{"$schema":"http://cyclonedx.org/schema/bom-1.6.schema.json","bomFormat":"CycloneDX","specVersion":"1.6","serialNumber":"urn:uuid:274f6f80-3c4f-459a-b254-251ef485de53","version":1,"metadata":{"timestamp":"2026-09-10T06:51:37Z","tools":{"components":[{"type":"application","author":"anchore","name":"syft","version":"1.42.3"}]},"component":{"bom-ref":"af63bd4c8601b7f1","type":"file","name":"."}},"components":[{"bom-ref":"pkg:github/epmatt/reviewdog-action-prettier@v1.3.0?package-id=84ee8be797c96161","type":"library","name":"EPMatt/reviewdog-action-prettier","version":"v1.3.0","cpe":"cpe:2.3:a:EPMatt\\/reviewdog-action-prettier:EPMatt\\/reviewdog-action-prettier:v1.3.0:*:*:*:*:*:*:*","purl":"pkg:github/EPMatt/reviewdog-action-prettier@v1.3.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:EPMatt\\/reviewdog-action-prettier:EPMatt\\/reviewdog_action_prettier:v1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:EPMatt\\/reviewdog_action_prettier:EPMatt\\/reviewdog-action-prettier:v1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:EPMatt\\/reviewdog_action_prettier:EPMatt\\/reviewdog_action_prettier:v1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:EPMatt\\/reviewdog-action:EPMatt\\/reviewdog-action-prettier:v1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:EPMatt\\/reviewdog-action:EPMatt\\/reviewdog_action_prettier:v1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:EPMatt\\/reviewdog_action:EPMatt\\/reviewdog-action-prettier:v1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:EPMatt\\/reviewdog_action:EPMatt\\/reviewdog_action_prettier:v1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:EPMatt\\/reviewdog:EPMatt\\/reviewdog-action-prettier:v1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:EPMatt\\/reviewdog:EPMatt\\/reviewdog_action_prettier:v1.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/ci-cd.yaml"}]},{"bom-ref":"pkg:github/actions/cache@v6.1.0?package-id=73ddaf834c1d904f","type":"library","name":"actions/cache","version":"v6.1.0","cpe":"cpe:2.3:a:actions\\/cache:actions\\/cache:v6.1.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/cache@v6.1.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/ci-cd.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=00e26aa55946c6c6","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/ci-cd.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=59abdae8c060d901","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/drift-detection.yaml"}]},{"bom-ref":"pkg:github/actions/download-artifact@v8.0.1?package-id=a34fcbe753298a0c","type":"library","name":"actions/download-artifact","version":"v8.0.1","cpe":"cpe:2.3:a:actions\\/download-artifact:actions\\/download-artifact:v8.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/download-artifact@v8.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download-artifact:actions\\/download_artifact:v8.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download_artifact:actions\\/download-artifact:v8.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download_artifact:actions\\/download_artifact:v8.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download:actions\\/download-artifact:v8.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/download:actions\\/download_artifact:v8.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/ci-cd.yaml"}]},{"bom-ref":"pkg:github/actions/setup-node@v7.0.0?package-id=c7d772bb4a644188","type":"library","name":"actions/setup-node","version":"v7.0.0","cpe":"cpe:2.3:a:actions\\/setup-node:actions\\/setup-node:v7.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-node@v7.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-node:actions\\/setup_node:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_node:actions\\/setup-node:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_node:actions\\/setup_node:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-node:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_node:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/ci-cd.yaml"}]},{"bom-ref":"pkg:github/actions/upload-artifact@v7.0.1?package-id=04b1dfa6f326121e","type":"library","name":"actions/upload-artifact","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/upload-artifact@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:v7.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:v7.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:v7.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:v7.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:v7.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/ci-cd.yaml"}]},{"bom-ref":"pkg:github/anchore/sbom-action@v0.24.0?package-id=1f7156bc459f578b","type":"library","name":"anchore/sbom-action","version":"v0.24.0","cpe":"cpe:2.3:a:anchore\\/sbom-action:anchore\\/sbom-action:v0.24.0:*:*:*:*:*:*:*","purl":"pkg:github/anchore/sbom-action@v0.24.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore\\/sbom-action:anchore\\/sbom_action:v0.24.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore\\/sbom_action:anchore\\/sbom-action:v0.24.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore\\/sbom_action:anchore\\/sbom_action:v0.24.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore\\/sbom:anchore\\/sbom-action:v0.24.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore\\/sbom:anchore\\/sbom_action:v0.24.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/ci-cd.yaml"}]},{"bom-ref":"pkg:github/anchore/scan-action@v7.4.0?package-id=2adb42427c613772","type":"library","name":"anchore/scan-action","version":"v7.4.0","cpe":"cpe:2.3:a:anchore\\/scan-action:anchore\\/scan-action:v7.4.0:*:*:*:*:*:*:*","purl":"pkg:github/anchore/scan-action@v7.4.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore\\/scan-action:anchore\\/scan_action:v7.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore\\/scan_action:anchore\\/scan-action:v7.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore\\/scan_action:anchore\\/scan_action:v7.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore\\/scan:anchore\\/scan-action:v7.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:anchore\\/scan:anchore\\/scan_action:v7.4.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/ci-cd.yaml"}]},{"bom-ref":"pkg:github/cloudflare/wrangler-action@v4.0.0?package-id=c9aa5810933925c0","type":"library","name":"cloudflare/wrangler-action","version":"v4.0.0","cpe":"cpe:2.3:a:cloudflare\\/wrangler-action:cloudflare\\/wrangler-action:v4.0.0:*:*:*:*:*:*:*","purl":"pkg:github/cloudflare/wrangler-action@v4.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:cloudflare\\/wrangler-action:cloudflare\\/wrangler_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:cloudflare\\/wrangler_action:cloudflare\\/wrangler-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:cloudflare\\/wrangler_action:cloudflare\\/wrangler_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:cloudflare\\/wrangler:cloudflare\\/wrangler-action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:cloudflare\\/wrangler:cloudflare\\/wrangler_action:v4.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/ci-cd.yaml"}]},{"bom-ref":"pkg:github/dortort/betterleaks-action@v0.1.0?package-id=d8132713f85661af","type":"library","name":"dortort/betterleaks-action","version":"v0.1.0","cpe":"cpe:2.3:a:dortort\\/betterleaks-action:dortort\\/betterleaks-action:v0.1.0:*:*:*:*:*:*:*","purl":"pkg:github/dortort/betterleaks-action@v0.1.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:dortort\\/betterleaks-action:dortort\\/betterleaks_action:v0.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:dortort\\/betterleaks_action:dortort\\/betterleaks-action:v0.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:dortort\\/betterleaks_action:dortort\\/betterleaks_action:v0.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:dortort\\/betterleaks:dortort\\/betterleaks-action:v0.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:dortort\\/betterleaks:dortort\\/betterleaks_action:v0.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/ci-cd.yaml"}]},{"bom-ref":"pkg:github/github/codeql-action@v2.26.3?package-id=48aee73a5f506928#analyze","type":"library","name":"github/codeql-action/analyze","version":"v2.26.3","cpe":"cpe:2.3:a:github\\/codeql-action\\/analyze:github\\/codeql-action\\/analyze:v2.26.3:*:*:*:*:*:*:*","purl":"pkg:github/github/codeql-action@v2.26.3#analyze","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql-action\\/analyze:github\\/codeql_action\\/analyze:v2.26.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/analyze:github\\/codeql-action\\/analyze:v2.26.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/analyze:github\\/codeql_action\\/analyze:v2.26.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql-action\\/analyze:v2.26.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql_action\\/analyze:v2.26.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/ci-cd.yaml"}]},{"bom-ref":"pkg:github/github/codeql-action@v2.26.3?package-id=f82a4185c1d38d34#init","type":"library","name":"github/codeql-action/init","version":"v2.26.3","cpe":"cpe:2.3:a:github\\/codeql-action\\/init:github\\/codeql-action\\/init:v2.26.3:*:*:*:*:*:*:*","purl":"pkg:github/github/codeql-action@v2.26.3#init","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql-action\\/init:github\\/codeql_action\\/init:v2.26.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/init:github\\/codeql-action\\/init:v2.26.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/init:github\\/codeql_action\\/init:v2.26.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql-action\\/init:v2.26.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql_action\\/init:v2.26.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/ci-cd.yaml"}]},{"bom-ref":"pkg:github/github/codeql-action@v2.26.3?package-id=1eff9ae27f6cbaf1#upload-sarif","type":"library","name":"github/codeql-action/upload-sarif","version":"v2.26.3","cpe":"cpe:2.3:a:github\\/codeql-action\\/upload-sarif:github\\/codeql-action\\/upload-sarif:v2.26.3:*:*:*:*:*:*:*","purl":"pkg:github/github/codeql-action@v2.26.3#upload-sarif","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql-action\\/upload-sarif:github\\/codeql_action\\/upload_sarif:v2.26.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/upload_sarif:github\\/codeql-action\\/upload-sarif:v2.26.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/upload_sarif:github\\/codeql_action\\/upload_sarif:v2.26.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql-action\\/upload:github\\/codeql-action\\/upload-sarif:v2.26.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql-action\\/upload:github\\/codeql_action\\/upload_sarif:v2.26.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/upload:github\\/codeql-action\\/upload-sarif:v2.26.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/upload:github\\/codeql_action\\/upload_sarif:v2.26.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql-action\\/upload-sarif:v2.26.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql_action\\/upload_sarif:v2.26.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/ci-cd.yaml"}]},{"bom-ref":"pkg:github/lycheeverse/lychee-action@v2.9.0?package-id=f1cf11f3aca44429","type":"library","name":"lycheeverse/lychee-action","version":"v2.9.0","cpe":"cpe:2.3:a:lycheeverse\\/lychee-action:lycheeverse\\/lychee-action:v2.9.0:*:*:*:*:*:*:*","purl":"pkg:github/lycheeverse/lychee-action@v2.9.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:lycheeverse\\/lychee-action:lycheeverse\\/lychee_action:v2.9.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lycheeverse\\/lychee_action:lycheeverse\\/lychee-action:v2.9.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lycheeverse\\/lychee_action:lycheeverse\\/lychee_action:v2.9.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lycheeverse\\/lychee:lycheeverse\\/lychee-action:v2.9.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lycheeverse\\/lychee:lycheeverse\\/lychee_action:v2.9.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/ci-cd.yaml"}]},{"bom-ref":"pkg:github/opentofu/setup-opentofu@v2.0.2?package-id=0f4f7b213b5128aa","type":"library","name":"opentofu/setup-opentofu","version":"v2.0.2","cpe":"cpe:2.3:a:opentofu\\/setup-opentofu:opentofu\\/setup-opentofu:v2.0.2:*:*:*:*:*:*:*","purl":"pkg:github/opentofu/setup-opentofu@v2.0.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:opentofu\\/setup-opentofu:opentofu\\/setup_opentofu:v2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:opentofu\\/setup_opentofu:opentofu\\/setup-opentofu:v2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:opentofu\\/setup_opentofu:opentofu\\/setup_opentofu:v2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:opentofu\\/setup:opentofu\\/setup-opentofu:v2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:opentofu\\/setup:opentofu\\/setup_opentofu:v2.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/drift-detection.yaml"}]},{"bom-ref":"pkg:github/peter-evans/create-issue-from-file@v6.0.0?package-id=e8415fd61a31d5fa","type":"library","name":"peter-evans/create-issue-from-file","version":"v6.0.0","cpe":"cpe:2.3:a:peter-evans\\/create-issue-from-file:peter-evans\\/create-issue-from-file:v6.0.0:*:*:*:*:*:*:*","purl":"pkg:github/peter-evans/create-issue-from-file@v6.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter-evans\\/create-issue-from-file:peter_evans\\/create_issue_from_file:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create_issue_from_file:peter-evans\\/create-issue-from-file:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create_issue_from_file:peter_evans\\/create_issue_from_file:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter-evans\\/create-issue-from:peter-evans\\/create-issue-from-file:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter-evans\\/create-issue-from:peter_evans\\/create_issue_from_file:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create_issue_from:peter-evans\\/create-issue-from-file:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create_issue_from:peter_evans\\/create_issue_from_file:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter-evans\\/create-issue:peter-evans\\/create-issue-from-file:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter-evans\\/create-issue:peter_evans\\/create_issue_from_file:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create_issue:peter-evans\\/create-issue-from-file:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create_issue:peter_evans\\/create_issue_from_file:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter-evans\\/create:peter-evans\\/create-issue-from-file:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter-evans\\/create:peter_evans\\/create_issue_from_file:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create:peter-evans\\/create-issue-from-file:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create:peter_evans\\/create_issue_from_file:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter:peter-evans\\/create-issue-from-file:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter:peter_evans\\/create_issue_from_file:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/ci-cd.yaml"}]},{"bom-ref":"pkg:github/peter-evans/create-issue-from-file@v6.0.0?package-id=71c5114dfcf16bbb","type":"library","name":"peter-evans/create-issue-from-file","version":"v6.0.0","cpe":"cpe:2.3:a:peter-evans\\/create-issue-from-file:peter-evans\\/create-issue-from-file:v6.0.0:*:*:*:*:*:*:*","purl":"pkg:github/peter-evans/create-issue-from-file@v6.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter-evans\\/create-issue-from-file:peter_evans\\/create_issue_from_file:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create_issue_from_file:peter-evans\\/create-issue-from-file:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create_issue_from_file:peter_evans\\/create_issue_from_file:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter-evans\\/create-issue-from:peter-evans\\/create-issue-from-file:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter-evans\\/create-issue-from:peter_evans\\/create_issue_from_file:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create_issue_from:peter-evans\\/create-issue-from-file:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create_issue_from:peter_evans\\/create_issue_from_file:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter-evans\\/create-issue:peter-evans\\/create-issue-from-file:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter-evans\\/create-issue:peter_evans\\/create_issue_from_file:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create_issue:peter-evans\\/create-issue-from-file:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create_issue:peter_evans\\/create_issue_from_file:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter-evans\\/create:peter-evans\\/create-issue-from-file:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter-evans\\/create:peter_evans\\/create_issue_from_file:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create:peter-evans\\/create-issue-from-file:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter_evans\\/create:peter_evans\\/create_issue_from_file:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter:peter-evans\\/create-issue-from-file:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peter:peter_evans\\/create_issue_from_file:v6.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/drift-detection.yaml"}]},{"bom-ref":"af0f366eac37039a","type":"library","name":"registry.opentofu.org/cloudflare/cloudflare","version":"5.24.0","cpe":"cpe:2.3:a:cloudflare:cloudflare:5.24.0:*:*:*:*:*:*:*","properties":[{"name":"syft:package:foundBy","value":"terraform-lock-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"terraform"},{"name":"syft:package:metadataType","value":"terraform-lock-provider-entry"},{"name":"syft:location:0:path","value":"/opentofu/.terraform.lock.hcl"}]},{"bom-ref":"pkg:github/reviewdog/action-actionlint@v1.73.1?package-id=3384723fe03b9e85","type":"library","name":"reviewdog/action-actionlint","version":"v1.73.1","cpe":"cpe:2.3:a:reviewdog\\/action-actionlint:reviewdog\\/action-actionlint:v1.73.1:*:*:*:*:*:*:*","purl":"pkg:github/reviewdog/action-actionlint@v1.73.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:reviewdog\\/action-actionlint:reviewdog\\/action_actionlint:v1.73.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:reviewdog\\/action_actionlint:reviewdog\\/action-actionlint:v1.73.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:reviewdog\\/action_actionlint:reviewdog\\/action_actionlint:v1.73.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:reviewdog\\/action:reviewdog\\/action-actionlint:v1.73.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:reviewdog\\/action:reviewdog\\/action_actionlint:v1.73.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/ci-cd.yaml"}]},{"bom-ref":"pkg:github/reviewdog/action-eslint@v1.34.0?package-id=0e51913dba82bf12","type":"library","name":"reviewdog/action-eslint","version":"v1.34.0","cpe":"cpe:2.3:a:reviewdog\\/action-eslint:reviewdog\\/action-eslint:v1.34.0:*:*:*:*:*:*:*","purl":"pkg:github/reviewdog/action-eslint@v1.34.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:reviewdog\\/action-eslint:reviewdog\\/action_eslint:v1.34.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:reviewdog\\/action_eslint:reviewdog\\/action-eslint:v1.34.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:reviewdog\\/action_eslint:reviewdog\\/action_eslint:v1.34.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:reviewdog\\/action:reviewdog\\/action-eslint:v1.34.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:reviewdog\\/action:reviewdog\\/action_eslint:v1.34.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/ci-cd.yaml"}]},{"bom-ref":"pkg:github/reviewdog/action-misspell@v1.28.0?package-id=af9620a7730dda5f","type":"library","name":"reviewdog/action-misspell","version":"v1.28.0","cpe":"cpe:2.3:a:reviewdog\\/action-misspell:reviewdog\\/action-misspell:v1.28.0:*:*:*:*:*:*:*","purl":"pkg:github/reviewdog/action-misspell@v1.28.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:reviewdog\\/action-misspell:reviewdog\\/action_misspell:v1.28.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:reviewdog\\/action_misspell:reviewdog\\/action-misspell:v1.28.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:reviewdog\\/action_misspell:reviewdog\\/action_misspell:v1.28.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:reviewdog\\/action:reviewdog\\/action-misspell:v1.28.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:reviewdog\\/action:reviewdog\\/action_misspell:v1.28.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/ci-cd.yaml"}]},{"bom-ref":"pkg:github/reviewdog/action-setup@v1.5.0?package-id=381f4eff747760e8","type":"library","name":"reviewdog/action-setup","version":"v1.5.0","cpe":"cpe:2.3:a:reviewdog\\/action-setup:reviewdog\\/action-setup:v1.5.0:*:*:*:*:*:*:*","purl":"pkg:github/reviewdog/action-setup@v1.5.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:reviewdog\\/action-setup:reviewdog\\/action_setup:v1.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:reviewdog\\/action_setup:reviewdog\\/action-setup:v1.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:reviewdog\\/action_setup:reviewdog\\/action_setup:v1.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:reviewdog\\/action:reviewdog\\/action-setup:v1.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:reviewdog\\/action:reviewdog\\/action_setup:v1.5.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/ci-cd.yaml"}]},{"bom-ref":"pkg:github/reviewdog/action-stylelint@v1.31.0?package-id=b16b389daa2f29e6","type":"library","name":"reviewdog/action-stylelint","version":"v1.31.0","cpe":"cpe:2.3:a:reviewdog\\/action-stylelint:reviewdog\\/action-stylelint:v1.31.0:*:*:*:*:*:*:*","purl":"pkg:github/reviewdog/action-stylelint@v1.31.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:reviewdog\\/action-stylelint:reviewdog\\/action_stylelint:v1.31.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:reviewdog\\/action_stylelint:reviewdog\\/action-stylelint:v1.31.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:reviewdog\\/action_stylelint:reviewdog\\/action_stylelint:v1.31.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:reviewdog\\/action:reviewdog\\/action-stylelint:v1.31.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:reviewdog\\/action:reviewdog\\/action_stylelint:v1.31.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/ci-cd.yaml"}]},{"bom-ref":"pkg:npm/site-resume@1.0.0?package-id=de3bb66746fcda2a","type":"library","name":"site-resume","version":"1.0.0","cpe":"cpe:2.3:a:site-resume:site-resume:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/site-resume@1.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-lock-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package-lock-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:site-resume:site_resume:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:site_resume:site-resume:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:site_resume:site_resume:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:site:site-resume:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:site:site_resume:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/package-lock.json"}]},{"bom-ref":"pkg:github/stackhawk/hawkscan-action@v3.1.0?package-id=4338aa9203f5e90b","type":"library","name":"stackhawk/hawkscan-action","version":"v3.1.0","cpe":"cpe:2.3:a:stackhawk\\/hawkscan-action:stackhawk\\/hawkscan-action:v3.1.0:*:*:*:*:*:*:*","purl":"pkg:github/stackhawk/hawkscan-action@v3.1.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:stackhawk\\/hawkscan-action:stackhawk\\/hawkscan_action:v3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:stackhawk\\/hawkscan_action:stackhawk\\/hawkscan-action:v3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:stackhawk\\/hawkscan_action:stackhawk\\/hawkscan_action:v3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:stackhawk\\/hawkscan:stackhawk\\/hawkscan-action:v3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:stackhawk\\/hawkscan:stackhawk\\/hawkscan_action:v3.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/ci-cd.yaml"}]},{"bom-ref":"pkg:github/treosh/lighthouse-ci-action@v12.6.2?package-id=dc99d0ce5ec1def4","type":"library","name":"treosh/lighthouse-ci-action","version":"v12.6.2","cpe":"cpe:2.3:a:treosh\\/lighthouse-ci-action:treosh\\/lighthouse-ci-action:v12.6.2:*:*:*:*:*:*:*","purl":"pkg:github/treosh/lighthouse-ci-action@v12.6.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:treosh\\/lighthouse-ci-action:treosh\\/lighthouse_ci_action:v12.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:treosh\\/lighthouse_ci_action:treosh\\/lighthouse-ci-action:v12.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:treosh\\/lighthouse_ci_action:treosh\\/lighthouse_ci_action:v12.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:treosh\\/lighthouse-ci:treosh\\/lighthouse-ci-action:v12.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:treosh\\/lighthouse-ci:treosh\\/lighthouse_ci_action:v12.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:treosh\\/lighthouse_ci:treosh\\/lighthouse-ci-action:v12.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:treosh\\/lighthouse_ci:treosh\\/lighthouse_ci_action:v12.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:treosh\\/lighthouse:treosh\\/lighthouse-ci-action:v12.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:treosh\\/lighthouse:treosh\\/lighthouse_ci_action:v12.6.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/ci-cd.yaml"}]},{"bom-ref":"269c0dcc5d950ca5","type":"file","name":"/home/runner/work/site-resume/site-resume/.github/workflows/ci-cd.yaml","hashes":[{"alg":"SHA-1","content":"0e8e5e555e2e357066aecfcf844284f0f3ef3723"},{"alg":"SHA-256","content":"45d90c06a092666133e32db7550ea700ab09fb570f2bbddea1e72137c4fc2e35"}]},{"bom-ref":"aef345eeceafe19c","type":"file","name":"/home/runner/work/site-resume/site-resume/.github/workflows/drift-detection.yaml","hashes":[{"alg":"SHA-1","content":"0b419f43255db7707c467db689ff82db2d6bb4b1"},{"alg":"SHA-256","content":"aa444abe5534889a7de489b7d8c55915dc10b6ecbe51cd3529c235eb46bc9f09"}]},{"bom-ref":"8a6fe77bc9adf30a","type":"file","name":"/home/runner/work/site-resume/site-resume/opentofu/.terraform.lock.hcl","hashes":[{"alg":"SHA-1","content":"8c610fd36f159a550cb8befe8f6a94a3b41b9732"},{"alg":"SHA-256","content":"057db2205412fcf7cc7a6a3f4680c25e25d59cae0fe4ff8b4acc555e21103b57"}]},{"bom-ref":"fd71c2238fc07657","type":"file","name":"/home/runner/work/site-resume/site-resume/package-lock.json","hashes":[{"alg":"SHA-1","content":"6502c6218debd02acae9cff12fe432a4dbe0b2bb"},{"alg":"SHA-256","content":"dd48d0aaf79d60677ccfabb14cc614c370c2731875e64cccbc320e71e548a2d7"}]}]}