^20.17.0 || >=22.9.0" + } + }, + "node_modules/tree-sitter-gomod/node_modules/nopt": { + "version": "9.0.0", + "resolved": "https://registry.npmjs.org/nopt/-/nopt-9.0.0.tgz", + "integrity": "sha512-Zhq3a+yFKrYwSBluL4H9XP3m3y5uvQkB/09CwDruCiRmR/UJYnn9W4R48ry0uGC70aeTPKLynBtscP9efFFcPw==", + "license": "ISC", + "dependencies": { + "abbrev": "^4.0.0" + }, + "bin": { + "nopt": "bin/nopt.js" + }, + "engines": { + "node": "^20.17.0 || >=22.9.0" + } + }, + "node_modules/tree-sitter-gomod/node_modules/p-map": { + "version": "7.0.4", + "resolved": "https://registry.npmjs.org/p-map/-/p-map-7.0.4.tgz", + "integrity": "sha512-tkAQEw8ysMzmkhgw8k+1U/iPhWNhykKnSk4Rd5zLoPJCuJaGRPo6YposrZgaxHKzDHdDWWZvE/Sk7hsL2X/CpQ==", + "license": "MIT", + "engines": { + "node": ">=18" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/tree-sitter-gomod/node_modules/path-scurry": { + "version": "2.0.2", + "resolved": "https://registry.npmjs.org/path-scurry/-/path-scurry-2.0.2.tgz", + "integrity": "sha512-3O/iVVsJAPsOnpwWIeD+d6z/7PmqApyQePUtCndjatj/9I5LylHvt5qluFaBT3I5h3r1ejfR056c+FCv+NnNXg==", + "license": "BlueOak-1.0.0", + "dependencies": { + "lru-cache": "^11.0.0", + "minipass": "^7.1.2" + }, + "engines": { + "node": "18 || 20 || >=22" + }, + "funding": { + "url": "https://github.com/sponsors/isaacs" + } + }, + "node_modules/tree-sitter-gomod/node_modules/proc-log": { + "version": "6.1.0", + "resolved": "https://registry.npmjs.org/proc-log/-/proc-log-6.1.0.tgz", + "integrity": "sha512-iG+GYldRf2BQ0UDUAd6JQ/RwzaQy6mXmsk/IzlYyal4A4SNFw54MeH4/tLkF4I5WoWG9SQwuqWzS99jaFQHBuQ==", + "license": "ISC", + "engines": { + "node": "^20.17.0 || >=22.9.0" + } + }, + "node_modules/tree-sitter-gomod/node_modules/semver": { + "version": "7.7.4", + "resolved": "https://registry.npmjs.org/semver/-/semver-7.7.4.tgz", + "integrity": "sha512-vFKC2IEtQnVhpT78h1Yp8wzwrf8CM+MzKMHGJZfBtzhZNycRFnXsHk6E5TxIkkMsgNS7mdX3AGB7x2QM2di4lA==", + "license": "ISC", + "bin": { + "semver": "bin/semver.js" + }, + "engines": { + "node": ">=10" + } + }, + "node_modules/tree-sitter-gomod/node_modules/ssri": { + "version": "13.0.1", + "resolved": "https://registry.npmjs.org/ssri/-/ssri-13.0.1.tgz", + "integrity": "sha512-QUiRf1+u9wPTL/76GTYlKttDEBWV1ga9ZXW8BG6kfdeyyM8LGPix9gROyg9V2+P0xNyF3X2Go526xKFdMZrHSQ==", + "license": "ISC", + "dependencies": { + "minipass": "^7.0.3" + }, + "engines": { + "node": "^20.17.0 || >=22.9.0" + } + }, + "node_modules/tree-sitter-gomod/node_modules/tar": { + "version": "7.5.11", + "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.11.tgz", + "integrity": "sha512-ChjMH33/KetonMTAtpYdgUFr0tbz69Fp2v7zWxQfYZX4g5ZN2nOBXm1R2xyA+lMIKrLKIoKAwFj93jE/avX9cQ==", + "license": "BlueOak-1.0.0", + "dependencies": { + "@isaacs/fs-minipass": "^4.0.0", + "chownr": "^3.0.0", + "minipass": "^7.1.2", + "minizlib": "^3.1.0", + "yallist": "^5.0.0" + }, + "engines": { + "node": ">=18" + } + }, + "node_modules/tree-sitter-gomod/node_modules/unique-filename": { + "version": "5.0.0", + "resolved": "https://registry.npmjs.org/unique-filename/-/unique-filename-5.0.0.tgz", + "integrity": "sha512-2RaJTAvAb4owyjllTfXzFClJ7WsGxlykkPvCr9pA//LD9goVq+m4PPAeBgNodGZ7nSrntT/auWpJ6Y5IFXcfjg==", + "license": "ISC", + "dependencies": { + "unique-slug": "^6.0.0" + }, + "engines": { + "node": "^20.17.0 || >=22.9.0" + } + }, + "node_modules/tree-sitter-gomod/node_modules/unique-slug": { + "version": "6.0.0", + "resolved": "https://registry.npmjs.org/unique-slug/-/unique-slug-6.0.0.tgz", + "integrity": "sha512-4Lup7Ezn8W3d52/xBhZBVdx323ckxa7DEvd9kPQHppTkLoJXw6ltrBCyj5pnrxj0qKDxYMJ56CoxNuFCscdTiw==", + "license": "ISC", + "dependencies": { + "imurmurhash": "^0.1.4" + }, + "engines": { + "node": "^20.17.0 || >=22.9.0" + } + }, + "node_modules/tree-sitter-gomod/node_modules/which": { + "version": "6.0.1", + "resolved": "https://registry.npmjs.org/which/-/which-6.0.1.tgz", + "integrity": "sha512-oGLe46MIrCRqX7ytPUf66EAYvdeMIZYn3WaocqqKZAxrBpkqHfL/qvTyJ/bTk5+AqHCjXmrv3CEWgy368zhRUg==", + "license": "ISC", + "dependencies": { + "isexe": "^4.0.0" + }, + "bin": { + "node-which": "bin/which.js" + }, + "engines": { + "node": "^20.17.0 || >=22.9.0" + } + }, + "node_modules/tree-sitter-gomod/node_modules/yallist": { + "version": "5.0.0", + "resolved": "https://registry.npmjs.org/yallist/-/yallist-5.0.0.tgz", + "integrity": "sha512-YgvUTfwqyc7UXVMrB+SImsVYSmTS8X/tSrtdNZMImM+n7+QTriRXyXim0mBrTXNeqzVF0KWGgHPeiyViFFrNDw==", + "license": "BlueOak-1.0.0", + "engines": { + "node": ">=18" + } + }, "node_modules/tree-sitter-requirements": { "version": "0.5.0", "resolved": "git+ssh://git@github.com/Strum355/tree-sitter-requirements.git#d0261ee76b84253997fe70d7d397e78c006c3801", @@ -7870,9 +8306,9 @@ } }, "node_modules/web-tree-sitter": { - "version": "0.26.6", - "resolved": "https://registry.npmjs.org/web-tree-sitter/-/web-tree-sitter-0.26.6.tgz", - "integrity": "sha512-fSPR7VBW/fZQdUSp/bXTDLT+i/9dwtbnqgEBMzowrM4U3DzeCwDbY3MKo0584uQxID4m/1xpLflrlT/rLIRPew==", + "version": "0.26.7", + "resolved": "https://registry.npmjs.org/web-tree-sitter/-/web-tree-sitter-0.26.7.tgz", + "integrity": "sha512-KiZhelTvBA/ziUHEO7Emb75cGVAq8iGZNabYaZm53Zpy50NsXyOW+xSHlwHt5CVg/TRPZBfeVLTTobF0LjFJ1w==", "license": "MIT" }, "node_modules/which": { diff --git a/package.json b/package.json index 92b6e144..f9e30285 100644 --- a/package.json +++ b/package.json @@ -40,11 +40,11 @@ "test": "c8 npm run tests", "tests": "mocha --config .mocharc.json --grep \".*analysis module.*\" --invert", "tests:rep": "mocha --reporter-option maxDiffSize=0 --reporter json > unit-tests-result.json", - "pretest": "cp node_modules/tree-sitter-requirements/tree-sitter-requirements.wasm src/providers/tree-sitter-requirements.wasm", + "pretest": "cp node_modules/tree-sitter-requirements/tree-sitter-requirements.wasm src/providers/tree-sitter-requirements.wasm && cp node_modules/tree-sitter-gomod/tree-sitter-gomod.wasm src/providers/tree-sitter-gomod.wasm", "precompile": "rm -rf dist", "compile": "tsc -p tsconfig.json", "compile:dev": "tsc -p tsconfig.dev.json", - "postcompile": "cp node_modules/tree-sitter-requirements/tree-sitter-requirements.wasm dist/src/providers/tree-sitter-requirements.wasm" + "postcompile": "cp node_modules/tree-sitter-requirements/tree-sitter-requirements.wasm dist/src/providers/tree-sitter-requirements.wasm && cp node_modules/tree-sitter-gomod/tree-sitter-gomod.wasm dist/src/providers/tree-sitter-gomod.wasm" }, "dependencies": { "@babel/core": "^7.23.2", @@ -56,8 +56,9 @@ "https-proxy-agent": "^7.0.6", "node-fetch": "^3.3.2", "packageurl-js": "~1.0.2", + "tree-sitter-gomod": "github:strum355/tree-sitter-go-mod#56326f2ad478892ace58ff247a97d492a3cbcdda", "tree-sitter-requirements": "github:Strum355/tree-sitter-requirements#d0261ee76b84253997fe70d7d397e78c006c3801", - "web-tree-sitter": "^0.26.6", + "web-tree-sitter": "^0.26.7", "yargs": "^18.0.0" }, "devDependencies": { diff --git a/src/providers/golang_gomodules.js b/src/providers/golang_gomodules.js index f741e8d3..76cccb06 100644 --- a/src/providers/golang_gomodules.js +++ b/src/providers/golang_gomodules.js @@ -1,6 +1,5 @@ import fs from 'node:fs' import path from 'node:path' -import { EOL } from "os"; import { PackageURL } from 'packageurl-js' @@ -8,7 +7,7 @@ import { readLicenseFile } from '../license/license_utils.js' import Sbom from '../sbom.js' import { getCustom, getCustomPath, invokeCommand } from "../tools.js"; - +import { getParser, getRequireQuery } from './gomod_parser.js' export default { isSupported, validateLockFile, provideComponent, provideStack, readLicenseFromManifest } @@ -28,8 +27,8 @@ const ecosystem = 'golang' const defaultMainModuleVersion = "v0.0.0"; /** - * @param {string} manifestName - the subject manifest name-type - * @returns {boolean} - return true if `pom.xml` is the manifest name-type + * @param {string} manifestName the subject manifest name-type + * @returns {boolean} return true if `pom.xml` is the manifest name-type */ function isSupported(manifestName) { return 'go.mod' === manifestName @@ -37,41 +36,41 @@ function isSupported(manifestName) { /** * Go modules have no standard license field in go.mod - * @param {string} manifestPath - path to go.mod + * @param {string} manifestPath path to go.mod * @returns {string|null} */ // eslint-disable-next-line no-unused-vars function readLicenseFromManifest(manifestPath) { return readLicenseFile(manifestPath); } /** - * @param {string} manifestDir - the directory where the manifest lies + * @param {string} manifestDir the directory where the manifest lies */ function validateLockFile() { return true; } /** * Provide content and content type for maven-maven stack analysis. - * @param {string} manifest - the manifest path or name - * @param {{}} [opts={}] - optional various options to pass along the application - * @returns {Provided} + * @param {string} manifest the manifest path or name + * @param {{}} [opts={}] optional various options to pass along the application + * @returns {Promise} */ -function provideStack(manifest, opts = {}) { +async function provideStack(manifest, opts = {}) { return { ecosystem, - content: getSBOM(manifest, opts, true), + content: await getSBOM(manifest, opts, true), contentType: 'application/vnd.cyclonedx+json' } } /** * Provide content and content type for maven-maven component analysis. - * @param {string} manifest - path to go.mod for component report - * @param {{}} [opts={}] - optional various options to pass along the application - * @returns {Provided} + * @param {string} manifest path to go.mod for component report + * @param {{}} [opts={}] optional various options to pass along the application + * @returns {Promise} */ -function provideComponent(manifest, opts = {}) { +async function provideComponent(manifest, opts = {}) { return { ecosystem, - content: getSBOM(manifest, opts, false), + content: await getSBOM(manifest, opts, false), contentType: 'application/vnd.cyclonedx+json' } } @@ -94,54 +93,54 @@ function getChildVertexFromEdge(edge) { } /** - * - * @param line one row from go.mod file - * @return {boolean} whether line from go.mod should be considered as ignored or not + * Check whether a require_spec has a valid exhortignore marker. + * For direct dependencies: `//exhortignore` or `// exhortignore` + * For indirect dependencies: `// indirect; exhortignore` (semicolon-separated) + * @param {import('web-tree-sitter').SyntaxNode} specNode + * @return {boolean} */ -function ignoredLine(line) { - let result = false - if(line.match(".*exhortignore.*")) { - if(line.match(".+//\\s*exhortignore") || line.match(".+//\\sindirect (//)?\\s*exhortignore")) { - let trimmedRow = line.trim() - if(!trimmedRow.startsWith("module ") && !trimmedRow.startsWith("go ") && !trimmedRow.startsWith("require (") && !trimmedRow.startsWith("require(") - && !trimmedRow.startsWith("exclude ") && !trimmedRow.startsWith("replace ") && !trimmedRow.startsWith("retract ") && !trimmedRow.startsWith("use ") - && !trimmedRow.includes("=>")) - { - if( trimmedRow.startsWith("require ") || trimmedRow.match("^[a-z.0-9/-]+\\s{1,2}[vV][0-9]\\.[0-9](\\.[0-9]){0,2}.*")) { - result = true - } - } +function hasExhortIgnore(specNode) { + // Ideally this would be the following tree-sitter query instead, but for some + // reason it throws an error here but not in the playground. + // (require_spec) ((module_path) @path (version) (comment) @comment (#match? @comment "^//.*exhortignore")) + // QueryError: Bad pattern structure at offset 53: '(comment) @comment (#match? @comment "^//.*exhortignore")) @spec'... + let comments = specNode.children.filter(c => c.type === 'comment') + for (let comment of comments) { + let text = comment.text + if (/^\/\/\s*indirect;\s*exhortignore/.test(text)) { + return true + } + if (/^\/\/\s*exhortignore/.test(text)) { + return true } } - return result -} - -/** - * extract package name from go.mod line that contains exhortignore comment. - * @param line a row contains exhortignore as part of a comment - * @return {string} the full package name + group/namespace + version - * @private - */ -function extractPackageName(line) { - let trimmedRow = line.trim(); - let firstRemarkNotationOccurrence = trimmedRow.indexOf("//"); - return trimmedRow.substring(0,firstRemarkNotationOccurrence).trim(); + return false } /** * - * @param {string } manifest - path to manifest - * @return {[PackageURL]} list of ignored dependencies d + * @param {string} manifestContent go.mod file contents + * @param {import('web-tree-sitter').Parser} parser + * @param {import('web-tree-sitter').Query} requireQuery + * @return {PackageURL[]} list of ignored dependencies */ -function getIgnoredDeps(manifest) { - let goMod = fs.readFileSync(manifest).toString().trim() - let lines = goMod.split(getLineSeparatorGolang()); - return lines.filter(line => ignoredLine(line)).map(line=> extractPackageName(line)).map(dep => toPurl(dep,/[ ]{1,3}/)) +function getIgnoredDeps(manifestContent, parser, requireQuery) { + let tree = parser.parse(manifestContent) + return requireQuery.matches(tree.rootNode) + .filter(match => { + let specNode = match.captures.find(c => c.name === 'spec').node + return hasExhortIgnore(specNode) + }) + .map(match => { + let name = match.captures.find(c => c.name === 'name').node.text + let version = match.captures.find(c => c.name === 'version').node.text + return toPurl(`${name} ${version}`, /[ ]{1,3}/) + }) } /** * - * @param {[PackageURL]}allIgnoredDeps - list of purls of all dependencies that should be ignored + * @param {PackageURL[]} allIgnoredDeps list of purls of all dependencies that should be ignored * @param {PackageURL} purl object to be checked if needed to be ignored * @return {boolean} */ @@ -162,68 +161,30 @@ function enforceRemovingIgnoredDepsInCaseOfAutomaticVersionUpdate(ignoredDeps, s /** * - * @param {[string]} lines - array of lines of go.mod manifest - * @param {string} goMod - content of go.mod manifest - * @return {[string]} all dependencies from go.mod file as array + * @param {string} manifestContent go.mod file contents + * @param {import('web-tree-sitter').Parser} parser + * @param {import('web-tree-sitter').Query} requireQuery + * @return {string[]} all dependencies from go.mod file as "name version" strings */ -function collectAllDepsFromManifest(lines, goMod) { - let result - // collect all deps that starts with require keyword - - result = lines.filter((line) => line.trim().startsWith("require") && !line.includes("(")).map((dep) => dep.substring("require".length).trim()) - - - - // collect all deps that are inside `require` blocks - let currentSegmentOfGoMod = goMod - let requirePositionObject = decideRequireBlockIndex(currentSegmentOfGoMod) - while(requirePositionObject.index > -1) { - let depsInsideRequirementsBlock = currentSegmentOfGoMod.substring(requirePositionObject.index + requirePositionObject.startingOffeset).trim(); - let endOfBlockIndex = depsInsideRequirementsBlock.indexOf(")") - let currentIndex = 0 - while(currentIndex < endOfBlockIndex) - { - let endOfLinePosition = depsInsideRequirementsBlock.indexOf(EOL, currentIndex); - let dependency = depsInsideRequirementsBlock.substring(currentIndex, endOfLinePosition) - result.push(dependency.trim()) - currentIndex = endOfLinePosition + 1 - } - currentSegmentOfGoMod = currentSegmentOfGoMod.substring(endOfBlockIndex + 1).trim() - requirePositionObject = decideRequireBlockIndex(currentSegmentOfGoMod) - } - - function decideRequireBlockIndex(goMod) { - let object = {} - let index = goMod.indexOf("require(") - object.startingOffeset = "require(".length - if (index === -1) - { - index = goMod.indexOf("require (") - object.startingOffeset = "require (".length - if(index === -1) - { - index = goMod.indexOf("require (") - object.startingOffeset = "require (".length - } - } - object.index = index - return object - } - return result +function collectAllDepsFromManifest(manifestContent, parser, requireQuery) { + let tree = parser.parse(manifestContent) + return requireQuery.matches(tree.rootNode).map(match => { + let name = match.captures.find(c => c.name === 'name').node.text + let version = match.captures.find(c => c.name === 'version').node.text + return `${name} ${version}` + }) } /** * * @param {string} rootElementName the rootElementName element of go mod graph, to compare only direct deps from go mod graph against go.mod manifest - * @param{[string]} goModGraphOutputRows the goModGraphOutputRows from go mod graph' output - * @param {string }manifest path to go.mod manifest on file system + * @param {string[]} goModGraphOutputRows the goModGraphOutputRows from go mod graph' output + * @param {string} manifestContent go.mod file contents * @private */ -function performManifestVersionsCheck(rootElementName, goModGraphOutputRows, manifest) { - let goMod = fs.readFileSync(manifest).toString().trim() - let lines = goMod.split(getLineSeparatorGolang()); +function performManifestVersionsCheck(rootElementName, goModGraphOutputRows, manifestContent, parser, requireQuery) { let comparisonLines = goModGraphOutputRows.filter((line)=> line.startsWith(rootElementName)).map((line)=> getChildVertexFromEdge(line)) - let manifestDeps = collectAllDepsFromManifest(lines,goMod) + let manifestDeps = collectAllDepsFromManifest(manifestContent, parser, requireQuery) try { comparisonLines.forEach((dependency) => { let parts = dependency.split("@") @@ -235,7 +196,7 @@ function performManifestVersionsCheck(rootElementName, goModGraphOutputRows, man let currentVersion = components[1] if (currentDepName === depName) { if (currentVersion !== version) { - throw new Error(`versions mismatch for dependency name ${depName}, manifest version=${currentVersion}, installed Version=${version}, if you want to allow version mismatch for analysis between installed and requested packages, set environment variable/setting - MATCH_MANIFEST_VERSIONS=false`) + throw new Error(`version mismatch for dependency "${depName}", manifest version=${currentVersion}, installed version=${version}, if you want to allow version mismatch for analysis between installed and requested packages, set environment variable/setting MATCH_MANIFEST_VERSIONS=false`) } } }) @@ -252,10 +213,10 @@ function performManifestVersionsCheck(rootElementName, goModGraphOutputRows, man * @param {string} manifest - path for go.mod * @param {{}} [opts={}] - optional various options to pass along the application * @param {boolean} includeTransitive - whether the sbom should contain transitive dependencies of the main module or not. - * @returns {string} the SBOM json content + * @returns {Promise} the SBOM json content * @private */ -function getSBOM(manifest, opts = {}, includeTransitive) { +async function getSBOM(manifest, opts = {}, includeTransitive) { // get custom goBin path let goBin = getCustomPath('go', opts) // verify goBin is accessible @@ -280,14 +241,26 @@ function getSBOM(manifest, opts = {}, includeTransitive) { throw new Error('failed to determine root module name', {cause: error}) } - let ignoredDeps = getIgnoredDeps(manifest); + let manifestContent = fs.readFileSync(manifest).toString() + let [parser, requireQuery] = await Promise.all([getParser(), getRequireQuery()]); + let ignoredDeps = getIgnoredDeps(manifestContent, parser, requireQuery); let allIgnoredDeps = ignoredDeps.map((dep) => dep.toString()) let sbom = new Sbom(); let rows = goGraphOutput.split(getLineSeparatorGolang()).filter(line => !line.includes(' go@')); let root = getParentVertexFromEdge(goModEditOutput['Module']['Path']) + + // Build set of direct dependency paths from go mod edit -json + let directDepPaths = new Set() + if (goModEditOutput['Require']) { + goModEditOutput['Require'].forEach(req => { + if (!req['Indirect']) { + directDepPaths.add(req['Path']) + } + }) + } let matchManifestVersions = getCustom("MATCH_MANIFEST_VERSIONS", "false", opts); if(matchManifestVersions === "true") { - performManifestVersionsCheck(root, rows, manifest) + performManifestVersionsCheck(root, rows, manifestContent, parser, requireQuery) } const mainModule = toPurl(root, "@") @@ -306,7 +279,11 @@ function getSBOM(manifest, opts = {}, includeTransitive) { currentParent = getParentVertexFromEdge(row) source = toPurl(currentParent, "@"); } - let target = toPurl(getChildVertexFromEdge(row), "@"); + let child = getChildVertexFromEdge(row) + let target = toPurl(child, "@"); + if (getParentVertexFromEdge(row) === root && !directDepPaths.has(getPackageName(child))) { + return; + } sbom.addDependency(source, target) }) @@ -316,13 +293,15 @@ function getSBOM(manifest, opts = {}, includeTransitive) { } else { let directDependencies = rows.filter(row => row.startsWith(root)); directDependencies.forEach(pair => { - let dependency = getChildVertexFromEdge(pair) - let depPurl = toPurl(dependency, "@"); - if(dependencyNotIgnored(ignoredDeps, depPurl)) { - sbom.addDependency(mainModule, depPurl) + let child = getChildVertexFromEdge(pair) + let target = toPurl(child, "@"); + if(dependencyNotIgnored(ignoredDeps, target)) { + if (directDepPaths.has(getPackageName(child))) { + sbom.addDependency(mainModule, target) + } } }) - enforceRemovingIgnoredDepsInCaseOfAutomaticVersionUpdate(ignoredDeps,sbom) + enforceRemovingIgnoredDepsInCaseOfAutomaticVersionUpdate(ignoredDeps, sbom) } return sbom.getAsJsonString(opts) @@ -332,7 +311,7 @@ function getSBOM(manifest, opts = {}, includeTransitive) { /** * Utility function for creating Purl String - * @param {string }dependency the name of the artifact, can include a namespace(group) or not - namespace/artifactName. + * @param {string} dependency the name of the artifact, can include a namespace(group) or not - namespace/artifactName. * @param {RegExp} delimiter delimiter between name of dependency and version * @private * @returns {PackageURL|null} PackageUrl Object ready to be used in SBOM @@ -344,7 +323,7 @@ function toPurl(dependency, delimiter) { let splitParts = dependency.split(delimiter); pkg = new PackageURL(ecosystem, undefined, splitParts[0], splitParts[1], undefined, undefined) } else { - let namespace = dependency.slice(0,lastSlashIndex) + let namespace = dependency.slice(0, lastSlashIndex) let dependencyAndVersion = dependency.slice(lastSlashIndex+1) let parts = dependencyAndVersion.split(delimiter); if(parts.length === 2 ) { @@ -356,14 +335,14 @@ function toPurl(dependency, delimiter) { return pkg } -/** This function gets rows from go mod graph , and go.mod graph, and selecting for all +/** This function gets rows from go mod graph, and go.mod graph, and selecting for all * packages the has more than one minor the final versions as selected by golang MVS algorithm. - * @param {[string]}rows all the rows from go modules dependency tree + * @param {string[]} rows all the rows from go modules dependency tree * @param {string} manifestPath the path of the go.mod file * @param {string} path to go binary - * @return {[string]} rows that contains final versions. + * @return {string[]} rows that contains final versions. */ -function getFinalPackagesVersionsForModule(rows,manifestPath,goBin) { +function getFinalPackagesVersionsForModule(rows, manifestPath, goBin) { let manifestDir = path.dirname(manifestPath) let options = {cwd: manifestDir} // TODO: determine whether this is necessary @@ -416,7 +395,7 @@ function getFinalPackagesVersionsForModule(rows,manifestPath,goBin) { /** * * @param {string} fullPackage - full package with its name and version - * @return -{string} package name only + * @return {string} package name only * @private */ function getPackageName(fullPackage) { @@ -436,7 +415,7 @@ function isSpecialGoModule(moduleName) { /** * * @param {string} fullPackage - full package with its name and version - * @return -{string} package version only + * @return {string|undefined} package version only * @private */ function getVersionOfPackage(fullPackage) { diff --git a/src/providers/gomod_parser.js b/src/providers/gomod_parser.js new file mode 100644 index 00000000..4a0e8e21 --- /dev/null +++ b/src/providers/gomod_parser.js @@ -0,0 +1,21 @@ +import { readFile } from 'node:fs/promises'; + +import { Language, Parser, Query } from 'web-tree-sitter'; + +const wasmUrl = new URL('./tree-sitter-gomod.wasm', import.meta.url); + +async function init() { + await Parser.init(); + const wasmBytes = new Uint8Array(await readFile(wasmUrl)); + return await Language.load(wasmBytes); +} + +export async function getParser() { + const language = await init(); + return new Parser().setLanguage(language); +} + +export async function getRequireQuery() { + const language = await init(); + return new Query(language, '(require_spec (module_path) @name (version) @version) @spec'); +} diff --git a/src/providers/python_pip.js b/src/providers/python_pip.js index 139b4544..1d55ec4a 100644 --- a/src/providers/python_pip.js +++ b/src/providers/python_pip.js @@ -94,7 +94,7 @@ function addAllDependencies(source, dep, sbom) { /** * * @param {string} manifest - path to requirements.txt - * @return {PackageURL []} + * @return {Promise} */ async function getIgnoredDependencies(manifest) { const [parser, ignoreQuery, pinnedVersionQuery] = await Promise.all([ diff --git a/test/providers/golang_gomodules.test.js b/test/providers/golang_gomodules.test.js index 1a4d2df2..fc07ce0a 100644 --- a/test/providers/golang_gomodules.test.js +++ b/test/providers/golang_gomodules.test.js @@ -27,12 +27,12 @@ suite('testing the golang-go-modules data provider', () => { "go_mod_empty" ].forEach(testCase => { let scenario = testCase.replace('go_mod_', '').replaceAll('_', ' ') - test(`verify go.mod sbom provided for stack analysis with scenario ${scenario}`, () => { + test(`verify go.mod sbom provided for stack analysis with scenario ${scenario}`, async () => { // load the expected graph for the scenario let expectedSbom = fs.readFileSync(`test/providers/tst_manifests/golang/${testCase}/expected_sbom_stack_analysis.json`).toString() expectedSbom = JSON.stringify(JSON.parse(expectedSbom),null, 4) // invoke sut stack analysis for scenario manifest - let providedDataForStack = golangGoModules.provideStack(`test/providers/tst_manifests/golang/${testCase}/go.mod`) + let providedDataForStack = await golangGoModules.provideStack(`test/providers/tst_manifests/golang/${testCase}/go.mod`) // new(year: number, month: number, date?: number, hours?: number, minutes?: number, seconds?: number, ms?: number): Date // providedDataForStack.content = providedDataForStack.content.replaceAll("\"timestamp\":\"[a-zA-Z0-9\\-\\:]+\"","") @@ -43,12 +43,12 @@ suite('testing the golang-go-modules data provider', () => { // these test cases takes ~2500-2700 ms each pr >10000 in CI (for the first test-case) }).timeout(process.env.GITHUB_ACTIONS ? 30000 : 10000) - test(`verify go.mod sbom provided for component analysis with scenario ${scenario}`, () => { + test(`verify go.mod sbom provided for component analysis with scenario ${scenario}`, async () => { // load the expected list for the scenario let expectedSbom = fs.readFileSync(`test/providers/tst_manifests/golang/${testCase}/expected_sbom_component_analysis.json`).toString().trimEnd() expectedSbom = JSON.stringify(JSON.parse(expectedSbom),null, 4) // invoke sut stack analysis for scenario manifest - let providedDataForComponent = golangGoModules.provideComponent(`test/providers/tst_manifests/golang/${testCase}/go.mod`) + let providedDataForComponent = await golangGoModules.provideComponent(`test/providers/tst_manifests/golang/${testCase}/go.mod`) // verify returned data matches expectation expect(providedDataForComponent.ecosystem).equal('golang') expect(providedDataForComponent.contentType).equal('application/vnd.cyclonedx+json') @@ -63,12 +63,12 @@ suite('testing the golang-go-modules data provider', () => { ].forEach(testCase => { let scenario = testCase.replace('go_mod_', '').replaceAll('_', ' ') - test(`verify go.mod sbom provided for stack analysis with scenario ${scenario}`, () => { + test(`verify go.mod sbom provided for stack analysis with scenario ${scenario}`, async () => { // load the expected graph for the scenario let expectedSbom = fs.readFileSync(`test/providers/tst_manifests/golang/${testCase}/expected_sbom_stack_analysis.json`,).toString() // expectedSbom = JSON.stringify(JSON.parse(expectedSbom)) // invoke sut stack analysis for scenario manifest - let providedDataForStack = golangGoModules.provideStack(`test/providers/tst_manifests/golang/${testCase}/go.mod`,{"TRUSTIFY_DA_GO_MVS_LOGIC_ENABLED" : "true"}) + let providedDataForStack = await golangGoModules.provideStack(`test/providers/tst_manifests/golang/${testCase}/go.mod`,{"TRUSTIFY_DA_GO_MVS_LOGIC_ENABLED" : "true"}) // new(year: number, month: number, date?: number, hours?: number, minutes?: number, seconds?: number, ms?: number): Date // providedDataForStack.content = providedDataForStack.content.replaceAll("\"timestamp\":\"[a-zA-Z0-9\\-\\:]+\"","") diff --git a/test/providers/tst_manifests/golang/go_mod_empty/expected_sbom_stack_analysis.json b/test/providers/tst_manifests/golang/go_mod_empty/expected_sbom_stack_analysis.json index 34d6f9e3..17455b3c 100644 --- a/test/providers/tst_manifests/golang/go_mod_empty/expected_sbom_stack_analysis.json +++ b/test/providers/tst_manifests/golang/go_mod_empty/expected_sbom_stack_analysis.json @@ -24,4 +24,4 @@ } ], "dependencies": [] -} \ No newline at end of file +} diff --git a/test/providers/tst_manifests/golang/go_mod_light_no_ignore/expected_sbom_component_analysis.json b/test/providers/tst_manifests/golang/go_mod_light_no_ignore/expected_sbom_component_analysis.json index 24b72404..9e17be28 100644 --- a/test/providers/tst_manifests/golang/go_mod_light_no_ignore/expected_sbom_component_analysis.json +++ b/test/providers/tst_manifests/golang/go_mod_light_no_ignore/expected_sbom_component_analysis.json @@ -1,72 +1,59 @@ { - "bomFormat" : "CycloneDX", - "specVersion" : "1.4", - "version" : 1, - "metadata" : { - "timestamp" : "2023-08-07T00:00:00.000Z", - "component" : { - "group" : "golang.org/x", - "name" : "example", - "version" : "v0.0.0", - "purl" : "pkg:golang/golang.org/x/example@v0.0.0", - "type" : "application", - "bom-ref" : "pkg:golang/golang.org/x/example@v0.0.0" - } - }, - "components" : [ - { - "group" : "golang.org/x", - "name" : "example", - "version" : "v0.0.0", - "purl" : "pkg:golang/golang.org/x/example@v0.0.0", - "type" : "application", - "bom-ref" : "pkg:golang/golang.org/x/example@v0.0.0" + "bomFormat": "CycloneDX", + "specVersion": "1.4", + "version": 1, + "metadata": { + "timestamp": "2023-08-07T00:00:00.000Z", + "component": { + "group": "golang.org/x", + "name": "example", + "version": "v0.0.0", + "purl": "pkg:golang/golang.org/x/example@v0.0.0", + "type": "application", + "bom-ref": "pkg:golang/golang.org/x/example@v0.0.0" + } }, - { - "group" : "github.com/spf13", - "name" : "cobra", - "version" : "v0.0.5", - "purl" : "pkg:golang/github.com/spf13/cobra@v0.0.5", - "type" : "library", - "bom-ref" : "pkg:golang/github.com/spf13/cobra@v0.0.5" - }, - { - "group" : "golang.org/x", - "name" : "tools", - "version" : "v0.0.0-20210112183307-1e6ecd4bf1b0", - "purl" : "pkg:golang/golang.org/x/tools@v0.0.0-20210112183307-1e6ecd4bf1b0", - "type" : "library", - "bom-ref" : "pkg:golang/golang.org/x/tools@v0.0.0-20210112183307-1e6ecd4bf1b0" - }, - { - "group" : "gopkg.in", - "name" : "yaml.v3", - "version" : "v3.0.1", - "purl" : "pkg:golang/gopkg.in/yaml.v3@v3.0.1", - "type" : "library", - "bom-ref" : "pkg:golang/gopkg.in/yaml.v3@v3.0.1" - } - ], - "dependencies" : [ - { - "ref" : "pkg:golang/golang.org/x/example@v0.0.0", - "dependsOn" : [ - "pkg:golang/github.com/spf13/cobra@v0.0.5", - "pkg:golang/golang.org/x/tools@v0.0.0-20210112183307-1e6ecd4bf1b0", - "pkg:golang/gopkg.in/yaml.v3@v3.0.1" - ] - }, - { - "ref" : "pkg:golang/github.com/spf13/cobra@v0.0.5", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/golang.org/x/tools@v0.0.0-20210112183307-1e6ecd4bf1b0", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/gopkg.in/yaml.v3@v3.0.1", - "dependsOn" : [ ] - } - ] + "components": [ + { + "group": "golang.org/x", + "name": "example", + "version": "v0.0.0", + "purl": "pkg:golang/golang.org/x/example@v0.0.0", + "type": "application", + "bom-ref": "pkg:golang/golang.org/x/example@v0.0.0" + }, + { + "group": "github.com/spf13", + "name": "cobra", + "version": "v0.0.5", + "purl": "pkg:golang/github.com/spf13/cobra@v0.0.5", + "type": "library", + "bom-ref": "pkg:golang/github.com/spf13/cobra@v0.0.5" + }, + { + "group": "golang.org/x", + "name": "tools", + "version": "v0.0.0-20210112183307-1e6ecd4bf1b0", + "purl": "pkg:golang/golang.org/x/tools@v0.0.0-20210112183307-1e6ecd4bf1b0", + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/tools@v0.0.0-20210112183307-1e6ecd4bf1b0" + } + ], + "dependencies": [ + { + "ref": "pkg:golang/golang.org/x/example@v0.0.0", + "dependsOn": [ + "pkg:golang/github.com/spf13/cobra@v0.0.5", + "pkg:golang/golang.org/x/tools@v0.0.0-20210112183307-1e6ecd4bf1b0" + ] + }, + { + "ref": "pkg:golang/github.com/spf13/cobra@v0.0.5", + "dependsOn": [] + }, + { + "ref": "pkg:golang/golang.org/x/tools@v0.0.0-20210112183307-1e6ecd4bf1b0", + "dependsOn": [] + } + ] } diff --git a/test/providers/tst_manifests/golang/go_mod_light_no_ignore/expected_sbom_stack_analysis.json b/test/providers/tst_manifests/golang/go_mod_light_no_ignore/expected_sbom_stack_analysis.json index d78d8976..4b87fa91 100644 --- a/test/providers/tst_manifests/golang/go_mod_light_no_ignore/expected_sbom_stack_analysis.json +++ b/test/providers/tst_manifests/golang/go_mod_light_no_ignore/expected_sbom_stack_analysis.json @@ -38,14 +38,6 @@ "type": "library", "bom-ref": "pkg:golang/golang.org/x/tools@v0.0.0-20210112183307-1e6ecd4bf1b0" }, - { - "group": "gopkg.in", - "name": "yaml.v3", - "version": "v3.0.1", - "purl": "pkg:golang/gopkg.in/yaml.v3@v3.0.1", - "type": "library", - "bom-ref": "pkg:golang/gopkg.in/yaml.v3@v3.0.1" - }, { "group": "github.com/BurntSushi", "name": "toml", @@ -142,6 +134,14 @@ "type": "library", "bom-ref": "pkg:golang/golang.org/x/xerrors@v0.0.0-20200804184101-5ec99f83aff1" }, + { + "group": "gopkg.in", + "name": "yaml.v3", + "version": "v3.0.1", + "purl": "pkg:golang/gopkg.in/yaml.v3@v3.0.1", + "type": "library", + "bom-ref": "pkg:golang/gopkg.in/yaml.v3@v3.0.1" + }, { "group": "gopkg.in", "name": "check.v1", @@ -324,8 +324,7 @@ "ref": "pkg:golang/golang.org/x/example@v0.0.0", "dependsOn": [ "pkg:golang/github.com/spf13/cobra@v0.0.5", - "pkg:golang/golang.org/x/tools@v0.0.0-20210112183307-1e6ecd4bf1b0", - "pkg:golang/gopkg.in/yaml.v3@v3.0.1" + "pkg:golang/golang.org/x/tools@v0.0.0-20210112183307-1e6ecd4bf1b0" ] }, { @@ -350,12 +349,6 @@ "pkg:golang/golang.org/x/xerrors@v0.0.0-20200804184101-5ec99f83aff1" ] }, - { - "ref": "pkg:golang/gopkg.in/yaml.v3@v3.0.1", - "dependsOn": [ - "pkg:golang/gopkg.in/check.v1@v0.0.0-20161208181325-20d25e280405" - ] - }, { "ref": "pkg:golang/github.com/BurntSushi/toml@v0.3.1", "dependsOn": [] @@ -437,6 +430,12 @@ "ref": "pkg:golang/golang.org/x/xerrors@v0.0.0-20200804184101-5ec99f83aff1", "dependsOn": [] }, + { + "ref": "pkg:golang/gopkg.in/yaml.v3@v3.0.1", + "dependsOn": [ + "pkg:golang/gopkg.in/check.v1@v0.0.0-20161208181325-20d25e280405" + ] + }, { "ref": "pkg:golang/gopkg.in/check.v1@v0.0.0-20161208181325-20d25e280405", "dependsOn": [] @@ -537,4 +536,4 @@ "dependsOn": [] } ] -} \ No newline at end of file +} diff --git a/test/providers/tst_manifests/golang/go_mod_mvs_versions/expected_sbom_stack_analysis.json b/test/providers/tst_manifests/golang/go_mod_mvs_versions/expected_sbom_stack_analysis.json index ad814e05..a4d36c03 100644 --- a/test/providers/tst_manifests/golang/go_mod_mvs_versions/expected_sbom_stack_analysis.json +++ b/test/providers/tst_manifests/golang/go_mod_mvs_versions/expected_sbom_stack_analysis.json @@ -22,22 +22,6 @@ "type": "application", "bom-ref": "pkg:golang/github.com/RHEcosystemAppEng/SaaSi/deployer@v0.0.0" }, - { - "group": "github.com/davecgh", - "name": "go-spew", - "version": "v1.1.1", - "purl": "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "type": "library", - "bom-ref": "pkg:golang/github.com/davecgh/go-spew@v1.1.1" - }, - { - "group": "github.com/emicklei/go-restful", - "name": "v3", - "version": "v3.9.0", - "purl": "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0", - "type": "library", - "bom-ref": "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0" - }, { "group": "github.com/gin-gonic", "name": "gin", @@ -46,78 +30,6 @@ "type": "library", "bom-ref": "pkg:golang/github.com/gin-gonic/gin@v1.9.1" }, - { - "group": "github.com/go-logr", - "name": "logr", - "version": "v1.2.3", - "purl": "pkg:golang/github.com/go-logr/logr@v1.2.3", - "type": "library", - "bom-ref": "pkg:golang/github.com/go-logr/logr@v1.2.3" - }, - { - "group": "github.com/go-openapi", - "name": "jsonpointer", - "version": "v0.19.5", - "purl": "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5", - "type": "library", - "bom-ref": "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5" - }, - { - "group": "github.com/go-openapi", - "name": "jsonreference", - "version": "v0.20.0", - "purl": "pkg:golang/github.com/go-openapi/jsonreference@v0.20.0", - "type": "library", - "bom-ref": "pkg:golang/github.com/go-openapi/jsonreference@v0.20.0" - }, - { - "group": "github.com/go-openapi", - "name": "swag", - "version": "v0.19.14", - "purl": "pkg:golang/github.com/go-openapi/swag@v0.19.14", - "type": "library", - "bom-ref": "pkg:golang/github.com/go-openapi/swag@v0.19.14" - }, - { - "group": "github.com/gogo", - "name": "protobuf", - "version": "v1.3.2", - "purl": "pkg:golang/github.com/gogo/protobuf@v1.3.2", - "type": "library", - "bom-ref": "pkg:golang/github.com/gogo/protobuf@v1.3.2" - }, - { - "group": "github.com/golang", - "name": "protobuf", - "version": "v1.5.2", - "purl": "pkg:golang/github.com/golang/protobuf@v1.5.2", - "type": "library", - "bom-ref": "pkg:golang/github.com/golang/protobuf@v1.5.2" - }, - { - "group": "github.com/google", - "name": "gnostic", - "version": "v0.5.7-v3refs", - "purl": "pkg:golang/github.com/google/gnostic@v0.5.7-v3refs", - "type": "library", - "bom-ref": "pkg:golang/github.com/google/gnostic@v0.5.7-v3refs" - }, - { - "group": "github.com/google", - "name": "go-cmp", - "version": "v0.5.9", - "purl": "pkg:golang/github.com/google/go-cmp@v0.5.9", - "type": "library", - "bom-ref": "pkg:golang/github.com/google/go-cmp@v0.5.9" - }, - { - "group": "github.com/google", - "name": "gofuzz", - "version": "v1.1.0", - "purl": "pkg:golang/github.com/google/gofuzz@v1.1.0", - "type": "library", - "bom-ref": "pkg:golang/github.com/google/gofuzz@v1.1.0" - }, { "group": "github.com/google", "name": "uuid", @@ -126,14 +38,6 @@ "type": "library", "bom-ref": "pkg:golang/github.com/google/uuid@v1.1.2" }, - { - "group": "github.com/imdario", - "name": "mergo", - "version": "v0.3.6", - "purl": "pkg:golang/github.com/imdario/mergo@v0.3.6", - "type": "library", - "bom-ref": "pkg:golang/github.com/imdario/mergo@v0.3.6" - }, { "group": "github.com/jessevdk", "name": "go-flags", @@ -142,22 +46,6 @@ "type": "library", "bom-ref": "pkg:golang/github.com/jessevdk/go-flags@v1.5.0" }, - { - "group": "github.com/josharian", - "name": "intern", - "version": "v1.0.0", - "purl": "pkg:golang/github.com/josharian/intern@v1.0.0", - "type": "library", - "bom-ref": "pkg:golang/github.com/josharian/intern@v1.0.0" - }, - { - "group": "github.com/json-iterator", - "name": "go", - "version": "v1.1.12", - "purl": "pkg:golang/github.com/json-iterator/go@v1.1.12", - "type": "library", - "bom-ref": "pkg:golang/github.com/json-iterator/go@v1.1.12" - }, { "group": "github.com/kr", "name": "pretty", @@ -167,116 +55,108 @@ "bom-ref": "pkg:golang/github.com/kr/pretty@v0.3.1" }, { - "group": "github.com/kr", - "name": "text", - "version": "v0.2.0", - "purl": "pkg:golang/github.com/kr/text@v0.2.0", + "group": "gopkg.in", + "name": "yaml.v2", + "version": "v2.4.0", + "purl": "pkg:golang/gopkg.in/yaml.v2@v2.4.0", "type": "library", - "bom-ref": "pkg:golang/github.com/kr/text@v0.2.0" + "bom-ref": "pkg:golang/gopkg.in/yaml.v2@v2.4.0" }, { - "group": "github.com/mailru", - "name": "easyjson", - "version": "v0.7.6", - "purl": "pkg:golang/github.com/mailru/easyjson@v0.7.6", + "group": "k8s.io", + "name": "apimachinery", + "version": "v0.26.1", + "purl": "pkg:golang/k8s.io/apimachinery@v0.26.1", "type": "library", - "bom-ref": "pkg:golang/github.com/mailru/easyjson@v0.7.6" + "bom-ref": "pkg:golang/k8s.io/apimachinery@v0.26.1" }, { - "group": "github.com/modern-go", - "name": "concurrent", - "version": "v0.0.0-20180306012644-bacd9c7ef1dd", - "purl": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", + "group": "k8s.io", + "name": "client-go", + "version": "v0.26.1", + "purl": "pkg:golang/k8s.io/client-go@v0.26.1", "type": "library", - "bom-ref": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd" + "bom-ref": "pkg:golang/k8s.io/client-go@v0.26.1" }, { - "group": "github.com/modern-go", - "name": "reflect2", - "version": "v1.0.2", - "purl": "pkg:golang/github.com/modern-go/reflect2@v1.0.2", + "group": "github.com/bytedance", + "name": "sonic", + "version": "v1.9.1", + "purl": "pkg:golang/github.com/bytedance/sonic@v1.9.1", "type": "library", - "bom-ref": "pkg:golang/github.com/modern-go/reflect2@v1.0.2" + "bom-ref": "pkg:golang/github.com/bytedance/sonic@v1.9.1" }, { - "group": "github.com/munnerz", - "name": "goautoneg", - "version": "v0.0.0-20191010083416-a7dc8b61c822", - "purl": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", + "group": "github.com/gin-contrib", + "name": "sse", + "version": "v0.1.0", + "purl": "pkg:golang/github.com/gin-contrib/sse@v0.1.0", "type": "library", - "bom-ref": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822" + "bom-ref": "pkg:golang/github.com/gin-contrib/sse@v0.1.0" }, { - "group": "github.com/rogpeppe", - "name": "go-internal", - "version": "v1.9.0", - "purl": "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0", + "group": "github.com/go-playground/validator", + "name": "v10", + "version": "v10.14.0", + "purl": "pkg:golang/github.com/go-playground/validator/v10@v10.14.0", "type": "library", - "bom-ref": "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0" + "bom-ref": "pkg:golang/github.com/go-playground/validator/v10@v10.14.0" }, { - "group": "github.com/spf13", - "name": "pflag", - "version": "v1.0.5", - "purl": "pkg:golang/github.com/spf13/pflag@v1.0.5", + "group": "github.com/goccy", + "name": "go-json", + "version": "v0.10.2", + "purl": "pkg:golang/github.com/goccy/go-json@v0.10.2", "type": "library", - "bom-ref": "pkg:golang/github.com/spf13/pflag@v1.0.5" + "bom-ref": "pkg:golang/github.com/goccy/go-json@v0.10.2" }, { - "group": "golang.org/x", - "name": "net", - "version": "v0.10.0", - "purl": "pkg:golang/golang.org/x/net@v0.10.0", + "group": "github.com/json-iterator", + "name": "go", + "version": "v1.1.12", + "purl": "pkg:golang/github.com/json-iterator/go@v1.1.12", "type": "library", - "bom-ref": "pkg:golang/golang.org/x/net@v0.10.0" + "bom-ref": "pkg:golang/github.com/json-iterator/go@v1.1.12" }, { - "group": "golang.org/x", - "name": "oauth2", - "version": "v0.0.0-20220223155221-ee480838109b", - "purl": "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b", + "group": "github.com/mattn", + "name": "go-isatty", + "version": "v0.0.19", + "purl": "pkg:golang/github.com/mattn/go-isatty@v0.0.19", "type": "library", - "bom-ref": "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b" + "bom-ref": "pkg:golang/github.com/mattn/go-isatty@v0.0.19" }, { - "group": "golang.org/x", - "name": "sys", - "version": "v0.8.0", - "purl": "pkg:golang/golang.org/x/sys@v0.8.0", + "group": "github.com/pelletier/go-toml", + "name": "v2", + "version": "v2.0.8", + "purl": "pkg:golang/github.com/pelletier/go-toml/v2@v2.0.8", "type": "library", - "bom-ref": "pkg:golang/golang.org/x/sys@v0.8.0" + "bom-ref": "pkg:golang/github.com/pelletier/go-toml/v2@v2.0.8" }, { - "group": "golang.org/x", - "name": "term", - "version": "v0.8.0", - "purl": "pkg:golang/golang.org/x/term@v0.8.0", + "group": "github.com/stretchr", + "name": "testify", + "version": "v1.8.3", + "purl": "pkg:golang/github.com/stretchr/testify@v1.8.3", "type": "library", - "bom-ref": "pkg:golang/golang.org/x/term@v0.8.0" + "bom-ref": "pkg:golang/github.com/stretchr/testify@v1.8.3" }, { - "group": "golang.org/x", - "name": "text", - "version": "v0.9.0", - "purl": "pkg:golang/golang.org/x/text@v0.9.0", + "group": "github.com/ugorji/go", + "name": "codec", + "version": "v1.2.11", + "purl": "pkg:golang/github.com/ugorji/go/codec@v1.2.11", "type": "library", - "bom-ref": "pkg:golang/golang.org/x/text@v0.9.0" + "bom-ref": "pkg:golang/github.com/ugorji/go/codec@v1.2.11" }, { "group": "golang.org/x", - "name": "time", - "version": "v0.0.0-20220210224613-90d013bbcef8", - "purl": "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8", - "type": "library", - "bom-ref": "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8" - }, - { - "group": "google.golang.org", - "name": "appengine", - "version": "v1.6.7", - "purl": "pkg:golang/google.golang.org/appengine@v1.6.7", + "name": "net", + "version": "v0.10.0", + "purl": "pkg:golang/golang.org/x/net@v0.10.0", "type": "library", - "bom-ref": "pkg:golang/google.golang.org/appengine@v1.6.7" + "bom-ref": "pkg:golang/golang.org/x/net@v0.10.0" }, { "group": "google.golang.org", @@ -288,163 +168,11 @@ }, { "group": "gopkg.in", - "name": "inf.v0", - "version": "v0.9.1", - "purl": "pkg:golang/gopkg.in/inf.v0@v0.9.1", + "name": "yaml.v3", + "version": "v3.0.1", + "purl": "pkg:golang/gopkg.in/yaml.v3@v3.0.1", "type": "library", - "bom-ref": "pkg:golang/gopkg.in/inf.v0@v0.9.1" - }, - { - "group": "gopkg.in", - "name": "yaml.v2", - "version": "v2.4.0", - "purl": "pkg:golang/gopkg.in/yaml.v2@v2.4.0", - "type": "library", - "bom-ref": "pkg:golang/gopkg.in/yaml.v2@v2.4.0" - }, - { - "group": "gopkg.in", - "name": "yaml.v3", - "version": "v3.0.1", - "purl": "pkg:golang/gopkg.in/yaml.v3@v3.0.1", - "type": "library", - "bom-ref": "pkg:golang/gopkg.in/yaml.v3@v3.0.1" - }, - { - "group": "k8s.io", - "name": "api", - "version": "v0.26.1", - "purl": "pkg:golang/k8s.io/api@v0.26.1", - "type": "library", - "bom-ref": "pkg:golang/k8s.io/api@v0.26.1" - }, - { - "group": "k8s.io", - "name": "apimachinery", - "version": "v0.26.1", - "purl": "pkg:golang/k8s.io/apimachinery@v0.26.1", - "type": "library", - "bom-ref": "pkg:golang/k8s.io/apimachinery@v0.26.1" - }, - { - "group": "k8s.io", - "name": "client-go", - "version": "v0.26.1", - "purl": "pkg:golang/k8s.io/client-go@v0.26.1", - "type": "library", - "bom-ref": "pkg:golang/k8s.io/client-go@v0.26.1" - }, - { - "group": "k8s.io/klog", - "name": "v2", - "version": "v2.80.1", - "purl": "pkg:golang/k8s.io/klog/v2@v2.80.1", - "type": "library", - "bom-ref": "pkg:golang/k8s.io/klog/v2@v2.80.1" - }, - { - "group": "k8s.io", - "name": "kube-openapi", - "version": "v0.0.0-20221012153701-172d655c2280", - "purl": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280", - "type": "library", - "bom-ref": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280" - }, - { - "group": "k8s.io", - "name": "utils", - "version": "v0.0.0-20221107191617-1a15be271d1d", - "purl": "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", - "type": "library", - "bom-ref": "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d" - }, - { - "group": "sigs.k8s.io", - "name": "json", - "version": "v0.0.0-20220713155537-f223a00ba0e2", - "purl": "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2", - "type": "library", - "bom-ref": "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2" - }, - { - "group": "sigs.k8s.io/structured-merge-diff", - "name": "v4", - "version": "v4.2.3", - "purl": "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", - "type": "library", - "bom-ref": "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3" - }, - { - "group": "sigs.k8s.io", - "name": "yaml", - "version": "v1.3.0", - "purl": "pkg:golang/sigs.k8s.io/yaml@v1.3.0", - "type": "library", - "bom-ref": "pkg:golang/sigs.k8s.io/yaml@v1.3.0" - }, - { - "group": "github.com/bytedance", - "name": "sonic", - "version": "v1.9.1", - "purl": "pkg:golang/github.com/bytedance/sonic@v1.9.1", - "type": "library", - "bom-ref": "pkg:golang/github.com/bytedance/sonic@v1.9.1" - }, - { - "group": "github.com/gin-contrib", - "name": "sse", - "version": "v0.1.0", - "purl": "pkg:golang/github.com/gin-contrib/sse@v0.1.0", - "type": "library", - "bom-ref": "pkg:golang/github.com/gin-contrib/sse@v0.1.0" - }, - { - "group": "github.com/go-playground/validator", - "name": "v10", - "version": "v10.14.0", - "purl": "pkg:golang/github.com/go-playground/validator/v10@v10.14.0", - "type": "library", - "bom-ref": "pkg:golang/github.com/go-playground/validator/v10@v10.14.0" - }, - { - "group": "github.com/goccy", - "name": "go-json", - "version": "v0.10.2", - "purl": "pkg:golang/github.com/goccy/go-json@v0.10.2", - "type": "library", - "bom-ref": "pkg:golang/github.com/goccy/go-json@v0.10.2" - }, - { - "group": "github.com/mattn", - "name": "go-isatty", - "version": "v0.0.19", - "purl": "pkg:golang/github.com/mattn/go-isatty@v0.0.19", - "type": "library", - "bom-ref": "pkg:golang/github.com/mattn/go-isatty@v0.0.19" - }, - { - "group": "github.com/pelletier/go-toml", - "name": "v2", - "version": "v2.0.8", - "purl": "pkg:golang/github.com/pelletier/go-toml/v2@v2.0.8", - "type": "library", - "bom-ref": "pkg:golang/github.com/pelletier/go-toml/v2@v2.0.8" - }, - { - "group": "github.com/stretchr", - "name": "testify", - "version": "v1.8.3", - "purl": "pkg:golang/github.com/stretchr/testify@v1.8.3", - "type": "library", - "bom-ref": "pkg:golang/github.com/stretchr/testify@v1.8.3" - }, - { - "group": "github.com/ugorji/go", - "name": "codec", - "version": "v1.2.11", - "purl": "pkg:golang/github.com/ugorji/go/codec@v1.2.11", - "type": "library", - "bom-ref": "pkg:golang/github.com/ugorji/go/codec@v1.2.11" + "bom-ref": "pkg:golang/gopkg.in/yaml.v3@v3.0.1" }, { "group": "github.com/chenzhuoyu", @@ -454,6 +182,14 @@ "type": "library", "bom-ref": "pkg:golang/github.com/chenzhuoyu/base64x@v0.0.0-20221115062448-fe3a3abad311" }, + { + "group": "github.com/davecgh", + "name": "go-spew", + "version": "v1.1.1", + "purl": "pkg:golang/github.com/davecgh/go-spew@v1.1.1", + "type": "library", + "bom-ref": "pkg:golang/github.com/davecgh/go-spew@v1.1.1" + }, { "group": "github.com/gabriel-vasile", "name": "mimetype", @@ -494,6 +230,22 @@ "type": "library", "bom-ref": "pkg:golang/github.com/leodido/go-urn@v1.2.4" }, + { + "group": "github.com/modern-go", + "name": "concurrent", + "version": "v0.0.0-20180306012644-bacd9c7ef1dd", + "purl": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", + "type": "library", + "bom-ref": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd" + }, + { + "group": "github.com/modern-go", + "name": "reflect2", + "version": "v1.0.2", + "purl": "pkg:golang/github.com/modern-go/reflect2@v1.0.2", + "type": "library", + "bom-ref": "pkg:golang/github.com/modern-go/reflect2@v1.0.2" + }, { "group": "github.com/pmezard", "name": "go-difflib", @@ -526,6 +278,62 @@ "type": "library", "bom-ref": "pkg:golang/golang.org/x/crypto@v0.9.0" }, + { + "group": "golang.org/x", + "name": "sys", + "version": "v0.8.0", + "purl": "pkg:golang/golang.org/x/sys@v0.8.0", + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/sys@v0.8.0" + }, + { + "group": "golang.org/x", + "name": "text", + "version": "v0.9.0", + "purl": "pkg:golang/golang.org/x/text@v0.9.0", + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/text@v0.9.0" + }, + { + "group": "github.com/go-openapi", + "name": "jsonpointer", + "version": "v0.19.5", + "purl": "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5", + "type": "library", + "bom-ref": "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5" + }, + { + "group": "github.com/go-openapi", + "name": "swag", + "version": "v0.19.14", + "purl": "pkg:golang/github.com/go-openapi/swag@v0.19.14", + "type": "library", + "bom-ref": "pkg:golang/github.com/go-openapi/swag@v0.19.14" + }, + { + "group": "github.com/mailru", + "name": "easyjson", + "version": "v0.7.6", + "purl": "pkg:golang/github.com/mailru/easyjson@v0.7.6", + "type": "library", + "bom-ref": "pkg:golang/github.com/mailru/easyjson@v0.7.6" + }, + { + "group": "github.com/go-openapi", + "name": "jsonreference", + "version": "v0.20.0", + "purl": "pkg:golang/github.com/go-openapi/jsonreference@v0.20.0", + "type": "library", + "bom-ref": "pkg:golang/github.com/go-openapi/jsonreference@v0.20.0" + }, + { + "group": "github.com/kr", + "name": "text", + "version": "v0.2.0", + "purl": "pkg:golang/github.com/kr/text@v0.2.0", + "type": "library", + "bom-ref": "pkg:golang/github.com/kr/text@v0.2.0" + }, { "group": "github.com/niemeyer", "name": "pretty", @@ -542,6 +350,14 @@ "type": "library", "bom-ref": "pkg:golang/gopkg.in/check.v1@v1.0.0-20200227125254-8fa46927fb4f" }, + { + "group": "github.com/gogo", + "name": "protobuf", + "version": "v1.3.2", + "purl": "pkg:golang/github.com/gogo/protobuf@v1.3.2", + "type": "library", + "bom-ref": "pkg:golang/github.com/gogo/protobuf@v1.3.2" + }, { "group": "github.com/kisielk", "name": "errcheck", @@ -567,20 +383,44 @@ "bom-ref": "pkg:golang/golang.org/x/tools@v0.6.0" }, { - "group": "github.com/docopt", - "name": "docopt-go", - "version": "v0.0.0-20180111231733-ee0de3bc6815", - "purl": "pkg:golang/github.com/docopt/docopt-go@v0.0.0-20180111231733-ee0de3bc6815", + "group": "github.com/golang", + "name": "protobuf", + "version": "v1.5.2", + "purl": "pkg:golang/github.com/golang/protobuf@v1.5.2", "type": "library", - "bom-ref": "pkg:golang/github.com/docopt/docopt-go@v0.0.0-20180111231733-ee0de3bc6815" + "bom-ref": "pkg:golang/github.com/golang/protobuf@v1.5.2" }, { - "group": "github.com/stoewer", - "name": "go-strcase", - "version": "v1.2.0", - "purl": "pkg:golang/github.com/stoewer/go-strcase@v1.2.0", - "type": "library", - "bom-ref": "pkg:golang/github.com/stoewer/go-strcase@v1.2.0" + "group": "github.com/google", + "name": "go-cmp", + "version": "v0.5.9", + "purl": "pkg:golang/github.com/google/go-cmp@v0.5.9", + "type": "library", + "bom-ref": "pkg:golang/github.com/google/go-cmp@v0.5.9" + }, + { + "group": "github.com/google", + "name": "gnostic", + "version": "v0.5.7-v3refs", + "purl": "pkg:golang/github.com/google/gnostic@v0.5.7-v3refs", + "type": "library", + "bom-ref": "pkg:golang/github.com/google/gnostic@v0.5.7-v3refs" + }, + { + "group": "github.com/docopt", + "name": "docopt-go", + "version": "v0.0.0-20180111231733-ee0de3bc6815", + "purl": "pkg:golang/github.com/docopt/docopt-go@v0.0.0-20180111231733-ee0de3bc6815", + "type": "library", + "bom-ref": "pkg:golang/github.com/docopt/docopt-go@v0.0.0-20180111231733-ee0de3bc6815" + }, + { + "group": "github.com/stoewer", + "name": "go-strcase", + "version": "v1.2.0", + "purl": "pkg:golang/github.com/stoewer/go-strcase@v1.2.0", + "type": "library", + "bom-ref": "pkg:golang/github.com/stoewer/go-strcase@v1.2.0" }, { "group": "golang.org/x", @@ -598,6 +438,22 @@ "type": "library", "bom-ref": "pkg:golang/google.golang.org/genproto@v0.0.0-20201019141844-1ed22bb0c154" }, + { + "group": "github.com/google", + "name": "gofuzz", + "version": "v1.1.0", + "purl": "pkg:golang/github.com/google/gofuzz@v1.1.0", + "type": "library", + "bom-ref": "pkg:golang/github.com/google/gofuzz@v1.1.0" + }, + { + "group": "github.com/rogpeppe", + "name": "go-internal", + "version": "v1.9.0", + "purl": "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0", + "type": "library", + "bom-ref": "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0" + }, { "group": "github.com/creack", "name": "pty", @@ -606,6 +462,14 @@ "type": "library", "bom-ref": "pkg:golang/github.com/creack/pty@v1.1.9" }, + { + "group": "github.com/josharian", + "name": "intern", + "version": "v1.0.0", + "purl": "pkg:golang/github.com/josharian/intern@v1.0.0", + "type": "library", + "bom-ref": "pkg:golang/github.com/josharian/intern@v1.0.0" + }, { "group": "github.com/pkg", "name": "diff", @@ -614,6 +478,22 @@ "type": "library", "bom-ref": "pkg:golang/github.com/pkg/diff@v0.0.0-20210226163009-20ebb0f2a09e" }, + { + "group": "golang.org/x", + "name": "term", + "version": "v0.8.0", + "purl": "pkg:golang/golang.org/x/term@v0.8.0", + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/term@v0.8.0" + }, + { + "group": "golang.org/x", + "name": "oauth2", + "version": "v0.0.0-20220223155221-ee480838109b", + "purl": "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b", + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b" + }, { "group": "cloud.google.com", "name": "go", @@ -622,6 +502,14 @@ "type": "library", "bom-ref": "pkg:golang/cloud.google.com/go@v0.65.0" }, + { + "group": "google.golang.org", + "name": "appengine", + "version": "v1.6.7", + "purl": "pkg:golang/google.golang.org/appengine@v1.6.7", + "type": "library", + "bom-ref": "pkg:golang/google.golang.org/appengine@v1.6.7" + }, { "group": "golang.org/x", "name": "mod", @@ -630,6 +518,78 @@ "type": "library", "bom-ref": "pkg:golang/golang.org/x/mod@v0.8.0" }, + { + "group": "k8s.io", + "name": "api", + "version": "v0.26.1", + "purl": "pkg:golang/k8s.io/api@v0.26.1", + "type": "library", + "bom-ref": "pkg:golang/k8s.io/api@v0.26.1" + }, + { + "group": "github.com/go-logr", + "name": "logr", + "version": "v1.2.3", + "purl": "pkg:golang/github.com/go-logr/logr@v1.2.3", + "type": "library", + "bom-ref": "pkg:golang/github.com/go-logr/logr@v1.2.3" + }, + { + "group": "github.com/spf13", + "name": "pflag", + "version": "v1.0.5", + "purl": "pkg:golang/github.com/spf13/pflag@v1.0.5", + "type": "library", + "bom-ref": "pkg:golang/github.com/spf13/pflag@v1.0.5" + }, + { + "group": "gopkg.in", + "name": "inf.v0", + "version": "v0.9.1", + "purl": "pkg:golang/gopkg.in/inf.v0@v0.9.1", + "type": "library", + "bom-ref": "pkg:golang/gopkg.in/inf.v0@v0.9.1" + }, + { + "group": "k8s.io/klog", + "name": "v2", + "version": "v2.80.1", + "purl": "pkg:golang/k8s.io/klog/v2@v2.80.1", + "type": "library", + "bom-ref": "pkg:golang/k8s.io/klog/v2@v2.80.1" + }, + { + "group": "k8s.io", + "name": "utils", + "version": "v0.0.0-20221107191617-1a15be271d1d", + "purl": "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", + "type": "library", + "bom-ref": "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d" + }, + { + "group": "sigs.k8s.io", + "name": "json", + "version": "v0.0.0-20220713155537-f223a00ba0e2", + "purl": "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2", + "type": "library", + "bom-ref": "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2" + }, + { + "group": "sigs.k8s.io/structured-merge-diff", + "name": "v4", + "version": "v4.2.3", + "purl": "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", + "type": "library", + "bom-ref": "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3" + }, + { + "group": "sigs.k8s.io", + "name": "yaml", + "version": "v1.3.0", + "purl": "pkg:golang/sigs.k8s.io/yaml@v1.3.0", + "type": "library", + "bom-ref": "pkg:golang/sigs.k8s.io/yaml@v1.3.0" + }, { "group": "github.com/armon", "name": "go-socks5", @@ -670,6 +630,14 @@ "type": "library", "bom-ref": "pkg:golang/github.com/mxk/go-flowrate@v0.0.0-20140419014527-cca7078d478f" }, + { + "group": "k8s.io", + "name": "kube-openapi", + "version": "v0.0.0-20221012153701-172d655c2280", + "purl": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280", + "type": "library", + "bom-ref": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280" + }, { "group": "github.com/onsi/ginkgo", "name": "v2", @@ -710,6 +678,14 @@ "type": "library", "bom-ref": "pkg:golang/github.com/gregjones/httpcache@v0.0.0-20180305231024-9cad4c3443a7" }, + { + "group": "github.com/imdario", + "name": "mergo", + "version": "v0.3.6", + "purl": "pkg:golang/github.com/imdario/mergo@v0.3.6", + "type": "library", + "bom-ref": "pkg:golang/github.com/imdario/mergo@v0.3.6" + }, { "group": "github.com/peterbourgon", "name": "diskv", @@ -718,6 +694,22 @@ "type": "library", "bom-ref": "pkg:golang/github.com/peterbourgon/diskv@v2.0.1%2Bincompatible" }, + { + "group": "golang.org/x", + "name": "time", + "version": "v0.0.0-20220210224613-90d013bbcef8", + "purl": "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8", + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8" + }, + { + "group": "github.com/emicklei/go-restful", + "name": "v3", + "version": "v3.9.0", + "purl": "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0", + "type": "library", + "bom-ref": "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0" + }, { "group": "github.com/google", "name": "btree", @@ -726,6 +718,14 @@ "type": "library", "bom-ref": "pkg:golang/github.com/google/btree@v1.0.1" }, + { + "group": "github.com/munnerz", + "name": "goautoneg", + "version": "v0.0.0-20191010083416-a7dc8b61c822", + "purl": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", + "type": "library", + "bom-ref": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822" + }, { "group": "github.com/NYTimes", "name": "gziphandler", @@ -1112,358 +1112,86 @@ { "group": "rsc.io", "name": "binaryregexp", - "version": "v0.2.0", - "purl": "pkg:golang/rsc.io/binaryregexp@v0.2.0", - "type": "library", - "bom-ref": "pkg:golang/rsc.io/binaryregexp@v0.2.0" - }, - { - "group": "github.com/go-gl", - "name": "glfw", - "version": "v0.0.0-20190409004039-e6da0acd62b1", - "purl": "pkg:golang/github.com/go-gl/glfw@v0.0.0-20190409004039-e6da0acd62b1", - "type": "library", - "bom-ref": "pkg:golang/github.com/go-gl/glfw@v0.0.0-20190409004039-e6da0acd62b1" - } - ], - "dependencies": [ - { - "ref": "pkg:golang/github.com/RHEcosystemAppEng/SaaSi/deployer@v0.0.0", - "dependsOn": [ - "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0", - "pkg:golang/github.com/gin-gonic/gin@v1.9.1", - "pkg:golang/github.com/go-logr/logr@v1.2.3", - "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5", - "pkg:golang/github.com/go-openapi/jsonreference@v0.20.0", - "pkg:golang/github.com/go-openapi/swag@v0.19.14", - "pkg:golang/github.com/gogo/protobuf@v1.3.2", - "pkg:golang/github.com/golang/protobuf@v1.5.2", - "pkg:golang/github.com/google/gnostic@v0.5.7-v3refs", - "pkg:golang/github.com/google/go-cmp@v0.5.9", - "pkg:golang/github.com/google/gofuzz@v1.1.0", - "pkg:golang/github.com/google/uuid@v1.1.2", - "pkg:golang/github.com/imdario/mergo@v0.3.6", - "pkg:golang/github.com/jessevdk/go-flags@v1.5.0", - "pkg:golang/github.com/josharian/intern@v1.0.0", - "pkg:golang/github.com/json-iterator/go@v1.1.12", - "pkg:golang/github.com/kr/pretty@v0.3.1", - "pkg:golang/github.com/kr/text@v0.2.0", - "pkg:golang/github.com/mailru/easyjson@v0.7.6", - "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", - "pkg:golang/github.com/modern-go/reflect2@v1.0.2", - "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", - "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0", - "pkg:golang/github.com/spf13/pflag@v1.0.5", - "pkg:golang/golang.org/x/net@v0.10.0", - "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b", - "pkg:golang/golang.org/x/sys@v0.8.0", - "pkg:golang/golang.org/x/term@v0.8.0", - "pkg:golang/golang.org/x/text@v0.9.0", - "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8", - "pkg:golang/google.golang.org/appengine@v1.6.7", - "pkg:golang/google.golang.org/protobuf@v1.30.0", - "pkg:golang/gopkg.in/inf.v0@v0.9.1", - "pkg:golang/gopkg.in/yaml.v2@v2.4.0", - "pkg:golang/gopkg.in/yaml.v3@v3.0.1", - "pkg:golang/k8s.io/api@v0.26.1", - "pkg:golang/k8s.io/apimachinery@v0.26.1", - "pkg:golang/k8s.io/client-go@v0.26.1", - "pkg:golang/k8s.io/klog/v2@v2.80.1", - "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280", - "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", - "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2", - "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", - "pkg:golang/sigs.k8s.io/yaml@v1.3.0" - ] - }, - { - "ref": "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/gin-gonic/gin@v1.9.1", - "dependsOn": [ - "pkg:golang/github.com/bytedance/sonic@v1.9.1", - "pkg:golang/github.com/gin-contrib/sse@v0.1.0", - "pkg:golang/github.com/go-playground/validator/v10@v10.14.0", - "pkg:golang/github.com/goccy/go-json@v0.10.2", - "pkg:golang/github.com/json-iterator/go@v1.1.12", - "pkg:golang/github.com/mattn/go-isatty@v0.0.19", - "pkg:golang/github.com/pelletier/go-toml/v2@v2.0.8", - "pkg:golang/github.com/stretchr/testify@v1.8.3", - "pkg:golang/github.com/ugorji/go/codec@v1.2.11", - "pkg:golang/golang.org/x/net@v0.10.0", - "pkg:golang/google.golang.org/protobuf@v1.30.0", - "pkg:golang/gopkg.in/yaml.v3@v3.0.1", - "pkg:golang/github.com/chenzhuoyu/base64x@v0.0.0-20221115062448-fe3a3abad311", - "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "pkg:golang/github.com/gabriel-vasile/mimetype@v1.4.2", - "pkg:golang/github.com/go-playground/locales@v0.14.1", - "pkg:golang/github.com/go-playground/universal-translator@v0.18.1", - "pkg:golang/github.com/klauspost/cpuid/v2@v2.2.4", - "pkg:golang/github.com/leodido/go-urn@v1.2.4", - "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", - "pkg:golang/github.com/modern-go/reflect2@v1.0.2", - "pkg:golang/github.com/pmezard/go-difflib@v1.0.0", - "pkg:golang/github.com/twitchyliquid64/golang-asm@v0.15.1", - "pkg:golang/golang.org/x/arch@v0.3.0", - "pkg:golang/golang.org/x/crypto@v0.9.0", - "pkg:golang/golang.org/x/sys@v0.8.0", - "pkg:golang/golang.org/x/text@v0.9.0" - ] - }, - { - "ref": "pkg:golang/github.com/go-logr/logr@v1.2.3", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5", - "dependsOn": [ - "pkg:golang/github.com/go-openapi/swag@v0.19.14", - "pkg:golang/github.com/mailru/easyjson@v0.7.6", - "pkg:golang/github.com/stretchr/testify@v1.8.3" - ] - }, - { - "ref": "pkg:golang/github.com/go-openapi/jsonreference@v0.20.0", - "dependsOn": [ - "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5", - "pkg:golang/github.com/stretchr/testify@v1.8.3" - ] - }, - { - "ref": "pkg:golang/github.com/go-openapi/swag@v0.19.14", - "dependsOn": [ - "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "pkg:golang/github.com/kr/text@v0.2.0", - "pkg:golang/github.com/mailru/easyjson@v0.7.6", - "pkg:golang/github.com/niemeyer/pretty@v0.0.0-20200227124842-a10e7caefd8e", - "pkg:golang/github.com/stretchr/testify@v1.8.3", - "pkg:golang/gopkg.in/check.v1@v1.0.0-20200227125254-8fa46927fb4f", - "pkg:golang/gopkg.in/yaml.v2@v2.4.0", - "pkg:golang/gopkg.in/yaml.v3@v3.0.1", - "pkg:golang/github.com/kr/pretty@v0.3.1" - ] - }, - { - "ref": "pkg:golang/github.com/gogo/protobuf@v1.3.2", - "dependsOn": [ - "pkg:golang/github.com/kisielk/errcheck@v1.5.0", - "pkg:golang/github.com/kisielk/gotool@v1.0.0", - "pkg:golang/golang.org/x/tools@v0.6.0" - ] - }, - { - "ref": "pkg:golang/github.com/golang/protobuf@v1.5.2", - "dependsOn": [ - "pkg:golang/github.com/google/go-cmp@v0.5.9", - "pkg:golang/google.golang.org/protobuf@v1.30.0" - ] - }, - { - "ref": "pkg:golang/github.com/google/gnostic@v0.5.7-v3refs", - "dependsOn": [ - "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "pkg:golang/github.com/docopt/docopt-go@v0.0.0-20180111231733-ee0de3bc6815", - "pkg:golang/github.com/golang/protobuf@v1.5.2", - "pkg:golang/github.com/kr/pretty@v0.3.1", - "pkg:golang/github.com/stoewer/go-strcase@v1.2.0", - "pkg:golang/golang.org/x/tools@v0.6.0", - "pkg:golang/golang.org/x/xerrors@v0.0.0-20200804184101-5ec99f83aff1", - "pkg:golang/google.golang.org/genproto@v0.0.0-20201019141844-1ed22bb0c154", - "pkg:golang/google.golang.org/protobuf@v1.30.0", - "pkg:golang/gopkg.in/check.v1@v1.0.0-20200227125254-8fa46927fb4f", - "pkg:golang/gopkg.in/yaml.v3@v3.0.1" - ] - }, - { - "ref": "pkg:golang/github.com/google/go-cmp@v0.5.9", - "dependsOn": [ - "pkg:golang/golang.org/x/xerrors@v0.0.0-20200804184101-5ec99f83aff1" - ] - }, - { - "ref": "pkg:golang/github.com/google/gofuzz@v1.1.0", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/google/uuid@v1.1.2", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/imdario/mergo@v0.3.6", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/jessevdk/go-flags@v1.5.0", - "dependsOn": [ - "pkg:golang/golang.org/x/sys@v0.8.0" - ] - }, - { - "ref": "pkg:golang/github.com/josharian/intern@v1.0.0", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/json-iterator/go@v1.1.12", - "dependsOn": [ - "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "pkg:golang/github.com/google/gofuzz@v1.1.0", - "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", - "pkg:golang/github.com/modern-go/reflect2@v1.0.2", - "pkg:golang/github.com/stretchr/testify@v1.8.3" - ] - }, - { - "ref": "pkg:golang/github.com/kr/pretty@v0.3.1", - "dependsOn": [ - "pkg:golang/github.com/kr/text@v0.2.0", - "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0" - ] - }, - { - "ref": "pkg:golang/github.com/kr/text@v0.2.0", - "dependsOn": [ - "pkg:golang/github.com/creack/pty@v1.1.9", - "pkg:golang/github.com/kr/pty@v1.1.1" - ] - }, - { - "ref": "pkg:golang/github.com/mailru/easyjson@v0.7.6", - "dependsOn": [ - "pkg:golang/github.com/josharian/intern@v1.0.0" - ] - }, - { - "ref": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/modern-go/reflect2@v1.0.2", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0", - "dependsOn": [ - "pkg:golang/github.com/pkg/diff@v0.0.0-20210226163009-20ebb0f2a09e", - "pkg:golang/gopkg.in/errgo.v2@v2.1.0" - ] - }, - { - "ref": "pkg:golang/github.com/spf13/pflag@v1.0.5", - "dependsOn": [] - }, - { - "ref": "pkg:golang/golang.org/x/net@v0.10.0", - "dependsOn": [ - "pkg:golang/golang.org/x/sys@v0.8.0", - "pkg:golang/golang.org/x/term@v0.8.0", - "pkg:golang/golang.org/x/text@v0.9.0", - "pkg:golang/golang.org/x/crypto@v0.9.0" - ] - }, - { - "ref": "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b", - "dependsOn": [ - "pkg:golang/cloud.google.com/go@v0.65.0", - "pkg:golang/golang.org/x/net@v0.10.0", - "pkg:golang/google.golang.org/appengine@v1.6.7", - "pkg:golang/golang.org/x/sync@v0.0.0-20201020160332-67f06af15bc9" - ] - }, - { - "ref": "pkg:golang/golang.org/x/sys@v0.8.0", - "dependsOn": [] + "version": "v0.2.0", + "purl": "pkg:golang/rsc.io/binaryregexp@v0.2.0", + "type": "library", + "bom-ref": "pkg:golang/rsc.io/binaryregexp@v0.2.0" }, { - "ref": "pkg:golang/golang.org/x/term@v0.8.0", - "dependsOn": [ - "pkg:golang/golang.org/x/sys@v0.8.0" - ] - }, + "group": "github.com/go-gl", + "name": "glfw", + "version": "v0.0.0-20190409004039-e6da0acd62b1", + "purl": "pkg:golang/github.com/go-gl/glfw@v0.0.0-20190409004039-e6da0acd62b1", + "type": "library", + "bom-ref": "pkg:golang/github.com/go-gl/glfw@v0.0.0-20190409004039-e6da0acd62b1" + } + ], + "dependencies": [ { - "ref": "pkg:golang/golang.org/x/text@v0.9.0", + "ref": "pkg:golang/github.com/RHEcosystemAppEng/SaaSi/deployer@v0.0.0", "dependsOn": [ - "pkg:golang/golang.org/x/tools@v0.6.0", - "pkg:golang/golang.org/x/mod@v0.8.0", - "pkg:golang/golang.org/x/sys@v0.8.0" + "pkg:golang/github.com/gin-gonic/gin@v1.9.1", + "pkg:golang/github.com/google/uuid@v1.1.2", + "pkg:golang/github.com/jessevdk/go-flags@v1.5.0", + "pkg:golang/github.com/kr/pretty@v0.3.1", + "pkg:golang/gopkg.in/yaml.v2@v2.4.0", + "pkg:golang/k8s.io/apimachinery@v0.26.1", + "pkg:golang/k8s.io/client-go@v0.26.1" ] }, { - "ref": "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8", - "dependsOn": [] - }, - { - "ref": "pkg:golang/google.golang.org/appengine@v1.6.7", + "ref": "pkg:golang/github.com/gin-gonic/gin@v1.9.1", "dependsOn": [ - "pkg:golang/github.com/golang/protobuf@v1.5.2", + "pkg:golang/github.com/bytedance/sonic@v1.9.1", + "pkg:golang/github.com/gin-contrib/sse@v0.1.0", + "pkg:golang/github.com/go-playground/validator/v10@v10.14.0", + "pkg:golang/github.com/goccy/go-json@v0.10.2", + "pkg:golang/github.com/json-iterator/go@v1.1.12", + "pkg:golang/github.com/mattn/go-isatty@v0.0.19", + "pkg:golang/github.com/pelletier/go-toml/v2@v2.0.8", + "pkg:golang/github.com/stretchr/testify@v1.8.3", + "pkg:golang/github.com/ugorji/go/codec@v1.2.11", "pkg:golang/golang.org/x/net@v0.10.0", - "pkg:golang/golang.org/x/text@v0.9.0", + "pkg:golang/google.golang.org/protobuf@v1.30.0", + "pkg:golang/gopkg.in/yaml.v3@v3.0.1", + "pkg:golang/github.com/chenzhuoyu/base64x@v0.0.0-20221115062448-fe3a3abad311", + "pkg:golang/github.com/davecgh/go-spew@v1.1.1", + "pkg:golang/github.com/gabriel-vasile/mimetype@v1.4.2", + "pkg:golang/github.com/go-playground/locales@v0.14.1", + "pkg:golang/github.com/go-playground/universal-translator@v0.18.1", + "pkg:golang/github.com/klauspost/cpuid/v2@v2.2.4", + "pkg:golang/github.com/leodido/go-urn@v1.2.4", + "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", + "pkg:golang/github.com/modern-go/reflect2@v1.0.2", + "pkg:golang/github.com/pmezard/go-difflib@v1.0.0", + "pkg:golang/github.com/twitchyliquid64/golang-asm@v0.15.1", + "pkg:golang/golang.org/x/arch@v0.3.0", "pkg:golang/golang.org/x/crypto@v0.9.0", "pkg:golang/golang.org/x/sys@v0.8.0", - "pkg:golang/golang.org/x/tools@v0.6.0" - ] - }, - { - "ref": "pkg:golang/google.golang.org/protobuf@v1.30.0", - "dependsOn": [ - "pkg:golang/github.com/golang/protobuf@v1.5.2", - "pkg:golang/github.com/google/go-cmp@v0.5.9", - "pkg:golang/google.golang.org/genproto@v0.0.0-20201019141844-1ed22bb0c154" + "pkg:golang/golang.org/x/text@v0.9.0" ] }, { - "ref": "pkg:golang/gopkg.in/inf.v0@v0.9.1", + "ref": "pkg:golang/github.com/google/uuid@v1.1.2", "dependsOn": [] }, { - "ref": "pkg:golang/gopkg.in/yaml.v2@v2.4.0", + "ref": "pkg:golang/github.com/jessevdk/go-flags@v1.5.0", "dependsOn": [ - "pkg:golang/gopkg.in/check.v1@v1.0.0-20200227125254-8fa46927fb4f" + "pkg:golang/golang.org/x/sys@v0.8.0" ] }, { - "ref": "pkg:golang/gopkg.in/yaml.v3@v3.0.1", + "ref": "pkg:golang/github.com/kr/pretty@v0.3.1", "dependsOn": [ - "pkg:golang/gopkg.in/check.v1@v1.0.0-20200227125254-8fa46927fb4f" + "pkg:golang/github.com/kr/text@v0.2.0", + "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0" ] }, { - "ref": "pkg:golang/k8s.io/api@v0.26.1", + "ref": "pkg:golang/gopkg.in/yaml.v2@v2.4.0", "dependsOn": [ - "pkg:golang/github.com/gogo/protobuf@v1.3.2", - "pkg:golang/github.com/stretchr/testify@v1.8.3", - "pkg:golang/k8s.io/apimachinery@v0.26.1", - "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "pkg:golang/github.com/go-logr/logr@v1.2.3", - "pkg:golang/github.com/golang/protobuf@v1.5.2", - "pkg:golang/github.com/google/go-cmp@v0.5.9", - "pkg:golang/github.com/google/gofuzz@v1.1.0", - "pkg:golang/github.com/json-iterator/go@v1.1.12", - "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", - "pkg:golang/github.com/modern-go/reflect2@v1.0.2", - "pkg:golang/github.com/pmezard/go-difflib@v1.0.0", - "pkg:golang/github.com/spf13/pflag@v1.0.5", - "pkg:golang/golang.org/x/net@v0.10.0", - "pkg:golang/golang.org/x/text@v0.9.0", - "pkg:golang/google.golang.org/protobuf@v1.30.0", - "pkg:golang/gopkg.in/inf.v0@v0.9.1", - "pkg:golang/gopkg.in/yaml.v2@v2.4.0", - "pkg:golang/gopkg.in/yaml.v3@v3.0.1", - "pkg:golang/k8s.io/klog/v2@v2.80.1", - "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", - "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2", - "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", - "pkg:golang/sigs.k8s.io/yaml@v1.3.0" + "pkg:golang/gopkg.in/check.v1@v1.0.0-20200227125254-8fa46927fb4f" ] }, { @@ -1562,163 +1290,183 @@ ] }, { - "ref": "pkg:golang/k8s.io/klog/v2@v2.80.1", - "dependsOn": [ - "pkg:golang/github.com/go-logr/logr@v1.2.3" - ] + "ref": "pkg:golang/github.com/bytedance/sonic@v1.9.1", + "dependsOn": [] }, { - "ref": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280", + "ref": "pkg:golang/github.com/gin-contrib/sse@v0.1.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/go-playground/validator/v10@v10.14.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/goccy/go-json@v0.10.2", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/json-iterator/go@v1.1.12", "dependsOn": [ - "pkg:golang/github.com/NYTimes/gziphandler@v0.0.0-20170623195520-56545f4a5d46", - "pkg:golang/github.com/asaskevich/govalidator@v0.0.0-20190424111038-f61b66f89f4a", - "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0", - "pkg:golang/github.com/go-openapi/jsonreference@v0.20.0", - "pkg:golang/github.com/go-openapi/swag@v0.19.14", - "pkg:golang/github.com/golang/protobuf@v1.5.2", - "pkg:golang/github.com/google/gnostic@v0.5.7-v3refs", - "pkg:golang/github.com/google/go-cmp@v0.5.9", - "pkg:golang/github.com/google/gofuzz@v1.1.0", - "pkg:golang/github.com/google/uuid@v1.1.2", - "pkg:golang/github.com/mitchellh/mapstructure@v1.1.2", - "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", - "pkg:golang/github.com/onsi/ginkgo/v2@v2.4.0", - "pkg:golang/github.com/onsi/gomega@v1.23.0", - "pkg:golang/github.com/spf13/pflag@v1.0.5", - "pkg:golang/github.com/stretchr/testify@v1.8.3", - "pkg:golang/google.golang.org/protobuf@v1.30.0", - "pkg:golang/gopkg.in/yaml.v2@v2.4.0", - "pkg:golang/gopkg.in/yaml.v3@v3.0.1", - "pkg:golang/k8s.io/gengo@v0.0.0-20210813121822-485abfe95c7c", - "pkg:golang/k8s.io/klog/v2@v2.80.1", - "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", - "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", - "pkg:golang/sigs.k8s.io/yaml@v1.3.0", - "pkg:golang/github.com/PuerkitoBio/purell@v1.1.1", - "pkg:golang/github.com/PuerkitoBio/urlesc@v0.0.0-20170810143723-de5bf2ad4578", "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "pkg:golang/github.com/go-logr/logr@v1.2.3", - "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5", - "pkg:golang/github.com/json-iterator/go@v1.1.12", - "pkg:golang/github.com/mailru/easyjson@v0.7.6", + "pkg:golang/github.com/google/gofuzz@v1.1.0", "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", "pkg:golang/github.com/modern-go/reflect2@v1.0.2", - "pkg:golang/github.com/pmezard/go-difflib@v1.0.0", - "pkg:golang/golang.org/x/mod@v0.8.0", - "pkg:golang/golang.org/x/net@v0.10.0", - "pkg:golang/golang.org/x/sys@v0.8.0", - "pkg:golang/golang.org/x/text@v0.9.0", - "pkg:golang/golang.org/x/tools@v0.6.0", - "pkg:golang/golang.org/x/xerrors@v0.0.0-20200804184101-5ec99f83aff1" + "pkg:golang/github.com/stretchr/testify@v1.8.3" ] }, { - "ref": "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", + "ref": "pkg:golang/github.com/mattn/go-isatty@v0.0.19", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/pelletier/go-toml/v2@v2.0.8", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/stretchr/testify@v1.8.3", "dependsOn": [ "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "pkg:golang/k8s.io/klog/v2@v2.80.1", - "pkg:golang/github.com/go-logr/logr@v1.2.3" + "pkg:golang/github.com/pmezard/go-difflib@v1.0.0", + "pkg:golang/github.com/stretchr/objx@v0.1.0", + "pkg:golang/gopkg.in/yaml.v3@v3.0.1", + "pkg:golang/gopkg.in/yaml.v2@v2.4.0" ] }, { - "ref": "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2", + "ref": "pkg:golang/github.com/ugorji/go/codec@v1.2.11", "dependsOn": [] }, { - "ref": "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", + "ref": "pkg:golang/golang.org/x/net@v0.10.0", "dependsOn": [ - "pkg:golang/gopkg.in/yaml.v2@v2.4.0", - "pkg:golang/github.com/google/gofuzz@v1.1.0", - "pkg:golang/github.com/json-iterator/go@v1.1.12", - "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd" + "pkg:golang/golang.org/x/sys@v0.8.0", + "pkg:golang/golang.org/x/term@v0.8.0", + "pkg:golang/golang.org/x/text@v0.9.0", + "pkg:golang/golang.org/x/crypto@v0.9.0" ] }, { - "ref": "pkg:golang/sigs.k8s.io/yaml@v1.3.0", + "ref": "pkg:golang/google.golang.org/protobuf@v1.30.0", "dependsOn": [ - "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "pkg:golang/gopkg.in/yaml.v2@v2.4.0" + "pkg:golang/github.com/golang/protobuf@v1.5.2", + "pkg:golang/github.com/google/go-cmp@v0.5.9", + "pkg:golang/google.golang.org/genproto@v0.0.0-20201019141844-1ed22bb0c154" ] }, { - "ref": "pkg:golang/github.com/bytedance/sonic@v1.9.1", + "ref": "pkg:golang/gopkg.in/yaml.v3@v3.0.1", + "dependsOn": [ + "pkg:golang/gopkg.in/check.v1@v1.0.0-20200227125254-8fa46927fb4f" + ] + }, + { + "ref": "pkg:golang/github.com/chenzhuoyu/base64x@v0.0.0-20221115062448-fe3a3abad311", "dependsOn": [] }, { - "ref": "pkg:golang/github.com/gin-contrib/sse@v0.1.0", + "ref": "pkg:golang/github.com/davecgh/go-spew@v1.1.1", "dependsOn": [] }, { - "ref": "pkg:golang/github.com/go-playground/validator/v10@v10.14.0", + "ref": "pkg:golang/github.com/gabriel-vasile/mimetype@v1.4.2", "dependsOn": [] }, { - "ref": "pkg:golang/github.com/goccy/go-json@v0.10.2", + "ref": "pkg:golang/github.com/go-playground/locales@v0.14.1", "dependsOn": [] }, { - "ref": "pkg:golang/github.com/mattn/go-isatty@v0.0.19", + "ref": "pkg:golang/github.com/go-playground/universal-translator@v0.18.1", "dependsOn": [] }, { - "ref": "pkg:golang/github.com/pelletier/go-toml/v2@v2.0.8", + "ref": "pkg:golang/github.com/klauspost/cpuid/v2@v2.2.4", "dependsOn": [] }, { - "ref": "pkg:golang/github.com/stretchr/testify@v1.8.3", - "dependsOn": [ - "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "pkg:golang/github.com/pmezard/go-difflib@v1.0.0", - "pkg:golang/github.com/stretchr/objx@v0.1.0", - "pkg:golang/gopkg.in/yaml.v3@v3.0.1", - "pkg:golang/gopkg.in/yaml.v2@v2.4.0" - ] + "ref": "pkg:golang/github.com/leodido/go-urn@v1.2.4", + "dependsOn": [] }, { - "ref": "pkg:golang/github.com/ugorji/go/codec@v1.2.11", + "ref": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", "dependsOn": [] }, { - "ref": "pkg:golang/github.com/chenzhuoyu/base64x@v0.0.0-20221115062448-fe3a3abad311", + "ref": "pkg:golang/github.com/modern-go/reflect2@v1.0.2", "dependsOn": [] }, { - "ref": "pkg:golang/github.com/gabriel-vasile/mimetype@v1.4.2", + "ref": "pkg:golang/github.com/pmezard/go-difflib@v1.0.0", "dependsOn": [] }, { - "ref": "pkg:golang/github.com/go-playground/locales@v0.14.1", + "ref": "pkg:golang/github.com/twitchyliquid64/golang-asm@v0.15.1", "dependsOn": [] }, { - "ref": "pkg:golang/github.com/go-playground/universal-translator@v0.18.1", + "ref": "pkg:golang/golang.org/x/arch@v0.3.0", "dependsOn": [] }, { - "ref": "pkg:golang/github.com/klauspost/cpuid/v2@v2.2.4", + "ref": "pkg:golang/golang.org/x/crypto@v0.9.0", + "dependsOn": [ + "pkg:golang/golang.org/x/sys@v0.8.0", + "pkg:golang/golang.org/x/net@v0.10.0" + ] + }, + { + "ref": "pkg:golang/golang.org/x/sys@v0.8.0", "dependsOn": [] }, { - "ref": "pkg:golang/github.com/leodido/go-urn@v1.2.4", - "dependsOn": [] + "ref": "pkg:golang/golang.org/x/text@v0.9.0", + "dependsOn": [ + "pkg:golang/golang.org/x/tools@v0.6.0", + "pkg:golang/golang.org/x/mod@v0.8.0", + "pkg:golang/golang.org/x/sys@v0.8.0" + ] + }, + { + "ref": "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5", + "dependsOn": [ + "pkg:golang/github.com/go-openapi/swag@v0.19.14", + "pkg:golang/github.com/mailru/easyjson@v0.7.6", + "pkg:golang/github.com/stretchr/testify@v1.8.3" + ] }, { - "ref": "pkg:golang/github.com/pmezard/go-difflib@v1.0.0", - "dependsOn": [] + "ref": "pkg:golang/github.com/go-openapi/swag@v0.19.14", + "dependsOn": [ + "pkg:golang/github.com/davecgh/go-spew@v1.1.1", + "pkg:golang/github.com/kr/text@v0.2.0", + "pkg:golang/github.com/mailru/easyjson@v0.7.6", + "pkg:golang/github.com/niemeyer/pretty@v0.0.0-20200227124842-a10e7caefd8e", + "pkg:golang/github.com/stretchr/testify@v1.8.3", + "pkg:golang/gopkg.in/check.v1@v1.0.0-20200227125254-8fa46927fb4f", + "pkg:golang/gopkg.in/yaml.v2@v2.4.0", + "pkg:golang/gopkg.in/yaml.v3@v3.0.1", + "pkg:golang/github.com/kr/pretty@v0.3.1" + ] }, { - "ref": "pkg:golang/github.com/twitchyliquid64/golang-asm@v0.15.1", - "dependsOn": [] + "ref": "pkg:golang/github.com/mailru/easyjson@v0.7.6", + "dependsOn": [ + "pkg:golang/github.com/josharian/intern@v1.0.0" + ] }, { - "ref": "pkg:golang/golang.org/x/arch@v0.3.0", - "dependsOn": [] + "ref": "pkg:golang/github.com/go-openapi/jsonreference@v0.20.0", + "dependsOn": [ + "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5", + "pkg:golang/github.com/stretchr/testify@v1.8.3" + ] }, { - "ref": "pkg:golang/golang.org/x/crypto@v0.9.0", + "ref": "pkg:golang/github.com/kr/text@v0.2.0", "dependsOn": [ - "pkg:golang/golang.org/x/sys@v0.8.0", - "pkg:golang/golang.org/x/net@v0.10.0" + "pkg:golang/github.com/creack/pty@v1.1.9", + "pkg:golang/github.com/kr/pty@v1.1.1" ] }, { @@ -1731,6 +1479,14 @@ "ref": "pkg:golang/gopkg.in/check.v1@v1.0.0-20200227125254-8fa46927fb4f", "dependsOn": [] }, + { + "ref": "pkg:golang/github.com/gogo/protobuf@v1.3.2", + "dependsOn": [ + "pkg:golang/github.com/kisielk/errcheck@v1.5.0", + "pkg:golang/github.com/kisielk/gotool@v1.0.0", + "pkg:golang/golang.org/x/tools@v0.6.0" + ] + }, { "ref": "pkg:golang/github.com/kisielk/errcheck@v1.5.0", "dependsOn": [ @@ -1752,6 +1508,35 @@ "pkg:golang/google.golang.org/appengine@v1.6.7" ] }, + { + "ref": "pkg:golang/github.com/golang/protobuf@v1.5.2", + "dependsOn": [ + "pkg:golang/github.com/google/go-cmp@v0.5.9", + "pkg:golang/google.golang.org/protobuf@v1.30.0" + ] + }, + { + "ref": "pkg:golang/github.com/google/go-cmp@v0.5.9", + "dependsOn": [ + "pkg:golang/golang.org/x/xerrors@v0.0.0-20200804184101-5ec99f83aff1" + ] + }, + { + "ref": "pkg:golang/github.com/google/gnostic@v0.5.7-v3refs", + "dependsOn": [ + "pkg:golang/github.com/davecgh/go-spew@v1.1.1", + "pkg:golang/github.com/docopt/docopt-go@v0.0.0-20180111231733-ee0de3bc6815", + "pkg:golang/github.com/golang/protobuf@v1.5.2", + "pkg:golang/github.com/kr/pretty@v0.3.1", + "pkg:golang/github.com/stoewer/go-strcase@v1.2.0", + "pkg:golang/golang.org/x/tools@v0.6.0", + "pkg:golang/golang.org/x/xerrors@v0.0.0-20200804184101-5ec99f83aff1", + "pkg:golang/google.golang.org/genproto@v0.0.0-20201019141844-1ed22bb0c154", + "pkg:golang/google.golang.org/protobuf@v1.30.0", + "pkg:golang/gopkg.in/check.v1@v1.0.0-20200227125254-8fa46927fb4f", + "pkg:golang/gopkg.in/yaml.v3@v3.0.1" + ] + }, { "ref": "pkg:golang/github.com/docopt/docopt-go@v0.0.0-20180111231733-ee0de3bc6815", "dependsOn": [] @@ -1780,14 +1565,44 @@ "pkg:golang/golang.org/x/sync@v0.0.0-20201020160332-67f06af15bc9" ] }, + { + "ref": "pkg:golang/github.com/google/gofuzz@v1.1.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0", + "dependsOn": [ + "pkg:golang/github.com/pkg/diff@v0.0.0-20210226163009-20ebb0f2a09e", + "pkg:golang/gopkg.in/errgo.v2@v2.1.0" + ] + }, { "ref": "pkg:golang/github.com/creack/pty@v1.1.9", "dependsOn": [] }, + { + "ref": "pkg:golang/github.com/josharian/intern@v1.0.0", + "dependsOn": [] + }, { "ref": "pkg:golang/github.com/pkg/diff@v0.0.0-20210226163009-20ebb0f2a09e", "dependsOn": [] }, + { + "ref": "pkg:golang/golang.org/x/term@v0.8.0", + "dependsOn": [ + "pkg:golang/golang.org/x/sys@v0.8.0" + ] + }, + { + "ref": "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b", + "dependsOn": [ + "pkg:golang/cloud.google.com/go@v0.65.0", + "pkg:golang/golang.org/x/net@v0.10.0", + "pkg:golang/google.golang.org/appengine@v1.6.7", + "pkg:golang/golang.org/x/sync@v0.0.0-20201020160332-67f06af15bc9" + ] + }, { "ref": "pkg:golang/cloud.google.com/go@v0.65.0", "dependsOn": [ @@ -1826,6 +1641,17 @@ "pkg:golang/rsc.io/binaryregexp@v0.2.0" ] }, + { + "ref": "pkg:golang/google.golang.org/appengine@v1.6.7", + "dependsOn": [ + "pkg:golang/github.com/golang/protobuf@v1.5.2", + "pkg:golang/golang.org/x/net@v0.10.0", + "pkg:golang/golang.org/x/text@v0.9.0", + "pkg:golang/golang.org/x/crypto@v0.9.0", + "pkg:golang/golang.org/x/sys@v0.8.0", + "pkg:golang/golang.org/x/tools@v0.6.0" + ] + }, { "ref": "pkg:golang/golang.org/x/mod@v0.8.0", "dependsOn": [ @@ -1834,6 +1660,81 @@ "pkg:golang/golang.org/x/xerrors@v0.0.0-20200804184101-5ec99f83aff1" ] }, + { + "ref": "pkg:golang/k8s.io/api@v0.26.1", + "dependsOn": [ + "pkg:golang/github.com/gogo/protobuf@v1.3.2", + "pkg:golang/github.com/stretchr/testify@v1.8.3", + "pkg:golang/k8s.io/apimachinery@v0.26.1", + "pkg:golang/github.com/davecgh/go-spew@v1.1.1", + "pkg:golang/github.com/go-logr/logr@v1.2.3", + "pkg:golang/github.com/golang/protobuf@v1.5.2", + "pkg:golang/github.com/google/go-cmp@v0.5.9", + "pkg:golang/github.com/google/gofuzz@v1.1.0", + "pkg:golang/github.com/json-iterator/go@v1.1.12", + "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", + "pkg:golang/github.com/modern-go/reflect2@v1.0.2", + "pkg:golang/github.com/pmezard/go-difflib@v1.0.0", + "pkg:golang/github.com/spf13/pflag@v1.0.5", + "pkg:golang/golang.org/x/net@v0.10.0", + "pkg:golang/golang.org/x/text@v0.9.0", + "pkg:golang/google.golang.org/protobuf@v1.30.0", + "pkg:golang/gopkg.in/inf.v0@v0.9.1", + "pkg:golang/gopkg.in/yaml.v2@v2.4.0", + "pkg:golang/gopkg.in/yaml.v3@v3.0.1", + "pkg:golang/k8s.io/klog/v2@v2.80.1", + "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", + "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2", + "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", + "pkg:golang/sigs.k8s.io/yaml@v1.3.0" + ] + }, + { + "ref": "pkg:golang/github.com/go-logr/logr@v1.2.3", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/spf13/pflag@v1.0.5", + "dependsOn": [] + }, + { + "ref": "pkg:golang/gopkg.in/inf.v0@v0.9.1", + "dependsOn": [] + }, + { + "ref": "pkg:golang/k8s.io/klog/v2@v2.80.1", + "dependsOn": [ + "pkg:golang/github.com/go-logr/logr@v1.2.3" + ] + }, + { + "ref": "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", + "dependsOn": [ + "pkg:golang/github.com/davecgh/go-spew@v1.1.1", + "pkg:golang/k8s.io/klog/v2@v2.80.1", + "pkg:golang/github.com/go-logr/logr@v1.2.3" + ] + }, + { + "ref": "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2", + "dependsOn": [] + }, + { + "ref": "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", + "dependsOn": [ + "pkg:golang/gopkg.in/yaml.v2@v2.4.0", + "pkg:golang/github.com/google/gofuzz@v1.1.0", + "pkg:golang/github.com/json-iterator/go@v1.1.12", + "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd" + ] + }, + { + "ref": "pkg:golang/sigs.k8s.io/yaml@v1.3.0", + "dependsOn": [ + "pkg:golang/github.com/davecgh/go-spew@v1.1.1", + "pkg:golang/gopkg.in/yaml.v2@v2.4.0" + ] + }, { "ref": "pkg:golang/github.com/armon/go-socks5@v0.0.0-20160902184237-e75332964ef5", "dependsOn": [] @@ -1854,6 +1755,51 @@ "ref": "pkg:golang/github.com/mxk/go-flowrate@v0.0.0-20140419014527-cca7078d478f", "dependsOn": [] }, + { + "ref": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280", + "dependsOn": [ + "pkg:golang/github.com/NYTimes/gziphandler@v0.0.0-20170623195520-56545f4a5d46", + "pkg:golang/github.com/asaskevich/govalidator@v0.0.0-20190424111038-f61b66f89f4a", + "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0", + "pkg:golang/github.com/go-openapi/jsonreference@v0.20.0", + "pkg:golang/github.com/go-openapi/swag@v0.19.14", + "pkg:golang/github.com/golang/protobuf@v1.5.2", + "pkg:golang/github.com/google/gnostic@v0.5.7-v3refs", + "pkg:golang/github.com/google/go-cmp@v0.5.9", + "pkg:golang/github.com/google/gofuzz@v1.1.0", + "pkg:golang/github.com/google/uuid@v1.1.2", + "pkg:golang/github.com/mitchellh/mapstructure@v1.1.2", + "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", + "pkg:golang/github.com/onsi/ginkgo/v2@v2.4.0", + "pkg:golang/github.com/onsi/gomega@v1.23.0", + "pkg:golang/github.com/spf13/pflag@v1.0.5", + "pkg:golang/github.com/stretchr/testify@v1.8.3", + "pkg:golang/google.golang.org/protobuf@v1.30.0", + "pkg:golang/gopkg.in/yaml.v2@v2.4.0", + "pkg:golang/gopkg.in/yaml.v3@v3.0.1", + "pkg:golang/k8s.io/gengo@v0.0.0-20210813121822-485abfe95c7c", + "pkg:golang/k8s.io/klog/v2@v2.80.1", + "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", + "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", + "pkg:golang/sigs.k8s.io/yaml@v1.3.0", + "pkg:golang/github.com/PuerkitoBio/purell@v1.1.1", + "pkg:golang/github.com/PuerkitoBio/urlesc@v0.0.0-20170810143723-de5bf2ad4578", + "pkg:golang/github.com/davecgh/go-spew@v1.1.1", + "pkg:golang/github.com/go-logr/logr@v1.2.3", + "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5", + "pkg:golang/github.com/json-iterator/go@v1.1.12", + "pkg:golang/github.com/mailru/easyjson@v0.7.6", + "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", + "pkg:golang/github.com/modern-go/reflect2@v1.0.2", + "pkg:golang/github.com/pmezard/go-difflib@v1.0.0", + "pkg:golang/golang.org/x/mod@v0.8.0", + "pkg:golang/golang.org/x/net@v0.10.0", + "pkg:golang/golang.org/x/sys@v0.8.0", + "pkg:golang/golang.org/x/text@v0.9.0", + "pkg:golang/golang.org/x/tools@v0.6.0", + "pkg:golang/golang.org/x/xerrors@v0.0.0-20200804184101-5ec99f83aff1" + ] + }, { "ref": "pkg:golang/github.com/onsi/ginkgo/v2@v2.4.0", "dependsOn": [] @@ -1874,14 +1820,30 @@ "ref": "pkg:golang/github.com/gregjones/httpcache@v0.0.0-20180305231024-9cad4c3443a7", "dependsOn": [] }, + { + "ref": "pkg:golang/github.com/imdario/mergo@v0.3.6", + "dependsOn": [] + }, { "ref": "pkg:golang/github.com/peterbourgon/diskv@v2.0.1%2Bincompatible", "dependsOn": [] }, + { + "ref": "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0", + "dependsOn": [] + }, { "ref": "pkg:golang/github.com/google/btree@v1.0.1", "dependsOn": [] }, + { + "ref": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", + "dependsOn": [] + }, { "ref": "pkg:golang/github.com/NYTimes/gziphandler@v0.0.0-20170623195520-56545f4a5d46", "dependsOn": [] diff --git a/test/providers/tst_manifests/golang/go_mod_no_ignore/expected_sbom_component_analysis.json b/test/providers/tst_manifests/golang/go_mod_no_ignore/expected_sbom_component_analysis.json index 0308fb10..286ff684 100644 --- a/test/providers/tst_manifests/golang/go_mod_no_ignore/expected_sbom_component_analysis.json +++ b/test/providers/tst_manifests/golang/go_mod_no_ignore/expected_sbom_component_analysis.json @@ -1,618 +1,124 @@ { - "bomFormat": "CycloneDX", - "specVersion": "1.4", - "version": 1, - "metadata": { - "timestamp": "2023-08-07T00:00:00.000Z", - "component": { - "group": "github.com/RHEcosystemAppEng/SaaSi", - "name": "deployer", - "version": "v0.0.0", - "purl": "pkg:golang/github.com/RHEcosystemAppEng/SaaSi/deployer@v0.0.0", - "type": "application", - "bom-ref": "pkg:golang/github.com/RHEcosystemAppEng/SaaSi/deployer@v0.0.0" - } - }, - "components": [ - { - "group": "github.com/RHEcosystemAppEng/SaaSi", - "name": "deployer", - "version": "v0.0.0", - "purl": "pkg:golang/github.com/RHEcosystemAppEng/SaaSi/deployer@v0.0.0", - "type": "application", - "bom-ref": "pkg:golang/github.com/RHEcosystemAppEng/SaaSi/deployer@v0.0.0" - }, - { - "group": "github.com/davecgh", - "name": "go-spew", - "version": "v1.1.1", - "purl": "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "type": "library", - "bom-ref": "pkg:golang/github.com/davecgh/go-spew@v1.1.1" - }, - { - "group": "github.com/emicklei/go-restful", - "name": "v3", - "version": "v3.9.0", - "purl": "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0", - "type": "library", - "bom-ref": "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0" - }, - { - "group": "github.com/gin-gonic", - "name": "gin", - "version": "v1.9.1", - "purl": "pkg:golang/github.com/gin-gonic/gin@v1.9.1", - "type": "library", - "bom-ref": "pkg:golang/github.com/gin-gonic/gin@v1.9.1" - }, - { - "group": "github.com/go-logr", - "name": "logr", - "version": "v1.2.3", - "purl": "pkg:golang/github.com/go-logr/logr@v1.2.3", - "type": "library", - "bom-ref": "pkg:golang/github.com/go-logr/logr@v1.2.3" - }, - { - "group": "github.com/go-openapi", - "name": "jsonpointer", - "version": "v0.19.5", - "purl": "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5", - "type": "library", - "bom-ref": "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5" - }, - { - "group": "github.com/go-openapi", - "name": "jsonreference", - "version": "v0.20.0", - "purl": "pkg:golang/github.com/go-openapi/jsonreference@v0.20.0", - "type": "library", - "bom-ref": "pkg:golang/github.com/go-openapi/jsonreference@v0.20.0" - }, - { - "group": "github.com/go-openapi", - "name": "swag", - "version": "v0.19.14", - "purl": "pkg:golang/github.com/go-openapi/swag@v0.19.14", - "type": "library", - "bom-ref": "pkg:golang/github.com/go-openapi/swag@v0.19.14" - }, - { - "group": "github.com/gogo", - "name": "protobuf", - "version": "v1.3.2", - "purl": "pkg:golang/github.com/gogo/protobuf@v1.3.2", - "type": "library", - "bom-ref": "pkg:golang/github.com/gogo/protobuf@v1.3.2" - }, - { - "group": "github.com/golang", - "name": "protobuf", - "version": "v1.5.2", - "purl": "pkg:golang/github.com/golang/protobuf@v1.5.2", - "type": "library", - "bom-ref": "pkg:golang/github.com/golang/protobuf@v1.5.2" - }, - { - "group": "github.com/google", - "name": "gnostic", - "version": "v0.5.7-v3refs", - "purl": "pkg:golang/github.com/google/gnostic@v0.5.7-v3refs", - "type": "library", - "bom-ref": "pkg:golang/github.com/google/gnostic@v0.5.7-v3refs" - }, - { - "group": "github.com/google", - "name": "go-cmp", - "version": "v0.5.9", - "purl": "pkg:golang/github.com/google/go-cmp@v0.5.9", - "type": "library", - "bom-ref": "pkg:golang/github.com/google/go-cmp@v0.5.9" - }, - { - "group": "github.com/google", - "name": "gofuzz", - "version": "v1.1.0", - "purl": "pkg:golang/github.com/google/gofuzz@v1.1.0", - "type": "library", - "bom-ref": "pkg:golang/github.com/google/gofuzz@v1.1.0" - }, - { - "group": "github.com/google", - "name": "uuid", - "version": "v1.1.2", - "purl": "pkg:golang/github.com/google/uuid@v1.1.2", - "type": "library", - "bom-ref": "pkg:golang/github.com/google/uuid@v1.1.2" - }, - { - "group": "github.com/imdario", - "name": "mergo", - "version": "v0.3.6", - "purl": "pkg:golang/github.com/imdario/mergo@v0.3.6", - "type": "library", - "bom-ref": "pkg:golang/github.com/imdario/mergo@v0.3.6" - }, - { - "group": "github.com/jessevdk", - "name": "go-flags", - "version": "v1.5.0", - "purl": "pkg:golang/github.com/jessevdk/go-flags@v1.5.0", - "type": "library", - "bom-ref": "pkg:golang/github.com/jessevdk/go-flags@v1.5.0" - }, - { - "group": "github.com/josharian", - "name": "intern", - "version": "v1.0.0", - "purl": "pkg:golang/github.com/josharian/intern@v1.0.0", - "type": "library", - "bom-ref": "pkg:golang/github.com/josharian/intern@v1.0.0" - }, - { - "group": "github.com/json-iterator", - "name": "go", - "version": "v1.1.12", - "purl": "pkg:golang/github.com/json-iterator/go@v1.1.12", - "type": "library", - "bom-ref": "pkg:golang/github.com/json-iterator/go@v1.1.12" - }, - { - "group": "github.com/kr", - "name": "pretty", - "version": "v0.3.1", - "purl": "pkg:golang/github.com/kr/pretty@v0.3.1", - "type": "library", - "bom-ref": "pkg:golang/github.com/kr/pretty@v0.3.1" - }, - { - "group": "github.com/kr", - "name": "text", - "version": "v0.2.0", - "purl": "pkg:golang/github.com/kr/text@v0.2.0", - "type": "library", - "bom-ref": "pkg:golang/github.com/kr/text@v0.2.0" - }, - { - "group": "github.com/mailru", - "name": "easyjson", - "version": "v0.7.6", - "purl": "pkg:golang/github.com/mailru/easyjson@v0.7.6", - "type": "library", - "bom-ref": "pkg:golang/github.com/mailru/easyjson@v0.7.6" - }, - { - "group": "github.com/modern-go", - "name": "concurrent", - "version": "v0.0.0-20180306012644-bacd9c7ef1dd", - "purl": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", - "type": "library", - "bom-ref": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd" - }, - { - "group": "github.com/modern-go", - "name": "reflect2", - "version": "v1.0.2", - "purl": "pkg:golang/github.com/modern-go/reflect2@v1.0.2", - "type": "library", - "bom-ref": "pkg:golang/github.com/modern-go/reflect2@v1.0.2" - }, - { - "group": "github.com/munnerz", - "name": "goautoneg", - "version": "v0.0.0-20191010083416-a7dc8b61c822", - "purl": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", - "type": "library", - "bom-ref": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822" - }, - { - "group": "github.com/rogpeppe", - "name": "go-internal", - "version": "v1.9.0", - "purl": "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0", - "type": "library", - "bom-ref": "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0" - }, - { - "group": "github.com/spf13", - "name": "pflag", - "version": "v1.0.5", - "purl": "pkg:golang/github.com/spf13/pflag@v1.0.5", - "type": "library", - "bom-ref": "pkg:golang/github.com/spf13/pflag@v1.0.5" - }, - { - "group": "golang.org/x", - "name": "net", - "version": "v0.10.0", - "purl": "pkg:golang/golang.org/x/net@v0.10.0", - "type": "library", - "bom-ref": "pkg:golang/golang.org/x/net@v0.10.0" - }, - { - "group": "golang.org/x", - "name": "oauth2", - "version": "v0.0.0-20220223155221-ee480838109b", - "purl": "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b", - "type": "library", - "bom-ref": "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b" - }, - { - "group": "golang.org/x", - "name": "sys", - "version": "v0.8.0", - "purl": "pkg:golang/golang.org/x/sys@v0.8.0", - "type": "library", - "bom-ref": "pkg:golang/golang.org/x/sys@v0.8.0" - }, - { - "group": "golang.org/x", - "name": "term", - "version": "v0.8.0", - "purl": "pkg:golang/golang.org/x/term@v0.8.0", - "type": "library", - "bom-ref": "pkg:golang/golang.org/x/term@v0.8.0" - }, - { - "group": "golang.org/x", - "name": "text", - "version": "v0.9.0", - "purl": "pkg:golang/golang.org/x/text@v0.9.0", - "type": "library", - "bom-ref": "pkg:golang/golang.org/x/text@v0.9.0" - }, - { - "group": "golang.org/x", - "name": "time", - "version": "v0.0.0-20220210224613-90d013bbcef8", - "purl": "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8", - "type": "library", - "bom-ref": "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8" - }, - { - "group": "google.golang.org", - "name": "appengine", - "version": "v1.6.7", - "purl": "pkg:golang/google.golang.org/appengine@v1.6.7", - "type": "library", - "bom-ref": "pkg:golang/google.golang.org/appengine@v1.6.7" - }, - { - "group": "google.golang.org", - "name": "protobuf", - "version": "v1.30.0", - "purl": "pkg:golang/google.golang.org/protobuf@v1.30.0", - "type": "library", - "bom-ref": "pkg:golang/google.golang.org/protobuf@v1.30.0" - }, - { - "group": "gopkg.in", - "name": "inf.v0", - "version": "v0.9.1", - "purl": "pkg:golang/gopkg.in/inf.v0@v0.9.1", - "type": "library", - "bom-ref": "pkg:golang/gopkg.in/inf.v0@v0.9.1" - }, - { - "group": "gopkg.in", - "name": "yaml.v2", - "version": "v2.4.0", - "purl": "pkg:golang/gopkg.in/yaml.v2@v2.4.0", - "type": "library", - "bom-ref": "pkg:golang/gopkg.in/yaml.v2@v2.4.0" - }, - { - "group": "gopkg.in", - "name": "yaml.v3", - "version": "v3.0.1", - "purl": "pkg:golang/gopkg.in/yaml.v3@v3.0.1", - "type": "library", - "bom-ref": "pkg:golang/gopkg.in/yaml.v3@v3.0.1" - }, - { - "group": "k8s.io", - "name": "api", - "version": "v0.26.1", - "purl": "pkg:golang/k8s.io/api@v0.26.1", - "type": "library", - "bom-ref": "pkg:golang/k8s.io/api@v0.26.1" - }, - { - "group": "k8s.io", - "name": "apimachinery", - "version": "v0.26.1", - "purl": "pkg:golang/k8s.io/apimachinery@v0.26.1", - "type": "library", - "bom-ref": "pkg:golang/k8s.io/apimachinery@v0.26.1" - }, - { - "group": "k8s.io", - "name": "client-go", - "version": "v0.26.1", - "purl": "pkg:golang/k8s.io/client-go@v0.26.1", - "type": "library", - "bom-ref": "pkg:golang/k8s.io/client-go@v0.26.1" - }, - { - "group": "k8s.io/klog", - "name": "v2", - "version": "v2.80.1", - "purl": "pkg:golang/k8s.io/klog/v2@v2.80.1", - "type": "library", - "bom-ref": "pkg:golang/k8s.io/klog/v2@v2.80.1" - }, - { - "group": "k8s.io", - "name": "kube-openapi", - "version": "v0.0.0-20221012153701-172d655c2280", - "purl": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280", - "type": "library", - "bom-ref": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280" - }, - { - "group": "k8s.io", - "name": "utils", - "version": "v0.0.0-20221107191617-1a15be271d1d", - "purl": "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", - "type": "library", - "bom-ref": "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d" - }, - { - "group": "sigs.k8s.io", - "name": "json", - "version": "v0.0.0-20220713155537-f223a00ba0e2", - "purl": "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2", - "type": "library", - "bom-ref": "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2" - }, - { - "group": "sigs.k8s.io/structured-merge-diff", - "name": "v4", - "version": "v4.2.3", - "purl": "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", - "type": "library", - "bom-ref": "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3" - }, - { - "group": "sigs.k8s.io", - "name": "yaml", - "version": "v1.3.0", - "purl": "pkg:golang/sigs.k8s.io/yaml@v1.3.0", - "type": "library", - "bom-ref": "pkg:golang/sigs.k8s.io/yaml@v1.3.0" - } - ], - "dependencies": [ - { - "ref": "pkg:golang/github.com/RHEcosystemAppEng/SaaSi/deployer@v0.0.0", - "dependsOn": [ - "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0", - "pkg:golang/github.com/gin-gonic/gin@v1.9.1", - "pkg:golang/github.com/go-logr/logr@v1.2.3", - "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5", - "pkg:golang/github.com/go-openapi/jsonreference@v0.20.0", - "pkg:golang/github.com/go-openapi/swag@v0.19.14", - "pkg:golang/github.com/gogo/protobuf@v1.3.2", - "pkg:golang/github.com/golang/protobuf@v1.5.2", - "pkg:golang/github.com/google/gnostic@v0.5.7-v3refs", - "pkg:golang/github.com/google/go-cmp@v0.5.9", - "pkg:golang/github.com/google/gofuzz@v1.1.0", - "pkg:golang/github.com/google/uuid@v1.1.2", - "pkg:golang/github.com/imdario/mergo@v0.3.6", - "pkg:golang/github.com/jessevdk/go-flags@v1.5.0", - "pkg:golang/github.com/josharian/intern@v1.0.0", - "pkg:golang/github.com/json-iterator/go@v1.1.12", - "pkg:golang/github.com/kr/pretty@v0.3.1", - "pkg:golang/github.com/kr/text@v0.2.0", - "pkg:golang/github.com/mailru/easyjson@v0.7.6", - "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", - "pkg:golang/github.com/modern-go/reflect2@v1.0.2", - "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", - "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0", - "pkg:golang/github.com/spf13/pflag@v1.0.5", - "pkg:golang/golang.org/x/net@v0.10.0", - "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b", - "pkg:golang/golang.org/x/sys@v0.8.0", - "pkg:golang/golang.org/x/term@v0.8.0", - "pkg:golang/golang.org/x/text@v0.9.0", - "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8", - "pkg:golang/google.golang.org/appengine@v1.6.7", - "pkg:golang/google.golang.org/protobuf@v1.30.0", - "pkg:golang/gopkg.in/inf.v0@v0.9.1", - "pkg:golang/gopkg.in/yaml.v2@v2.4.0", - "pkg:golang/gopkg.in/yaml.v3@v3.0.1", - "pkg:golang/k8s.io/api@v0.26.1", - "pkg:golang/k8s.io/apimachinery@v0.26.1", - "pkg:golang/k8s.io/client-go@v0.26.1", - "pkg:golang/k8s.io/klog/v2@v2.80.1", - "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280", - "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", - "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2", - "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", - "pkg:golang/sigs.k8s.io/yaml@v1.3.0" - ] - }, - { - "ref": "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/gin-gonic/gin@v1.9.1", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/go-logr/logr@v1.2.3", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/go-openapi/jsonreference@v0.20.0", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/go-openapi/swag@v0.19.14", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/gogo/protobuf@v1.3.2", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/golang/protobuf@v1.5.2", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/google/gnostic@v0.5.7-v3refs", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/google/go-cmp@v0.5.9", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/google/gofuzz@v1.1.0", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/google/uuid@v1.1.2", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/imdario/mergo@v0.3.6", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/jessevdk/go-flags@v1.5.0", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/josharian/intern@v1.0.0", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/json-iterator/go@v1.1.12", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/kr/pretty@v0.3.1", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/kr/text@v0.2.0", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/mailru/easyjson@v0.7.6", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/modern-go/reflect2@v1.0.2", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/spf13/pflag@v1.0.5", - "dependsOn": [] - }, - { - "ref": "pkg:golang/golang.org/x/net@v0.10.0", - "dependsOn": [] - }, - { - "ref": "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b", - "dependsOn": [] - }, - { - "ref": "pkg:golang/golang.org/x/sys@v0.8.0", - "dependsOn": [] - }, - { - "ref": "pkg:golang/golang.org/x/term@v0.8.0", - "dependsOn": [] - }, - { - "ref": "pkg:golang/golang.org/x/text@v0.9.0", - "dependsOn": [] - }, - { - "ref": "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8", - "dependsOn": [] - }, - { - "ref": "pkg:golang/google.golang.org/appengine@v1.6.7", - "dependsOn": [] - }, - { - "ref": "pkg:golang/google.golang.org/protobuf@v1.30.0", - "dependsOn": [] - }, - { - "ref": "pkg:golang/gopkg.in/inf.v0@v0.9.1", - "dependsOn": [] - }, - { - "ref": "pkg:golang/gopkg.in/yaml.v2@v2.4.0", - "dependsOn": [] - }, - { - "ref": "pkg:golang/gopkg.in/yaml.v3@v3.0.1", - "dependsOn": [] - }, - { - "ref": "pkg:golang/k8s.io/api@v0.26.1", - "dependsOn": [] - }, - { - "ref": "pkg:golang/k8s.io/apimachinery@v0.26.1", - "dependsOn": [] - }, - { - "ref": "pkg:golang/k8s.io/client-go@v0.26.1", - "dependsOn": [] - }, - { - "ref": "pkg:golang/k8s.io/klog/v2@v2.80.1", - "dependsOn": [] - }, - { - "ref": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280", - "dependsOn": [] - }, - { - "ref": "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", - "dependsOn": [] - }, - { - "ref": "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2", - "dependsOn": [] - }, - { - "ref": "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", - "dependsOn": [] - }, - { - "ref": "pkg:golang/sigs.k8s.io/yaml@v1.3.0", - "dependsOn": [] - } - ] + "bomFormat": "CycloneDX", + "specVersion": "1.4", + "version": 1, + "metadata": { + "timestamp": "2023-08-07T00:00:00.000Z", + "component": { + "group": "github.com/RHEcosystemAppEng/SaaSi", + "name": "deployer", + "version": "v0.0.0", + "purl": "pkg:golang/github.com/RHEcosystemAppEng/SaaSi/deployer@v0.0.0", + "type": "application", + "bom-ref": "pkg:golang/github.com/RHEcosystemAppEng/SaaSi/deployer@v0.0.0" + } + }, + "components": [ + { + "group": "github.com/RHEcosystemAppEng/SaaSi", + "name": "deployer", + "version": "v0.0.0", + "purl": "pkg:golang/github.com/RHEcosystemAppEng/SaaSi/deployer@v0.0.0", + "type": "application", + "bom-ref": "pkg:golang/github.com/RHEcosystemAppEng/SaaSi/deployer@v0.0.0" + }, + { + "group": "github.com/gin-gonic", + "name": "gin", + "version": "v1.9.1", + "purl": "pkg:golang/github.com/gin-gonic/gin@v1.9.1", + "type": "library", + "bom-ref": "pkg:golang/github.com/gin-gonic/gin@v1.9.1" + }, + { + "group": "github.com/google", + "name": "uuid", + "version": "v1.1.2", + "purl": "pkg:golang/github.com/google/uuid@v1.1.2", + "type": "library", + "bom-ref": "pkg:golang/github.com/google/uuid@v1.1.2" + }, + { + "group": "github.com/jessevdk", + "name": "go-flags", + "version": "v1.5.0", + "purl": "pkg:golang/github.com/jessevdk/go-flags@v1.5.0", + "type": "library", + "bom-ref": "pkg:golang/github.com/jessevdk/go-flags@v1.5.0" + }, + { + "group": "github.com/kr", + "name": "pretty", + "version": "v0.3.1", + "purl": "pkg:golang/github.com/kr/pretty@v0.3.1", + "type": "library", + "bom-ref": "pkg:golang/github.com/kr/pretty@v0.3.1" + }, + { + "group": "gopkg.in", + "name": "yaml.v2", + "version": "v2.4.0", + "purl": "pkg:golang/gopkg.in/yaml.v2@v2.4.0", + "type": "library", + "bom-ref": "pkg:golang/gopkg.in/yaml.v2@v2.4.0" + }, + { + "group": "k8s.io", + "name": "apimachinery", + "version": "v0.26.1", + "purl": "pkg:golang/k8s.io/apimachinery@v0.26.1", + "type": "library", + "bom-ref": "pkg:golang/k8s.io/apimachinery@v0.26.1" + }, + { + "group": "k8s.io", + "name": "client-go", + "version": "v0.26.1", + "purl": "pkg:golang/k8s.io/client-go@v0.26.1", + "type": "library", + "bom-ref": "pkg:golang/k8s.io/client-go@v0.26.1" + } + ], + "dependencies": [ + { + "ref": "pkg:golang/github.com/RHEcosystemAppEng/SaaSi/deployer@v0.0.0", + "dependsOn": [ + "pkg:golang/github.com/gin-gonic/gin@v1.9.1", + "pkg:golang/github.com/google/uuid@v1.1.2", + "pkg:golang/github.com/jessevdk/go-flags@v1.5.0", + "pkg:golang/github.com/kr/pretty@v0.3.1", + "pkg:golang/gopkg.in/yaml.v2@v2.4.0", + "pkg:golang/k8s.io/apimachinery@v0.26.1", + "pkg:golang/k8s.io/client-go@v0.26.1" + ] + }, + { + "ref": "pkg:golang/github.com/gin-gonic/gin@v1.9.1", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/google/uuid@v1.1.2", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/jessevdk/go-flags@v1.5.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/kr/pretty@v0.3.1", + "dependsOn": [] + }, + { + "ref": "pkg:golang/gopkg.in/yaml.v2@v2.4.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/k8s.io/apimachinery@v0.26.1", + "dependsOn": [] + }, + { + "ref": "pkg:golang/k8s.io/client-go@v0.26.1", + "dependsOn": [] + } + ] } diff --git a/test/providers/tst_manifests/golang/go_mod_no_ignore/expected_sbom_stack_analysis.json b/test/providers/tst_manifests/golang/go_mod_no_ignore/expected_sbom_stack_analysis.json index 02b7c2df..a4d36c03 100644 --- a/test/providers/tst_manifests/golang/go_mod_no_ignore/expected_sbom_stack_analysis.json +++ b/test/providers/tst_manifests/golang/go_mod_no_ignore/expected_sbom_stack_analysis.json @@ -22,22 +22,6 @@ "type": "application", "bom-ref": "pkg:golang/github.com/RHEcosystemAppEng/SaaSi/deployer@v0.0.0" }, - { - "group": "github.com/davecgh", - "name": "go-spew", - "version": "v1.1.1", - "purl": "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "type": "library", - "bom-ref": "pkg:golang/github.com/davecgh/go-spew@v1.1.1" - }, - { - "group": "github.com/emicklei/go-restful", - "name": "v3", - "version": "v3.9.0", - "purl": "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0", - "type": "library", - "bom-ref": "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0" - }, { "group": "github.com/gin-gonic", "name": "gin", @@ -46,78 +30,6 @@ "type": "library", "bom-ref": "pkg:golang/github.com/gin-gonic/gin@v1.9.1" }, - { - "group": "github.com/go-logr", - "name": "logr", - "version": "v1.2.3", - "purl": "pkg:golang/github.com/go-logr/logr@v1.2.3", - "type": "library", - "bom-ref": "pkg:golang/github.com/go-logr/logr@v1.2.3" - }, - { - "group": "github.com/go-openapi", - "name": "jsonpointer", - "version": "v0.19.5", - "purl": "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5", - "type": "library", - "bom-ref": "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5" - }, - { - "group": "github.com/go-openapi", - "name": "jsonreference", - "version": "v0.20.0", - "purl": "pkg:golang/github.com/go-openapi/jsonreference@v0.20.0", - "type": "library", - "bom-ref": "pkg:golang/github.com/go-openapi/jsonreference@v0.20.0" - }, - { - "group": "github.com/go-openapi", - "name": "swag", - "version": "v0.19.14", - "purl": "pkg:golang/github.com/go-openapi/swag@v0.19.14", - "type": "library", - "bom-ref": "pkg:golang/github.com/go-openapi/swag@v0.19.14" - }, - { - "group": "github.com/gogo", - "name": "protobuf", - "version": "v1.3.2", - "purl": "pkg:golang/github.com/gogo/protobuf@v1.3.2", - "type": "library", - "bom-ref": "pkg:golang/github.com/gogo/protobuf@v1.3.2" - }, - { - "group": "github.com/golang", - "name": "protobuf", - "version": "v1.5.2", - "purl": "pkg:golang/github.com/golang/protobuf@v1.5.2", - "type": "library", - "bom-ref": "pkg:golang/github.com/golang/protobuf@v1.5.2" - }, - { - "group": "github.com/google", - "name": "gnostic", - "version": "v0.5.7-v3refs", - "purl": "pkg:golang/github.com/google/gnostic@v0.5.7-v3refs", - "type": "library", - "bom-ref": "pkg:golang/github.com/google/gnostic@v0.5.7-v3refs" - }, - { - "group": "github.com/google", - "name": "go-cmp", - "version": "v0.5.9", - "purl": "pkg:golang/github.com/google/go-cmp@v0.5.9", - "type": "library", - "bom-ref": "pkg:golang/github.com/google/go-cmp@v0.5.9" - }, - { - "group": "github.com/google", - "name": "gofuzz", - "version": "v1.1.0", - "purl": "pkg:golang/github.com/google/gofuzz@v1.1.0", - "type": "library", - "bom-ref": "pkg:golang/github.com/google/gofuzz@v1.1.0" - }, { "group": "github.com/google", "name": "uuid", @@ -126,14 +38,6 @@ "type": "library", "bom-ref": "pkg:golang/github.com/google/uuid@v1.1.2" }, - { - "group": "github.com/imdario", - "name": "mergo", - "version": "v0.3.6", - "purl": "pkg:golang/github.com/imdario/mergo@v0.3.6", - "type": "library", - "bom-ref": "pkg:golang/github.com/imdario/mergo@v0.3.6" - }, { "group": "github.com/jessevdk", "name": "go-flags", @@ -142,22 +46,6 @@ "type": "library", "bom-ref": "pkg:golang/github.com/jessevdk/go-flags@v1.5.0" }, - { - "group": "github.com/josharian", - "name": "intern", - "version": "v1.0.0", - "purl": "pkg:golang/github.com/josharian/intern@v1.0.0", - "type": "library", - "bom-ref": "pkg:golang/github.com/josharian/intern@v1.0.0" - }, - { - "group": "github.com/json-iterator", - "name": "go", - "version": "v1.1.12", - "purl": "pkg:golang/github.com/json-iterator/go@v1.1.12", - "type": "library", - "bom-ref": "pkg:golang/github.com/json-iterator/go@v1.1.12" - }, { "group": "github.com/kr", "name": "pretty", @@ -167,116 +55,108 @@ "bom-ref": "pkg:golang/github.com/kr/pretty@v0.3.1" }, { - "group": "github.com/kr", - "name": "text", - "version": "v0.2.0", - "purl": "pkg:golang/github.com/kr/text@v0.2.0", + "group": "gopkg.in", + "name": "yaml.v2", + "version": "v2.4.0", + "purl": "pkg:golang/gopkg.in/yaml.v2@v2.4.0", "type": "library", - "bom-ref": "pkg:golang/github.com/kr/text@v0.2.0" + "bom-ref": "pkg:golang/gopkg.in/yaml.v2@v2.4.0" }, { - "group": "github.com/mailru", - "name": "easyjson", - "version": "v0.7.6", - "purl": "pkg:golang/github.com/mailru/easyjson@v0.7.6", + "group": "k8s.io", + "name": "apimachinery", + "version": "v0.26.1", + "purl": "pkg:golang/k8s.io/apimachinery@v0.26.1", "type": "library", - "bom-ref": "pkg:golang/github.com/mailru/easyjson@v0.7.6" + "bom-ref": "pkg:golang/k8s.io/apimachinery@v0.26.1" }, { - "group": "github.com/modern-go", - "name": "concurrent", - "version": "v0.0.0-20180306012644-bacd9c7ef1dd", - "purl": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", + "group": "k8s.io", + "name": "client-go", + "version": "v0.26.1", + "purl": "pkg:golang/k8s.io/client-go@v0.26.1", "type": "library", - "bom-ref": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd" + "bom-ref": "pkg:golang/k8s.io/client-go@v0.26.1" }, { - "group": "github.com/modern-go", - "name": "reflect2", - "version": "v1.0.2", - "purl": "pkg:golang/github.com/modern-go/reflect2@v1.0.2", + "group": "github.com/bytedance", + "name": "sonic", + "version": "v1.9.1", + "purl": "pkg:golang/github.com/bytedance/sonic@v1.9.1", "type": "library", - "bom-ref": "pkg:golang/github.com/modern-go/reflect2@v1.0.2" + "bom-ref": "pkg:golang/github.com/bytedance/sonic@v1.9.1" }, { - "group": "github.com/munnerz", - "name": "goautoneg", - "version": "v0.0.0-20191010083416-a7dc8b61c822", - "purl": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", + "group": "github.com/gin-contrib", + "name": "sse", + "version": "v0.1.0", + "purl": "pkg:golang/github.com/gin-contrib/sse@v0.1.0", "type": "library", - "bom-ref": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822" + "bom-ref": "pkg:golang/github.com/gin-contrib/sse@v0.1.0" }, { - "group": "github.com/rogpeppe", - "name": "go-internal", - "version": "v1.9.0", - "purl": "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0", + "group": "github.com/go-playground/validator", + "name": "v10", + "version": "v10.14.0", + "purl": "pkg:golang/github.com/go-playground/validator/v10@v10.14.0", "type": "library", - "bom-ref": "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0" + "bom-ref": "pkg:golang/github.com/go-playground/validator/v10@v10.14.0" }, { - "group": "github.com/spf13", - "name": "pflag", - "version": "v1.0.5", - "purl": "pkg:golang/github.com/spf13/pflag@v1.0.5", + "group": "github.com/goccy", + "name": "go-json", + "version": "v0.10.2", + "purl": "pkg:golang/github.com/goccy/go-json@v0.10.2", "type": "library", - "bom-ref": "pkg:golang/github.com/spf13/pflag@v1.0.5" + "bom-ref": "pkg:golang/github.com/goccy/go-json@v0.10.2" }, { - "group": "golang.org/x", - "name": "net", - "version": "v0.10.0", - "purl": "pkg:golang/golang.org/x/net@v0.10.0", + "group": "github.com/json-iterator", + "name": "go", + "version": "v1.1.12", + "purl": "pkg:golang/github.com/json-iterator/go@v1.1.12", "type": "library", - "bom-ref": "pkg:golang/golang.org/x/net@v0.10.0" + "bom-ref": "pkg:golang/github.com/json-iterator/go@v1.1.12" }, { - "group": "golang.org/x", - "name": "oauth2", - "version": "v0.0.0-20220223155221-ee480838109b", - "purl": "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b", + "group": "github.com/mattn", + "name": "go-isatty", + "version": "v0.0.19", + "purl": "pkg:golang/github.com/mattn/go-isatty@v0.0.19", "type": "library", - "bom-ref": "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b" + "bom-ref": "pkg:golang/github.com/mattn/go-isatty@v0.0.19" }, { - "group": "golang.org/x", - "name": "sys", - "version": "v0.8.0", - "purl": "pkg:golang/golang.org/x/sys@v0.8.0", + "group": "github.com/pelletier/go-toml", + "name": "v2", + "version": "v2.0.8", + "purl": "pkg:golang/github.com/pelletier/go-toml/v2@v2.0.8", "type": "library", - "bom-ref": "pkg:golang/golang.org/x/sys@v0.8.0" + "bom-ref": "pkg:golang/github.com/pelletier/go-toml/v2@v2.0.8" }, { - "group": "golang.org/x", - "name": "term", - "version": "v0.8.0", - "purl": "pkg:golang/golang.org/x/term@v0.8.0", + "group": "github.com/stretchr", + "name": "testify", + "version": "v1.8.3", + "purl": "pkg:golang/github.com/stretchr/testify@v1.8.3", "type": "library", - "bom-ref": "pkg:golang/golang.org/x/term@v0.8.0" + "bom-ref": "pkg:golang/github.com/stretchr/testify@v1.8.3" }, { - "group": "golang.org/x", - "name": "text", - "version": "v0.9.0", - "purl": "pkg:golang/golang.org/x/text@v0.9.0", + "group": "github.com/ugorji/go", + "name": "codec", + "version": "v1.2.11", + "purl": "pkg:golang/github.com/ugorji/go/codec@v1.2.11", "type": "library", - "bom-ref": "pkg:golang/golang.org/x/text@v0.9.0" + "bom-ref": "pkg:golang/github.com/ugorji/go/codec@v1.2.11" }, { "group": "golang.org/x", - "name": "time", - "version": "v0.0.0-20220210224613-90d013bbcef8", - "purl": "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8", - "type": "library", - "bom-ref": "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8" - }, - { - "group": "google.golang.org", - "name": "appengine", - "version": "v1.6.7", - "purl": "pkg:golang/google.golang.org/appengine@v1.6.7", + "name": "net", + "version": "v0.10.0", + "purl": "pkg:golang/golang.org/x/net@v0.10.0", "type": "library", - "bom-ref": "pkg:golang/google.golang.org/appengine@v1.6.7" + "bom-ref": "pkg:golang/golang.org/x/net@v0.10.0" }, { "group": "google.golang.org", @@ -288,163 +168,11 @@ }, { "group": "gopkg.in", - "name": "inf.v0", - "version": "v0.9.1", - "purl": "pkg:golang/gopkg.in/inf.v0@v0.9.1", + "name": "yaml.v3", + "version": "v3.0.1", + "purl": "pkg:golang/gopkg.in/yaml.v3@v3.0.1", "type": "library", - "bom-ref": "pkg:golang/gopkg.in/inf.v0@v0.9.1" - }, - { - "group": "gopkg.in", - "name": "yaml.v2", - "version": "v2.4.0", - "purl": "pkg:golang/gopkg.in/yaml.v2@v2.4.0", - "type": "library", - "bom-ref": "pkg:golang/gopkg.in/yaml.v2@v2.4.0" - }, - { - "group": "gopkg.in", - "name": "yaml.v3", - "version": "v3.0.1", - "purl": "pkg:golang/gopkg.in/yaml.v3@v3.0.1", - "type": "library", - "bom-ref": "pkg:golang/gopkg.in/yaml.v3@v3.0.1" - }, - { - "group": "k8s.io", - "name": "api", - "version": "v0.26.1", - "purl": "pkg:golang/k8s.io/api@v0.26.1", - "type": "library", - "bom-ref": "pkg:golang/k8s.io/api@v0.26.1" - }, - { - "group": "k8s.io", - "name": "apimachinery", - "version": "v0.26.1", - "purl": "pkg:golang/k8s.io/apimachinery@v0.26.1", - "type": "library", - "bom-ref": "pkg:golang/k8s.io/apimachinery@v0.26.1" - }, - { - "group": "k8s.io", - "name": "client-go", - "version": "v0.26.1", - "purl": "pkg:golang/k8s.io/client-go@v0.26.1", - "type": "library", - "bom-ref": "pkg:golang/k8s.io/client-go@v0.26.1" - }, - { - "group": "k8s.io/klog", - "name": "v2", - "version": "v2.80.1", - "purl": "pkg:golang/k8s.io/klog/v2@v2.80.1", - "type": "library", - "bom-ref": "pkg:golang/k8s.io/klog/v2@v2.80.1" - }, - { - "group": "k8s.io", - "name": "kube-openapi", - "version": "v0.0.0-20221012153701-172d655c2280", - "purl": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280", - "type": "library", - "bom-ref": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280" - }, - { - "group": "k8s.io", - "name": "utils", - "version": "v0.0.0-20221107191617-1a15be271d1d", - "purl": "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", - "type": "library", - "bom-ref": "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d" - }, - { - "group": "sigs.k8s.io", - "name": "json", - "version": "v0.0.0-20220713155537-f223a00ba0e2", - "purl": "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2", - "type": "library", - "bom-ref": "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2" - }, - { - "group": "sigs.k8s.io/structured-merge-diff", - "name": "v4", - "version": "v4.2.3", - "purl": "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", - "type": "library", - "bom-ref": "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3" - }, - { - "group": "sigs.k8s.io", - "name": "yaml", - "version": "v1.3.0", - "purl": "pkg:golang/sigs.k8s.io/yaml@v1.3.0", - "type": "library", - "bom-ref": "pkg:golang/sigs.k8s.io/yaml@v1.3.0" - }, - { - "group": "github.com/bytedance", - "name": "sonic", - "version": "v1.9.1", - "purl": "pkg:golang/github.com/bytedance/sonic@v1.9.1", - "type": "library", - "bom-ref": "pkg:golang/github.com/bytedance/sonic@v1.9.1" - }, - { - "group": "github.com/gin-contrib", - "name": "sse", - "version": "v0.1.0", - "purl": "pkg:golang/github.com/gin-contrib/sse@v0.1.0", - "type": "library", - "bom-ref": "pkg:golang/github.com/gin-contrib/sse@v0.1.0" - }, - { - "group": "github.com/go-playground/validator", - "name": "v10", - "version": "v10.14.0", - "purl": "pkg:golang/github.com/go-playground/validator/v10@v10.14.0", - "type": "library", - "bom-ref": "pkg:golang/github.com/go-playground/validator/v10@v10.14.0" - }, - { - "group": "github.com/goccy", - "name": "go-json", - "version": "v0.10.2", - "purl": "pkg:golang/github.com/goccy/go-json@v0.10.2", - "type": "library", - "bom-ref": "pkg:golang/github.com/goccy/go-json@v0.10.2" - }, - { - "group": "github.com/mattn", - "name": "go-isatty", - "version": "v0.0.19", - "purl": "pkg:golang/github.com/mattn/go-isatty@v0.0.19", - "type": "library", - "bom-ref": "pkg:golang/github.com/mattn/go-isatty@v0.0.19" - }, - { - "group": "github.com/pelletier/go-toml", - "name": "v2", - "version": "v2.0.8", - "purl": "pkg:golang/github.com/pelletier/go-toml/v2@v2.0.8", - "type": "library", - "bom-ref": "pkg:golang/github.com/pelletier/go-toml/v2@v2.0.8" - }, - { - "group": "github.com/stretchr", - "name": "testify", - "version": "v1.8.3", - "purl": "pkg:golang/github.com/stretchr/testify@v1.8.3", - "type": "library", - "bom-ref": "pkg:golang/github.com/stretchr/testify@v1.8.3" - }, - { - "group": "github.com/ugorji/go", - "name": "codec", - "version": "v1.2.11", - "purl": "pkg:golang/github.com/ugorji/go/codec@v1.2.11", - "type": "library", - "bom-ref": "pkg:golang/github.com/ugorji/go/codec@v1.2.11" + "bom-ref": "pkg:golang/gopkg.in/yaml.v3@v3.0.1" }, { "group": "github.com/chenzhuoyu", @@ -454,6 +182,14 @@ "type": "library", "bom-ref": "pkg:golang/github.com/chenzhuoyu/base64x@v0.0.0-20221115062448-fe3a3abad311" }, + { + "group": "github.com/davecgh", + "name": "go-spew", + "version": "v1.1.1", + "purl": "pkg:golang/github.com/davecgh/go-spew@v1.1.1", + "type": "library", + "bom-ref": "pkg:golang/github.com/davecgh/go-spew@v1.1.1" + }, { "group": "github.com/gabriel-vasile", "name": "mimetype", @@ -494,6 +230,22 @@ "type": "library", "bom-ref": "pkg:golang/github.com/leodido/go-urn@v1.2.4" }, + { + "group": "github.com/modern-go", + "name": "concurrent", + "version": "v0.0.0-20180306012644-bacd9c7ef1dd", + "purl": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", + "type": "library", + "bom-ref": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd" + }, + { + "group": "github.com/modern-go", + "name": "reflect2", + "version": "v1.0.2", + "purl": "pkg:golang/github.com/modern-go/reflect2@v1.0.2", + "type": "library", + "bom-ref": "pkg:golang/github.com/modern-go/reflect2@v1.0.2" + }, { "group": "github.com/pmezard", "name": "go-difflib", @@ -526,6 +278,62 @@ "type": "library", "bom-ref": "pkg:golang/golang.org/x/crypto@v0.9.0" }, + { + "group": "golang.org/x", + "name": "sys", + "version": "v0.8.0", + "purl": "pkg:golang/golang.org/x/sys@v0.8.0", + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/sys@v0.8.0" + }, + { + "group": "golang.org/x", + "name": "text", + "version": "v0.9.0", + "purl": "pkg:golang/golang.org/x/text@v0.9.0", + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/text@v0.9.0" + }, + { + "group": "github.com/go-openapi", + "name": "jsonpointer", + "version": "v0.19.5", + "purl": "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5", + "type": "library", + "bom-ref": "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5" + }, + { + "group": "github.com/go-openapi", + "name": "swag", + "version": "v0.19.14", + "purl": "pkg:golang/github.com/go-openapi/swag@v0.19.14", + "type": "library", + "bom-ref": "pkg:golang/github.com/go-openapi/swag@v0.19.14" + }, + { + "group": "github.com/mailru", + "name": "easyjson", + "version": "v0.7.6", + "purl": "pkg:golang/github.com/mailru/easyjson@v0.7.6", + "type": "library", + "bom-ref": "pkg:golang/github.com/mailru/easyjson@v0.7.6" + }, + { + "group": "github.com/go-openapi", + "name": "jsonreference", + "version": "v0.20.0", + "purl": "pkg:golang/github.com/go-openapi/jsonreference@v0.20.0", + "type": "library", + "bom-ref": "pkg:golang/github.com/go-openapi/jsonreference@v0.20.0" + }, + { + "group": "github.com/kr", + "name": "text", + "version": "v0.2.0", + "purl": "pkg:golang/github.com/kr/text@v0.2.0", + "type": "library", + "bom-ref": "pkg:golang/github.com/kr/text@v0.2.0" + }, { "group": "github.com/niemeyer", "name": "pretty", @@ -542,6 +350,14 @@ "type": "library", "bom-ref": "pkg:golang/gopkg.in/check.v1@v1.0.0-20200227125254-8fa46927fb4f" }, + { + "group": "github.com/gogo", + "name": "protobuf", + "version": "v1.3.2", + "purl": "pkg:golang/github.com/gogo/protobuf@v1.3.2", + "type": "library", + "bom-ref": "pkg:golang/github.com/gogo/protobuf@v1.3.2" + }, { "group": "github.com/kisielk", "name": "errcheck", @@ -567,20 +383,44 @@ "bom-ref": "pkg:golang/golang.org/x/tools@v0.6.0" }, { - "group": "github.com/docopt", - "name": "docopt-go", - "version": "v0.0.0-20180111231733-ee0de3bc6815", - "purl": "pkg:golang/github.com/docopt/docopt-go@v0.0.0-20180111231733-ee0de3bc6815", + "group": "github.com/golang", + "name": "protobuf", + "version": "v1.5.2", + "purl": "pkg:golang/github.com/golang/protobuf@v1.5.2", "type": "library", - "bom-ref": "pkg:golang/github.com/docopt/docopt-go@v0.0.0-20180111231733-ee0de3bc6815" + "bom-ref": "pkg:golang/github.com/golang/protobuf@v1.5.2" }, { - "group": "github.com/stoewer", - "name": "go-strcase", - "version": "v1.2.0", - "purl": "pkg:golang/github.com/stoewer/go-strcase@v1.2.0", - "type": "library", - "bom-ref": "pkg:golang/github.com/stoewer/go-strcase@v1.2.0" + "group": "github.com/google", + "name": "go-cmp", + "version": "v0.5.9", + "purl": "pkg:golang/github.com/google/go-cmp@v0.5.9", + "type": "library", + "bom-ref": "pkg:golang/github.com/google/go-cmp@v0.5.9" + }, + { + "group": "github.com/google", + "name": "gnostic", + "version": "v0.5.7-v3refs", + "purl": "pkg:golang/github.com/google/gnostic@v0.5.7-v3refs", + "type": "library", + "bom-ref": "pkg:golang/github.com/google/gnostic@v0.5.7-v3refs" + }, + { + "group": "github.com/docopt", + "name": "docopt-go", + "version": "v0.0.0-20180111231733-ee0de3bc6815", + "purl": "pkg:golang/github.com/docopt/docopt-go@v0.0.0-20180111231733-ee0de3bc6815", + "type": "library", + "bom-ref": "pkg:golang/github.com/docopt/docopt-go@v0.0.0-20180111231733-ee0de3bc6815" + }, + { + "group": "github.com/stoewer", + "name": "go-strcase", + "version": "v1.2.0", + "purl": "pkg:golang/github.com/stoewer/go-strcase@v1.2.0", + "type": "library", + "bom-ref": "pkg:golang/github.com/stoewer/go-strcase@v1.2.0" }, { "group": "golang.org/x", @@ -598,6 +438,22 @@ "type": "library", "bom-ref": "pkg:golang/google.golang.org/genproto@v0.0.0-20201019141844-1ed22bb0c154" }, + { + "group": "github.com/google", + "name": "gofuzz", + "version": "v1.1.0", + "purl": "pkg:golang/github.com/google/gofuzz@v1.1.0", + "type": "library", + "bom-ref": "pkg:golang/github.com/google/gofuzz@v1.1.0" + }, + { + "group": "github.com/rogpeppe", + "name": "go-internal", + "version": "v1.9.0", + "purl": "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0", + "type": "library", + "bom-ref": "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0" + }, { "group": "github.com/creack", "name": "pty", @@ -606,6 +462,14 @@ "type": "library", "bom-ref": "pkg:golang/github.com/creack/pty@v1.1.9" }, + { + "group": "github.com/josharian", + "name": "intern", + "version": "v1.0.0", + "purl": "pkg:golang/github.com/josharian/intern@v1.0.0", + "type": "library", + "bom-ref": "pkg:golang/github.com/josharian/intern@v1.0.0" + }, { "group": "github.com/pkg", "name": "diff", @@ -614,6 +478,22 @@ "type": "library", "bom-ref": "pkg:golang/github.com/pkg/diff@v0.0.0-20210226163009-20ebb0f2a09e" }, + { + "group": "golang.org/x", + "name": "term", + "version": "v0.8.0", + "purl": "pkg:golang/golang.org/x/term@v0.8.0", + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/term@v0.8.0" + }, + { + "group": "golang.org/x", + "name": "oauth2", + "version": "v0.0.0-20220223155221-ee480838109b", + "purl": "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b", + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b" + }, { "group": "cloud.google.com", "name": "go", @@ -622,6 +502,14 @@ "type": "library", "bom-ref": "pkg:golang/cloud.google.com/go@v0.65.0" }, + { + "group": "google.golang.org", + "name": "appengine", + "version": "v1.6.7", + "purl": "pkg:golang/google.golang.org/appengine@v1.6.7", + "type": "library", + "bom-ref": "pkg:golang/google.golang.org/appengine@v1.6.7" + }, { "group": "golang.org/x", "name": "mod", @@ -630,6 +518,78 @@ "type": "library", "bom-ref": "pkg:golang/golang.org/x/mod@v0.8.0" }, + { + "group": "k8s.io", + "name": "api", + "version": "v0.26.1", + "purl": "pkg:golang/k8s.io/api@v0.26.1", + "type": "library", + "bom-ref": "pkg:golang/k8s.io/api@v0.26.1" + }, + { + "group": "github.com/go-logr", + "name": "logr", + "version": "v1.2.3", + "purl": "pkg:golang/github.com/go-logr/logr@v1.2.3", + "type": "library", + "bom-ref": "pkg:golang/github.com/go-logr/logr@v1.2.3" + }, + { + "group": "github.com/spf13", + "name": "pflag", + "version": "v1.0.5", + "purl": "pkg:golang/github.com/spf13/pflag@v1.0.5", + "type": "library", + "bom-ref": "pkg:golang/github.com/spf13/pflag@v1.0.5" + }, + { + "group": "gopkg.in", + "name": "inf.v0", + "version": "v0.9.1", + "purl": "pkg:golang/gopkg.in/inf.v0@v0.9.1", + "type": "library", + "bom-ref": "pkg:golang/gopkg.in/inf.v0@v0.9.1" + }, + { + "group": "k8s.io/klog", + "name": "v2", + "version": "v2.80.1", + "purl": "pkg:golang/k8s.io/klog/v2@v2.80.1", + "type": "library", + "bom-ref": "pkg:golang/k8s.io/klog/v2@v2.80.1" + }, + { + "group": "k8s.io", + "name": "utils", + "version": "v0.0.0-20221107191617-1a15be271d1d", + "purl": "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", + "type": "library", + "bom-ref": "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d" + }, + { + "group": "sigs.k8s.io", + "name": "json", + "version": "v0.0.0-20220713155537-f223a00ba0e2", + "purl": "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2", + "type": "library", + "bom-ref": "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2" + }, + { + "group": "sigs.k8s.io/structured-merge-diff", + "name": "v4", + "version": "v4.2.3", + "purl": "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", + "type": "library", + "bom-ref": "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3" + }, + { + "group": "sigs.k8s.io", + "name": "yaml", + "version": "v1.3.0", + "purl": "pkg:golang/sigs.k8s.io/yaml@v1.3.0", + "type": "library", + "bom-ref": "pkg:golang/sigs.k8s.io/yaml@v1.3.0" + }, { "group": "github.com/armon", "name": "go-socks5", @@ -670,6 +630,14 @@ "type": "library", "bom-ref": "pkg:golang/github.com/mxk/go-flowrate@v0.0.0-20140419014527-cca7078d478f" }, + { + "group": "k8s.io", + "name": "kube-openapi", + "version": "v0.0.0-20221012153701-172d655c2280", + "purl": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280", + "type": "library", + "bom-ref": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280" + }, { "group": "github.com/onsi/ginkgo", "name": "v2", @@ -710,6 +678,14 @@ "type": "library", "bom-ref": "pkg:golang/github.com/gregjones/httpcache@v0.0.0-20180305231024-9cad4c3443a7" }, + { + "group": "github.com/imdario", + "name": "mergo", + "version": "v0.3.6", + "purl": "pkg:golang/github.com/imdario/mergo@v0.3.6", + "type": "library", + "bom-ref": "pkg:golang/github.com/imdario/mergo@v0.3.6" + }, { "group": "github.com/peterbourgon", "name": "diskv", @@ -718,6 +694,22 @@ "type": "library", "bom-ref": "pkg:golang/github.com/peterbourgon/diskv@v2.0.1%2Bincompatible" }, + { + "group": "golang.org/x", + "name": "time", + "version": "v0.0.0-20220210224613-90d013bbcef8", + "purl": "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8", + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8" + }, + { + "group": "github.com/emicklei/go-restful", + "name": "v3", + "version": "v3.9.0", + "purl": "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0", + "type": "library", + "bom-ref": "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0" + }, { "group": "github.com/google", "name": "btree", @@ -726,6 +718,14 @@ "type": "library", "bom-ref": "pkg:golang/github.com/google/btree@v1.0.1" }, + { + "group": "github.com/munnerz", + "name": "goautoneg", + "version": "v0.0.0-20191010083416-a7dc8b61c822", + "purl": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", + "type": "library", + "bom-ref": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822" + }, { "group": "github.com/NYTimes", "name": "gziphandler", @@ -1112,358 +1112,86 @@ { "group": "rsc.io", "name": "binaryregexp", - "version": "v0.2.0", - "purl": "pkg:golang/rsc.io/binaryregexp@v0.2.0", - "type": "library", - "bom-ref": "pkg:golang/rsc.io/binaryregexp@v0.2.0" - }, - { - "group": "github.com/go-gl", - "name": "glfw", - "version": "v0.0.0-20190409004039-e6da0acd62b1", - "purl": "pkg:golang/github.com/go-gl/glfw@v0.0.0-20190409004039-e6da0acd62b1", - "type": "library", - "bom-ref": "pkg:golang/github.com/go-gl/glfw@v0.0.0-20190409004039-e6da0acd62b1" - } - ], - "dependencies": [ - { - "ref": "pkg:golang/github.com/RHEcosystemAppEng/SaaSi/deployer@v0.0.0", - "dependsOn": [ - "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0", - "pkg:golang/github.com/gin-gonic/gin@v1.9.1", - "pkg:golang/github.com/go-logr/logr@v1.2.3", - "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5", - "pkg:golang/github.com/go-openapi/jsonreference@v0.20.0", - "pkg:golang/github.com/go-openapi/swag@v0.19.14", - "pkg:golang/github.com/gogo/protobuf@v1.3.2", - "pkg:golang/github.com/golang/protobuf@v1.5.2", - "pkg:golang/github.com/google/gnostic@v0.5.7-v3refs", - "pkg:golang/github.com/google/go-cmp@v0.5.9", - "pkg:golang/github.com/google/gofuzz@v1.1.0", - "pkg:golang/github.com/google/uuid@v1.1.2", - "pkg:golang/github.com/imdario/mergo@v0.3.6", - "pkg:golang/github.com/jessevdk/go-flags@v1.5.0", - "pkg:golang/github.com/josharian/intern@v1.0.0", - "pkg:golang/github.com/json-iterator/go@v1.1.12", - "pkg:golang/github.com/kr/pretty@v0.3.1", - "pkg:golang/github.com/kr/text@v0.2.0", - "pkg:golang/github.com/mailru/easyjson@v0.7.6", - "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", - "pkg:golang/github.com/modern-go/reflect2@v1.0.2", - "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", - "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0", - "pkg:golang/github.com/spf13/pflag@v1.0.5", - "pkg:golang/golang.org/x/net@v0.10.0", - "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b", - "pkg:golang/golang.org/x/sys@v0.8.0", - "pkg:golang/golang.org/x/term@v0.8.0", - "pkg:golang/golang.org/x/text@v0.9.0", - "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8", - "pkg:golang/google.golang.org/appengine@v1.6.7", - "pkg:golang/google.golang.org/protobuf@v1.30.0", - "pkg:golang/gopkg.in/inf.v0@v0.9.1", - "pkg:golang/gopkg.in/yaml.v2@v2.4.0", - "pkg:golang/gopkg.in/yaml.v3@v3.0.1", - "pkg:golang/k8s.io/api@v0.26.1", - "pkg:golang/k8s.io/apimachinery@v0.26.1", - "pkg:golang/k8s.io/client-go@v0.26.1", - "pkg:golang/k8s.io/klog/v2@v2.80.1", - "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280", - "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", - "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2", - "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", - "pkg:golang/sigs.k8s.io/yaml@v1.3.0" - ] - }, - { - "ref": "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/gin-gonic/gin@v1.9.1", - "dependsOn": [ - "pkg:golang/github.com/bytedance/sonic@v1.9.1", - "pkg:golang/github.com/gin-contrib/sse@v0.1.0", - "pkg:golang/github.com/go-playground/validator/v10@v10.14.0", - "pkg:golang/github.com/goccy/go-json@v0.10.2", - "pkg:golang/github.com/json-iterator/go@v1.1.12", - "pkg:golang/github.com/mattn/go-isatty@v0.0.19", - "pkg:golang/github.com/pelletier/go-toml/v2@v2.0.8", - "pkg:golang/github.com/stretchr/testify@v1.8.3", - "pkg:golang/github.com/ugorji/go/codec@v1.2.11", - "pkg:golang/golang.org/x/net@v0.10.0", - "pkg:golang/google.golang.org/protobuf@v1.30.0", - "pkg:golang/gopkg.in/yaml.v3@v3.0.1", - "pkg:golang/github.com/chenzhuoyu/base64x@v0.0.0-20221115062448-fe3a3abad311", - "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "pkg:golang/github.com/gabriel-vasile/mimetype@v1.4.2", - "pkg:golang/github.com/go-playground/locales@v0.14.1", - "pkg:golang/github.com/go-playground/universal-translator@v0.18.1", - "pkg:golang/github.com/klauspost/cpuid/v2@v2.2.4", - "pkg:golang/github.com/leodido/go-urn@v1.2.4", - "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", - "pkg:golang/github.com/modern-go/reflect2@v1.0.2", - "pkg:golang/github.com/pmezard/go-difflib@v1.0.0", - "pkg:golang/github.com/twitchyliquid64/golang-asm@v0.15.1", - "pkg:golang/golang.org/x/arch@v0.3.0", - "pkg:golang/golang.org/x/crypto@v0.9.0", - "pkg:golang/golang.org/x/sys@v0.8.0", - "pkg:golang/golang.org/x/text@v0.9.0" - ] - }, - { - "ref": "pkg:golang/github.com/go-logr/logr@v1.2.3", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5", - "dependsOn": [ - "pkg:golang/github.com/go-openapi/swag@v0.19.14", - "pkg:golang/github.com/mailru/easyjson@v0.7.6", - "pkg:golang/github.com/stretchr/testify@v1.8.3" - ] - }, - { - "ref": "pkg:golang/github.com/go-openapi/jsonreference@v0.20.0", - "dependsOn": [ - "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5", - "pkg:golang/github.com/stretchr/testify@v1.8.3" - ] - }, - { - "ref": "pkg:golang/github.com/go-openapi/swag@v0.19.14", - "dependsOn": [ - "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "pkg:golang/github.com/kr/text@v0.2.0", - "pkg:golang/github.com/mailru/easyjson@v0.7.6", - "pkg:golang/github.com/niemeyer/pretty@v0.0.0-20200227124842-a10e7caefd8e", - "pkg:golang/github.com/stretchr/testify@v1.8.3", - "pkg:golang/gopkg.in/check.v1@v1.0.0-20200227125254-8fa46927fb4f", - "pkg:golang/gopkg.in/yaml.v2@v2.4.0", - "pkg:golang/gopkg.in/yaml.v3@v3.0.1", - "pkg:golang/github.com/kr/pretty@v0.3.1" - ] - }, - { - "ref": "pkg:golang/github.com/gogo/protobuf@v1.3.2", - "dependsOn": [ - "pkg:golang/github.com/kisielk/errcheck@v1.5.0", - "pkg:golang/github.com/kisielk/gotool@v1.0.0", - "pkg:golang/golang.org/x/tools@v0.6.0" - ] - }, - { - "ref": "pkg:golang/github.com/golang/protobuf@v1.5.2", - "dependsOn": [ - "pkg:golang/github.com/google/go-cmp@v0.5.9", - "pkg:golang/google.golang.org/protobuf@v1.30.0" - ] - }, - { - "ref": "pkg:golang/github.com/google/gnostic@v0.5.7-v3refs", - "dependsOn": [ - "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "pkg:golang/github.com/docopt/docopt-go@v0.0.0-20180111231733-ee0de3bc6815", - "pkg:golang/github.com/golang/protobuf@v1.5.2", - "pkg:golang/github.com/kr/pretty@v0.3.1", - "pkg:golang/github.com/stoewer/go-strcase@v1.2.0", - "pkg:golang/golang.org/x/tools@v0.6.0", - "pkg:golang/golang.org/x/xerrors@v0.0.0-20200804184101-5ec99f83aff1", - "pkg:golang/google.golang.org/genproto@v0.0.0-20201019141844-1ed22bb0c154", - "pkg:golang/google.golang.org/protobuf@v1.30.0", - "pkg:golang/gopkg.in/check.v1@v1.0.0-20200227125254-8fa46927fb4f", - "pkg:golang/gopkg.in/yaml.v3@v3.0.1" - ] - }, - { - "ref": "pkg:golang/github.com/google/go-cmp@v0.5.9", - "dependsOn": [ - "pkg:golang/golang.org/x/xerrors@v0.0.0-20200804184101-5ec99f83aff1" - ] - }, - { - "ref": "pkg:golang/github.com/google/gofuzz@v1.1.0", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/google/uuid@v1.1.2", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/imdario/mergo@v0.3.6", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/jessevdk/go-flags@v1.5.0", - "dependsOn": [ - "pkg:golang/golang.org/x/sys@v0.8.0" - ] - }, - { - "ref": "pkg:golang/github.com/josharian/intern@v1.0.0", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/json-iterator/go@v1.1.12", - "dependsOn": [ - "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "pkg:golang/github.com/google/gofuzz@v1.1.0", - "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", - "pkg:golang/github.com/modern-go/reflect2@v1.0.2", - "pkg:golang/github.com/stretchr/testify@v1.8.3" - ] - }, - { - "ref": "pkg:golang/github.com/kr/pretty@v0.3.1", - "dependsOn": [ - "pkg:golang/github.com/kr/text@v0.2.0", - "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0" - ] - }, - { - "ref": "pkg:golang/github.com/kr/text@v0.2.0", - "dependsOn": [ - "pkg:golang/github.com/creack/pty@v1.1.9", - "pkg:golang/github.com/kr/pty@v1.1.1" - ] - }, - { - "ref": "pkg:golang/github.com/mailru/easyjson@v0.7.6", - "dependsOn": [ - "pkg:golang/github.com/josharian/intern@v1.0.0" - ] - }, - { - "ref": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/modern-go/reflect2@v1.0.2", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0", - "dependsOn": [ - "pkg:golang/github.com/pkg/diff@v0.0.0-20210226163009-20ebb0f2a09e", - "pkg:golang/gopkg.in/errgo.v2@v2.1.0" - ] - }, - { - "ref": "pkg:golang/github.com/spf13/pflag@v1.0.5", - "dependsOn": [] - }, - { - "ref": "pkg:golang/golang.org/x/net@v0.10.0", - "dependsOn": [ - "pkg:golang/golang.org/x/sys@v0.8.0", - "pkg:golang/golang.org/x/term@v0.8.0", - "pkg:golang/golang.org/x/text@v0.9.0", - "pkg:golang/golang.org/x/crypto@v0.9.0" - ] - }, - { - "ref": "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b", - "dependsOn": [ - "pkg:golang/cloud.google.com/go@v0.65.0", - "pkg:golang/golang.org/x/net@v0.10.0", - "pkg:golang/google.golang.org/appengine@v1.6.7", - "pkg:golang/golang.org/x/sync@v0.0.0-20201020160332-67f06af15bc9" - ] - }, - { - "ref": "pkg:golang/golang.org/x/sys@v0.8.0", - "dependsOn": [] + "version": "v0.2.0", + "purl": "pkg:golang/rsc.io/binaryregexp@v0.2.0", + "type": "library", + "bom-ref": "pkg:golang/rsc.io/binaryregexp@v0.2.0" }, { - "ref": "pkg:golang/golang.org/x/term@v0.8.0", - "dependsOn": [ - "pkg:golang/golang.org/x/sys@v0.8.0" - ] - }, + "group": "github.com/go-gl", + "name": "glfw", + "version": "v0.0.0-20190409004039-e6da0acd62b1", + "purl": "pkg:golang/github.com/go-gl/glfw@v0.0.0-20190409004039-e6da0acd62b1", + "type": "library", + "bom-ref": "pkg:golang/github.com/go-gl/glfw@v0.0.0-20190409004039-e6da0acd62b1" + } + ], + "dependencies": [ { - "ref": "pkg:golang/golang.org/x/text@v0.9.0", + "ref": "pkg:golang/github.com/RHEcosystemAppEng/SaaSi/deployer@v0.0.0", "dependsOn": [ - "pkg:golang/golang.org/x/tools@v0.6.0", - "pkg:golang/golang.org/x/mod@v0.8.0", - "pkg:golang/golang.org/x/sys@v0.8.0" + "pkg:golang/github.com/gin-gonic/gin@v1.9.1", + "pkg:golang/github.com/google/uuid@v1.1.2", + "pkg:golang/github.com/jessevdk/go-flags@v1.5.0", + "pkg:golang/github.com/kr/pretty@v0.3.1", + "pkg:golang/gopkg.in/yaml.v2@v2.4.0", + "pkg:golang/k8s.io/apimachinery@v0.26.1", + "pkg:golang/k8s.io/client-go@v0.26.1" ] }, { - "ref": "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8", - "dependsOn": [] - }, - { - "ref": "pkg:golang/google.golang.org/appengine@v1.6.7", + "ref": "pkg:golang/github.com/gin-gonic/gin@v1.9.1", "dependsOn": [ - "pkg:golang/github.com/golang/protobuf@v1.5.2", + "pkg:golang/github.com/bytedance/sonic@v1.9.1", + "pkg:golang/github.com/gin-contrib/sse@v0.1.0", + "pkg:golang/github.com/go-playground/validator/v10@v10.14.0", + "pkg:golang/github.com/goccy/go-json@v0.10.2", + "pkg:golang/github.com/json-iterator/go@v1.1.12", + "pkg:golang/github.com/mattn/go-isatty@v0.0.19", + "pkg:golang/github.com/pelletier/go-toml/v2@v2.0.8", + "pkg:golang/github.com/stretchr/testify@v1.8.3", + "pkg:golang/github.com/ugorji/go/codec@v1.2.11", "pkg:golang/golang.org/x/net@v0.10.0", - "pkg:golang/golang.org/x/text@v0.9.0", + "pkg:golang/google.golang.org/protobuf@v1.30.0", + "pkg:golang/gopkg.in/yaml.v3@v3.0.1", + "pkg:golang/github.com/chenzhuoyu/base64x@v0.0.0-20221115062448-fe3a3abad311", + "pkg:golang/github.com/davecgh/go-spew@v1.1.1", + "pkg:golang/github.com/gabriel-vasile/mimetype@v1.4.2", + "pkg:golang/github.com/go-playground/locales@v0.14.1", + "pkg:golang/github.com/go-playground/universal-translator@v0.18.1", + "pkg:golang/github.com/klauspost/cpuid/v2@v2.2.4", + "pkg:golang/github.com/leodido/go-urn@v1.2.4", + "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", + "pkg:golang/github.com/modern-go/reflect2@v1.0.2", + "pkg:golang/github.com/pmezard/go-difflib@v1.0.0", + "pkg:golang/github.com/twitchyliquid64/golang-asm@v0.15.1", + "pkg:golang/golang.org/x/arch@v0.3.0", "pkg:golang/golang.org/x/crypto@v0.9.0", "pkg:golang/golang.org/x/sys@v0.8.0", - "pkg:golang/golang.org/x/tools@v0.6.0" - ] - }, - { - "ref": "pkg:golang/google.golang.org/protobuf@v1.30.0", - "dependsOn": [ - "pkg:golang/github.com/golang/protobuf@v1.5.2", - "pkg:golang/github.com/google/go-cmp@v0.5.9", - "pkg:golang/google.golang.org/genproto@v0.0.0-20201019141844-1ed22bb0c154" + "pkg:golang/golang.org/x/text@v0.9.0" ] }, { - "ref": "pkg:golang/gopkg.in/inf.v0@v0.9.1", + "ref": "pkg:golang/github.com/google/uuid@v1.1.2", "dependsOn": [] }, { - "ref": "pkg:golang/gopkg.in/yaml.v2@v2.4.0", + "ref": "pkg:golang/github.com/jessevdk/go-flags@v1.5.0", "dependsOn": [ - "pkg:golang/gopkg.in/check.v1@v1.0.0-20200227125254-8fa46927fb4f" + "pkg:golang/golang.org/x/sys@v0.8.0" ] }, { - "ref": "pkg:golang/gopkg.in/yaml.v3@v3.0.1", + "ref": "pkg:golang/github.com/kr/pretty@v0.3.1", "dependsOn": [ - "pkg:golang/gopkg.in/check.v1@v1.0.0-20200227125254-8fa46927fb4f" + "pkg:golang/github.com/kr/text@v0.2.0", + "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0" ] }, { - "ref": "pkg:golang/k8s.io/api@v0.26.1", + "ref": "pkg:golang/gopkg.in/yaml.v2@v2.4.0", "dependsOn": [ - "pkg:golang/github.com/gogo/protobuf@v1.3.2", - "pkg:golang/github.com/stretchr/testify@v1.8.3", - "pkg:golang/k8s.io/apimachinery@v0.26.1", - "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "pkg:golang/github.com/go-logr/logr@v1.2.3", - "pkg:golang/github.com/golang/protobuf@v1.5.2", - "pkg:golang/github.com/google/go-cmp@v0.5.9", - "pkg:golang/github.com/google/gofuzz@v1.1.0", - "pkg:golang/github.com/json-iterator/go@v1.1.12", - "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", - "pkg:golang/github.com/modern-go/reflect2@v1.0.2", - "pkg:golang/github.com/pmezard/go-difflib@v1.0.0", - "pkg:golang/github.com/spf13/pflag@v1.0.5", - "pkg:golang/golang.org/x/net@v0.10.0", - "pkg:golang/golang.org/x/text@v0.9.0", - "pkg:golang/google.golang.org/protobuf@v1.30.0", - "pkg:golang/gopkg.in/inf.v0@v0.9.1", - "pkg:golang/gopkg.in/yaml.v2@v2.4.0", - "pkg:golang/gopkg.in/yaml.v3@v3.0.1", - "pkg:golang/k8s.io/klog/v2@v2.80.1", - "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", - "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2", - "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", - "pkg:golang/sigs.k8s.io/yaml@v1.3.0" + "pkg:golang/gopkg.in/check.v1@v1.0.0-20200227125254-8fa46927fb4f" ] }, { @@ -1562,163 +1290,183 @@ ] }, { - "ref": "pkg:golang/k8s.io/klog/v2@v2.80.1", - "dependsOn": [ - "pkg:golang/github.com/go-logr/logr@v1.2.3" - ] + "ref": "pkg:golang/github.com/bytedance/sonic@v1.9.1", + "dependsOn": [] }, { - "ref": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280", + "ref": "pkg:golang/github.com/gin-contrib/sse@v0.1.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/go-playground/validator/v10@v10.14.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/goccy/go-json@v0.10.2", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/json-iterator/go@v1.1.12", "dependsOn": [ - "pkg:golang/github.com/NYTimes/gziphandler@v0.0.0-20170623195520-56545f4a5d46", - "pkg:golang/github.com/asaskevich/govalidator@v0.0.0-20190424111038-f61b66f89f4a", - "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0", - "pkg:golang/github.com/go-openapi/jsonreference@v0.20.0", - "pkg:golang/github.com/go-openapi/swag@v0.19.14", - "pkg:golang/github.com/golang/protobuf@v1.5.2", - "pkg:golang/github.com/google/gnostic@v0.5.7-v3refs", - "pkg:golang/github.com/google/go-cmp@v0.5.9", - "pkg:golang/github.com/google/gofuzz@v1.1.0", - "pkg:golang/github.com/google/uuid@v1.1.2", - "pkg:golang/github.com/mitchellh/mapstructure@v1.1.2", - "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", - "pkg:golang/github.com/onsi/ginkgo/v2@v2.4.0", - "pkg:golang/github.com/onsi/gomega@v1.23.0", - "pkg:golang/github.com/spf13/pflag@v1.0.5", - "pkg:golang/github.com/stretchr/testify@v1.8.3", - "pkg:golang/google.golang.org/protobuf@v1.30.0", - "pkg:golang/gopkg.in/yaml.v2@v2.4.0", - "pkg:golang/gopkg.in/yaml.v3@v3.0.1", - "pkg:golang/k8s.io/gengo@v0.0.0-20210813121822-485abfe95c7c", - "pkg:golang/k8s.io/klog/v2@v2.80.1", - "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", - "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", - "pkg:golang/sigs.k8s.io/yaml@v1.3.0", - "pkg:golang/github.com/PuerkitoBio/purell@v1.1.1", - "pkg:golang/github.com/PuerkitoBio/urlesc@v0.0.0-20170810143723-de5bf2ad4578", "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "pkg:golang/github.com/go-logr/logr@v1.2.3", - "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5", - "pkg:golang/github.com/json-iterator/go@v1.1.12", - "pkg:golang/github.com/mailru/easyjson@v0.7.6", + "pkg:golang/github.com/google/gofuzz@v1.1.0", "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", "pkg:golang/github.com/modern-go/reflect2@v1.0.2", - "pkg:golang/github.com/pmezard/go-difflib@v1.0.0", - "pkg:golang/golang.org/x/mod@v0.8.0", - "pkg:golang/golang.org/x/net@v0.10.0", - "pkg:golang/golang.org/x/sys@v0.8.0", - "pkg:golang/golang.org/x/text@v0.9.0", - "pkg:golang/golang.org/x/tools@v0.6.0", - "pkg:golang/golang.org/x/xerrors@v0.0.0-20200804184101-5ec99f83aff1" + "pkg:golang/github.com/stretchr/testify@v1.8.3" ] }, { - "ref": "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", + "ref": "pkg:golang/github.com/mattn/go-isatty@v0.0.19", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/pelletier/go-toml/v2@v2.0.8", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/stretchr/testify@v1.8.3", "dependsOn": [ "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "pkg:golang/k8s.io/klog/v2@v2.80.1", - "pkg:golang/github.com/go-logr/logr@v1.2.3" + "pkg:golang/github.com/pmezard/go-difflib@v1.0.0", + "pkg:golang/github.com/stretchr/objx@v0.1.0", + "pkg:golang/gopkg.in/yaml.v3@v3.0.1", + "pkg:golang/gopkg.in/yaml.v2@v2.4.0" ] }, { - "ref": "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2", + "ref": "pkg:golang/github.com/ugorji/go/codec@v1.2.11", "dependsOn": [] }, { - "ref": "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", + "ref": "pkg:golang/golang.org/x/net@v0.10.0", "dependsOn": [ - "pkg:golang/gopkg.in/yaml.v2@v2.4.0", - "pkg:golang/github.com/google/gofuzz@v1.1.0", - "pkg:golang/github.com/json-iterator/go@v1.1.12", - "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd" + "pkg:golang/golang.org/x/sys@v0.8.0", + "pkg:golang/golang.org/x/term@v0.8.0", + "pkg:golang/golang.org/x/text@v0.9.0", + "pkg:golang/golang.org/x/crypto@v0.9.0" ] }, { - "ref": "pkg:golang/sigs.k8s.io/yaml@v1.3.0", + "ref": "pkg:golang/google.golang.org/protobuf@v1.30.0", "dependsOn": [ - "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "pkg:golang/gopkg.in/yaml.v2@v2.4.0" + "pkg:golang/github.com/golang/protobuf@v1.5.2", + "pkg:golang/github.com/google/go-cmp@v0.5.9", + "pkg:golang/google.golang.org/genproto@v0.0.0-20201019141844-1ed22bb0c154" ] }, { - "ref": "pkg:golang/github.com/bytedance/sonic@v1.9.1", + "ref": "pkg:golang/gopkg.in/yaml.v3@v3.0.1", + "dependsOn": [ + "pkg:golang/gopkg.in/check.v1@v1.0.0-20200227125254-8fa46927fb4f" + ] + }, + { + "ref": "pkg:golang/github.com/chenzhuoyu/base64x@v0.0.0-20221115062448-fe3a3abad311", "dependsOn": [] }, { - "ref": "pkg:golang/github.com/gin-contrib/sse@v0.1.0", + "ref": "pkg:golang/github.com/davecgh/go-spew@v1.1.1", "dependsOn": [] }, { - "ref": "pkg:golang/github.com/go-playground/validator/v10@v10.14.0", + "ref": "pkg:golang/github.com/gabriel-vasile/mimetype@v1.4.2", "dependsOn": [] }, { - "ref": "pkg:golang/github.com/goccy/go-json@v0.10.2", + "ref": "pkg:golang/github.com/go-playground/locales@v0.14.1", "dependsOn": [] }, { - "ref": "pkg:golang/github.com/mattn/go-isatty@v0.0.19", + "ref": "pkg:golang/github.com/go-playground/universal-translator@v0.18.1", "dependsOn": [] }, { - "ref": "pkg:golang/github.com/pelletier/go-toml/v2@v2.0.8", + "ref": "pkg:golang/github.com/klauspost/cpuid/v2@v2.2.4", "dependsOn": [] }, { - "ref": "pkg:golang/github.com/stretchr/testify@v1.8.3", - "dependsOn": [ - "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "pkg:golang/github.com/pmezard/go-difflib@v1.0.0", - "pkg:golang/github.com/stretchr/objx@v0.1.0", - "pkg:golang/gopkg.in/yaml.v3@v3.0.1", - "pkg:golang/gopkg.in/yaml.v2@v2.4.0" - ] + "ref": "pkg:golang/github.com/leodido/go-urn@v1.2.4", + "dependsOn": [] }, { - "ref": "pkg:golang/github.com/ugorji/go/codec@v1.2.11", + "ref": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", "dependsOn": [] }, { - "ref": "pkg:golang/github.com/chenzhuoyu/base64x@v0.0.0-20221115062448-fe3a3abad311", + "ref": "pkg:golang/github.com/modern-go/reflect2@v1.0.2", "dependsOn": [] }, { - "ref": "pkg:golang/github.com/gabriel-vasile/mimetype@v1.4.2", + "ref": "pkg:golang/github.com/pmezard/go-difflib@v1.0.0", "dependsOn": [] }, { - "ref": "pkg:golang/github.com/go-playground/locales@v0.14.1", + "ref": "pkg:golang/github.com/twitchyliquid64/golang-asm@v0.15.1", "dependsOn": [] }, { - "ref": "pkg:golang/github.com/go-playground/universal-translator@v0.18.1", + "ref": "pkg:golang/golang.org/x/arch@v0.3.0", "dependsOn": [] }, { - "ref": "pkg:golang/github.com/klauspost/cpuid/v2@v2.2.4", + "ref": "pkg:golang/golang.org/x/crypto@v0.9.0", + "dependsOn": [ + "pkg:golang/golang.org/x/sys@v0.8.0", + "pkg:golang/golang.org/x/net@v0.10.0" + ] + }, + { + "ref": "pkg:golang/golang.org/x/sys@v0.8.0", "dependsOn": [] }, { - "ref": "pkg:golang/github.com/leodido/go-urn@v1.2.4", - "dependsOn": [] + "ref": "pkg:golang/golang.org/x/text@v0.9.0", + "dependsOn": [ + "pkg:golang/golang.org/x/tools@v0.6.0", + "pkg:golang/golang.org/x/mod@v0.8.0", + "pkg:golang/golang.org/x/sys@v0.8.0" + ] + }, + { + "ref": "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5", + "dependsOn": [ + "pkg:golang/github.com/go-openapi/swag@v0.19.14", + "pkg:golang/github.com/mailru/easyjson@v0.7.6", + "pkg:golang/github.com/stretchr/testify@v1.8.3" + ] }, { - "ref": "pkg:golang/github.com/pmezard/go-difflib@v1.0.0", - "dependsOn": [] + "ref": "pkg:golang/github.com/go-openapi/swag@v0.19.14", + "dependsOn": [ + "pkg:golang/github.com/davecgh/go-spew@v1.1.1", + "pkg:golang/github.com/kr/text@v0.2.0", + "pkg:golang/github.com/mailru/easyjson@v0.7.6", + "pkg:golang/github.com/niemeyer/pretty@v0.0.0-20200227124842-a10e7caefd8e", + "pkg:golang/github.com/stretchr/testify@v1.8.3", + "pkg:golang/gopkg.in/check.v1@v1.0.0-20200227125254-8fa46927fb4f", + "pkg:golang/gopkg.in/yaml.v2@v2.4.0", + "pkg:golang/gopkg.in/yaml.v3@v3.0.1", + "pkg:golang/github.com/kr/pretty@v0.3.1" + ] }, { - "ref": "pkg:golang/github.com/twitchyliquid64/golang-asm@v0.15.1", - "dependsOn": [] + "ref": "pkg:golang/github.com/mailru/easyjson@v0.7.6", + "dependsOn": [ + "pkg:golang/github.com/josharian/intern@v1.0.0" + ] }, { - "ref": "pkg:golang/golang.org/x/arch@v0.3.0", - "dependsOn": [] + "ref": "pkg:golang/github.com/go-openapi/jsonreference@v0.20.0", + "dependsOn": [ + "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5", + "pkg:golang/github.com/stretchr/testify@v1.8.3" + ] }, { - "ref": "pkg:golang/golang.org/x/crypto@v0.9.0", + "ref": "pkg:golang/github.com/kr/text@v0.2.0", "dependsOn": [ - "pkg:golang/golang.org/x/sys@v0.8.0", - "pkg:golang/golang.org/x/net@v0.10.0" + "pkg:golang/github.com/creack/pty@v1.1.9", + "pkg:golang/github.com/kr/pty@v1.1.1" ] }, { @@ -1731,6 +1479,14 @@ "ref": "pkg:golang/gopkg.in/check.v1@v1.0.0-20200227125254-8fa46927fb4f", "dependsOn": [] }, + { + "ref": "pkg:golang/github.com/gogo/protobuf@v1.3.2", + "dependsOn": [ + "pkg:golang/github.com/kisielk/errcheck@v1.5.0", + "pkg:golang/github.com/kisielk/gotool@v1.0.0", + "pkg:golang/golang.org/x/tools@v0.6.0" + ] + }, { "ref": "pkg:golang/github.com/kisielk/errcheck@v1.5.0", "dependsOn": [ @@ -1752,6 +1508,35 @@ "pkg:golang/google.golang.org/appengine@v1.6.7" ] }, + { + "ref": "pkg:golang/github.com/golang/protobuf@v1.5.2", + "dependsOn": [ + "pkg:golang/github.com/google/go-cmp@v0.5.9", + "pkg:golang/google.golang.org/protobuf@v1.30.0" + ] + }, + { + "ref": "pkg:golang/github.com/google/go-cmp@v0.5.9", + "dependsOn": [ + "pkg:golang/golang.org/x/xerrors@v0.0.0-20200804184101-5ec99f83aff1" + ] + }, + { + "ref": "pkg:golang/github.com/google/gnostic@v0.5.7-v3refs", + "dependsOn": [ + "pkg:golang/github.com/davecgh/go-spew@v1.1.1", + "pkg:golang/github.com/docopt/docopt-go@v0.0.0-20180111231733-ee0de3bc6815", + "pkg:golang/github.com/golang/protobuf@v1.5.2", + "pkg:golang/github.com/kr/pretty@v0.3.1", + "pkg:golang/github.com/stoewer/go-strcase@v1.2.0", + "pkg:golang/golang.org/x/tools@v0.6.0", + "pkg:golang/golang.org/x/xerrors@v0.0.0-20200804184101-5ec99f83aff1", + "pkg:golang/google.golang.org/genproto@v0.0.0-20201019141844-1ed22bb0c154", + "pkg:golang/google.golang.org/protobuf@v1.30.0", + "pkg:golang/gopkg.in/check.v1@v1.0.0-20200227125254-8fa46927fb4f", + "pkg:golang/gopkg.in/yaml.v3@v3.0.1" + ] + }, { "ref": "pkg:golang/github.com/docopt/docopt-go@v0.0.0-20180111231733-ee0de3bc6815", "dependsOn": [] @@ -1780,14 +1565,44 @@ "pkg:golang/golang.org/x/sync@v0.0.0-20201020160332-67f06af15bc9" ] }, + { + "ref": "pkg:golang/github.com/google/gofuzz@v1.1.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0", + "dependsOn": [ + "pkg:golang/github.com/pkg/diff@v0.0.0-20210226163009-20ebb0f2a09e", + "pkg:golang/gopkg.in/errgo.v2@v2.1.0" + ] + }, { "ref": "pkg:golang/github.com/creack/pty@v1.1.9", "dependsOn": [] }, + { + "ref": "pkg:golang/github.com/josharian/intern@v1.0.0", + "dependsOn": [] + }, { "ref": "pkg:golang/github.com/pkg/diff@v0.0.0-20210226163009-20ebb0f2a09e", "dependsOn": [] }, + { + "ref": "pkg:golang/golang.org/x/term@v0.8.0", + "dependsOn": [ + "pkg:golang/golang.org/x/sys@v0.8.0" + ] + }, + { + "ref": "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b", + "dependsOn": [ + "pkg:golang/cloud.google.com/go@v0.65.0", + "pkg:golang/golang.org/x/net@v0.10.0", + "pkg:golang/google.golang.org/appengine@v1.6.7", + "pkg:golang/golang.org/x/sync@v0.0.0-20201020160332-67f06af15bc9" + ] + }, { "ref": "pkg:golang/cloud.google.com/go@v0.65.0", "dependsOn": [ @@ -1826,6 +1641,17 @@ "pkg:golang/rsc.io/binaryregexp@v0.2.0" ] }, + { + "ref": "pkg:golang/google.golang.org/appengine@v1.6.7", + "dependsOn": [ + "pkg:golang/github.com/golang/protobuf@v1.5.2", + "pkg:golang/golang.org/x/net@v0.10.0", + "pkg:golang/golang.org/x/text@v0.9.0", + "pkg:golang/golang.org/x/crypto@v0.9.0", + "pkg:golang/golang.org/x/sys@v0.8.0", + "pkg:golang/golang.org/x/tools@v0.6.0" + ] + }, { "ref": "pkg:golang/golang.org/x/mod@v0.8.0", "dependsOn": [ @@ -1834,6 +1660,81 @@ "pkg:golang/golang.org/x/xerrors@v0.0.0-20200804184101-5ec99f83aff1" ] }, + { + "ref": "pkg:golang/k8s.io/api@v0.26.1", + "dependsOn": [ + "pkg:golang/github.com/gogo/protobuf@v1.3.2", + "pkg:golang/github.com/stretchr/testify@v1.8.3", + "pkg:golang/k8s.io/apimachinery@v0.26.1", + "pkg:golang/github.com/davecgh/go-spew@v1.1.1", + "pkg:golang/github.com/go-logr/logr@v1.2.3", + "pkg:golang/github.com/golang/protobuf@v1.5.2", + "pkg:golang/github.com/google/go-cmp@v0.5.9", + "pkg:golang/github.com/google/gofuzz@v1.1.0", + "pkg:golang/github.com/json-iterator/go@v1.1.12", + "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", + "pkg:golang/github.com/modern-go/reflect2@v1.0.2", + "pkg:golang/github.com/pmezard/go-difflib@v1.0.0", + "pkg:golang/github.com/spf13/pflag@v1.0.5", + "pkg:golang/golang.org/x/net@v0.10.0", + "pkg:golang/golang.org/x/text@v0.9.0", + "pkg:golang/google.golang.org/protobuf@v1.30.0", + "pkg:golang/gopkg.in/inf.v0@v0.9.1", + "pkg:golang/gopkg.in/yaml.v2@v2.4.0", + "pkg:golang/gopkg.in/yaml.v3@v3.0.1", + "pkg:golang/k8s.io/klog/v2@v2.80.1", + "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", + "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2", + "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", + "pkg:golang/sigs.k8s.io/yaml@v1.3.0" + ] + }, + { + "ref": "pkg:golang/github.com/go-logr/logr@v1.2.3", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/spf13/pflag@v1.0.5", + "dependsOn": [] + }, + { + "ref": "pkg:golang/gopkg.in/inf.v0@v0.9.1", + "dependsOn": [] + }, + { + "ref": "pkg:golang/k8s.io/klog/v2@v2.80.1", + "dependsOn": [ + "pkg:golang/github.com/go-logr/logr@v1.2.3" + ] + }, + { + "ref": "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", + "dependsOn": [ + "pkg:golang/github.com/davecgh/go-spew@v1.1.1", + "pkg:golang/k8s.io/klog/v2@v2.80.1", + "pkg:golang/github.com/go-logr/logr@v1.2.3" + ] + }, + { + "ref": "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2", + "dependsOn": [] + }, + { + "ref": "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", + "dependsOn": [ + "pkg:golang/gopkg.in/yaml.v2@v2.4.0", + "pkg:golang/github.com/google/gofuzz@v1.1.0", + "pkg:golang/github.com/json-iterator/go@v1.1.12", + "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd" + ] + }, + { + "ref": "pkg:golang/sigs.k8s.io/yaml@v1.3.0", + "dependsOn": [ + "pkg:golang/github.com/davecgh/go-spew@v1.1.1", + "pkg:golang/gopkg.in/yaml.v2@v2.4.0" + ] + }, { "ref": "pkg:golang/github.com/armon/go-socks5@v0.0.0-20160902184237-e75332964ef5", "dependsOn": [] @@ -1854,6 +1755,51 @@ "ref": "pkg:golang/github.com/mxk/go-flowrate@v0.0.0-20140419014527-cca7078d478f", "dependsOn": [] }, + { + "ref": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280", + "dependsOn": [ + "pkg:golang/github.com/NYTimes/gziphandler@v0.0.0-20170623195520-56545f4a5d46", + "pkg:golang/github.com/asaskevich/govalidator@v0.0.0-20190424111038-f61b66f89f4a", + "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0", + "pkg:golang/github.com/go-openapi/jsonreference@v0.20.0", + "pkg:golang/github.com/go-openapi/swag@v0.19.14", + "pkg:golang/github.com/golang/protobuf@v1.5.2", + "pkg:golang/github.com/google/gnostic@v0.5.7-v3refs", + "pkg:golang/github.com/google/go-cmp@v0.5.9", + "pkg:golang/github.com/google/gofuzz@v1.1.0", + "pkg:golang/github.com/google/uuid@v1.1.2", + "pkg:golang/github.com/mitchellh/mapstructure@v1.1.2", + "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", + "pkg:golang/github.com/onsi/ginkgo/v2@v2.4.0", + "pkg:golang/github.com/onsi/gomega@v1.23.0", + "pkg:golang/github.com/spf13/pflag@v1.0.5", + "pkg:golang/github.com/stretchr/testify@v1.8.3", + "pkg:golang/google.golang.org/protobuf@v1.30.0", + "pkg:golang/gopkg.in/yaml.v2@v2.4.0", + "pkg:golang/gopkg.in/yaml.v3@v3.0.1", + "pkg:golang/k8s.io/gengo@v0.0.0-20210813121822-485abfe95c7c", + "pkg:golang/k8s.io/klog/v2@v2.80.1", + "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", + "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", + "pkg:golang/sigs.k8s.io/yaml@v1.3.0", + "pkg:golang/github.com/PuerkitoBio/purell@v1.1.1", + "pkg:golang/github.com/PuerkitoBio/urlesc@v0.0.0-20170810143723-de5bf2ad4578", + "pkg:golang/github.com/davecgh/go-spew@v1.1.1", + "pkg:golang/github.com/go-logr/logr@v1.2.3", + "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5", + "pkg:golang/github.com/json-iterator/go@v1.1.12", + "pkg:golang/github.com/mailru/easyjson@v0.7.6", + "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", + "pkg:golang/github.com/modern-go/reflect2@v1.0.2", + "pkg:golang/github.com/pmezard/go-difflib@v1.0.0", + "pkg:golang/golang.org/x/mod@v0.8.0", + "pkg:golang/golang.org/x/net@v0.10.0", + "pkg:golang/golang.org/x/sys@v0.8.0", + "pkg:golang/golang.org/x/text@v0.9.0", + "pkg:golang/golang.org/x/tools@v0.6.0", + "pkg:golang/golang.org/x/xerrors@v0.0.0-20200804184101-5ec99f83aff1" + ] + }, { "ref": "pkg:golang/github.com/onsi/ginkgo/v2@v2.4.0", "dependsOn": [] @@ -1874,14 +1820,30 @@ "ref": "pkg:golang/github.com/gregjones/httpcache@v0.0.0-20180305231024-9cad4c3443a7", "dependsOn": [] }, + { + "ref": "pkg:golang/github.com/imdario/mergo@v0.3.6", + "dependsOn": [] + }, { "ref": "pkg:golang/github.com/peterbourgon/diskv@v2.0.1%2Bincompatible", "dependsOn": [] }, + { + "ref": "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0", + "dependsOn": [] + }, { "ref": "pkg:golang/github.com/google/btree@v1.0.1", "dependsOn": [] }, + { + "ref": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", + "dependsOn": [] + }, { "ref": "pkg:golang/github.com/NYTimes/gziphandler@v0.0.0-20170623195520-56545f4a5d46", "dependsOn": [] @@ -2268,4 +2230,4 @@ "dependsOn": [] } ] -} \ No newline at end of file +} diff --git a/test/providers/tst_manifests/golang/go_mod_test_ignore/expected_sbom_component_analysis.json b/test/providers/tst_manifests/golang/go_mod_test_ignore/expected_sbom_component_analysis.json index 7a2b0226..1f60023f 100644 --- a/test/providers/tst_manifests/golang/go_mod_test_ignore/expected_sbom_component_analysis.json +++ b/test/providers/tst_manifests/golang/go_mod_test_ignore/expected_sbom_component_analysis.json @@ -1,462 +1,137 @@ { - "bomFormat": "CycloneDX", - "specVersion": "1.4", - "version": 1, - "metadata": { - "timestamp": "2023-08-07T00:00:00.000Z", - "component": { - "group": "github.com/GoogleCloudPlatform/microservices-demo/src", - "name": "checkoutservice", - "version": "v0.0.0", - "purl": "pkg:golang/github.com/GoogleCloudPlatform/microservices-demo/src/checkoutservice@v0.0.0", - "type": "application", - "bom-ref": "pkg:golang/github.com/GoogleCloudPlatform/microservices-demo/src/checkoutservice@v0.0.0" - } - }, - "components": [ - { - "group": "github.com/GoogleCloudPlatform/microservices-demo/src", - "name": "checkoutservice", - "version": "v0.0.0", - "purl": "pkg:golang/github.com/GoogleCloudPlatform/microservices-demo/src/checkoutservice@v0.0.0", - "type": "application", - "bom-ref": "pkg:golang/github.com/GoogleCloudPlatform/microservices-demo/src/checkoutservice@v0.0.0" - }, - { - "group": "cloud.google.com", - "name": "go", - "version": "v0.100.2", - "purl": "pkg:golang/cloud.google.com/go@v0.100.2", - "type": "library", - "bom-ref": "pkg:golang/cloud.google.com/go@v0.100.2" - }, - { - "group": "cloud.google.com/go", - "name": "compute", - "version": "v1.6.1", - "purl": "pkg:golang/cloud.google.com/go/compute@v1.6.1", - "type": "library", - "bom-ref": "pkg:golang/cloud.google.com/go/compute@v1.6.1" - }, - { - "group": "cloud.google.com/go", - "name": "monitoring", - "version": "v1.1.0", - "purl": "pkg:golang/cloud.google.com/go/monitoring@v1.1.0", - "type": "library", - "bom-ref": "pkg:golang/cloud.google.com/go/monitoring@v1.1.0" - }, - { - "group": "cloud.google.com/go", - "name": "profiler", - "version": "v0.3.0", - "purl": "pkg:golang/cloud.google.com/go/profiler@v0.3.0", - "type": "library", - "bom-ref": "pkg:golang/cloud.google.com/go/profiler@v0.3.0" - }, - { - "group": "cloud.google.com/go", - "name": "trace", - "version": "v1.0.0", - "purl": "pkg:golang/cloud.google.com/go/trace@v1.0.0", - "type": "library", - "bom-ref": "pkg:golang/cloud.google.com/go/trace@v1.0.0" - }, - { - "group": "contrib.go.opencensus.io/exporter", - "name": "jaeger", - "version": "v0.2.1", - "purl": "pkg:golang/contrib.go.opencensus.io/exporter/jaeger@v0.2.1", - "type": "library", - "bom-ref": "pkg:golang/contrib.go.opencensus.io/exporter/jaeger@v0.2.1" - }, - { - "group": "contrib.go.opencensus.io/exporter", - "name": "stackdriver", - "version": "v0.13.12", - "purl": "pkg:golang/contrib.go.opencensus.io/exporter/stackdriver@v0.13.12", - "type": "library", - "bom-ref": "pkg:golang/contrib.go.opencensus.io/exporter/stackdriver@v0.13.12" - }, - { - "group": "github.com/aws", - "name": "aws-sdk-go", - "version": "v1.43.31", - "purl": "pkg:golang/github.com/aws/aws-sdk-go@v1.43.31", - "type": "library", - "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go@v1.43.31" - }, - { - "group": "github.com/census-instrumentation", - "name": "opencensus-proto", - "version": "v0.3.0", - "purl": "pkg:golang/github.com/census-instrumentation/opencensus-proto@v0.3.0", - "type": "library", - "bom-ref": "pkg:golang/github.com/census-instrumentation/opencensus-proto@v0.3.0" - }, - { - "group": "github.com/cespare", - "name": "xxhash", - "version": "v1.1.0", - "purl": "pkg:golang/github.com/cespare/xxhash@v1.1.0", - "type": "library", - "bom-ref": "pkg:golang/github.com/cespare/xxhash@v1.1.0" - }, - { - "group": "github.com/cncf/udpa", - "name": "go", - "version": "v0.0.0-20210930031921-04548b0d99d4", - "purl": "pkg:golang/github.com/cncf/udpa/go@v0.0.0-20210930031921-04548b0d99d4", - "type": "library", - "bom-ref": "pkg:golang/github.com/cncf/udpa/go@v0.0.0-20210930031921-04548b0d99d4" - }, - { - "group": "github.com/cncf/xds", - "name": "go", - "version": "v0.0.0-20211011173535-cb28da3451f1", - "purl": "pkg:golang/github.com/cncf/xds/go@v0.0.0-20211011173535-cb28da3451f1", - "type": "library", - "bom-ref": "pkg:golang/github.com/cncf/xds/go@v0.0.0-20211011173535-cb28da3451f1" - }, - { - "group": "github.com/envoyproxy", - "name": "go-control-plane", - "version": "v0.10.2-0.20220325020618-49ff273808a1", - "purl": "pkg:golang/github.com/envoyproxy/go-control-plane@v0.10.2-0.20220325020618-49ff273808a1", - "type": "library", - "bom-ref": "pkg:golang/github.com/envoyproxy/go-control-plane@v0.10.2-0.20220325020618-49ff273808a1" - }, - { - "group": "github.com/envoyproxy", - "name": "protoc-gen-validate", - "version": "v0.1.0", - "purl": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v0.1.0", - "type": "library", - "bom-ref": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v0.1.0" - }, - { - "group": "github.com/golang", - "name": "groupcache", - "version": "v0.0.0-20210331224755-41bb18bfe9da", - "purl": "pkg:golang/github.com/golang/groupcache@v0.0.0-20210331224755-41bb18bfe9da", - "type": "library", - "bom-ref": "pkg:golang/github.com/golang/groupcache@v0.0.0-20210331224755-41bb18bfe9da" - }, - { - "group": "github.com/golang", - "name": "protobuf", - "version": "v1.5.2", - "purl": "pkg:golang/github.com/golang/protobuf@v1.5.2", - "type": "library", - "bom-ref": "pkg:golang/github.com/golang/protobuf@v1.5.2" - }, - { - "group": "github.com/google", - "name": "go-cmp", - "version": "v0.5.8", - "purl": "pkg:golang/github.com/google/go-cmp@v0.5.8", - "type": "library", - "bom-ref": "pkg:golang/github.com/google/go-cmp@v0.5.8" - }, - { - "group": "github.com/google", - "name": "pprof", - "version": "v0.0.0-20220412212628-83db2b799d1f", - "purl": "pkg:golang/github.com/google/pprof@v0.0.0-20220412212628-83db2b799d1f", - "type": "library", - "bom-ref": "pkg:golang/github.com/google/pprof@v0.0.0-20220412212628-83db2b799d1f" - }, - { - "group": "github.com/google", - "name": "uuid", - "version": "v1.3.0", - "purl": "pkg:golang/github.com/google/uuid@v1.3.0", - "type": "library", - "bom-ref": "pkg:golang/github.com/google/uuid@v1.3.0" - }, - { - "group": "github.com/googleapis/gax-go", - "name": "v2", - "version": "v2.4.0", - "purl": "pkg:golang/github.com/googleapis/gax-go/v2@v2.4.0", - "type": "library", - "bom-ref": "pkg:golang/github.com/googleapis/gax-go/v2@v2.4.0" - }, - { - "group": "github.com/jmespath", - "name": "go-jmespath", - "version": "v0.4.0", - "purl": "pkg:golang/github.com/jmespath/go-jmespath@v0.4.0", - "type": "library", - "bom-ref": "pkg:golang/github.com/jmespath/go-jmespath@v0.4.0" - }, - { - "group": "github.com/prometheus", - "name": "prometheus", - "version": "v2.5.0+incompatible", - "purl": "pkg:golang/github.com/prometheus/prometheus@v2.5.0%2Bincompatible", - "type": "library", - "bom-ref": "pkg:golang/github.com/prometheus/prometheus@v2.5.0%2Bincompatible" - }, - { - "group": "github.com/sirupsen", - "name": "logrus", - "version": "v1.8.1", - "purl": "pkg:golang/github.com/sirupsen/logrus@v1.8.1", - "type": "library", - "bom-ref": "pkg:golang/github.com/sirupsen/logrus@v1.8.1" - }, - { - "group": "github.com/uber", - "name": "jaeger-client-go", - "version": "v2.25.0+incompatible", - "purl": "pkg:golang/github.com/uber/jaeger-client-go@v2.25.0%2Bincompatible", - "type": "library", - "bom-ref": "pkg:golang/github.com/uber/jaeger-client-go@v2.25.0%2Bincompatible" - }, - { - "group": "golang.org/x", - "name": "net", - "version": "v0.0.0-20220802222814-0bcc04d9c69b", - "purl": "pkg:golang/golang.org/x/net@v0.0.0-20220802222814-0bcc04d9c69b", - "type": "library", - "bom-ref": "pkg:golang/golang.org/x/net@v0.0.0-20220802222814-0bcc04d9c69b" - }, - { - "group": "golang.org/x", - "name": "oauth2", - "version": "v0.0.0-20220411215720-9780585627b5", - "purl": "pkg:golang/golang.org/x/oauth2@v0.0.0-20220411215720-9780585627b5", - "type": "library", - "bom-ref": "pkg:golang/golang.org/x/oauth2@v0.0.0-20220411215720-9780585627b5" - }, - { - "group": "golang.org/x", - "name": "sync", - "version": "v0.0.0-20210220032951-036812b2e83c", - "purl": "pkg:golang/golang.org/x/sync@v0.0.0-20210220032951-036812b2e83c", - "type": "library", - "bom-ref": "pkg:golang/golang.org/x/sync@v0.0.0-20210220032951-036812b2e83c" - }, - { - "group": "golang.org/x", - "name": "text", - "version": "v0.3.7", - "purl": "pkg:golang/golang.org/x/text@v0.3.7", - "type": "library", - "bom-ref": "pkg:golang/golang.org/x/text@v0.3.7" - }, - { - "group": "google.golang.org", - "name": "api", - "version": "v0.78.0", - "purl": "pkg:golang/google.golang.org/api@v0.78.0", - "type": "library", - "bom-ref": "pkg:golang/google.golang.org/api@v0.78.0" - }, - { - "group": "google.golang.org", - "name": "appengine", - "version": "v1.6.7", - "purl": "pkg:golang/google.golang.org/appengine@v1.6.7", - "type": "library", - "bom-ref": "pkg:golang/google.golang.org/appengine@v1.6.7" - }, - { - "group": "google.golang.org", - "name": "genproto", - "version": "v0.0.0-20220518221133-4f43b3371335", - "purl": "pkg:golang/google.golang.org/genproto@v0.0.0-20220518221133-4f43b3371335", - "type": "library", - "bom-ref": "pkg:golang/google.golang.org/genproto@v0.0.0-20220518221133-4f43b3371335" - }, - { - "group": "google.golang.org", - "name": "grpc", - "version": "v1.48.0", - "purl": "pkg:golang/google.golang.org/grpc@v1.48.0", - "type": "library", - "bom-ref": "pkg:golang/google.golang.org/grpc@v1.48.0" - }, - { - "group": "google.golang.org", - "name": "protobuf", - "version": "v1.28.0", - "purl": "pkg:golang/google.golang.org/protobuf@v1.28.0", - "type": "library", - "bom-ref": "pkg:golang/google.golang.org/protobuf@v1.28.0" - } - ], - "dependencies": [ - { - "ref": "pkg:golang/github.com/GoogleCloudPlatform/microservices-demo/src/checkoutservice@v0.0.0", - "dependsOn": [ - "pkg:golang/cloud.google.com/go@v0.100.2", - "pkg:golang/cloud.google.com/go/compute@v1.6.1", - "pkg:golang/cloud.google.com/go/monitoring@v1.1.0", - "pkg:golang/cloud.google.com/go/profiler@v0.3.0", - "pkg:golang/cloud.google.com/go/trace@v1.0.0", - "pkg:golang/contrib.go.opencensus.io/exporter/jaeger@v0.2.1", - "pkg:golang/contrib.go.opencensus.io/exporter/stackdriver@v0.13.12", - "pkg:golang/github.com/aws/aws-sdk-go@v1.43.31", - "pkg:golang/github.com/census-instrumentation/opencensus-proto@v0.3.0", - "pkg:golang/github.com/cespare/xxhash@v1.1.0", - "pkg:golang/github.com/cncf/udpa/go@v0.0.0-20210930031921-04548b0d99d4", - "pkg:golang/github.com/cncf/xds/go@v0.0.0-20211011173535-cb28da3451f1", - "pkg:golang/github.com/envoyproxy/go-control-plane@v0.10.2-0.20220325020618-49ff273808a1", - "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v0.1.0", - "pkg:golang/github.com/golang/groupcache@v0.0.0-20210331224755-41bb18bfe9da", - "pkg:golang/github.com/golang/protobuf@v1.5.2", - "pkg:golang/github.com/google/go-cmp@v0.5.8", - "pkg:golang/github.com/google/pprof@v0.0.0-20220412212628-83db2b799d1f", - "pkg:golang/github.com/google/uuid@v1.3.0", - "pkg:golang/github.com/googleapis/gax-go/v2@v2.4.0", - "pkg:golang/github.com/jmespath/go-jmespath@v0.4.0", - "pkg:golang/github.com/prometheus/prometheus@v2.5.0%2Bincompatible", - "pkg:golang/github.com/sirupsen/logrus@v1.8.1", - "pkg:golang/github.com/uber/jaeger-client-go@v2.25.0%2Bincompatible", - "pkg:golang/golang.org/x/net@v0.0.0-20220802222814-0bcc04d9c69b", - "pkg:golang/golang.org/x/oauth2@v0.0.0-20220411215720-9780585627b5", - "pkg:golang/golang.org/x/sync@v0.0.0-20210220032951-036812b2e83c", - "pkg:golang/golang.org/x/text@v0.3.7", - "pkg:golang/google.golang.org/api@v0.78.0", - "pkg:golang/google.golang.org/appengine@v1.6.7", - "pkg:golang/google.golang.org/genproto@v0.0.0-20220518221133-4f43b3371335", - "pkg:golang/google.golang.org/grpc@v1.48.0", - "pkg:golang/google.golang.org/protobuf@v1.28.0" - ] - }, - { - "ref": "pkg:golang/cloud.google.com/go@v0.100.2", - "dependsOn": [] - }, - { - "ref": "pkg:golang/cloud.google.com/go/compute@v1.6.1", - "dependsOn": [] - }, - { - "ref": "pkg:golang/cloud.google.com/go/monitoring@v1.1.0", - "dependsOn": [] - }, - { - "ref": "pkg:golang/cloud.google.com/go/profiler@v0.3.0", - "dependsOn": [] - }, - { - "ref": "pkg:golang/cloud.google.com/go/trace@v1.0.0", - "dependsOn": [] - }, - { - "ref": "pkg:golang/contrib.go.opencensus.io/exporter/jaeger@v0.2.1", - "dependsOn": [] - }, - { - "ref": "pkg:golang/contrib.go.opencensus.io/exporter/stackdriver@v0.13.12", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/aws/aws-sdk-go@v1.43.31", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/census-instrumentation/opencensus-proto@v0.3.0", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/cespare/xxhash@v1.1.0", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/cncf/udpa/go@v0.0.0-20210930031921-04548b0d99d4", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/cncf/xds/go@v0.0.0-20211011173535-cb28da3451f1", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/envoyproxy/go-control-plane@v0.10.2-0.20220325020618-49ff273808a1", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v0.1.0", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/golang/groupcache@v0.0.0-20210331224755-41bb18bfe9da", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/golang/protobuf@v1.5.2", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/google/go-cmp@v0.5.8", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/google/pprof@v0.0.0-20220412212628-83db2b799d1f", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/google/uuid@v1.3.0", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/googleapis/gax-go/v2@v2.4.0", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/jmespath/go-jmespath@v0.4.0", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/prometheus/prometheus@v2.5.0%2Bincompatible", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/sirupsen/logrus@v1.8.1", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/uber/jaeger-client-go@v2.25.0%2Bincompatible", - "dependsOn": [] - }, - { - "ref": "pkg:golang/golang.org/x/net@v0.0.0-20220802222814-0bcc04d9c69b", - "dependsOn": [] - }, - { - "ref": "pkg:golang/golang.org/x/oauth2@v0.0.0-20220411215720-9780585627b5", - "dependsOn": [] - }, - { - "ref": "pkg:golang/golang.org/x/sync@v0.0.0-20210220032951-036812b2e83c", - "dependsOn": [] - }, - { - "ref": "pkg:golang/golang.org/x/text@v0.3.7", - "dependsOn": [] - }, - { - "ref": "pkg:golang/google.golang.org/api@v0.78.0", - "dependsOn": [] - }, - { - "ref": "pkg:golang/google.golang.org/appengine@v1.6.7", - "dependsOn": [] - }, - { - "ref": "pkg:golang/google.golang.org/genproto@v0.0.0-20220518221133-4f43b3371335", - "dependsOn": [] - }, - { - "ref": "pkg:golang/google.golang.org/grpc@v1.48.0", - "dependsOn": [] - }, - { - "ref": "pkg:golang/google.golang.org/protobuf@v1.28.0", - "dependsOn": [] - } - ] + "bomFormat": "CycloneDX", + "specVersion": "1.4", + "version": 1, + "metadata": { + "timestamp": "2023-08-07T00:00:00.000Z", + "component": { + "group": "github.com/GoogleCloudPlatform/microservices-demo/src", + "name": "checkoutservice", + "version": "v0.0.0", + "purl": "pkg:golang/github.com/GoogleCloudPlatform/microservices-demo/src/checkoutservice@v0.0.0", + "type": "application", + "bom-ref": "pkg:golang/github.com/GoogleCloudPlatform/microservices-demo/src/checkoutservice@v0.0.0" + } + }, + "components": [ + { + "group": "github.com/GoogleCloudPlatform/microservices-demo/src", + "name": "checkoutservice", + "version": "v0.0.0", + "purl": "pkg:golang/github.com/GoogleCloudPlatform/microservices-demo/src/checkoutservice@v0.0.0", + "type": "application", + "bom-ref": "pkg:golang/github.com/GoogleCloudPlatform/microservices-demo/src/checkoutservice@v0.0.0" + }, + { + "group": "cloud.google.com/go", + "name": "profiler", + "version": "v0.3.0", + "purl": "pkg:golang/cloud.google.com/go/profiler@v0.3.0", + "type": "library", + "bom-ref": "pkg:golang/cloud.google.com/go/profiler@v0.3.0" + }, + { + "group": "contrib.go.opencensus.io/exporter", + "name": "jaeger", + "version": "v0.2.1", + "purl": "pkg:golang/contrib.go.opencensus.io/exporter/jaeger@v0.2.1", + "type": "library", + "bom-ref": "pkg:golang/contrib.go.opencensus.io/exporter/jaeger@v0.2.1" + }, + { + "group": "contrib.go.opencensus.io/exporter", + "name": "stackdriver", + "version": "v0.13.12", + "purl": "pkg:golang/contrib.go.opencensus.io/exporter/stackdriver@v0.13.12", + "type": "library", + "bom-ref": "pkg:golang/contrib.go.opencensus.io/exporter/stackdriver@v0.13.12" + }, + { + "group": "github.com/golang", + "name": "protobuf", + "version": "v1.5.2", + "purl": "pkg:golang/github.com/golang/protobuf@v1.5.2", + "type": "library", + "bom-ref": "pkg:golang/github.com/golang/protobuf@v1.5.2" + }, + { + "group": "github.com/google", + "name": "uuid", + "version": "v1.3.0", + "purl": "pkg:golang/github.com/google/uuid@v1.3.0", + "type": "library", + "bom-ref": "pkg:golang/github.com/google/uuid@v1.3.0" + }, + { + "group": "github.com/sirupsen", + "name": "logrus", + "version": "v1.8.1", + "purl": "pkg:golang/github.com/sirupsen/logrus@v1.8.1", + "type": "library", + "bom-ref": "pkg:golang/github.com/sirupsen/logrus@v1.8.1" + }, + { + "group": "golang.org/x", + "name": "net", + "version": "v0.0.0-20220802222814-0bcc04d9c69b", + "purl": "pkg:golang/golang.org/x/net@v0.0.0-20220802222814-0bcc04d9c69b", + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/net@v0.0.0-20220802222814-0bcc04d9c69b" + }, + { + "group": "google.golang.org", + "name": "grpc", + "version": "v1.48.0", + "purl": "pkg:golang/google.golang.org/grpc@v1.48.0", + "type": "library", + "bom-ref": "pkg:golang/google.golang.org/grpc@v1.48.0" + } + ], + "dependencies": [ + { + "ref": "pkg:golang/github.com/GoogleCloudPlatform/microservices-demo/src/checkoutservice@v0.0.0", + "dependsOn": [ + "pkg:golang/cloud.google.com/go/profiler@v0.3.0", + "pkg:golang/contrib.go.opencensus.io/exporter/jaeger@v0.2.1", + "pkg:golang/contrib.go.opencensus.io/exporter/stackdriver@v0.13.12", + "pkg:golang/github.com/golang/protobuf@v1.5.2", + "pkg:golang/github.com/google/uuid@v1.3.0", + "pkg:golang/github.com/sirupsen/logrus@v1.8.1", + "pkg:golang/golang.org/x/net@v0.0.0-20220802222814-0bcc04d9c69b", + "pkg:golang/google.golang.org/grpc@v1.48.0" + ] + }, + { + "ref": "pkg:golang/cloud.google.com/go/profiler@v0.3.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/contrib.go.opencensus.io/exporter/jaeger@v0.2.1", + "dependsOn": [] + }, + { + "ref": "pkg:golang/contrib.go.opencensus.io/exporter/stackdriver@v0.13.12", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/golang/protobuf@v1.5.2", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/google/uuid@v1.3.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/sirupsen/logrus@v1.8.1", + "dependsOn": [] + }, + { + "ref": "pkg:golang/golang.org/x/net@v0.0.0-20220802222814-0bcc04d9c69b", + "dependsOn": [] + }, + { + "ref": "pkg:golang/google.golang.org/grpc@v1.48.0", + "dependsOn": [] + } + ] } diff --git a/test/providers/tst_manifests/golang/go_mod_test_ignore/expected_sbom_stack_analysis.json b/test/providers/tst_manifests/golang/go_mod_test_ignore/expected_sbom_stack_analysis.json index 84421b48..6c0f0e3d 100644 --- a/test/providers/tst_manifests/golang/go_mod_test_ignore/expected_sbom_stack_analysis.json +++ b/test/providers/tst_manifests/golang/go_mod_test_ignore/expected_sbom_stack_analysis.json @@ -22,30 +22,6 @@ "type": "application", "bom-ref": "pkg:golang/github.com/GoogleCloudPlatform/microservices-demo/src/checkoutservice@v0.0.0" }, - { - "group": "cloud.google.com", - "name": "go", - "version": "v0.100.2", - "purl": "pkg:golang/cloud.google.com/go@v0.100.2", - "type": "library", - "bom-ref": "pkg:golang/cloud.google.com/go@v0.100.2" - }, - { - "group": "cloud.google.com/go", - "name": "compute", - "version": "v1.6.1", - "purl": "pkg:golang/cloud.google.com/go/compute@v1.6.1", - "type": "library", - "bom-ref": "pkg:golang/cloud.google.com/go/compute@v1.6.1" - }, - { - "group": "cloud.google.com/go", - "name": "monitoring", - "version": "v1.1.0", - "purl": "pkg:golang/cloud.google.com/go/monitoring@v1.1.0", - "type": "library", - "bom-ref": "pkg:golang/cloud.google.com/go/monitoring@v1.1.0" - }, { "group": "cloud.google.com/go", "name": "profiler", @@ -54,14 +30,6 @@ "type": "library", "bom-ref": "pkg:golang/cloud.google.com/go/profiler@v0.3.0" }, - { - "group": "cloud.google.com/go", - "name": "trace", - "version": "v1.0.0", - "purl": "pkg:golang/cloud.google.com/go/trace@v1.0.0", - "type": "library", - "bom-ref": "pkg:golang/cloud.google.com/go/trace@v1.0.0" - }, { "group": "contrib.go.opencensus.io/exporter", "name": "jaeger", @@ -79,76 +47,60 @@ "bom-ref": "pkg:golang/contrib.go.opencensus.io/exporter/stackdriver@v0.13.12" }, { - "group": "github.com/aws", - "name": "aws-sdk-go", - "version": "v1.43.31", - "purl": "pkg:golang/github.com/aws/aws-sdk-go@v1.43.31", - "type": "library", - "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go@v1.43.31" - }, - { - "group": "github.com/census-instrumentation", - "name": "opencensus-proto", - "version": "v0.3.0", - "purl": "pkg:golang/github.com/census-instrumentation/opencensus-proto@v0.3.0", - "type": "library", - "bom-ref": "pkg:golang/github.com/census-instrumentation/opencensus-proto@v0.3.0" - }, - { - "group": "github.com/cespare", - "name": "xxhash", - "version": "v1.1.0", - "purl": "pkg:golang/github.com/cespare/xxhash@v1.1.0", + "group": "github.com/golang", + "name": "protobuf", + "version": "v1.5.2", + "purl": "pkg:golang/github.com/golang/protobuf@v1.5.2", "type": "library", - "bom-ref": "pkg:golang/github.com/cespare/xxhash@v1.1.0" + "bom-ref": "pkg:golang/github.com/golang/protobuf@v1.5.2" }, { - "group": "github.com/cncf/udpa", - "name": "go", - "version": "v0.0.0-20210930031921-04548b0d99d4", - "purl": "pkg:golang/github.com/cncf/udpa/go@v0.0.0-20210930031921-04548b0d99d4", + "group": "github.com/google", + "name": "uuid", + "version": "v1.3.0", + "purl": "pkg:golang/github.com/google/uuid@v1.3.0", "type": "library", - "bom-ref": "pkg:golang/github.com/cncf/udpa/go@v0.0.0-20210930031921-04548b0d99d4" + "bom-ref": "pkg:golang/github.com/google/uuid@v1.3.0" }, { - "group": "github.com/cncf/xds", - "name": "go", - "version": "v0.0.0-20211011173535-cb28da3451f1", - "purl": "pkg:golang/github.com/cncf/xds/go@v0.0.0-20211011173535-cb28da3451f1", + "group": "github.com/sirupsen", + "name": "logrus", + "version": "v1.8.1", + "purl": "pkg:golang/github.com/sirupsen/logrus@v1.8.1", "type": "library", - "bom-ref": "pkg:golang/github.com/cncf/xds/go@v0.0.0-20211011173535-cb28da3451f1" + "bom-ref": "pkg:golang/github.com/sirupsen/logrus@v1.8.1" }, { - "group": "github.com/envoyproxy", - "name": "go-control-plane", - "version": "v0.10.2-0.20220325020618-49ff273808a1", - "purl": "pkg:golang/github.com/envoyproxy/go-control-plane@v0.10.2-0.20220325020618-49ff273808a1", + "group": "golang.org/x", + "name": "net", + "version": "v0.0.0-20220802222814-0bcc04d9c69b", + "purl": "pkg:golang/golang.org/x/net@v0.0.0-20220802222814-0bcc04d9c69b", "type": "library", - "bom-ref": "pkg:golang/github.com/envoyproxy/go-control-plane@v0.10.2-0.20220325020618-49ff273808a1" + "bom-ref": "pkg:golang/golang.org/x/net@v0.0.0-20220802222814-0bcc04d9c69b" }, { - "group": "github.com/envoyproxy", - "name": "protoc-gen-validate", - "version": "v0.1.0", - "purl": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v0.1.0", + "group": "google.golang.org", + "name": "grpc", + "version": "v1.48.0", + "purl": "pkg:golang/google.golang.org/grpc@v1.48.0", "type": "library", - "bom-ref": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v0.1.0" + "bom-ref": "pkg:golang/google.golang.org/grpc@v1.48.0" }, { - "group": "github.com/golang", - "name": "groupcache", - "version": "v0.0.0-20210331224755-41bb18bfe9da", - "purl": "pkg:golang/github.com/golang/groupcache@v0.0.0-20210331224755-41bb18bfe9da", + "group": "cloud.google.com", + "name": "go", + "version": "v0.100.2", + "purl": "pkg:golang/cloud.google.com/go@v0.100.2", "type": "library", - "bom-ref": "pkg:golang/github.com/golang/groupcache@v0.0.0-20210331224755-41bb18bfe9da" + "bom-ref": "pkg:golang/cloud.google.com/go@v0.100.2" }, { - "group": "github.com/golang", - "name": "protobuf", - "version": "v1.5.2", - "purl": "pkg:golang/github.com/golang/protobuf@v1.5.2", + "group": "cloud.google.com/go", + "name": "compute", + "version": "v1.6.1", + "purl": "pkg:golang/cloud.google.com/go/compute@v1.6.1", "type": "library", - "bom-ref": "pkg:golang/github.com/golang/protobuf@v1.5.2" + "bom-ref": "pkg:golang/cloud.google.com/go/compute@v1.6.1" }, { "group": "github.com/google", @@ -159,20 +111,12 @@ "bom-ref": "pkg:golang/github.com/google/go-cmp@v0.5.8" }, { - "group": "github.com/google", - "name": "pprof", - "version": "v0.0.0-20220412212628-83db2b799d1f", - "purl": "pkg:golang/github.com/google/pprof@v0.0.0-20220412212628-83db2b799d1f", - "type": "library", - "bom-ref": "pkg:golang/github.com/google/pprof@v0.0.0-20220412212628-83db2b799d1f" - }, - { - "group": "github.com/google", - "name": "uuid", - "version": "v1.3.0", - "purl": "pkg:golang/github.com/google/uuid@v1.3.0", + "group": "github.com/google/martian", + "name": "v3", + "version": "v3.2.1", + "purl": "pkg:golang/github.com/google/martian/v3@v3.2.1", "type": "library", - "bom-ref": "pkg:golang/github.com/google/uuid@v1.3.0" + "bom-ref": "pkg:golang/github.com/google/martian/v3@v3.2.1" }, { "group": "github.com/googleapis/gax-go", @@ -183,44 +127,11 @@ "bom-ref": "pkg:golang/github.com/googleapis/gax-go/v2@v2.4.0" }, { - "group": "github.com/jmespath", - "name": "go-jmespath", - "version": "v0.4.0", - "purl": "pkg:golang/github.com/jmespath/go-jmespath@v0.4.0", - "type": "library", - "bom-ref": "pkg:golang/github.com/jmespath/go-jmespath@v0.4.0" - }, - { - "group": "github.com/prometheus", - "name": "prometheus", - "version": "v2.5.0+incompatible", - "purl": "pkg:golang/github.com/prometheus/prometheus@v2.5.0%2Bincompatible", - "type": "library", - "bom-ref": "pkg:golang/github.com/prometheus/prometheus@v2.5.0%2Bincompatible" - }, - { - "group": "github.com/sirupsen", - "name": "logrus", - "version": "v1.8.1", - "purl": "pkg:golang/github.com/sirupsen/logrus@v1.8.1", - "type": "library", - "bom-ref": "pkg:golang/github.com/sirupsen/logrus@v1.8.1" - }, - { - "group": "github.com/uber", - "name": "jaeger-client-go", - "version": "v2.25.0+incompatible", - "purl": "pkg:golang/github.com/uber/jaeger-client-go@v2.25.0%2Bincompatible", - "type": "library", - "bom-ref": "pkg:golang/github.com/uber/jaeger-client-go@v2.25.0%2Bincompatible" - }, - { - "group": "golang.org/x", - "name": "net", - "version": "v0.0.0-20220802222814-0bcc04d9c69b", - "purl": "pkg:golang/golang.org/x/net@v0.0.0-20220802222814-0bcc04d9c69b", + "name": "go.opencensus.io", + "version": "v0.23.0", + "purl": "pkg:golang/go.opencensus.io@v0.23.0", "type": "library", - "bom-ref": "pkg:golang/golang.org/x/net@v0.0.0-20220802222814-0bcc04d9c69b" + "bom-ref": "pkg:golang/go.opencensus.io@v0.23.0" }, { "group": "golang.org/x", @@ -232,19 +143,11 @@ }, { "group": "golang.org/x", - "name": "sync", - "version": "v0.0.0-20210220032951-036812b2e83c", - "purl": "pkg:golang/golang.org/x/sync@v0.0.0-20210220032951-036812b2e83c", - "type": "library", - "bom-ref": "pkg:golang/golang.org/x/sync@v0.0.0-20210220032951-036812b2e83c" - }, - { - "group": "golang.org/x", - "name": "text", - "version": "v0.3.7", - "purl": "pkg:golang/golang.org/x/text@v0.3.7", + "name": "xerrors", + "version": "v0.0.0-20220411194840-2f41105eb62f", + "purl": "pkg:golang/golang.org/x/xerrors@v0.0.0-20220411194840-2f41105eb62f", "type": "library", - "bom-ref": "pkg:golang/golang.org/x/text@v0.3.7" + "bom-ref": "pkg:golang/golang.org/x/xerrors@v0.0.0-20220411194840-2f41105eb62f" }, { "group": "google.golang.org", @@ -254,14 +157,6 @@ "type": "library", "bom-ref": "pkg:golang/google.golang.org/api@v0.78.0" }, - { - "group": "google.golang.org", - "name": "appengine", - "version": "v1.6.7", - "purl": "pkg:golang/google.golang.org/appengine@v1.6.7", - "type": "library", - "bom-ref": "pkg:golang/google.golang.org/appengine@v1.6.7" - }, { "group": "google.golang.org", "name": "genproto", @@ -270,14 +165,6 @@ "type": "library", "bom-ref": "pkg:golang/google.golang.org/genproto@v0.0.0-20220518221133-4f43b3371335" }, - { - "group": "google.golang.org", - "name": "grpc", - "version": "v1.48.0", - "purl": "pkg:golang/google.golang.org/grpc@v1.48.0", - "type": "library", - "bom-ref": "pkg:golang/google.golang.org/grpc@v1.48.0" - }, { "group": "google.golang.org", "name": "protobuf", @@ -287,27 +174,12 @@ "bom-ref": "pkg:golang/google.golang.org/protobuf@v1.28.0" }, { - "group": "github.com/google/martian", - "name": "v3", - "version": "v3.2.1", - "purl": "pkg:golang/github.com/google/martian/v3@v3.2.1", - "type": "library", - "bom-ref": "pkg:golang/github.com/google/martian/v3@v3.2.1" - }, - { - "name": "go.opencensus.io", - "version": "v0.23.0", - "purl": "pkg:golang/go.opencensus.io@v0.23.0", - "type": "library", - "bom-ref": "pkg:golang/go.opencensus.io@v0.23.0" - }, - { - "group": "golang.org/x", - "name": "xerrors", - "version": "v0.0.0-20220411194840-2f41105eb62f", - "purl": "pkg:golang/golang.org/x/xerrors@v0.0.0-20220411194840-2f41105eb62f", + "group": "cloud.google.com/go", + "name": "monitoring", + "version": "v1.1.0", + "purl": "pkg:golang/cloud.google.com/go/monitoring@v1.1.0", "type": "library", - "bom-ref": "pkg:golang/golang.org/x/xerrors@v0.0.0-20220411194840-2f41105eb62f" + "bom-ref": "pkg:golang/cloud.google.com/go/monitoring@v1.1.0" }, { "group": "cloud.google.com/go", @@ -325,6 +197,54 @@ "type": "library", "bom-ref": "pkg:golang/github.com/golang/mock@v1.6.0" }, + { + "group": "github.com/google", + "name": "pprof", + "version": "v0.0.0-20220412212628-83db2b799d1f", + "purl": "pkg:golang/github.com/google/pprof@v0.0.0-20220412212628-83db2b799d1f", + "type": "library", + "bom-ref": "pkg:golang/github.com/google/pprof@v0.0.0-20220412212628-83db2b799d1f" + }, + { + "group": "cloud.google.com/go", + "name": "trace", + "version": "v1.0.0", + "purl": "pkg:golang/cloud.google.com/go/trace@v1.0.0", + "type": "library", + "bom-ref": "pkg:golang/cloud.google.com/go/trace@v1.0.0" + }, + { + "group": "github.com/uber", + "name": "jaeger-client-go", + "version": "v2.25.0+incompatible", + "purl": "pkg:golang/github.com/uber/jaeger-client-go@v2.25.0%2Bincompatible", + "type": "library", + "bom-ref": "pkg:golang/github.com/uber/jaeger-client-go@v2.25.0%2Bincompatible" + }, + { + "group": "golang.org/x", + "name": "sync", + "version": "v0.0.0-20210220032951-036812b2e83c", + "purl": "pkg:golang/golang.org/x/sync@v0.0.0-20210220032951-036812b2e83c", + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/sync@v0.0.0-20210220032951-036812b2e83c" + }, + { + "group": "github.com/aws", + "name": "aws-sdk-go", + "version": "v1.43.31", + "purl": "pkg:golang/github.com/aws/aws-sdk-go@v1.43.31", + "type": "library", + "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go@v1.43.31" + }, + { + "group": "github.com/census-instrumentation", + "name": "opencensus-proto", + "version": "v0.3.0", + "purl": "pkg:golang/github.com/census-instrumentation/opencensus-proto@v0.3.0", + "type": "library", + "bom-ref": "pkg:golang/github.com/census-instrumentation/opencensus-proto@v0.3.0" + }, { "group": "github.com/jstemmer", "name": "go-junit-report", @@ -333,6 +253,14 @@ "type": "library", "bom-ref": "pkg:golang/github.com/jstemmer/go-junit-report@v0.9.1" }, + { + "group": "github.com/prometheus", + "name": "prometheus", + "version": "v2.5.0+incompatible", + "purl": "pkg:golang/github.com/prometheus/prometheus@v2.5.0%2Bincompatible", + "type": "library", + "bom-ref": "pkg:golang/github.com/prometheus/prometheus@v2.5.0%2Bincompatible" + }, { "group": "golang.org/x", "name": "lint", @@ -357,13 +285,29 @@ "type": "library", "bom-ref": "pkg:golang/honnef.co/go/tools@v0.0.1-2020.1.4" }, + { + "group": "github.com/jmespath", + "name": "go-jmespath", + "version": "v0.4.0", + "purl": "pkg:golang/github.com/jmespath/go-jmespath@v0.4.0", + "type": "library", + "bom-ref": "pkg:golang/github.com/jmespath/go-jmespath@v0.4.0" + }, { "group": "github.com/pkg", "name": "errors", "version": "v0.9.1", "purl": "pkg:golang/github.com/pkg/errors@v0.9.1", "type": "library", - "bom-ref": "pkg:golang/github.com/pkg/errors@v0.9.1" + "bom-ref": "pkg:golang/github.com/pkg/errors@v0.9.1" + }, + { + "group": "github.com/cespare", + "name": "xxhash", + "version": "v1.1.0", + "purl": "pkg:golang/github.com/cespare/xxhash@v1.1.0", + "type": "library", + "bom-ref": "pkg:golang/github.com/cespare/xxhash@v1.1.0" }, { "group": "github.com/OneOfOne", @@ -381,6 +325,38 @@ "type": "library", "bom-ref": "pkg:golang/github.com/spaolacci/murmur3@v0.0.0-20180118202830-f09979ecbc72" }, + { + "group": "github.com/cncf/udpa", + "name": "go", + "version": "v0.0.0-20210930031921-04548b0d99d4", + "purl": "pkg:golang/github.com/cncf/udpa/go@v0.0.0-20210930031921-04548b0d99d4", + "type": "library", + "bom-ref": "pkg:golang/github.com/cncf/udpa/go@v0.0.0-20210930031921-04548b0d99d4" + }, + { + "group": "github.com/cncf/xds", + "name": "go", + "version": "v0.0.0-20211011173535-cb28da3451f1", + "purl": "pkg:golang/github.com/cncf/xds/go@v0.0.0-20211011173535-cb28da3451f1", + "type": "library", + "bom-ref": "pkg:golang/github.com/cncf/xds/go@v0.0.0-20211011173535-cb28da3451f1" + }, + { + "group": "github.com/envoyproxy", + "name": "protoc-gen-validate", + "version": "v0.1.0", + "purl": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v0.1.0", + "type": "library", + "bom-ref": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v0.1.0" + }, + { + "group": "github.com/envoyproxy", + "name": "go-control-plane", + "version": "v0.10.2-0.20220325020618-49ff273808a1", + "purl": "pkg:golang/github.com/envoyproxy/go-control-plane@v0.10.2-0.20220325020618-49ff273808a1", + "type": "library", + "bom-ref": "pkg:golang/github.com/envoyproxy/go-control-plane@v0.10.2-0.20220325020618-49ff273808a1" + }, { "group": "github.com/prometheus", "name": "client_model", @@ -469,6 +445,22 @@ "type": "library", "bom-ref": "pkg:golang/golang.org/x/term@v0.0.0-20210927222741-03fcf44c2211" }, + { + "group": "golang.org/x", + "name": "text", + "version": "v0.3.7", + "purl": "pkg:golang/golang.org/x/text@v0.3.7", + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/text@v0.3.7" + }, + { + "group": "google.golang.org", + "name": "appengine", + "version": "v1.6.7", + "purl": "pkg:golang/google.golang.org/appengine@v1.6.7", + "type": "library", + "bom-ref": "pkg:golang/google.golang.org/appengine@v1.6.7" + }, { "group": "github.com/cespare/xxhash", "name": "v2", @@ -501,6 +493,14 @@ "type": "library", "bom-ref": "pkg:golang/google.golang.org/grpc/cmd/protoc-gen-go-grpc@v1.1.0" }, + { + "group": "github.com/golang", + "name": "groupcache", + "version": "v0.0.0-20210331224755-41bb18bfe9da", + "purl": "pkg:golang/github.com/golang/groupcache@v0.0.0-20210331224755-41bb18bfe9da", + "type": "library", + "bom-ref": "pkg:golang/github.com/golang/groupcache@v0.0.0-20210331224755-41bb18bfe9da" + }, { "group": "cloud.google.com/go", "name": "iam", @@ -818,102 +818,14 @@ { "ref": "pkg:golang/github.com/GoogleCloudPlatform/microservices-demo/src/checkoutservice@v0.0.0", "dependsOn": [ - "pkg:golang/cloud.google.com/go@v0.100.2", - "pkg:golang/cloud.google.com/go/compute@v1.6.1", - "pkg:golang/cloud.google.com/go/monitoring@v1.1.0", "pkg:golang/cloud.google.com/go/profiler@v0.3.0", - "pkg:golang/cloud.google.com/go/trace@v1.0.0", "pkg:golang/contrib.go.opencensus.io/exporter/jaeger@v0.2.1", "pkg:golang/contrib.go.opencensus.io/exporter/stackdriver@v0.13.12", - "pkg:golang/github.com/aws/aws-sdk-go@v1.43.31", - "pkg:golang/github.com/census-instrumentation/opencensus-proto@v0.3.0", - "pkg:golang/github.com/cespare/xxhash@v1.1.0", - "pkg:golang/github.com/cncf/udpa/go@v0.0.0-20210930031921-04548b0d99d4", - "pkg:golang/github.com/cncf/xds/go@v0.0.0-20211011173535-cb28da3451f1", - "pkg:golang/github.com/envoyproxy/go-control-plane@v0.10.2-0.20220325020618-49ff273808a1", - "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v0.1.0", - "pkg:golang/github.com/golang/groupcache@v0.0.0-20210331224755-41bb18bfe9da", "pkg:golang/github.com/golang/protobuf@v1.5.2", - "pkg:golang/github.com/google/go-cmp@v0.5.8", - "pkg:golang/github.com/google/pprof@v0.0.0-20220412212628-83db2b799d1f", "pkg:golang/github.com/google/uuid@v1.3.0", - "pkg:golang/github.com/googleapis/gax-go/v2@v2.4.0", - "pkg:golang/github.com/jmespath/go-jmespath@v0.4.0", - "pkg:golang/github.com/prometheus/prometheus@v2.5.0%2Bincompatible", "pkg:golang/github.com/sirupsen/logrus@v1.8.1", - "pkg:golang/github.com/uber/jaeger-client-go@v2.25.0%2Bincompatible", - "pkg:golang/golang.org/x/net@v0.0.0-20220802222814-0bcc04d9c69b", - "pkg:golang/golang.org/x/oauth2@v0.0.0-20220411215720-9780585627b5", - "pkg:golang/golang.org/x/sync@v0.0.0-20210220032951-036812b2e83c", - "pkg:golang/golang.org/x/text@v0.3.7", - "pkg:golang/google.golang.org/api@v0.78.0", - "pkg:golang/google.golang.org/appengine@v1.6.7", - "pkg:golang/google.golang.org/genproto@v0.0.0-20220518221133-4f43b3371335", - "pkg:golang/google.golang.org/grpc@v1.48.0", - "pkg:golang/google.golang.org/protobuf@v1.28.0" - ] - }, - { - "ref": "pkg:golang/cloud.google.com/go@v0.100.2", - "dependsOn": [ - "pkg:golang/cloud.google.com/go/compute@v1.6.1", - "pkg:golang/github.com/golang/protobuf@v1.5.2", - "pkg:golang/github.com/google/go-cmp@v0.5.8", - "pkg:golang/github.com/google/martian/v3@v3.2.1", - "pkg:golang/github.com/googleapis/gax-go/v2@v2.4.0", - "pkg:golang/go.opencensus.io@v0.23.0", - "pkg:golang/golang.org/x/oauth2@v0.0.0-20220411215720-9780585627b5", - "pkg:golang/golang.org/x/xerrors@v0.0.0-20220411194840-2f41105eb62f", - "pkg:golang/google.golang.org/api@v0.78.0", - "pkg:golang/google.golang.org/genproto@v0.0.0-20220518221133-4f43b3371335", - "pkg:golang/google.golang.org/grpc@v1.48.0", - "pkg:golang/google.golang.org/protobuf@v1.28.0", - "pkg:golang/cloud.google.com/go/storage@v1.22.1", - "pkg:golang/github.com/golang/mock@v1.6.0", - "pkg:golang/github.com/google/pprof@v0.0.0-20220412212628-83db2b799d1f", - "pkg:golang/github.com/jstemmer/go-junit-report@v0.9.1", - "pkg:golang/golang.org/x/lint@v0.0.0-20210508222113-6edffad5e616", "pkg:golang/golang.org/x/net@v0.0.0-20220802222814-0bcc04d9c69b", - "pkg:golang/golang.org/x/text@v0.3.7", - "pkg:golang/golang.org/x/tools@v0.1.5", - "pkg:golang/cloud.google.com/go/bigquery@v1.8.0", - "pkg:golang/cloud.google.com/go/datastore@v1.1.0", - "pkg:golang/cloud.google.com/go/pubsub@v1.3.1", - "pkg:golang/github.com/google/martian@v2.1.0%2Bincompatible", - "pkg:golang/golang.org/x/sync@v0.0.0-20210220032951-036812b2e83c", - "pkg:golang/honnef.co/go/tools@v0.0.1-2020.1.4", - "pkg:golang/google.golang.org/appengine@v1.6.7", - "pkg:golang/github.com/golang/groupcache@v0.0.0-20210331224755-41bb18bfe9da", - "pkg:golang/golang.org/x/exp@v0.0.0-20200224162631-6cc2880d07d6", - "pkg:golang/golang.org/x/mod@v0.4.2", - "pkg:golang/github.com/google/btree@v1.0.0", - "pkg:golang/golang.org/x/time@v0.0.0-20191024005414-555d28b269f0", - "pkg:golang/rsc.io/binaryregexp@v0.2.0" - ] - }, - { - "ref": "pkg:golang/cloud.google.com/go/compute@v1.6.1", - "dependsOn": [ - "pkg:golang/cloud.google.com/go@v0.100.2", - "pkg:golang/github.com/google/go-cmp@v0.5.8", - "pkg:golang/github.com/googleapis/gax-go/v2@v2.4.0", - "pkg:golang/google.golang.org/api@v0.78.0", - "pkg:golang/google.golang.org/genproto@v0.0.0-20220518221133-4f43b3371335", - "pkg:golang/google.golang.org/grpc@v1.48.0", - "pkg:golang/google.golang.org/protobuf@v1.28.0", - "pkg:golang/golang.org/x/xerrors@v0.0.0-20220411194840-2f41105eb62f" - ] - }, - { - "ref": "pkg:golang/cloud.google.com/go/monitoring@v1.1.0", - "dependsOn": [ - "pkg:golang/cloud.google.com/go@v0.100.2", - "pkg:golang/github.com/golang/protobuf@v1.5.2", - "pkg:golang/github.com/googleapis/gax-go/v2@v2.4.0", - "pkg:golang/google.golang.org/api@v0.78.0", - "pkg:golang/google.golang.org/genproto@v0.0.0-20220518221133-4f43b3371335", - "pkg:golang/google.golang.org/grpc@v1.48.0", - "pkg:golang/google.golang.org/protobuf@v1.28.0" + "pkg:golang/google.golang.org/grpc@v1.48.0" ] }, { @@ -932,18 +844,6 @@ "pkg:golang/google.golang.org/grpc@v1.48.0" ] }, - { - "ref": "pkg:golang/cloud.google.com/go/trace@v1.0.0", - "dependsOn": [ - "pkg:golang/cloud.google.com/go@v0.100.2", - "pkg:golang/github.com/golang/protobuf@v1.5.2", - "pkg:golang/github.com/googleapis/gax-go/v2@v2.4.0", - "pkg:golang/google.golang.org/api@v0.78.0", - "pkg:golang/google.golang.org/genproto@v0.0.0-20220518221133-4f43b3371335", - "pkg:golang/google.golang.org/grpc@v1.48.0", - "pkg:golang/google.golang.org/protobuf@v1.28.0" - ] - }, { "ref": "pkg:golang/contrib.go.opencensus.io/exporter/jaeger@v0.2.1", "dependsOn": [ @@ -978,72 +878,110 @@ ] }, { - "ref": "pkg:golang/github.com/aws/aws-sdk-go@v1.43.31", + "ref": "pkg:golang/github.com/golang/protobuf@v1.5.2", "dependsOn": [ - "pkg:golang/github.com/jmespath/go-jmespath@v0.4.0", - "pkg:golang/github.com/pkg/errors@v0.9.1", - "pkg:golang/golang.org/x/net@v0.0.0-20220802222814-0bcc04d9c69b" + "pkg:golang/github.com/google/go-cmp@v0.5.8", + "pkg:golang/google.golang.org/protobuf@v1.28.0" ] }, { - "ref": "pkg:golang/github.com/census-instrumentation/opencensus-proto@v0.3.0", + "ref": "pkg:golang/github.com/google/uuid@v1.3.0", "dependsOn": [] }, { - "ref": "pkg:golang/github.com/cespare/xxhash@v1.1.0", + "ref": "pkg:golang/github.com/sirupsen/logrus@v1.8.1", "dependsOn": [ - "pkg:golang/github.com/OneOfOne/xxhash@v1.2.2", - "pkg:golang/github.com/spaolacci/murmur3@v0.0.0-20180118202830-f09979ecbc72" + "pkg:golang/github.com/davecgh/go-spew@v1.1.1", + "pkg:golang/github.com/pmezard/go-difflib@v1.0.0", + "pkg:golang/github.com/stretchr/testify@v1.7.0" ] }, { - "ref": "pkg:golang/github.com/cncf/udpa/go@v0.0.0-20210930031921-04548b0d99d4", + "ref": "pkg:golang/golang.org/x/net@v0.0.0-20220802222814-0bcc04d9c69b", "dependsOn": [ - "pkg:golang/github.com/cncf/xds/go@v0.0.0-20211011173535-cb28da3451f1", - "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v0.1.0", - "pkg:golang/github.com/golang/protobuf@v1.5.2", - "pkg:golang/google.golang.org/grpc@v1.48.0" + "pkg:golang/golang.org/x/term@v0.0.0-20210927222741-03fcf44c2211", + "pkg:golang/golang.org/x/text@v0.3.7", + "pkg:golang/golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9" ] }, { - "ref": "pkg:golang/github.com/cncf/xds/go@v0.0.0-20211011173535-cb28da3451f1", + "ref": "pkg:golang/google.golang.org/grpc@v1.48.0", "dependsOn": [ - "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v0.1.0", + "pkg:golang/github.com/cespare/xxhash/v2@v2.1.1", + "pkg:golang/github.com/cncf/udpa/go@v0.0.0-20210930031921-04548b0d99d4", + "pkg:golang/github.com/cncf/xds/go@v0.0.0-20211011173535-cb28da3451f1", + "pkg:golang/github.com/envoyproxy/go-control-plane@v0.10.2-0.20220325020618-49ff273808a1", + "pkg:golang/github.com/golang/glog@v0.0.0-20160126235308-23def4e6c14b", "pkg:golang/github.com/golang/protobuf@v1.5.2", - "pkg:golang/google.golang.org/grpc@v1.48.0" + "pkg:golang/github.com/google/go-cmp@v0.5.8", + "pkg:golang/github.com/google/uuid@v1.3.0", + "pkg:golang/golang.org/x/net@v0.0.0-20220802222814-0bcc04d9c69b", + "pkg:golang/golang.org/x/oauth2@v0.0.0-20220411215720-9780585627b5", + "pkg:golang/google.golang.org/genproto@v0.0.0-20220518221133-4f43b3371335", + "pkg:golang/google.golang.org/protobuf@v1.28.0", + "pkg:golang/github.com/cespare/xxhash@v1.1.0", + "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v0.1.0", + "pkg:golang/github.com/golang/mock@v1.6.0", + "pkg:golang/cloud.google.com/go@v0.100.2", + "pkg:golang/github.com/BurntSushi/toml@v0.3.1", + "pkg:golang/github.com/client9/misspell@v0.3.4", + "pkg:golang/golang.org/x/lint@v0.0.0-20210508222113-6edffad5e616", + "pkg:golang/golang.org/x/sync@v0.0.0-20210220032951-036812b2e83c", + "pkg:golang/golang.org/x/tools@v0.1.5", + "pkg:golang/google.golang.org/appengine@v1.6.7", + "pkg:golang/honnef.co/go/tools@v0.0.1-2020.1.4", + "pkg:golang/golang.org/x/text@v0.3.7" ] }, { - "ref": "pkg:golang/github.com/envoyproxy/go-control-plane@v0.10.2-0.20220325020618-49ff273808a1", + "ref": "pkg:golang/cloud.google.com/go@v0.100.2", "dependsOn": [ - "pkg:golang/github.com/census-instrumentation/opencensus-proto@v0.3.0", - "pkg:golang/github.com/cncf/xds/go@v0.0.0-20211011173535-cb28da3451f1", - "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v0.1.0", + "pkg:golang/cloud.google.com/go/compute@v1.6.1", "pkg:golang/github.com/golang/protobuf@v1.5.2", "pkg:golang/github.com/google/go-cmp@v0.5.8", - "pkg:golang/github.com/prometheus/client_model@v0.0.0-20190812154241-14fe0d1b01d4", - "pkg:golang/github.com/stretchr/testify@v1.7.0", - "pkg:golang/go.opentelemetry.io/proto/otlp@v0.7.0", - "pkg:golang/golang.org/x/net@v0.0.0-20220802222814-0bcc04d9c69b", + "pkg:golang/github.com/google/martian/v3@v3.2.1", + "pkg:golang/github.com/googleapis/gax-go/v2@v2.4.0", + "pkg:golang/go.opencensus.io@v0.23.0", + "pkg:golang/golang.org/x/oauth2@v0.0.0-20220411215720-9780585627b5", + "pkg:golang/golang.org/x/xerrors@v0.0.0-20220411194840-2f41105eb62f", + "pkg:golang/google.golang.org/api@v0.78.0", "pkg:golang/google.golang.org/genproto@v0.0.0-20220518221133-4f43b3371335", "pkg:golang/google.golang.org/grpc@v1.48.0", "pkg:golang/google.golang.org/protobuf@v1.28.0", - "pkg:golang/github.com/cncf/udpa/go@v0.0.0-20210930031921-04548b0d99d4" - ] - }, - { - "ref": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v0.1.0", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/golang/groupcache@v0.0.0-20210331224755-41bb18bfe9da", - "dependsOn": [] + "pkg:golang/cloud.google.com/go/storage@v1.22.1", + "pkg:golang/github.com/golang/mock@v1.6.0", + "pkg:golang/github.com/google/pprof@v0.0.0-20220412212628-83db2b799d1f", + "pkg:golang/github.com/jstemmer/go-junit-report@v0.9.1", + "pkg:golang/golang.org/x/lint@v0.0.0-20210508222113-6edffad5e616", + "pkg:golang/golang.org/x/net@v0.0.0-20220802222814-0bcc04d9c69b", + "pkg:golang/golang.org/x/text@v0.3.7", + "pkg:golang/golang.org/x/tools@v0.1.5", + "pkg:golang/cloud.google.com/go/bigquery@v1.8.0", + "pkg:golang/cloud.google.com/go/datastore@v1.1.0", + "pkg:golang/cloud.google.com/go/pubsub@v1.3.1", + "pkg:golang/github.com/google/martian@v2.1.0%2Bincompatible", + "pkg:golang/golang.org/x/sync@v0.0.0-20210220032951-036812b2e83c", + "pkg:golang/honnef.co/go/tools@v0.0.1-2020.1.4", + "pkg:golang/google.golang.org/appengine@v1.6.7", + "pkg:golang/github.com/golang/groupcache@v0.0.0-20210331224755-41bb18bfe9da", + "pkg:golang/golang.org/x/exp@v0.0.0-20200224162631-6cc2880d07d6", + "pkg:golang/golang.org/x/mod@v0.4.2", + "pkg:golang/github.com/google/btree@v1.0.0", + "pkg:golang/golang.org/x/time@v0.0.0-20191024005414-555d28b269f0", + "pkg:golang/rsc.io/binaryregexp@v0.2.0" + ] }, { - "ref": "pkg:golang/github.com/golang/protobuf@v1.5.2", + "ref": "pkg:golang/cloud.google.com/go/compute@v1.6.1", "dependsOn": [ + "pkg:golang/cloud.google.com/go@v0.100.2", "pkg:golang/github.com/google/go-cmp@v0.5.8", - "pkg:golang/google.golang.org/protobuf@v1.28.0" + "pkg:golang/github.com/googleapis/gax-go/v2@v2.4.0", + "pkg:golang/google.golang.org/api@v0.78.0", + "pkg:golang/google.golang.org/genproto@v0.0.0-20220518221133-4f43b3371335", + "pkg:golang/google.golang.org/grpc@v1.48.0", + "pkg:golang/google.golang.org/protobuf@v1.28.0", + "pkg:golang/golang.org/x/xerrors@v0.0.0-20220411194840-2f41105eb62f" ] }, { @@ -1053,18 +991,16 @@ ] }, { - "ref": "pkg:golang/github.com/google/pprof@v0.0.0-20220412212628-83db2b799d1f", + "ref": "pkg:golang/github.com/google/martian/v3@v3.2.1", "dependsOn": [ - "pkg:golang/github.com/chzyer/logex@v1.1.10", - "pkg:golang/github.com/chzyer/readline@v0.0.0-20180603132655-2972be24d48e", - "pkg:golang/github.com/chzyer/test@v0.0.0-20180213035817-a1ea475d72b1", - "pkg:golang/github.com/ianlancetaylor/demangle@v0.0.0-20210905161508-09a460cdf81d" + "pkg:golang/github.com/golang/protobuf@v1.5.2", + "pkg:golang/github.com/golang/snappy@v0.0.3", + "pkg:golang/golang.org/x/net@v0.0.0-20220802222814-0bcc04d9c69b", + "pkg:golang/google.golang.org/grpc@v1.48.0", + "pkg:golang/google.golang.org/grpc/cmd/protoc-gen-go-grpc@v1.1.0", + "pkg:golang/google.golang.org/protobuf@v1.28.0" ] }, - { - "ref": "pkg:golang/github.com/google/uuid@v1.3.0", - "dependsOn": [] - }, { "ref": "pkg:golang/github.com/googleapis/gax-go/v2@v2.4.0", "dependsOn": [ @@ -1076,33 +1012,17 @@ ] }, { - "ref": "pkg:golang/github.com/jmespath/go-jmespath@v0.4.0", - "dependsOn": [ - "pkg:golang/github.com/jmespath/go-jmespath/internal/testify@v1.5.1" - ] - }, - { - "ref": "pkg:golang/github.com/prometheus/prometheus@v2.5.0%2Bincompatible", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/sirupsen/logrus@v1.8.1", - "dependsOn": [ - "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "pkg:golang/github.com/pmezard/go-difflib@v1.0.0", - "pkg:golang/github.com/stretchr/testify@v1.7.0" - ] - }, - { - "ref": "pkg:golang/github.com/uber/jaeger-client-go@v2.25.0%2Bincompatible", - "dependsOn": [] - }, - { - "ref": "pkg:golang/golang.org/x/net@v0.0.0-20220802222814-0bcc04d9c69b", + "ref": "pkg:golang/go.opencensus.io@v0.23.0", "dependsOn": [ - "pkg:golang/golang.org/x/term@v0.0.0-20210927222741-03fcf44c2211", + "pkg:golang/github.com/golang/groupcache@v0.0.0-20210331224755-41bb18bfe9da", + "pkg:golang/github.com/golang/protobuf@v1.5.2", + "pkg:golang/github.com/google/go-cmp@v0.5.8", + "pkg:golang/github.com/stretchr/testify@v1.7.0", + "pkg:golang/golang.org/x/net@v0.0.0-20220802222814-0bcc04d9c69b", + "pkg:golang/google.golang.org/grpc@v1.48.0", "pkg:golang/golang.org/x/text@v0.3.7", - "pkg:golang/golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9" + "pkg:golang/google.golang.org/genproto@v0.0.0-20220518221133-4f43b3371335", + "pkg:golang/github.com/hashicorp/golang-lru@v0.5.1" ] }, { @@ -1115,15 +1035,9 @@ ] }, { - "ref": "pkg:golang/golang.org/x/sync@v0.0.0-20210220032951-036812b2e83c", + "ref": "pkg:golang/golang.org/x/xerrors@v0.0.0-20220411194840-2f41105eb62f", "dependsOn": [] }, - { - "ref": "pkg:golang/golang.org/x/text@v0.3.7", - "dependsOn": [ - "pkg:golang/golang.org/x/tools@v0.1.5" - ] - }, { "ref": "pkg:golang/google.golang.org/api@v0.78.0", "dependsOn": [ @@ -1147,16 +1061,6 @@ "pkg:golang/github.com/golang/protobuf@v1.5.2" ] }, - { - "ref": "pkg:golang/google.golang.org/appengine@v1.6.7", - "dependsOn": [ - "pkg:golang/github.com/golang/protobuf@v1.5.2", - "pkg:golang/golang.org/x/net@v0.0.0-20220802222814-0bcc04d9c69b", - "pkg:golang/golang.org/x/text@v0.3.7", - "pkg:golang/golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9", - "pkg:golang/golang.org/x/tools@v0.1.5" - ] - }, { "ref": "pkg:golang/google.golang.org/genproto@v0.0.0-20220518221133-4f43b3371335", "dependsOn": [ @@ -1172,35 +1076,6 @@ "pkg:golang/golang.org/x/sync@v0.0.0-20210220032951-036812b2e83c" ] }, - { - "ref": "pkg:golang/google.golang.org/grpc@v1.48.0", - "dependsOn": [ - "pkg:golang/github.com/cespare/xxhash/v2@v2.1.1", - "pkg:golang/github.com/cncf/udpa/go@v0.0.0-20210930031921-04548b0d99d4", - "pkg:golang/github.com/cncf/xds/go@v0.0.0-20211011173535-cb28da3451f1", - "pkg:golang/github.com/envoyproxy/go-control-plane@v0.10.2-0.20220325020618-49ff273808a1", - "pkg:golang/github.com/golang/glog@v0.0.0-20160126235308-23def4e6c14b", - "pkg:golang/github.com/golang/protobuf@v1.5.2", - "pkg:golang/github.com/google/go-cmp@v0.5.8", - "pkg:golang/github.com/google/uuid@v1.3.0", - "pkg:golang/golang.org/x/net@v0.0.0-20220802222814-0bcc04d9c69b", - "pkg:golang/golang.org/x/oauth2@v0.0.0-20220411215720-9780585627b5", - "pkg:golang/google.golang.org/genproto@v0.0.0-20220518221133-4f43b3371335", - "pkg:golang/google.golang.org/protobuf@v1.28.0", - "pkg:golang/github.com/cespare/xxhash@v1.1.0", - "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v0.1.0", - "pkg:golang/github.com/golang/mock@v1.6.0", - "pkg:golang/cloud.google.com/go@v0.100.2", - "pkg:golang/github.com/BurntSushi/toml@v0.3.1", - "pkg:golang/github.com/client9/misspell@v0.3.4", - "pkg:golang/golang.org/x/lint@v0.0.0-20210508222113-6edffad5e616", - "pkg:golang/golang.org/x/sync@v0.0.0-20210220032951-036812b2e83c", - "pkg:golang/golang.org/x/tools@v0.1.5", - "pkg:golang/google.golang.org/appengine@v1.6.7", - "pkg:golang/honnef.co/go/tools@v0.0.1-2020.1.4", - "pkg:golang/golang.org/x/text@v0.3.7" - ] - }, { "ref": "pkg:golang/google.golang.org/protobuf@v1.28.0", "dependsOn": [ @@ -1210,34 +1085,17 @@ ] }, { - "ref": "pkg:golang/github.com/google/martian/v3@v3.2.1", + "ref": "pkg:golang/cloud.google.com/go/monitoring@v1.1.0", "dependsOn": [ + "pkg:golang/cloud.google.com/go@v0.100.2", "pkg:golang/github.com/golang/protobuf@v1.5.2", - "pkg:golang/github.com/golang/snappy@v0.0.3", - "pkg:golang/golang.org/x/net@v0.0.0-20220802222814-0bcc04d9c69b", + "pkg:golang/github.com/googleapis/gax-go/v2@v2.4.0", + "pkg:golang/google.golang.org/api@v0.78.0", + "pkg:golang/google.golang.org/genproto@v0.0.0-20220518221133-4f43b3371335", "pkg:golang/google.golang.org/grpc@v1.48.0", - "pkg:golang/google.golang.org/grpc/cmd/protoc-gen-go-grpc@v1.1.0", "pkg:golang/google.golang.org/protobuf@v1.28.0" ] }, - { - "ref": "pkg:golang/go.opencensus.io@v0.23.0", - "dependsOn": [ - "pkg:golang/github.com/golang/groupcache@v0.0.0-20210331224755-41bb18bfe9da", - "pkg:golang/github.com/golang/protobuf@v1.5.2", - "pkg:golang/github.com/google/go-cmp@v0.5.8", - "pkg:golang/github.com/stretchr/testify@v1.7.0", - "pkg:golang/golang.org/x/net@v0.0.0-20220802222814-0bcc04d9c69b", - "pkg:golang/google.golang.org/grpc@v1.48.0", - "pkg:golang/golang.org/x/text@v0.3.7", - "pkg:golang/google.golang.org/genproto@v0.0.0-20220518221133-4f43b3371335", - "pkg:golang/github.com/hashicorp/golang-lru@v0.5.1" - ] - }, - { - "ref": "pkg:golang/golang.org/x/xerrors@v0.0.0-20220411194840-2f41105eb62f", - "dependsOn": [] - }, { "ref": "pkg:golang/cloud.google.com/go/storage@v1.22.1", "dependsOn": [ @@ -1276,10 +1134,55 @@ "pkg:golang/rsc.io/quote/v3@v3.1.0" ] }, + { + "ref": "pkg:golang/github.com/google/pprof@v0.0.0-20220412212628-83db2b799d1f", + "dependsOn": [ + "pkg:golang/github.com/chzyer/logex@v1.1.10", + "pkg:golang/github.com/chzyer/readline@v0.0.0-20180603132655-2972be24d48e", + "pkg:golang/github.com/chzyer/test@v0.0.0-20180213035817-a1ea475d72b1", + "pkg:golang/github.com/ianlancetaylor/demangle@v0.0.0-20210905161508-09a460cdf81d" + ] + }, + { + "ref": "pkg:golang/cloud.google.com/go/trace@v1.0.0", + "dependsOn": [ + "pkg:golang/cloud.google.com/go@v0.100.2", + "pkg:golang/github.com/golang/protobuf@v1.5.2", + "pkg:golang/github.com/googleapis/gax-go/v2@v2.4.0", + "pkg:golang/google.golang.org/api@v0.78.0", + "pkg:golang/google.golang.org/genproto@v0.0.0-20220518221133-4f43b3371335", + "pkg:golang/google.golang.org/grpc@v1.48.0", + "pkg:golang/google.golang.org/protobuf@v1.28.0" + ] + }, + { + "ref": "pkg:golang/github.com/uber/jaeger-client-go@v2.25.0%2Bincompatible", + "dependsOn": [] + }, + { + "ref": "pkg:golang/golang.org/x/sync@v0.0.0-20210220032951-036812b2e83c", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/aws/aws-sdk-go@v1.43.31", + "dependsOn": [ + "pkg:golang/github.com/jmespath/go-jmespath@v0.4.0", + "pkg:golang/github.com/pkg/errors@v0.9.1", + "pkg:golang/golang.org/x/net@v0.0.0-20220802222814-0bcc04d9c69b" + ] + }, + { + "ref": "pkg:golang/github.com/census-instrumentation/opencensus-proto@v0.3.0", + "dependsOn": [] + }, { "ref": "pkg:golang/github.com/jstemmer/go-junit-report@v0.9.1", "dependsOn": [] }, + { + "ref": "pkg:golang/github.com/prometheus/prometheus@v2.5.0%2Bincompatible", + "dependsOn": [] + }, { "ref": "pkg:golang/golang.org/x/lint@v0.0.0-20210508222113-6edffad5e616", "dependsOn": [ @@ -1308,10 +1211,23 @@ "pkg:golang/golang.org/x/tools@v0.1.5" ] }, + { + "ref": "pkg:golang/github.com/jmespath/go-jmespath@v0.4.0", + "dependsOn": [ + "pkg:golang/github.com/jmespath/go-jmespath/internal/testify@v1.5.1" + ] + }, { "ref": "pkg:golang/github.com/pkg/errors@v0.9.1", "dependsOn": [] }, + { + "ref": "pkg:golang/github.com/cespare/xxhash@v1.1.0", + "dependsOn": [ + "pkg:golang/github.com/OneOfOne/xxhash@v1.2.2", + "pkg:golang/github.com/spaolacci/murmur3@v0.0.0-20180118202830-f09979ecbc72" + ] + }, { "ref": "pkg:golang/github.com/OneOfOne/xxhash@v1.2.2", "dependsOn": [] @@ -1320,6 +1236,45 @@ "ref": "pkg:golang/github.com/spaolacci/murmur3@v0.0.0-20180118202830-f09979ecbc72", "dependsOn": [] }, + { + "ref": "pkg:golang/github.com/cncf/udpa/go@v0.0.0-20210930031921-04548b0d99d4", + "dependsOn": [ + "pkg:golang/github.com/cncf/xds/go@v0.0.0-20211011173535-cb28da3451f1", + "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v0.1.0", + "pkg:golang/github.com/golang/protobuf@v1.5.2", + "pkg:golang/google.golang.org/grpc@v1.48.0" + ] + }, + { + "ref": "pkg:golang/github.com/cncf/xds/go@v0.0.0-20211011173535-cb28da3451f1", + "dependsOn": [ + "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v0.1.0", + "pkg:golang/github.com/golang/protobuf@v1.5.2", + "pkg:golang/google.golang.org/grpc@v1.48.0" + ] + }, + { + "ref": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v0.1.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/envoyproxy/go-control-plane@v0.10.2-0.20220325020618-49ff273808a1", + "dependsOn": [ + "pkg:golang/github.com/census-instrumentation/opencensus-proto@v0.3.0", + "pkg:golang/github.com/cncf/xds/go@v0.0.0-20211011173535-cb28da3451f1", + "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v0.1.0", + "pkg:golang/github.com/golang/protobuf@v1.5.2", + "pkg:golang/github.com/google/go-cmp@v0.5.8", + "pkg:golang/github.com/prometheus/client_model@v0.0.0-20190812154241-14fe0d1b01d4", + "pkg:golang/github.com/stretchr/testify@v1.7.0", + "pkg:golang/go.opentelemetry.io/proto/otlp@v0.7.0", + "pkg:golang/golang.org/x/net@v0.0.0-20220802222814-0bcc04d9c69b", + "pkg:golang/google.golang.org/genproto@v0.0.0-20220518221133-4f43b3371335", + "pkg:golang/google.golang.org/grpc@v1.48.0", + "pkg:golang/google.golang.org/protobuf@v1.28.0", + "pkg:golang/github.com/cncf/udpa/go@v0.0.0-20210930031921-04548b0d99d4" + ] + }, { "ref": "pkg:golang/github.com/prometheus/client_model@v0.0.0-20190812154241-14fe0d1b01d4", "dependsOn": [ @@ -1383,6 +1338,22 @@ "ref": "pkg:golang/golang.org/x/term@v0.0.0-20210927222741-03fcf44c2211", "dependsOn": [] }, + { + "ref": "pkg:golang/golang.org/x/text@v0.3.7", + "dependsOn": [ + "pkg:golang/golang.org/x/tools@v0.1.5" + ] + }, + { + "ref": "pkg:golang/google.golang.org/appengine@v1.6.7", + "dependsOn": [ + "pkg:golang/github.com/golang/protobuf@v1.5.2", + "pkg:golang/golang.org/x/net@v0.0.0-20220802222814-0bcc04d9c69b", + "pkg:golang/golang.org/x/text@v0.3.7", + "pkg:golang/golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9", + "pkg:golang/golang.org/x/tools@v0.1.5" + ] + }, { "ref": "pkg:golang/github.com/cespare/xxhash/v2@v2.1.1", "dependsOn": [] @@ -1401,6 +1372,10 @@ "pkg:golang/google.golang.org/protobuf@v1.28.0" ] }, + { + "ref": "pkg:golang/github.com/golang/groupcache@v0.0.0-20210331224755-41bb18bfe9da", + "dependsOn": [] + }, { "ref": "pkg:golang/cloud.google.com/go/iam@v0.3.0", "dependsOn": [ @@ -1668,4 +1643,4 @@ "dependsOn": [] } ] -} \ No newline at end of file +} diff --git a/test/providers/tst_manifests/golang/go_mod_with_all_ignore/expected_sbom_component_analysis.json b/test/providers/tst_manifests/golang/go_mod_with_all_ignore/expected_sbom_component_analysis.json index 4f4ff2e6..0ae6da5f 100644 --- a/test/providers/tst_manifests/golang/go_mod_with_all_ignore/expected_sbom_component_analysis.json +++ b/test/providers/tst_manifests/golang/go_mod_with_all_ignore/expected_sbom_component_analysis.json @@ -1,27 +1,27 @@ { - "bomFormat": "CycloneDX", - "specVersion": "1.4", - "version": 1, - "metadata": { - "timestamp": "2023-08-07T00:00:00.000Z", - "component": { - "group": "github.com/devfile-samples", - "name": "devfile-sample-go-basic", - "version": "v0.0.0", - "purl": "pkg:golang/github.com/devfile-samples/devfile-sample-go-basic@v0.0.0", - "type": "application", - "bom-ref": "pkg:golang/github.com/devfile-samples/devfile-sample-go-basic@v0.0.0" - } - }, - "components": [ - { - "group": "github.com/devfile-samples", - "name": "devfile-sample-go-basic", - "version": "v0.0.0", - "purl": "pkg:golang/github.com/devfile-samples/devfile-sample-go-basic@v0.0.0", - "type": "application", - "bom-ref": "pkg:golang/github.com/devfile-samples/devfile-sample-go-basic@v0.0.0" - } - ], - "dependencies": [] + "bomFormat": "CycloneDX", + "specVersion": "1.4", + "version": 1, + "metadata": { + "timestamp": "2023-08-07T00:00:00.000Z", + "component": { + "group": "github.com/devfile-samples", + "name": "devfile-sample-go-basic", + "version": "v0.0.0", + "purl": "pkg:golang/github.com/devfile-samples/devfile-sample-go-basic@v0.0.0", + "type": "application", + "bom-ref": "pkg:golang/github.com/devfile-samples/devfile-sample-go-basic@v0.0.0" + } + }, + "components": [ + { + "group": "github.com/devfile-samples", + "name": "devfile-sample-go-basic", + "version": "v0.0.0", + "purl": "pkg:golang/github.com/devfile-samples/devfile-sample-go-basic@v0.0.0", + "type": "application", + "bom-ref": "pkg:golang/github.com/devfile-samples/devfile-sample-go-basic@v0.0.0" + } + ], + "dependencies": [] } diff --git a/test/providers/tst_manifests/golang/go_mod_with_all_ignore/expected_sbom_stack_analysis.json b/test/providers/tst_manifests/golang/go_mod_with_all_ignore/expected_sbom_stack_analysis.json index 440e02f2..767a937e 100644 --- a/test/providers/tst_manifests/golang/go_mod_with_all_ignore/expected_sbom_stack_analysis.json +++ b/test/providers/tst_manifests/golang/go_mod_with_all_ignore/expected_sbom_stack_analysis.json @@ -2902,4 +2902,4 @@ "dependsOn": [] } ] -} \ No newline at end of file +} diff --git a/test/providers/tst_manifests/golang/go_mod_with_ignore/expected_sbom_component_analysis.json b/test/providers/tst_manifests/golang/go_mod_with_ignore/expected_sbom_component_analysis.json index 84587acc..03d96e5a 100644 --- a/test/providers/tst_manifests/golang/go_mod_with_ignore/expected_sbom_component_analysis.json +++ b/test/providers/tst_manifests/golang/go_mod_with_ignore/expected_sbom_component_analysis.json @@ -1,579 +1,111 @@ { - "bomFormat": "CycloneDX", - "specVersion": "1.4", - "version": 1, - "metadata": { - "timestamp": "2023-08-07T00:00:00.000Z", - "component": { - "group": "github.com/RHEcosystemAppEng/SaaSi", - "name": "deployer", - "version": "v0.0.0", - "purl": "pkg:golang/github.com/RHEcosystemAppEng/SaaSi/deployer@v0.0.0", - "type": "application", - "bom-ref": "pkg:golang/github.com/RHEcosystemAppEng/SaaSi/deployer@v0.0.0" - } - }, - "components": [ - { - "group": "github.com/RHEcosystemAppEng/SaaSi", - "name": "deployer", - "version": "v0.0.0", - "purl": "pkg:golang/github.com/RHEcosystemAppEng/SaaSi/deployer@v0.0.0", - "type": "application", - "bom-ref": "pkg:golang/github.com/RHEcosystemAppEng/SaaSi/deployer@v0.0.0" - }, - { - "group": "github.com/davecgh", - "name": "go-spew", - "version": "v1.1.1", - "purl": "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "type": "library", - "bom-ref": "pkg:golang/github.com/davecgh/go-spew@v1.1.1" - }, - { - "group": "github.com/emicklei/go-restful", - "name": "v3", - "version": "v3.9.0", - "purl": "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0", - "type": "library", - "bom-ref": "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0" - }, - { - "group": "github.com/gin-gonic", - "name": "gin", - "version": "v1.9.1", - "purl": "pkg:golang/github.com/gin-gonic/gin@v1.9.1", - "type": "library", - "bom-ref": "pkg:golang/github.com/gin-gonic/gin@v1.9.1" - }, - { - "group": "github.com/go-openapi", - "name": "jsonpointer", - "version": "v0.19.5", - "purl": "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5", - "type": "library", - "bom-ref": "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5" - }, - { - "group": "github.com/go-openapi", - "name": "jsonreference", - "version": "v0.20.0", - "purl": "pkg:golang/github.com/go-openapi/jsonreference@v0.20.0", - "type": "library", - "bom-ref": "pkg:golang/github.com/go-openapi/jsonreference@v0.20.0" - }, - { - "group": "github.com/go-openapi", - "name": "swag", - "version": "v0.19.14", - "purl": "pkg:golang/github.com/go-openapi/swag@v0.19.14", - "type": "library", - "bom-ref": "pkg:golang/github.com/go-openapi/swag@v0.19.14" - }, - { - "group": "github.com/gogo", - "name": "protobuf", - "version": "v1.3.2", - "purl": "pkg:golang/github.com/gogo/protobuf@v1.3.2", - "type": "library", - "bom-ref": "pkg:golang/github.com/gogo/protobuf@v1.3.2" - }, - { - "group": "github.com/golang", - "name": "protobuf", - "version": "v1.5.2", - "purl": "pkg:golang/github.com/golang/protobuf@v1.5.2", - "type": "library", - "bom-ref": "pkg:golang/github.com/golang/protobuf@v1.5.2" - }, - { - "group": "github.com/google", - "name": "go-cmp", - "version": "v0.5.9", - "purl": "pkg:golang/github.com/google/go-cmp@v0.5.9", - "type": "library", - "bom-ref": "pkg:golang/github.com/google/go-cmp@v0.5.9" - }, - { - "group": "github.com/google", - "name": "gofuzz", - "version": "v1.1.0", - "purl": "pkg:golang/github.com/google/gofuzz@v1.1.0", - "type": "library", - "bom-ref": "pkg:golang/github.com/google/gofuzz@v1.1.0" - }, - { - "group": "github.com/google", - "name": "uuid", - "version": "v1.1.2", - "purl": "pkg:golang/github.com/google/uuid@v1.1.2", - "type": "library", - "bom-ref": "pkg:golang/github.com/google/uuid@v1.1.2" - }, - { - "group": "github.com/imdario", - "name": "mergo", - "version": "v0.3.6", - "purl": "pkg:golang/github.com/imdario/mergo@v0.3.6", - "type": "library", - "bom-ref": "pkg:golang/github.com/imdario/mergo@v0.3.6" - }, - { - "group": "github.com/josharian", - "name": "intern", - "version": "v1.0.0", - "purl": "pkg:golang/github.com/josharian/intern@v1.0.0", - "type": "library", - "bom-ref": "pkg:golang/github.com/josharian/intern@v1.0.0" - }, - { - "group": "github.com/json-iterator", - "name": "go", - "version": "v1.1.12", - "purl": "pkg:golang/github.com/json-iterator/go@v1.1.12", - "type": "library", - "bom-ref": "pkg:golang/github.com/json-iterator/go@v1.1.12" - }, - { - "group": "github.com/kr", - "name": "pretty", - "version": "v0.3.1", - "purl": "pkg:golang/github.com/kr/pretty@v0.3.1", - "type": "library", - "bom-ref": "pkg:golang/github.com/kr/pretty@v0.3.1" - }, - { - "group": "github.com/kr", - "name": "text", - "version": "v0.2.0", - "purl": "pkg:golang/github.com/kr/text@v0.2.0", - "type": "library", - "bom-ref": "pkg:golang/github.com/kr/text@v0.2.0" - }, - { - "group": "github.com/mailru", - "name": "easyjson", - "version": "v0.7.6", - "purl": "pkg:golang/github.com/mailru/easyjson@v0.7.6", - "type": "library", - "bom-ref": "pkg:golang/github.com/mailru/easyjson@v0.7.6" - }, - { - "group": "github.com/modern-go", - "name": "concurrent", - "version": "v0.0.0-20180306012644-bacd9c7ef1dd", - "purl": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", - "type": "library", - "bom-ref": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd" - }, - { - "group": "github.com/modern-go", - "name": "reflect2", - "version": "v1.0.2", - "purl": "pkg:golang/github.com/modern-go/reflect2@v1.0.2", - "type": "library", - "bom-ref": "pkg:golang/github.com/modern-go/reflect2@v1.0.2" - }, - { - "group": "github.com/munnerz", - "name": "goautoneg", - "version": "v0.0.0-20191010083416-a7dc8b61c822", - "purl": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", - "type": "library", - "bom-ref": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822" - }, - { - "group": "github.com/rogpeppe", - "name": "go-internal", - "version": "v1.9.0", - "purl": "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0", - "type": "library", - "bom-ref": "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0" - }, - { - "group": "github.com/spf13", - "name": "pflag", - "version": "v1.0.5", - "purl": "pkg:golang/github.com/spf13/pflag@v1.0.5", - "type": "library", - "bom-ref": "pkg:golang/github.com/spf13/pflag@v1.0.5" - }, - { - "group": "golang.org/x", - "name": "net", - "version": "v0.10.0", - "purl": "pkg:golang/golang.org/x/net@v0.10.0", - "type": "library", - "bom-ref": "pkg:golang/golang.org/x/net@v0.10.0" - }, - { - "group": "golang.org/x", - "name": "oauth2", - "version": "v0.0.0-20220223155221-ee480838109b", - "purl": "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b", - "type": "library", - "bom-ref": "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b" - }, - { - "group": "golang.org/x", - "name": "sys", - "version": "v0.8.0", - "purl": "pkg:golang/golang.org/x/sys@v0.8.0", - "type": "library", - "bom-ref": "pkg:golang/golang.org/x/sys@v0.8.0" - }, - { - "group": "golang.org/x", - "name": "term", - "version": "v0.8.0", - "purl": "pkg:golang/golang.org/x/term@v0.8.0", - "type": "library", - "bom-ref": "pkg:golang/golang.org/x/term@v0.8.0" - }, - { - "group": "golang.org/x", - "name": "text", - "version": "v0.9.0", - "purl": "pkg:golang/golang.org/x/text@v0.9.0", - "type": "library", - "bom-ref": "pkg:golang/golang.org/x/text@v0.9.0" - }, - { - "group": "golang.org/x", - "name": "time", - "version": "v0.0.0-20220210224613-90d013bbcef8", - "purl": "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8", - "type": "library", - "bom-ref": "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8" - }, - { - "group": "google.golang.org", - "name": "appengine", - "version": "v1.6.7", - "purl": "pkg:golang/google.golang.org/appengine@v1.6.7", - "type": "library", - "bom-ref": "pkg:golang/google.golang.org/appengine@v1.6.7" - }, - { - "group": "google.golang.org", - "name": "protobuf", - "version": "v1.30.0", - "purl": "pkg:golang/google.golang.org/protobuf@v1.30.0", - "type": "library", - "bom-ref": "pkg:golang/google.golang.org/protobuf@v1.30.0" - }, - { - "group": "gopkg.in", - "name": "inf.v0", - "version": "v0.9.1", - "purl": "pkg:golang/gopkg.in/inf.v0@v0.9.1", - "type": "library", - "bom-ref": "pkg:golang/gopkg.in/inf.v0@v0.9.1" - }, - { - "group": "gopkg.in", - "name": "yaml.v2", - "version": "v2.4.0", - "purl": "pkg:golang/gopkg.in/yaml.v2@v2.4.0", - "type": "library", - "bom-ref": "pkg:golang/gopkg.in/yaml.v2@v2.4.0" - }, - { - "group": "gopkg.in", - "name": "yaml.v3", - "version": "v3.0.1", - "purl": "pkg:golang/gopkg.in/yaml.v3@v3.0.1", - "type": "library", - "bom-ref": "pkg:golang/gopkg.in/yaml.v3@v3.0.1" - }, - { - "group": "k8s.io", - "name": "api", - "version": "v0.26.1", - "purl": "pkg:golang/k8s.io/api@v0.26.1", - "type": "library", - "bom-ref": "pkg:golang/k8s.io/api@v0.26.1" - }, - { - "group": "k8s.io", - "name": "apimachinery", - "version": "v0.26.1", - "purl": "pkg:golang/k8s.io/apimachinery@v0.26.1", - "type": "library", - "bom-ref": "pkg:golang/k8s.io/apimachinery@v0.26.1" - }, - { - "group": "k8s.io", - "name": "client-go", - "version": "v0.26.1", - "purl": "pkg:golang/k8s.io/client-go@v0.26.1", - "type": "library", - "bom-ref": "pkg:golang/k8s.io/client-go@v0.26.1" - }, - { - "group": "k8s.io/klog", - "name": "v2", - "version": "v2.80.1", - "purl": "pkg:golang/k8s.io/klog/v2@v2.80.1", - "type": "library", - "bom-ref": "pkg:golang/k8s.io/klog/v2@v2.80.1" - }, - { - "group": "k8s.io", - "name": "kube-openapi", - "version": "v0.0.0-20221012153701-172d655c2280", - "purl": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280", - "type": "library", - "bom-ref": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280" - }, - { - "group": "k8s.io", - "name": "utils", - "version": "v0.0.0-20221107191617-1a15be271d1d", - "purl": "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", - "type": "library", - "bom-ref": "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d" - }, - { - "group": "sigs.k8s.io", - "name": "json", - "version": "v0.0.0-20220713155537-f223a00ba0e2", - "purl": "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2", - "type": "library", - "bom-ref": "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2" - }, - { - "group": "sigs.k8s.io/structured-merge-diff", - "name": "v4", - "version": "v4.2.3", - "purl": "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", - "type": "library", - "bom-ref": "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3" - }, - { - "group": "sigs.k8s.io", - "name": "yaml", - "version": "v1.3.0", - "purl": "pkg:golang/sigs.k8s.io/yaml@v1.3.0", - "type": "library", - "bom-ref": "pkg:golang/sigs.k8s.io/yaml@v1.3.0" - } - ], - "dependencies": [ - { - "ref": "pkg:golang/github.com/RHEcosystemAppEng/SaaSi/deployer@v0.0.0", - "dependsOn": [ - "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0", - "pkg:golang/github.com/gin-gonic/gin@v1.9.1", - "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5", - "pkg:golang/github.com/go-openapi/jsonreference@v0.20.0", - "pkg:golang/github.com/go-openapi/swag@v0.19.14", - "pkg:golang/github.com/gogo/protobuf@v1.3.2", - "pkg:golang/github.com/golang/protobuf@v1.5.2", - "pkg:golang/github.com/google/go-cmp@v0.5.9", - "pkg:golang/github.com/google/gofuzz@v1.1.0", - "pkg:golang/github.com/google/uuid@v1.1.2", - "pkg:golang/github.com/imdario/mergo@v0.3.6", - "pkg:golang/github.com/josharian/intern@v1.0.0", - "pkg:golang/github.com/json-iterator/go@v1.1.12", - "pkg:golang/github.com/kr/pretty@v0.3.1", - "pkg:golang/github.com/kr/text@v0.2.0", - "pkg:golang/github.com/mailru/easyjson@v0.7.6", - "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", - "pkg:golang/github.com/modern-go/reflect2@v1.0.2", - "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", - "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0", - "pkg:golang/github.com/spf13/pflag@v1.0.5", - "pkg:golang/golang.org/x/net@v0.10.0", - "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b", - "pkg:golang/golang.org/x/sys@v0.8.0", - "pkg:golang/golang.org/x/term@v0.8.0", - "pkg:golang/golang.org/x/text@v0.9.0", - "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8", - "pkg:golang/google.golang.org/appengine@v1.6.7", - "pkg:golang/google.golang.org/protobuf@v1.30.0", - "pkg:golang/gopkg.in/inf.v0@v0.9.1", - "pkg:golang/gopkg.in/yaml.v2@v2.4.0", - "pkg:golang/gopkg.in/yaml.v3@v3.0.1", - "pkg:golang/k8s.io/api@v0.26.1", - "pkg:golang/k8s.io/apimachinery@v0.26.1", - "pkg:golang/k8s.io/client-go@v0.26.1", - "pkg:golang/k8s.io/klog/v2@v2.80.1", - "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280", - "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", - "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2", - "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", - "pkg:golang/sigs.k8s.io/yaml@v1.3.0" - ] - }, - { - "ref": "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/gin-gonic/gin@v1.9.1", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/go-openapi/jsonreference@v0.20.0", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/go-openapi/swag@v0.19.14", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/gogo/protobuf@v1.3.2", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/golang/protobuf@v1.5.2", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/google/go-cmp@v0.5.9", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/google/gofuzz@v1.1.0", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/google/uuid@v1.1.2", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/imdario/mergo@v0.3.6", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/josharian/intern@v1.0.0", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/json-iterator/go@v1.1.12", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/kr/pretty@v0.3.1", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/kr/text@v0.2.0", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/mailru/easyjson@v0.7.6", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/modern-go/reflect2@v1.0.2", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/spf13/pflag@v1.0.5", - "dependsOn": [] - }, - { - "ref": "pkg:golang/golang.org/x/net@v0.10.0", - "dependsOn": [] - }, - { - "ref": "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b", - "dependsOn": [] - }, - { - "ref": "pkg:golang/golang.org/x/sys@v0.8.0", - "dependsOn": [] - }, - { - "ref": "pkg:golang/golang.org/x/term@v0.8.0", - "dependsOn": [] - }, - { - "ref": "pkg:golang/golang.org/x/text@v0.9.0", - "dependsOn": [] - }, - { - "ref": "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8", - "dependsOn": [] - }, - { - "ref": "pkg:golang/google.golang.org/appengine@v1.6.7", - "dependsOn": [] - }, - { - "ref": "pkg:golang/google.golang.org/protobuf@v1.30.0", - "dependsOn": [] - }, - { - "ref": "pkg:golang/gopkg.in/inf.v0@v0.9.1", - "dependsOn": [] - }, - { - "ref": "pkg:golang/gopkg.in/yaml.v2@v2.4.0", - "dependsOn": [] - }, - { - "ref": "pkg:golang/gopkg.in/yaml.v3@v3.0.1", - "dependsOn": [] - }, - { - "ref": "pkg:golang/k8s.io/api@v0.26.1", - "dependsOn": [] - }, - { - "ref": "pkg:golang/k8s.io/apimachinery@v0.26.1", - "dependsOn": [] - }, - { - "ref": "pkg:golang/k8s.io/client-go@v0.26.1", - "dependsOn": [] - }, - { - "ref": "pkg:golang/k8s.io/klog/v2@v2.80.1", - "dependsOn": [] - }, - { - "ref": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280", - "dependsOn": [] - }, - { - "ref": "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", - "dependsOn": [] - }, - { - "ref": "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2", - "dependsOn": [] - }, - { - "ref": "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", - "dependsOn": [] - }, - { - "ref": "pkg:golang/sigs.k8s.io/yaml@v1.3.0", - "dependsOn": [] - } - ] + "bomFormat": "CycloneDX", + "specVersion": "1.4", + "version": 1, + "metadata": { + "timestamp": "2023-08-07T00:00:00.000Z", + "component": { + "group": "github.com/RHEcosystemAppEng/SaaSi", + "name": "deployer", + "version": "v0.0.0", + "purl": "pkg:golang/github.com/RHEcosystemAppEng/SaaSi/deployer@v0.0.0", + "type": "application", + "bom-ref": "pkg:golang/github.com/RHEcosystemAppEng/SaaSi/deployer@v0.0.0" + } + }, + "components": [ + { + "group": "github.com/RHEcosystemAppEng/SaaSi", + "name": "deployer", + "version": "v0.0.0", + "purl": "pkg:golang/github.com/RHEcosystemAppEng/SaaSi/deployer@v0.0.0", + "type": "application", + "bom-ref": "pkg:golang/github.com/RHEcosystemAppEng/SaaSi/deployer@v0.0.0" + }, + { + "group": "github.com/gin-gonic", + "name": "gin", + "version": "v1.9.1", + "purl": "pkg:golang/github.com/gin-gonic/gin@v1.9.1", + "type": "library", + "bom-ref": "pkg:golang/github.com/gin-gonic/gin@v1.9.1" + }, + { + "group": "github.com/google", + "name": "uuid", + "version": "v1.1.2", + "purl": "pkg:golang/github.com/google/uuid@v1.1.2", + "type": "library", + "bom-ref": "pkg:golang/github.com/google/uuid@v1.1.2" + }, + { + "group": "github.com/kr", + "name": "pretty", + "version": "v0.3.1", + "purl": "pkg:golang/github.com/kr/pretty@v0.3.1", + "type": "library", + "bom-ref": "pkg:golang/github.com/kr/pretty@v0.3.1" + }, + { + "group": "gopkg.in", + "name": "yaml.v2", + "version": "v2.4.0", + "purl": "pkg:golang/gopkg.in/yaml.v2@v2.4.0", + "type": "library", + "bom-ref": "pkg:golang/gopkg.in/yaml.v2@v2.4.0" + }, + { + "group": "k8s.io", + "name": "apimachinery", + "version": "v0.26.1", + "purl": "pkg:golang/k8s.io/apimachinery@v0.26.1", + "type": "library", + "bom-ref": "pkg:golang/k8s.io/apimachinery@v0.26.1" + }, + { + "group": "k8s.io", + "name": "client-go", + "version": "v0.26.1", + "purl": "pkg:golang/k8s.io/client-go@v0.26.1", + "type": "library", + "bom-ref": "pkg:golang/k8s.io/client-go@v0.26.1" + } + ], + "dependencies": [ + { + "ref": "pkg:golang/github.com/RHEcosystemAppEng/SaaSi/deployer@v0.0.0", + "dependsOn": [ + "pkg:golang/github.com/gin-gonic/gin@v1.9.1", + "pkg:golang/github.com/google/uuid@v1.1.2", + "pkg:golang/github.com/kr/pretty@v0.3.1", + "pkg:golang/gopkg.in/yaml.v2@v2.4.0", + "pkg:golang/k8s.io/apimachinery@v0.26.1", + "pkg:golang/k8s.io/client-go@v0.26.1" + ] + }, + { + "ref": "pkg:golang/github.com/gin-gonic/gin@v1.9.1", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/google/uuid@v1.1.2", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/kr/pretty@v0.3.1", + "dependsOn": [] + }, + { + "ref": "pkg:golang/gopkg.in/yaml.v2@v2.4.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/k8s.io/apimachinery@v0.26.1", + "dependsOn": [] + }, + { + "ref": "pkg:golang/k8s.io/client-go@v0.26.1", + "dependsOn": [] + } + ] } diff --git a/test/providers/tst_manifests/golang/go_mod_with_ignore/expected_sbom_stack_analysis.json b/test/providers/tst_manifests/golang/go_mod_with_ignore/expected_sbom_stack_analysis.json index 12c37085..cf0c44b0 100644 --- a/test/providers/tst_manifests/golang/go_mod_with_ignore/expected_sbom_stack_analysis.json +++ b/test/providers/tst_manifests/golang/go_mod_with_ignore/expected_sbom_stack_analysis.json @@ -22,22 +22,6 @@ "type": "application", "bom-ref": "pkg:golang/github.com/RHEcosystemAppEng/SaaSi/deployer@v0.0.0" }, - { - "group": "github.com/davecgh", - "name": "go-spew", - "version": "v1.1.1", - "purl": "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "type": "library", - "bom-ref": "pkg:golang/github.com/davecgh/go-spew@v1.1.1" - }, - { - "group": "github.com/emicklei/go-restful", - "name": "v3", - "version": "v3.9.0", - "purl": "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0", - "type": "library", - "bom-ref": "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0" - }, { "group": "github.com/gin-gonic", "name": "gin", @@ -46,62 +30,6 @@ "type": "library", "bom-ref": "pkg:golang/github.com/gin-gonic/gin@v1.9.1" }, - { - "group": "github.com/go-openapi", - "name": "jsonpointer", - "version": "v0.19.5", - "purl": "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5", - "type": "library", - "bom-ref": "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5" - }, - { - "group": "github.com/go-openapi", - "name": "jsonreference", - "version": "v0.20.0", - "purl": "pkg:golang/github.com/go-openapi/jsonreference@v0.20.0", - "type": "library", - "bom-ref": "pkg:golang/github.com/go-openapi/jsonreference@v0.20.0" - }, - { - "group": "github.com/go-openapi", - "name": "swag", - "version": "v0.19.14", - "purl": "pkg:golang/github.com/go-openapi/swag@v0.19.14", - "type": "library", - "bom-ref": "pkg:golang/github.com/go-openapi/swag@v0.19.14" - }, - { - "group": "github.com/gogo", - "name": "protobuf", - "version": "v1.3.2", - "purl": "pkg:golang/github.com/gogo/protobuf@v1.3.2", - "type": "library", - "bom-ref": "pkg:golang/github.com/gogo/protobuf@v1.3.2" - }, - { - "group": "github.com/golang", - "name": "protobuf", - "version": "v1.5.2", - "purl": "pkg:golang/github.com/golang/protobuf@v1.5.2", - "type": "library", - "bom-ref": "pkg:golang/github.com/golang/protobuf@v1.5.2" - }, - { - "group": "github.com/google", - "name": "go-cmp", - "version": "v0.5.9", - "purl": "pkg:golang/github.com/google/go-cmp@v0.5.9", - "type": "library", - "bom-ref": "pkg:golang/github.com/google/go-cmp@v0.5.9" - }, - { - "group": "github.com/google", - "name": "gofuzz", - "version": "v1.1.0", - "purl": "pkg:golang/github.com/google/gofuzz@v1.1.0", - "type": "library", - "bom-ref": "pkg:golang/github.com/google/gofuzz@v1.1.0" - }, { "group": "github.com/google", "name": "uuid", @@ -110,30 +38,6 @@ "type": "library", "bom-ref": "pkg:golang/github.com/google/uuid@v1.1.2" }, - { - "group": "github.com/imdario", - "name": "mergo", - "version": "v0.3.6", - "purl": "pkg:golang/github.com/imdario/mergo@v0.3.6", - "type": "library", - "bom-ref": "pkg:golang/github.com/imdario/mergo@v0.3.6" - }, - { - "group": "github.com/josharian", - "name": "intern", - "version": "v1.0.0", - "purl": "pkg:golang/github.com/josharian/intern@v1.0.0", - "type": "library", - "bom-ref": "pkg:golang/github.com/josharian/intern@v1.0.0" - }, - { - "group": "github.com/json-iterator", - "name": "go", - "version": "v1.1.12", - "purl": "pkg:golang/github.com/json-iterator/go@v1.1.12", - "type": "library", - "bom-ref": "pkg:golang/github.com/json-iterator/go@v1.1.12" - }, { "group": "github.com/kr", "name": "pretty", @@ -142,134 +46,6 @@ "type": "library", "bom-ref": "pkg:golang/github.com/kr/pretty@v0.3.1" }, - { - "group": "github.com/kr", - "name": "text", - "version": "v0.2.0", - "purl": "pkg:golang/github.com/kr/text@v0.2.0", - "type": "library", - "bom-ref": "pkg:golang/github.com/kr/text@v0.2.0" - }, - { - "group": "github.com/mailru", - "name": "easyjson", - "version": "v0.7.6", - "purl": "pkg:golang/github.com/mailru/easyjson@v0.7.6", - "type": "library", - "bom-ref": "pkg:golang/github.com/mailru/easyjson@v0.7.6" - }, - { - "group": "github.com/modern-go", - "name": "concurrent", - "version": "v0.0.0-20180306012644-bacd9c7ef1dd", - "purl": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", - "type": "library", - "bom-ref": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd" - }, - { - "group": "github.com/modern-go", - "name": "reflect2", - "version": "v1.0.2", - "purl": "pkg:golang/github.com/modern-go/reflect2@v1.0.2", - "type": "library", - "bom-ref": "pkg:golang/github.com/modern-go/reflect2@v1.0.2" - }, - { - "group": "github.com/munnerz", - "name": "goautoneg", - "version": "v0.0.0-20191010083416-a7dc8b61c822", - "purl": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", - "type": "library", - "bom-ref": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822" - }, - { - "group": "github.com/rogpeppe", - "name": "go-internal", - "version": "v1.9.0", - "purl": "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0", - "type": "library", - "bom-ref": "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0" - }, - { - "group": "github.com/spf13", - "name": "pflag", - "version": "v1.0.5", - "purl": "pkg:golang/github.com/spf13/pflag@v1.0.5", - "type": "library", - "bom-ref": "pkg:golang/github.com/spf13/pflag@v1.0.5" - }, - { - "group": "golang.org/x", - "name": "net", - "version": "v0.10.0", - "purl": "pkg:golang/golang.org/x/net@v0.10.0", - "type": "library", - "bom-ref": "pkg:golang/golang.org/x/net@v0.10.0" - }, - { - "group": "golang.org/x", - "name": "oauth2", - "version": "v0.0.0-20220223155221-ee480838109b", - "purl": "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b", - "type": "library", - "bom-ref": "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b" - }, - { - "group": "golang.org/x", - "name": "sys", - "version": "v0.8.0", - "purl": "pkg:golang/golang.org/x/sys@v0.8.0", - "type": "library", - "bom-ref": "pkg:golang/golang.org/x/sys@v0.8.0" - }, - { - "group": "golang.org/x", - "name": "term", - "version": "v0.8.0", - "purl": "pkg:golang/golang.org/x/term@v0.8.0", - "type": "library", - "bom-ref": "pkg:golang/golang.org/x/term@v0.8.0" - }, - { - "group": "golang.org/x", - "name": "text", - "version": "v0.9.0", - "purl": "pkg:golang/golang.org/x/text@v0.9.0", - "type": "library", - "bom-ref": "pkg:golang/golang.org/x/text@v0.9.0" - }, - { - "group": "golang.org/x", - "name": "time", - "version": "v0.0.0-20220210224613-90d013bbcef8", - "purl": "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8", - "type": "library", - "bom-ref": "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8" - }, - { - "group": "google.golang.org", - "name": "appengine", - "version": "v1.6.7", - "purl": "pkg:golang/google.golang.org/appengine@v1.6.7", - "type": "library", - "bom-ref": "pkg:golang/google.golang.org/appengine@v1.6.7" - }, - { - "group": "google.golang.org", - "name": "protobuf", - "version": "v1.30.0", - "purl": "pkg:golang/google.golang.org/protobuf@v1.30.0", - "type": "library", - "bom-ref": "pkg:golang/google.golang.org/protobuf@v1.30.0" - }, - { - "group": "gopkg.in", - "name": "inf.v0", - "version": "v0.9.1", - "purl": "pkg:golang/gopkg.in/inf.v0@v0.9.1", - "type": "library", - "bom-ref": "pkg:golang/gopkg.in/inf.v0@v0.9.1" - }, { "group": "gopkg.in", "name": "yaml.v2", @@ -278,22 +54,6 @@ "type": "library", "bom-ref": "pkg:golang/gopkg.in/yaml.v2@v2.4.0" }, - { - "group": "gopkg.in", - "name": "yaml.v3", - "version": "v3.0.1", - "purl": "pkg:golang/gopkg.in/yaml.v3@v3.0.1", - "type": "library", - "bom-ref": "pkg:golang/gopkg.in/yaml.v3@v3.0.1" - }, - { - "group": "k8s.io", - "name": "api", - "version": "v0.26.1", - "purl": "pkg:golang/k8s.io/api@v0.26.1", - "type": "library", - "bom-ref": "pkg:golang/k8s.io/api@v0.26.1" - }, { "group": "k8s.io", "name": "apimachinery", @@ -310,54 +70,6 @@ "type": "library", "bom-ref": "pkg:golang/k8s.io/client-go@v0.26.1" }, - { - "group": "k8s.io/klog", - "name": "v2", - "version": "v2.80.1", - "purl": "pkg:golang/k8s.io/klog/v2@v2.80.1", - "type": "library", - "bom-ref": "pkg:golang/k8s.io/klog/v2@v2.80.1" - }, - { - "group": "k8s.io", - "name": "kube-openapi", - "version": "v0.0.0-20221012153701-172d655c2280", - "purl": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280", - "type": "library", - "bom-ref": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280" - }, - { - "group": "k8s.io", - "name": "utils", - "version": "v0.0.0-20221107191617-1a15be271d1d", - "purl": "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", - "type": "library", - "bom-ref": "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d" - }, - { - "group": "sigs.k8s.io", - "name": "json", - "version": "v0.0.0-20220713155537-f223a00ba0e2", - "purl": "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2", - "type": "library", - "bom-ref": "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2" - }, - { - "group": "sigs.k8s.io/structured-merge-diff", - "name": "v4", - "version": "v4.2.3", - "purl": "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", - "type": "library", - "bom-ref": "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3" - }, - { - "group": "sigs.k8s.io", - "name": "yaml", - "version": "v1.3.0", - "purl": "pkg:golang/sigs.k8s.io/yaml@v1.3.0", - "type": "library", - "bom-ref": "pkg:golang/sigs.k8s.io/yaml@v1.3.0" - }, { "group": "github.com/bytedance", "name": "sonic", @@ -390,6 +102,14 @@ "type": "library", "bom-ref": "pkg:golang/github.com/goccy/go-json@v0.10.2" }, + { + "group": "github.com/json-iterator", + "name": "go", + "version": "v1.1.12", + "purl": "pkg:golang/github.com/json-iterator/go@v1.1.12", + "type": "library", + "bom-ref": "pkg:golang/github.com/json-iterator/go@v1.1.12" + }, { "group": "github.com/mattn", "name": "go-isatty", @@ -420,7 +140,31 @@ "version": "v1.2.11", "purl": "pkg:golang/github.com/ugorji/go/codec@v1.2.11", "type": "library", - "bom-ref": "pkg:golang/github.com/ugorji/go/codec@v1.2.11" + "bom-ref": "pkg:golang/github.com/ugorji/go/codec@v1.2.11" + }, + { + "group": "golang.org/x", + "name": "net", + "version": "v0.10.0", + "purl": "pkg:golang/golang.org/x/net@v0.10.0", + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/net@v0.10.0" + }, + { + "group": "google.golang.org", + "name": "protobuf", + "version": "v1.30.0", + "purl": "pkg:golang/google.golang.org/protobuf@v1.30.0", + "type": "library", + "bom-ref": "pkg:golang/google.golang.org/protobuf@v1.30.0" + }, + { + "group": "gopkg.in", + "name": "yaml.v3", + "version": "v3.0.1", + "purl": "pkg:golang/gopkg.in/yaml.v3@v3.0.1", + "type": "library", + "bom-ref": "pkg:golang/gopkg.in/yaml.v3@v3.0.1" }, { "group": "github.com/chenzhuoyu", @@ -430,6 +174,14 @@ "type": "library", "bom-ref": "pkg:golang/github.com/chenzhuoyu/base64x@v0.0.0-20221115062448-fe3a3abad311" }, + { + "group": "github.com/davecgh", + "name": "go-spew", + "version": "v1.1.1", + "purl": "pkg:golang/github.com/davecgh/go-spew@v1.1.1", + "type": "library", + "bom-ref": "pkg:golang/github.com/davecgh/go-spew@v1.1.1" + }, { "group": "github.com/gabriel-vasile", "name": "mimetype", @@ -470,6 +222,22 @@ "type": "library", "bom-ref": "pkg:golang/github.com/leodido/go-urn@v1.2.4" }, + { + "group": "github.com/modern-go", + "name": "concurrent", + "version": "v0.0.0-20180306012644-bacd9c7ef1dd", + "purl": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", + "type": "library", + "bom-ref": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd" + }, + { + "group": "github.com/modern-go", + "name": "reflect2", + "version": "v1.0.2", + "purl": "pkg:golang/github.com/modern-go/reflect2@v1.0.2", + "type": "library", + "bom-ref": "pkg:golang/github.com/modern-go/reflect2@v1.0.2" + }, { "group": "github.com/pmezard", "name": "go-difflib", @@ -502,6 +270,62 @@ "type": "library", "bom-ref": "pkg:golang/golang.org/x/crypto@v0.9.0" }, + { + "group": "golang.org/x", + "name": "sys", + "version": "v0.8.0", + "purl": "pkg:golang/golang.org/x/sys@v0.8.0", + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/sys@v0.8.0" + }, + { + "group": "golang.org/x", + "name": "text", + "version": "v0.9.0", + "purl": "pkg:golang/golang.org/x/text@v0.9.0", + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/text@v0.9.0" + }, + { + "group": "github.com/go-openapi", + "name": "jsonpointer", + "version": "v0.19.5", + "purl": "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5", + "type": "library", + "bom-ref": "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5" + }, + { + "group": "github.com/go-openapi", + "name": "swag", + "version": "v0.19.14", + "purl": "pkg:golang/github.com/go-openapi/swag@v0.19.14", + "type": "library", + "bom-ref": "pkg:golang/github.com/go-openapi/swag@v0.19.14" + }, + { + "group": "github.com/mailru", + "name": "easyjson", + "version": "v0.7.6", + "purl": "pkg:golang/github.com/mailru/easyjson@v0.7.6", + "type": "library", + "bom-ref": "pkg:golang/github.com/mailru/easyjson@v0.7.6" + }, + { + "group": "github.com/go-openapi", + "name": "jsonreference", + "version": "v0.20.0", + "purl": "pkg:golang/github.com/go-openapi/jsonreference@v0.20.0", + "type": "library", + "bom-ref": "pkg:golang/github.com/go-openapi/jsonreference@v0.20.0" + }, + { + "group": "github.com/kr", + "name": "text", + "version": "v0.2.0", + "purl": "pkg:golang/github.com/kr/text@v0.2.0", + "type": "library", + "bom-ref": "pkg:golang/github.com/kr/text@v0.2.0" + }, { "group": "github.com/niemeyer", "name": "pretty", @@ -518,6 +342,14 @@ "type": "library", "bom-ref": "pkg:golang/gopkg.in/check.v1@v1.0.0-20200227125254-8fa46927fb4f" }, + { + "group": "github.com/gogo", + "name": "protobuf", + "version": "v1.3.2", + "purl": "pkg:golang/github.com/gogo/protobuf@v1.3.2", + "type": "library", + "bom-ref": "pkg:golang/github.com/gogo/protobuf@v1.3.2" + }, { "group": "github.com/kisielk", "name": "errcheck", @@ -542,6 +374,22 @@ "type": "library", "bom-ref": "pkg:golang/golang.org/x/tools@v0.6.0" }, + { + "group": "github.com/golang", + "name": "protobuf", + "version": "v1.5.2", + "purl": "pkg:golang/github.com/golang/protobuf@v1.5.2", + "type": "library", + "bom-ref": "pkg:golang/github.com/golang/protobuf@v1.5.2" + }, + { + "group": "github.com/google", + "name": "go-cmp", + "version": "v0.5.9", + "purl": "pkg:golang/github.com/google/go-cmp@v0.5.9", + "type": "library", + "bom-ref": "pkg:golang/github.com/google/go-cmp@v0.5.9" + }, { "group": "github.com/docopt", "name": "docopt-go", @@ -574,6 +422,22 @@ "type": "library", "bom-ref": "pkg:golang/google.golang.org/genproto@v0.0.0-20201019141844-1ed22bb0c154" }, + { + "group": "github.com/google", + "name": "gofuzz", + "version": "v1.1.0", + "purl": "pkg:golang/github.com/google/gofuzz@v1.1.0", + "type": "library", + "bom-ref": "pkg:golang/github.com/google/gofuzz@v1.1.0" + }, + { + "group": "github.com/rogpeppe", + "name": "go-internal", + "version": "v1.9.0", + "purl": "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0", + "type": "library", + "bom-ref": "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0" + }, { "group": "github.com/creack", "name": "pty", @@ -582,6 +446,14 @@ "type": "library", "bom-ref": "pkg:golang/github.com/creack/pty@v1.1.9" }, + { + "group": "github.com/josharian", + "name": "intern", + "version": "v1.0.0", + "purl": "pkg:golang/github.com/josharian/intern@v1.0.0", + "type": "library", + "bom-ref": "pkg:golang/github.com/josharian/intern@v1.0.0" + }, { "group": "github.com/pkg", "name": "diff", @@ -590,6 +462,22 @@ "type": "library", "bom-ref": "pkg:golang/github.com/pkg/diff@v0.0.0-20210226163009-20ebb0f2a09e" }, + { + "group": "golang.org/x", + "name": "term", + "version": "v0.8.0", + "purl": "pkg:golang/golang.org/x/term@v0.8.0", + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/term@v0.8.0" + }, + { + "group": "golang.org/x", + "name": "oauth2", + "version": "v0.0.0-20220223155221-ee480838109b", + "purl": "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b", + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b" + }, { "group": "cloud.google.com", "name": "go", @@ -598,6 +486,14 @@ "type": "library", "bom-ref": "pkg:golang/cloud.google.com/go@v0.65.0" }, + { + "group": "google.golang.org", + "name": "appengine", + "version": "v1.6.7", + "purl": "pkg:golang/google.golang.org/appengine@v1.6.7", + "type": "library", + "bom-ref": "pkg:golang/google.golang.org/appengine@v1.6.7" + }, { "group": "golang.org/x", "name": "mod", @@ -606,6 +502,70 @@ "type": "library", "bom-ref": "pkg:golang/golang.org/x/mod@v0.8.0" }, + { + "group": "k8s.io", + "name": "api", + "version": "v0.26.1", + "purl": "pkg:golang/k8s.io/api@v0.26.1", + "type": "library", + "bom-ref": "pkg:golang/k8s.io/api@v0.26.1" + }, + { + "group": "github.com/spf13", + "name": "pflag", + "version": "v1.0.5", + "purl": "pkg:golang/github.com/spf13/pflag@v1.0.5", + "type": "library", + "bom-ref": "pkg:golang/github.com/spf13/pflag@v1.0.5" + }, + { + "group": "gopkg.in", + "name": "inf.v0", + "version": "v0.9.1", + "purl": "pkg:golang/gopkg.in/inf.v0@v0.9.1", + "type": "library", + "bom-ref": "pkg:golang/gopkg.in/inf.v0@v0.9.1" + }, + { + "group": "k8s.io/klog", + "name": "v2", + "version": "v2.80.1", + "purl": "pkg:golang/k8s.io/klog/v2@v2.80.1", + "type": "library", + "bom-ref": "pkg:golang/k8s.io/klog/v2@v2.80.1" + }, + { + "group": "k8s.io", + "name": "utils", + "version": "v0.0.0-20221107191617-1a15be271d1d", + "purl": "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", + "type": "library", + "bom-ref": "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d" + }, + { + "group": "sigs.k8s.io", + "name": "json", + "version": "v0.0.0-20220713155537-f223a00ba0e2", + "purl": "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2", + "type": "library", + "bom-ref": "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2" + }, + { + "group": "sigs.k8s.io/structured-merge-diff", + "name": "v4", + "version": "v4.2.3", + "purl": "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", + "type": "library", + "bom-ref": "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3" + }, + { + "group": "sigs.k8s.io", + "name": "yaml", + "version": "v1.3.0", + "purl": "pkg:golang/sigs.k8s.io/yaml@v1.3.0", + "type": "library", + "bom-ref": "pkg:golang/sigs.k8s.io/yaml@v1.3.0" + }, { "group": "github.com/armon", "name": "go-socks5", @@ -646,6 +606,14 @@ "type": "library", "bom-ref": "pkg:golang/github.com/mxk/go-flowrate@v0.0.0-20140419014527-cca7078d478f" }, + { + "group": "k8s.io", + "name": "kube-openapi", + "version": "v0.0.0-20221012153701-172d655c2280", + "purl": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280", + "type": "library", + "bom-ref": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280" + }, { "group": "github.com/onsi/ginkgo", "name": "v2", @@ -686,13 +654,37 @@ "type": "library", "bom-ref": "pkg:golang/github.com/gregjones/httpcache@v0.0.0-20180305231024-9cad4c3443a7" }, + { + "group": "github.com/imdario", + "name": "mergo", + "version": "v0.3.6", + "purl": "pkg:golang/github.com/imdario/mergo@v0.3.6", + "type": "library", + "bom-ref": "pkg:golang/github.com/imdario/mergo@v0.3.6" + }, { "group": "github.com/peterbourgon", "name": "diskv", "version": "v2.0.1+incompatible", "purl": "pkg:golang/github.com/peterbourgon/diskv@v2.0.1%2Bincompatible", "type": "library", - "bom-ref": "pkg:golang/github.com/peterbourgon/diskv@v2.0.1%2Bincompatible" + "bom-ref": "pkg:golang/github.com/peterbourgon/diskv@v2.0.1%2Bincompatible" + }, + { + "group": "golang.org/x", + "name": "time", + "version": "v0.0.0-20220210224613-90d013bbcef8", + "purl": "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8", + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8" + }, + { + "group": "github.com/emicklei/go-restful", + "name": "v3", + "version": "v3.9.0", + "purl": "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0", + "type": "library", + "bom-ref": "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0" }, { "group": "github.com/google", @@ -702,6 +694,14 @@ "type": "library", "bom-ref": "pkg:golang/github.com/google/btree@v1.0.1" }, + { + "group": "github.com/munnerz", + "name": "goautoneg", + "version": "v0.0.0-20191010083416-a7dc8b61c822", + "purl": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", + "type": "library", + "bom-ref": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822" + }, { "group": "github.com/NYTimes", "name": "gziphandler", @@ -1057,361 +1057,112 @@ "group": "golang.org/x", "name": "image", "version": "v0.0.0-20190802002840-cff245a6509b", - "purl": "pkg:golang/golang.org/x/image@v0.0.0-20190802002840-cff245a6509b", - "type": "library", - "bom-ref": "pkg:golang/golang.org/x/image@v0.0.0-20190802002840-cff245a6509b" - }, - { - "group": "golang.org/x", - "name": "mobile", - "version": "v0.0.0-20190719004257-d2bd2a29d028", - "purl": "pkg:golang/golang.org/x/mobile@v0.0.0-20190719004257-d2bd2a29d028", - "type": "library", - "bom-ref": "pkg:golang/golang.org/x/mobile@v0.0.0-20190719004257-d2bd2a29d028" - }, - { - "group": "rsc.io", - "name": "sampler", - "version": "v1.3.0", - "purl": "pkg:golang/rsc.io/sampler@v1.3.0", - "type": "library", - "bom-ref": "pkg:golang/rsc.io/sampler@v1.3.0" - }, - { - "group": "gopkg.in", - "name": "errgo.v2", - "version": "v2.1.0", - "purl": "pkg:golang/gopkg.in/errgo.v2@v2.1.0", - "type": "library", - "bom-ref": "pkg:golang/gopkg.in/errgo.v2@v2.1.0" - }, - { - "group": "rsc.io", - "name": "binaryregexp", - "version": "v0.2.0", - "purl": "pkg:golang/rsc.io/binaryregexp@v0.2.0", - "type": "library", - "bom-ref": "pkg:golang/rsc.io/binaryregexp@v0.2.0" - }, - { - "group": "github.com/go-gl", - "name": "glfw", - "version": "v0.0.0-20190409004039-e6da0acd62b1", - "purl": "pkg:golang/github.com/go-gl/glfw@v0.0.0-20190409004039-e6da0acd62b1", - "type": "library", - "bom-ref": "pkg:golang/github.com/go-gl/glfw@v0.0.0-20190409004039-e6da0acd62b1" - } - ], - "dependencies": [ - { - "ref": "pkg:golang/github.com/RHEcosystemAppEng/SaaSi/deployer@v0.0.0", - "dependsOn": [ - "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0", - "pkg:golang/github.com/gin-gonic/gin@v1.9.1", - "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5", - "pkg:golang/github.com/go-openapi/jsonreference@v0.20.0", - "pkg:golang/github.com/go-openapi/swag@v0.19.14", - "pkg:golang/github.com/gogo/protobuf@v1.3.2", - "pkg:golang/github.com/golang/protobuf@v1.5.2", - "pkg:golang/github.com/google/go-cmp@v0.5.9", - "pkg:golang/github.com/google/gofuzz@v1.1.0", - "pkg:golang/github.com/google/uuid@v1.1.2", - "pkg:golang/github.com/imdario/mergo@v0.3.6", - "pkg:golang/github.com/josharian/intern@v1.0.0", - "pkg:golang/github.com/json-iterator/go@v1.1.12", - "pkg:golang/github.com/kr/pretty@v0.3.1", - "pkg:golang/github.com/kr/text@v0.2.0", - "pkg:golang/github.com/mailru/easyjson@v0.7.6", - "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", - "pkg:golang/github.com/modern-go/reflect2@v1.0.2", - "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", - "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0", - "pkg:golang/github.com/spf13/pflag@v1.0.5", - "pkg:golang/golang.org/x/net@v0.10.0", - "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b", - "pkg:golang/golang.org/x/sys@v0.8.0", - "pkg:golang/golang.org/x/term@v0.8.0", - "pkg:golang/golang.org/x/text@v0.9.0", - "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8", - "pkg:golang/google.golang.org/appengine@v1.6.7", - "pkg:golang/google.golang.org/protobuf@v1.30.0", - "pkg:golang/gopkg.in/inf.v0@v0.9.1", - "pkg:golang/gopkg.in/yaml.v2@v2.4.0", - "pkg:golang/gopkg.in/yaml.v3@v3.0.1", - "pkg:golang/k8s.io/api@v0.26.1", - "pkg:golang/k8s.io/apimachinery@v0.26.1", - "pkg:golang/k8s.io/client-go@v0.26.1", - "pkg:golang/k8s.io/klog/v2@v2.80.1", - "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280", - "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", - "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2", - "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", - "pkg:golang/sigs.k8s.io/yaml@v1.3.0" - ] - }, - { - "ref": "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/gin-gonic/gin@v1.9.1", - "dependsOn": [ - "pkg:golang/github.com/bytedance/sonic@v1.9.1", - "pkg:golang/github.com/gin-contrib/sse@v0.1.0", - "pkg:golang/github.com/go-playground/validator/v10@v10.14.0", - "pkg:golang/github.com/goccy/go-json@v0.10.2", - "pkg:golang/github.com/json-iterator/go@v1.1.12", - "pkg:golang/github.com/mattn/go-isatty@v0.0.19", - "pkg:golang/github.com/pelletier/go-toml/v2@v2.0.8", - "pkg:golang/github.com/stretchr/testify@v1.8.3", - "pkg:golang/github.com/ugorji/go/codec@v1.2.11", - "pkg:golang/golang.org/x/net@v0.10.0", - "pkg:golang/google.golang.org/protobuf@v1.30.0", - "pkg:golang/gopkg.in/yaml.v3@v3.0.1", - "pkg:golang/github.com/chenzhuoyu/base64x@v0.0.0-20221115062448-fe3a3abad311", - "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "pkg:golang/github.com/gabriel-vasile/mimetype@v1.4.2", - "pkg:golang/github.com/go-playground/locales@v0.14.1", - "pkg:golang/github.com/go-playground/universal-translator@v0.18.1", - "pkg:golang/github.com/klauspost/cpuid/v2@v2.2.4", - "pkg:golang/github.com/leodido/go-urn@v1.2.4", - "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", - "pkg:golang/github.com/modern-go/reflect2@v1.0.2", - "pkg:golang/github.com/pmezard/go-difflib@v1.0.0", - "pkg:golang/github.com/twitchyliquid64/golang-asm@v0.15.1", - "pkg:golang/golang.org/x/arch@v0.3.0", - "pkg:golang/golang.org/x/crypto@v0.9.0", - "pkg:golang/golang.org/x/sys@v0.8.0", - "pkg:golang/golang.org/x/text@v0.9.0" - ] - }, - { - "ref": "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5", - "dependsOn": [ - "pkg:golang/github.com/go-openapi/swag@v0.19.14", - "pkg:golang/github.com/mailru/easyjson@v0.7.6", - "pkg:golang/github.com/stretchr/testify@v1.8.3" - ] - }, - { - "ref": "pkg:golang/github.com/go-openapi/jsonreference@v0.20.0", - "dependsOn": [ - "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5", - "pkg:golang/github.com/stretchr/testify@v1.8.3" - ] - }, - { - "ref": "pkg:golang/github.com/go-openapi/swag@v0.19.14", - "dependsOn": [ - "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "pkg:golang/github.com/kr/text@v0.2.0", - "pkg:golang/github.com/mailru/easyjson@v0.7.6", - "pkg:golang/github.com/niemeyer/pretty@v0.0.0-20200227124842-a10e7caefd8e", - "pkg:golang/github.com/stretchr/testify@v1.8.3", - "pkg:golang/gopkg.in/check.v1@v1.0.0-20200227125254-8fa46927fb4f", - "pkg:golang/gopkg.in/yaml.v2@v2.4.0", - "pkg:golang/gopkg.in/yaml.v3@v3.0.1", - "pkg:golang/github.com/kr/pretty@v0.3.1" - ] - }, - { - "ref": "pkg:golang/github.com/gogo/protobuf@v1.3.2", - "dependsOn": [ - "pkg:golang/github.com/kisielk/errcheck@v1.5.0", - "pkg:golang/github.com/kisielk/gotool@v1.0.0", - "pkg:golang/golang.org/x/tools@v0.6.0" - ] - }, - { - "ref": "pkg:golang/github.com/golang/protobuf@v1.5.2", - "dependsOn": [ - "pkg:golang/github.com/google/go-cmp@v0.5.9", - "pkg:golang/google.golang.org/protobuf@v1.30.0" - ] - }, - { - "ref": "pkg:golang/github.com/google/go-cmp@v0.5.9", - "dependsOn": [ - "pkg:golang/golang.org/x/xerrors@v0.0.0-20200804184101-5ec99f83aff1" - ] - }, - { - "ref": "pkg:golang/github.com/google/gofuzz@v1.1.0", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/google/uuid@v1.1.2", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/imdario/mergo@v0.3.6", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/josharian/intern@v1.0.0", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/json-iterator/go@v1.1.12", - "dependsOn": [ - "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "pkg:golang/github.com/google/gofuzz@v1.1.0", - "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", - "pkg:golang/github.com/modern-go/reflect2@v1.0.2", - "pkg:golang/github.com/stretchr/testify@v1.8.3" - ] - }, - { - "ref": "pkg:golang/github.com/kr/pretty@v0.3.1", - "dependsOn": [ - "pkg:golang/github.com/kr/text@v0.2.0", - "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0" - ] - }, - { - "ref": "pkg:golang/github.com/kr/text@v0.2.0", - "dependsOn": [ - "pkg:golang/github.com/creack/pty@v1.1.9", - "pkg:golang/github.com/kr/pty@v1.1.1" - ] - }, - { - "ref": "pkg:golang/github.com/mailru/easyjson@v0.7.6", - "dependsOn": [ - "pkg:golang/github.com/josharian/intern@v1.0.0" - ] - }, - { - "ref": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/modern-go/reflect2@v1.0.2", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0", - "dependsOn": [ - "pkg:golang/github.com/pkg/diff@v0.0.0-20210226163009-20ebb0f2a09e", - "pkg:golang/gopkg.in/errgo.v2@v2.1.0" - ] + "purl": "pkg:golang/golang.org/x/image@v0.0.0-20190802002840-cff245a6509b", + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/image@v0.0.0-20190802002840-cff245a6509b" }, { - "ref": "pkg:golang/github.com/spf13/pflag@v1.0.5", - "dependsOn": [] + "group": "golang.org/x", + "name": "mobile", + "version": "v0.0.0-20190719004257-d2bd2a29d028", + "purl": "pkg:golang/golang.org/x/mobile@v0.0.0-20190719004257-d2bd2a29d028", + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/mobile@v0.0.0-20190719004257-d2bd2a29d028" }, { - "ref": "pkg:golang/golang.org/x/net@v0.10.0", - "dependsOn": [ - "pkg:golang/golang.org/x/sys@v0.8.0", - "pkg:golang/golang.org/x/term@v0.8.0", - "pkg:golang/golang.org/x/text@v0.9.0", - "pkg:golang/golang.org/x/crypto@v0.9.0" - ] + "group": "rsc.io", + "name": "sampler", + "version": "v1.3.0", + "purl": "pkg:golang/rsc.io/sampler@v1.3.0", + "type": "library", + "bom-ref": "pkg:golang/rsc.io/sampler@v1.3.0" }, { - "ref": "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b", - "dependsOn": [ - "pkg:golang/cloud.google.com/go@v0.65.0", - "pkg:golang/golang.org/x/net@v0.10.0", - "pkg:golang/google.golang.org/appengine@v1.6.7", - "pkg:golang/golang.org/x/sync@v0.0.0-20201020160332-67f06af15bc9" - ] + "group": "gopkg.in", + "name": "errgo.v2", + "version": "v2.1.0", + "purl": "pkg:golang/gopkg.in/errgo.v2@v2.1.0", + "type": "library", + "bom-ref": "pkg:golang/gopkg.in/errgo.v2@v2.1.0" }, { - "ref": "pkg:golang/golang.org/x/sys@v0.8.0", - "dependsOn": [] + "group": "rsc.io", + "name": "binaryregexp", + "version": "v0.2.0", + "purl": "pkg:golang/rsc.io/binaryregexp@v0.2.0", + "type": "library", + "bom-ref": "pkg:golang/rsc.io/binaryregexp@v0.2.0" }, { - "ref": "pkg:golang/golang.org/x/term@v0.8.0", - "dependsOn": [ - "pkg:golang/golang.org/x/sys@v0.8.0" - ] - }, + "group": "github.com/go-gl", + "name": "glfw", + "version": "v0.0.0-20190409004039-e6da0acd62b1", + "purl": "pkg:golang/github.com/go-gl/glfw@v0.0.0-20190409004039-e6da0acd62b1", + "type": "library", + "bom-ref": "pkg:golang/github.com/go-gl/glfw@v0.0.0-20190409004039-e6da0acd62b1" + } + ], + "dependencies": [ { - "ref": "pkg:golang/golang.org/x/text@v0.9.0", + "ref": "pkg:golang/github.com/RHEcosystemAppEng/SaaSi/deployer@v0.0.0", "dependsOn": [ - "pkg:golang/golang.org/x/tools@v0.6.0", - "pkg:golang/golang.org/x/mod@v0.8.0", - "pkg:golang/golang.org/x/sys@v0.8.0" + "pkg:golang/github.com/gin-gonic/gin@v1.9.1", + "pkg:golang/github.com/google/uuid@v1.1.2", + "pkg:golang/github.com/kr/pretty@v0.3.1", + "pkg:golang/gopkg.in/yaml.v2@v2.4.0", + "pkg:golang/k8s.io/apimachinery@v0.26.1", + "pkg:golang/k8s.io/client-go@v0.26.1" ] }, { - "ref": "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8", - "dependsOn": [] - }, - { - "ref": "pkg:golang/google.golang.org/appengine@v1.6.7", + "ref": "pkg:golang/github.com/gin-gonic/gin@v1.9.1", "dependsOn": [ - "pkg:golang/github.com/golang/protobuf@v1.5.2", + "pkg:golang/github.com/bytedance/sonic@v1.9.1", + "pkg:golang/github.com/gin-contrib/sse@v0.1.0", + "pkg:golang/github.com/go-playground/validator/v10@v10.14.0", + "pkg:golang/github.com/goccy/go-json@v0.10.2", + "pkg:golang/github.com/json-iterator/go@v1.1.12", + "pkg:golang/github.com/mattn/go-isatty@v0.0.19", + "pkg:golang/github.com/pelletier/go-toml/v2@v2.0.8", + "pkg:golang/github.com/stretchr/testify@v1.8.3", + "pkg:golang/github.com/ugorji/go/codec@v1.2.11", "pkg:golang/golang.org/x/net@v0.10.0", - "pkg:golang/golang.org/x/text@v0.9.0", + "pkg:golang/google.golang.org/protobuf@v1.30.0", + "pkg:golang/gopkg.in/yaml.v3@v3.0.1", + "pkg:golang/github.com/chenzhuoyu/base64x@v0.0.0-20221115062448-fe3a3abad311", + "pkg:golang/github.com/davecgh/go-spew@v1.1.1", + "pkg:golang/github.com/gabriel-vasile/mimetype@v1.4.2", + "pkg:golang/github.com/go-playground/locales@v0.14.1", + "pkg:golang/github.com/go-playground/universal-translator@v0.18.1", + "pkg:golang/github.com/klauspost/cpuid/v2@v2.2.4", + "pkg:golang/github.com/leodido/go-urn@v1.2.4", + "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", + "pkg:golang/github.com/modern-go/reflect2@v1.0.2", + "pkg:golang/github.com/pmezard/go-difflib@v1.0.0", + "pkg:golang/github.com/twitchyliquid64/golang-asm@v0.15.1", + "pkg:golang/golang.org/x/arch@v0.3.0", "pkg:golang/golang.org/x/crypto@v0.9.0", "pkg:golang/golang.org/x/sys@v0.8.0", - "pkg:golang/golang.org/x/tools@v0.6.0" - ] - }, - { - "ref": "pkg:golang/google.golang.org/protobuf@v1.30.0", - "dependsOn": [ - "pkg:golang/github.com/golang/protobuf@v1.5.2", - "pkg:golang/github.com/google/go-cmp@v0.5.9", - "pkg:golang/google.golang.org/genproto@v0.0.0-20201019141844-1ed22bb0c154" + "pkg:golang/golang.org/x/text@v0.9.0" ] }, { - "ref": "pkg:golang/gopkg.in/inf.v0@v0.9.1", + "ref": "pkg:golang/github.com/google/uuid@v1.1.2", "dependsOn": [] }, { - "ref": "pkg:golang/gopkg.in/yaml.v2@v2.4.0", + "ref": "pkg:golang/github.com/kr/pretty@v0.3.1", "dependsOn": [ - "pkg:golang/gopkg.in/check.v1@v1.0.0-20200227125254-8fa46927fb4f" + "pkg:golang/github.com/kr/text@v0.2.0", + "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0" ] }, { - "ref": "pkg:golang/gopkg.in/yaml.v3@v3.0.1", + "ref": "pkg:golang/gopkg.in/yaml.v2@v2.4.0", "dependsOn": [ "pkg:golang/gopkg.in/check.v1@v1.0.0-20200227125254-8fa46927fb4f" ] }, - { - "ref": "pkg:golang/k8s.io/api@v0.26.1", - "dependsOn": [ - "pkg:golang/github.com/gogo/protobuf@v1.3.2", - "pkg:golang/github.com/stretchr/testify@v1.8.3", - "pkg:golang/k8s.io/apimachinery@v0.26.1", - "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "pkg:golang/github.com/golang/protobuf@v1.5.2", - "pkg:golang/github.com/google/go-cmp@v0.5.9", - "pkg:golang/github.com/google/gofuzz@v1.1.0", - "pkg:golang/github.com/json-iterator/go@v1.1.12", - "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", - "pkg:golang/github.com/modern-go/reflect2@v1.0.2", - "pkg:golang/github.com/pmezard/go-difflib@v1.0.0", - "pkg:golang/github.com/spf13/pflag@v1.0.5", - "pkg:golang/golang.org/x/net@v0.10.0", - "pkg:golang/golang.org/x/text@v0.9.0", - "pkg:golang/google.golang.org/protobuf@v1.30.0", - "pkg:golang/gopkg.in/inf.v0@v0.9.1", - "pkg:golang/gopkg.in/yaml.v2@v2.4.0", - "pkg:golang/gopkg.in/yaml.v3@v3.0.1", - "pkg:golang/k8s.io/klog/v2@v2.80.1", - "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", - "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2", - "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", - "pkg:golang/sigs.k8s.io/yaml@v1.3.0" - ] - }, { "ref": "pkg:golang/k8s.io/apimachinery@v0.26.1", "dependsOn": [ @@ -1503,80 +1254,6 @@ "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2" ] }, - { - "ref": "pkg:golang/k8s.io/klog/v2@v2.80.1", - "dependsOn": [] - }, - { - "ref": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280", - "dependsOn": [ - "pkg:golang/github.com/NYTimes/gziphandler@v0.0.0-20170623195520-56545f4a5d46", - "pkg:golang/github.com/asaskevich/govalidator@v0.0.0-20190424111038-f61b66f89f4a", - "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0", - "pkg:golang/github.com/go-openapi/jsonreference@v0.20.0", - "pkg:golang/github.com/go-openapi/swag@v0.19.14", - "pkg:golang/github.com/golang/protobuf@v1.5.2", - "pkg:golang/github.com/google/go-cmp@v0.5.9", - "pkg:golang/github.com/google/gofuzz@v1.1.0", - "pkg:golang/github.com/google/uuid@v1.1.2", - "pkg:golang/github.com/mitchellh/mapstructure@v1.1.2", - "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", - "pkg:golang/github.com/onsi/ginkgo/v2@v2.4.0", - "pkg:golang/github.com/onsi/gomega@v1.23.0", - "pkg:golang/github.com/spf13/pflag@v1.0.5", - "pkg:golang/github.com/stretchr/testify@v1.8.3", - "pkg:golang/google.golang.org/protobuf@v1.30.0", - "pkg:golang/gopkg.in/yaml.v2@v2.4.0", - "pkg:golang/gopkg.in/yaml.v3@v3.0.1", - "pkg:golang/k8s.io/gengo@v0.0.0-20210813121822-485abfe95c7c", - "pkg:golang/k8s.io/klog/v2@v2.80.1", - "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", - "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", - "pkg:golang/sigs.k8s.io/yaml@v1.3.0", - "pkg:golang/github.com/PuerkitoBio/purell@v1.1.1", - "pkg:golang/github.com/PuerkitoBio/urlesc@v0.0.0-20170810143723-de5bf2ad4578", - "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5", - "pkg:golang/github.com/json-iterator/go@v1.1.12", - "pkg:golang/github.com/mailru/easyjson@v0.7.6", - "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", - "pkg:golang/github.com/modern-go/reflect2@v1.0.2", - "pkg:golang/github.com/pmezard/go-difflib@v1.0.0", - "pkg:golang/golang.org/x/mod@v0.8.0", - "pkg:golang/golang.org/x/net@v0.10.0", - "pkg:golang/golang.org/x/sys@v0.8.0", - "pkg:golang/golang.org/x/text@v0.9.0", - "pkg:golang/golang.org/x/tools@v0.6.0", - "pkg:golang/golang.org/x/xerrors@v0.0.0-20200804184101-5ec99f83aff1" - ] - }, - { - "ref": "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", - "dependsOn": [ - "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "pkg:golang/k8s.io/klog/v2@v2.80.1" - ] - }, - { - "ref": "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2", - "dependsOn": [] - }, - { - "ref": "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", - "dependsOn": [ - "pkg:golang/gopkg.in/yaml.v2@v2.4.0", - "pkg:golang/github.com/google/gofuzz@v1.1.0", - "pkg:golang/github.com/json-iterator/go@v1.1.12", - "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd" - ] - }, - { - "ref": "pkg:golang/sigs.k8s.io/yaml@v1.3.0", - "dependsOn": [ - "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "pkg:golang/gopkg.in/yaml.v2@v2.4.0" - ] - }, { "ref": "pkg:golang/github.com/bytedance/sonic@v1.9.1", "dependsOn": [] @@ -1593,6 +1270,16 @@ "ref": "pkg:golang/github.com/goccy/go-json@v0.10.2", "dependsOn": [] }, + { + "ref": "pkg:golang/github.com/json-iterator/go@v1.1.12", + "dependsOn": [ + "pkg:golang/github.com/davecgh/go-spew@v1.1.1", + "pkg:golang/github.com/google/gofuzz@v1.1.0", + "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", + "pkg:golang/github.com/modern-go/reflect2@v1.0.2", + "pkg:golang/github.com/stretchr/testify@v1.8.3" + ] + }, { "ref": "pkg:golang/github.com/mattn/go-isatty@v0.0.19", "dependsOn": [] @@ -1612,11 +1299,38 @@ ] }, { - "ref": "pkg:golang/github.com/ugorji/go/codec@v1.2.11", + "ref": "pkg:golang/github.com/ugorji/go/codec@v1.2.11", + "dependsOn": [] + }, + { + "ref": "pkg:golang/golang.org/x/net@v0.10.0", + "dependsOn": [ + "pkg:golang/golang.org/x/sys@v0.8.0", + "pkg:golang/golang.org/x/term@v0.8.0", + "pkg:golang/golang.org/x/text@v0.9.0", + "pkg:golang/golang.org/x/crypto@v0.9.0" + ] + }, + { + "ref": "pkg:golang/google.golang.org/protobuf@v1.30.0", + "dependsOn": [ + "pkg:golang/github.com/golang/protobuf@v1.5.2", + "pkg:golang/github.com/google/go-cmp@v0.5.9", + "pkg:golang/google.golang.org/genproto@v0.0.0-20201019141844-1ed22bb0c154" + ] + }, + { + "ref": "pkg:golang/gopkg.in/yaml.v3@v3.0.1", + "dependsOn": [ + "pkg:golang/gopkg.in/check.v1@v1.0.0-20200227125254-8fa46927fb4f" + ] + }, + { + "ref": "pkg:golang/github.com/chenzhuoyu/base64x@v0.0.0-20221115062448-fe3a3abad311", "dependsOn": [] }, { - "ref": "pkg:golang/github.com/chenzhuoyu/base64x@v0.0.0-20221115062448-fe3a3abad311", + "ref": "pkg:golang/github.com/davecgh/go-spew@v1.1.1", "dependsOn": [] }, { @@ -1639,6 +1353,14 @@ "ref": "pkg:golang/github.com/leodido/go-urn@v1.2.4", "dependsOn": [] }, + { + "ref": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/modern-go/reflect2@v1.0.2", + "dependsOn": [] + }, { "ref": "pkg:golang/github.com/pmezard/go-difflib@v1.0.0", "dependsOn": [] @@ -1658,6 +1380,60 @@ "pkg:golang/golang.org/x/net@v0.10.0" ] }, + { + "ref": "pkg:golang/golang.org/x/sys@v0.8.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/golang.org/x/text@v0.9.0", + "dependsOn": [ + "pkg:golang/golang.org/x/tools@v0.6.0", + "pkg:golang/golang.org/x/mod@v0.8.0", + "pkg:golang/golang.org/x/sys@v0.8.0" + ] + }, + { + "ref": "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5", + "dependsOn": [ + "pkg:golang/github.com/go-openapi/swag@v0.19.14", + "pkg:golang/github.com/mailru/easyjson@v0.7.6", + "pkg:golang/github.com/stretchr/testify@v1.8.3" + ] + }, + { + "ref": "pkg:golang/github.com/go-openapi/swag@v0.19.14", + "dependsOn": [ + "pkg:golang/github.com/davecgh/go-spew@v1.1.1", + "pkg:golang/github.com/kr/text@v0.2.0", + "pkg:golang/github.com/mailru/easyjson@v0.7.6", + "pkg:golang/github.com/niemeyer/pretty@v0.0.0-20200227124842-a10e7caefd8e", + "pkg:golang/github.com/stretchr/testify@v1.8.3", + "pkg:golang/gopkg.in/check.v1@v1.0.0-20200227125254-8fa46927fb4f", + "pkg:golang/gopkg.in/yaml.v2@v2.4.0", + "pkg:golang/gopkg.in/yaml.v3@v3.0.1", + "pkg:golang/github.com/kr/pretty@v0.3.1" + ] + }, + { + "ref": "pkg:golang/github.com/mailru/easyjson@v0.7.6", + "dependsOn": [ + "pkg:golang/github.com/josharian/intern@v1.0.0" + ] + }, + { + "ref": "pkg:golang/github.com/go-openapi/jsonreference@v0.20.0", + "dependsOn": [ + "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5", + "pkg:golang/github.com/stretchr/testify@v1.8.3" + ] + }, + { + "ref": "pkg:golang/github.com/kr/text@v0.2.0", + "dependsOn": [ + "pkg:golang/github.com/creack/pty@v1.1.9", + "pkg:golang/github.com/kr/pty@v1.1.1" + ] + }, { "ref": "pkg:golang/github.com/niemeyer/pretty@v0.0.0-20200227124842-a10e7caefd8e", "dependsOn": [ @@ -1668,6 +1444,14 @@ "ref": "pkg:golang/gopkg.in/check.v1@v1.0.0-20200227125254-8fa46927fb4f", "dependsOn": [] }, + { + "ref": "pkg:golang/github.com/gogo/protobuf@v1.3.2", + "dependsOn": [ + "pkg:golang/github.com/kisielk/errcheck@v1.5.0", + "pkg:golang/github.com/kisielk/gotool@v1.0.0", + "pkg:golang/golang.org/x/tools@v0.6.0" + ] + }, { "ref": "pkg:golang/github.com/kisielk/errcheck@v1.5.0", "dependsOn": [ @@ -1689,6 +1473,19 @@ "pkg:golang/google.golang.org/appengine@v1.6.7" ] }, + { + "ref": "pkg:golang/github.com/golang/protobuf@v1.5.2", + "dependsOn": [ + "pkg:golang/github.com/google/go-cmp@v0.5.9", + "pkg:golang/google.golang.org/protobuf@v1.30.0" + ] + }, + { + "ref": "pkg:golang/github.com/google/go-cmp@v0.5.9", + "dependsOn": [ + "pkg:golang/golang.org/x/xerrors@v0.0.0-20200804184101-5ec99f83aff1" + ] + }, { "ref": "pkg:golang/github.com/docopt/docopt-go@v0.0.0-20180111231733-ee0de3bc6815", "dependsOn": [] @@ -1717,14 +1514,44 @@ "pkg:golang/golang.org/x/sync@v0.0.0-20201020160332-67f06af15bc9" ] }, + { + "ref": "pkg:golang/github.com/google/gofuzz@v1.1.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0", + "dependsOn": [ + "pkg:golang/github.com/pkg/diff@v0.0.0-20210226163009-20ebb0f2a09e", + "pkg:golang/gopkg.in/errgo.v2@v2.1.0" + ] + }, { "ref": "pkg:golang/github.com/creack/pty@v1.1.9", "dependsOn": [] }, + { + "ref": "pkg:golang/github.com/josharian/intern@v1.0.0", + "dependsOn": [] + }, { "ref": "pkg:golang/github.com/pkg/diff@v0.0.0-20210226163009-20ebb0f2a09e", "dependsOn": [] }, + { + "ref": "pkg:golang/golang.org/x/term@v0.8.0", + "dependsOn": [ + "pkg:golang/golang.org/x/sys@v0.8.0" + ] + }, + { + "ref": "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b", + "dependsOn": [ + "pkg:golang/cloud.google.com/go@v0.65.0", + "pkg:golang/golang.org/x/net@v0.10.0", + "pkg:golang/google.golang.org/appengine@v1.6.7", + "pkg:golang/golang.org/x/sync@v0.0.0-20201020160332-67f06af15bc9" + ] + }, { "ref": "pkg:golang/cloud.google.com/go@v0.65.0", "dependsOn": [ @@ -1763,6 +1590,17 @@ "pkg:golang/rsc.io/binaryregexp@v0.2.0" ] }, + { + "ref": "pkg:golang/google.golang.org/appengine@v1.6.7", + "dependsOn": [ + "pkg:golang/github.com/golang/protobuf@v1.5.2", + "pkg:golang/golang.org/x/net@v0.10.0", + "pkg:golang/golang.org/x/text@v0.9.0", + "pkg:golang/golang.org/x/crypto@v0.9.0", + "pkg:golang/golang.org/x/sys@v0.8.0", + "pkg:golang/golang.org/x/tools@v0.6.0" + ] + }, { "ref": "pkg:golang/golang.org/x/mod@v0.8.0", "dependsOn": [ @@ -1771,6 +1609,73 @@ "pkg:golang/golang.org/x/xerrors@v0.0.0-20200804184101-5ec99f83aff1" ] }, + { + "ref": "pkg:golang/k8s.io/api@v0.26.1", + "dependsOn": [ + "pkg:golang/github.com/gogo/protobuf@v1.3.2", + "pkg:golang/github.com/stretchr/testify@v1.8.3", + "pkg:golang/k8s.io/apimachinery@v0.26.1", + "pkg:golang/github.com/davecgh/go-spew@v1.1.1", + "pkg:golang/github.com/golang/protobuf@v1.5.2", + "pkg:golang/github.com/google/go-cmp@v0.5.9", + "pkg:golang/github.com/google/gofuzz@v1.1.0", + "pkg:golang/github.com/json-iterator/go@v1.1.12", + "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", + "pkg:golang/github.com/modern-go/reflect2@v1.0.2", + "pkg:golang/github.com/pmezard/go-difflib@v1.0.0", + "pkg:golang/github.com/spf13/pflag@v1.0.5", + "pkg:golang/golang.org/x/net@v0.10.0", + "pkg:golang/golang.org/x/text@v0.9.0", + "pkg:golang/google.golang.org/protobuf@v1.30.0", + "pkg:golang/gopkg.in/inf.v0@v0.9.1", + "pkg:golang/gopkg.in/yaml.v2@v2.4.0", + "pkg:golang/gopkg.in/yaml.v3@v3.0.1", + "pkg:golang/k8s.io/klog/v2@v2.80.1", + "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", + "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2", + "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", + "pkg:golang/sigs.k8s.io/yaml@v1.3.0" + ] + }, + { + "ref": "pkg:golang/github.com/spf13/pflag@v1.0.5", + "dependsOn": [] + }, + { + "ref": "pkg:golang/gopkg.in/inf.v0@v0.9.1", + "dependsOn": [] + }, + { + "ref": "pkg:golang/k8s.io/klog/v2@v2.80.1", + "dependsOn": [] + }, + { + "ref": "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", + "dependsOn": [ + "pkg:golang/github.com/davecgh/go-spew@v1.1.1", + "pkg:golang/k8s.io/klog/v2@v2.80.1" + ] + }, + { + "ref": "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2", + "dependsOn": [] + }, + { + "ref": "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", + "dependsOn": [ + "pkg:golang/gopkg.in/yaml.v2@v2.4.0", + "pkg:golang/github.com/google/gofuzz@v1.1.0", + "pkg:golang/github.com/json-iterator/go@v1.1.12", + "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd" + ] + }, + { + "ref": "pkg:golang/sigs.k8s.io/yaml@v1.3.0", + "dependsOn": [ + "pkg:golang/github.com/davecgh/go-spew@v1.1.1", + "pkg:golang/gopkg.in/yaml.v2@v2.4.0" + ] + }, { "ref": "pkg:golang/github.com/armon/go-socks5@v0.0.0-20160902184237-e75332964ef5", "dependsOn": [] @@ -1791,6 +1696,49 @@ "ref": "pkg:golang/github.com/mxk/go-flowrate@v0.0.0-20140419014527-cca7078d478f", "dependsOn": [] }, + { + "ref": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280", + "dependsOn": [ + "pkg:golang/github.com/NYTimes/gziphandler@v0.0.0-20170623195520-56545f4a5d46", + "pkg:golang/github.com/asaskevich/govalidator@v0.0.0-20190424111038-f61b66f89f4a", + "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0", + "pkg:golang/github.com/go-openapi/jsonreference@v0.20.0", + "pkg:golang/github.com/go-openapi/swag@v0.19.14", + "pkg:golang/github.com/golang/protobuf@v1.5.2", + "pkg:golang/github.com/google/go-cmp@v0.5.9", + "pkg:golang/github.com/google/gofuzz@v1.1.0", + "pkg:golang/github.com/google/uuid@v1.1.2", + "pkg:golang/github.com/mitchellh/mapstructure@v1.1.2", + "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", + "pkg:golang/github.com/onsi/ginkgo/v2@v2.4.0", + "pkg:golang/github.com/onsi/gomega@v1.23.0", + "pkg:golang/github.com/spf13/pflag@v1.0.5", + "pkg:golang/github.com/stretchr/testify@v1.8.3", + "pkg:golang/google.golang.org/protobuf@v1.30.0", + "pkg:golang/gopkg.in/yaml.v2@v2.4.0", + "pkg:golang/gopkg.in/yaml.v3@v3.0.1", + "pkg:golang/k8s.io/gengo@v0.0.0-20210813121822-485abfe95c7c", + "pkg:golang/k8s.io/klog/v2@v2.80.1", + "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", + "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", + "pkg:golang/sigs.k8s.io/yaml@v1.3.0", + "pkg:golang/github.com/PuerkitoBio/purell@v1.1.1", + "pkg:golang/github.com/PuerkitoBio/urlesc@v0.0.0-20170810143723-de5bf2ad4578", + "pkg:golang/github.com/davecgh/go-spew@v1.1.1", + "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5", + "pkg:golang/github.com/json-iterator/go@v1.1.12", + "pkg:golang/github.com/mailru/easyjson@v0.7.6", + "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", + "pkg:golang/github.com/modern-go/reflect2@v1.0.2", + "pkg:golang/github.com/pmezard/go-difflib@v1.0.0", + "pkg:golang/golang.org/x/mod@v0.8.0", + "pkg:golang/golang.org/x/net@v0.10.0", + "pkg:golang/golang.org/x/sys@v0.8.0", + "pkg:golang/golang.org/x/text@v0.9.0", + "pkg:golang/golang.org/x/tools@v0.6.0", + "pkg:golang/golang.org/x/xerrors@v0.0.0-20200804184101-5ec99f83aff1" + ] + }, { "ref": "pkg:golang/github.com/onsi/ginkgo/v2@v2.4.0", "dependsOn": [] @@ -1811,14 +1759,30 @@ "ref": "pkg:golang/github.com/gregjones/httpcache@v0.0.0-20180305231024-9cad4c3443a7", "dependsOn": [] }, + { + "ref": "pkg:golang/github.com/imdario/mergo@v0.3.6", + "dependsOn": [] + }, { "ref": "pkg:golang/github.com/peterbourgon/diskv@v2.0.1%2Bincompatible", "dependsOn": [] }, + { + "ref": "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0", + "dependsOn": [] + }, { "ref": "pkg:golang/github.com/google/btree@v1.0.1", "dependsOn": [] }, + { + "ref": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", + "dependsOn": [] + }, { "ref": "pkg:golang/github.com/NYTimes/gziphandler@v0.0.0-20170623195520-56545f4a5d46", "dependsOn": [] @@ -2205,4 +2169,4 @@ "dependsOn": [] } ] -} \ No newline at end of file +} diff --git a/test/providers/tst_manifests/golang/go_mod_with_ignore/go.mod b/test/providers/tst_manifests/golang/go_mod_with_ignore/go.mod index 7ee7a08f..ff13131e 100644 --- a/test/providers/tst_manifests/golang/go_mod_with_ignore/go.mod +++ b/test/providers/tst_manifests/golang/go_mod_with_ignore/go.mod @@ -15,13 +15,13 @@ require ( require ( github.com/davecgh/go-spew v1.1.1 // indirect github.com/emicklei/go-restful/v3 v3.9.0 // indirect - github.com/go-logr/logr v1.2.3 // indirect exhortignore + github.com/go-logr/logr v1.2.3 // indirect; exhortignore github.com/go-openapi/jsonpointer v0.19.5 // indirect github.com/go-openapi/jsonreference v0.20.0 // indirect github.com/go-openapi/swag v0.19.14 // indirect github.com/gogo/protobuf v1.3.2 // indirect github.com/golang/protobuf v1.5.2 // indirect - github.com/google/gnostic v0.5.7-v3refs // indirect //exhortignore + github.com/google/gnostic v0.5.7-v3refs // indirect; exhortignore github.com/google/go-cmp v0.5.9 // indirect github.com/google/gofuzz v1.1.0 // indirect github.com/imdario/mergo v0.3.6 // indirect