{"$schema":"http://cyclonedx.org/schema/bom-1.7.schema.json","bomFormat":"CycloneDX","specVersion":"1.7","serialNumber":"urn:uuid:0f58ce54-9174-40e7-a338-95320416d45b","version":1,"metadata":{"timestamp":"2026-10-15T10:09:07+09:00","tools":{"components":[{"type":"application","author":"anchore","name":"syft","version":"1.54.1"}]},"component":{"bom-ref":"137ae9a448157e39","type":"file","name":"~/projects/sca-benchmark-wt/refresh-latest/fixtures/go-mod"}},"components":[{"bom-ref":"pkg:golang/github.com/inconshreveable/mousetrap@v1.1.0?package-id=f6300927a9f6b106","type":"library","name":"github.com/inconshreveable/mousetrap","version":"v1.1.0","cpe":"cpe:2.3:a:inconshreveable:mousetrap:v1.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/inconshreveable/mousetrap@v1.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2s0bqwp9tc8="}]},{"bom-ref":"pkg:golang/github.com/spf13/cobra@v1.8.0?package-id=76a46ae89a64f00a","type":"library","name":"github.com/spf13/cobra","version":"v1.8.0","licenses":[{"license":{"id":"Apache-2.0"}}],"cpe":"cpe:2.3:a:spf13:cobra:v1.8.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/spf13/cobra@v1.8.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-source-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:architecture","value":"arm64"},{"name":"syft:metadata:cgoEnabled","value":"true"},{"name":"syft:metadata:h1Digest","value":"h1:7aJaZx1B85qltLMc546zn58BxxfZdR/W22ej9CFoEf0="},{"name":"syft:metadata:os","value":"darwin"}]},{"bom-ref":"pkg:golang/github.com/spf13/pflag@v1.0.5?package-id=a500c5943aa5549c","type":"library","name":"github.com/spf13/pflag","version":"v1.0.5","licenses":[{"license":{"id":"BSD-3-Clause"}}],"cpe":"cpe:2.3:a:spf13:pflag:v1.0.5:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/spf13/pflag@v1.0.5","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-source-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:architecture","value":"arm64"},{"name":"syft:metadata:cgoEnabled","value":"true"},{"name":"syft:metadata:h1Digest","value":"h1:iy+VFUOCP1a+8yFto/drg2CJ5u0yRoB7fZw3DKv/JXA="},{"name":"syft:metadata:os","value":"darwin"}]},{"bom-ref":"pkg:golang/scab-go-mod?package-id=3d4a3f34ef08099e","type":"library","name":"scab-go-mod","version":"UNKNOWN","purl":"pkg:golang/scab-go-mod","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-source-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:architecture","value":"arm64"},{"name":"syft:metadata:cgoEnabled","value":"true"},{"name":"syft:metadata:os","value":"darwin"}]},{"bom-ref":"3fc5a8d3d86e9790","type":"file","name":"~/projects/sca-benchmark-wt/refresh-latest/fixtures/go-mod/go.mod","hashes":[{"alg":"SHA-1","content":"2de6d2c0d9b6c92683dbcad334464bd5defe41eb"},{"alg":"SHA-256","content":"0dcacacb26dda4e4b26713d2dbb14ead8dd1638ae3118d28ce52191e782af224"}]}],"dependencies":[{"ref":"pkg:golang/github.com/spf13/cobra@v1.8.0?package-id=76a46ae89a64f00a","dependsOn":["pkg:golang/github.com/spf13/pflag@v1.0.5?package-id=a500c5943aa5549c"]},{"ref":"pkg:golang/scab-go-mod?package-id=3d4a3f34ef08099e","dependsOn":["pkg:golang/github.com/spf13/cobra@v1.8.0?package-id=76a46ae89a64f00a"]}]}