Skip to content

Instantly share code, notes, and snippets.

@afrittoli
Created May 13, 2022 18:50
Show Gist options
  • Save afrittoli/7a2d10758604567b5d0b2b35aefe63e2 to your computer and use it in GitHub Desktop.
Save afrittoli/7a2d10758604567b5d0b2b35aefe63e2 to your computer and use it in GitHub Desktop.
# Set the tag
VERSION=v20220513-16d73c5543
# Get the digest for the amd64 image
DIGEST=$(crane manifest gcr.io/tekton-nightly/github.com/tektoncd/pipeline/cmd/controller:${VERSION} | jq -r '.manifests[] | select(.platform.architecture=="amd64") | .digest')
# Download the SBOM
cosign download sbom gcr.io/tekton-nightly/github.com/tektoncd/pipeline/cmd/controller@${DIGEST}
Found SBOM of media type: text/spdx
SPDXVersion: SPDX-2.2
DataLicense: CC0-1.0
SPDXID: SPDXRef-DOCUMENT
DocumentName: github.com/tektoncd/pipeline
DocumentNamespace: http://spdx.org/spdxpackages/github.com/tektoncd/pipeline
Creator: Tool: ko 0.11.2
Created: 1970-01-01T00:00:00Z
##### Package representing github.com/tektoncd/pipeline
PackageName: github.com/tektoncd/pipeline
SPDXID: SPDXRef-Package-github.com.tektoncd.pipeline
PackageSupplier: Organization: github.com/tektoncd/pipeline
PackageDownloadLocation: https://github.com/tektoncd/pipeline
FilesAnalyzed: false
PackageHomePage: https://github.com/tektoncd/pipeline
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-Package-github.com.tektoncd.pipeline
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-cloud.google.com.go.compute-v1.5.0
##### Package representing cloud.google.com/go/compute
PackageName: cloud.google.com/go/compute
SPDXID: SPDXRef-Package-cloud.google.com.go.compute-v1.5.0
PackageVersion: v1.5.0
PackageSupplier: Organization: cloud.google.com/go/compute
PackageDownloadLocation: https://proxy.golang.org/cloud.google.com/go/compute/@v/v1.5.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-contrib.go.opencensus.io.exporter.ocagent-v0.7.1-0.20200907061046-05415f1de66d
##### Package representing contrib.go.opencensus.io/exporter/ocagent
PackageName: contrib.go.opencensus.io/exporter/ocagent
SPDXID: SPDXRef-Package-contrib.go.opencensus.io.exporter.ocagent-v0.7.1-0.20200907061046-05415f1de66d
PackageVersion: v0.7.1-0.20200907061046-05415f1de66d
PackageSupplier: Organization: contrib.go.opencensus.io/exporter/ocagent
PackageDownloadLocation: https://proxy.golang.org/contrib.go.opencensus.io/exporter/ocagent/@v/v0.7.1-0.20200907061046-05415f1de66d.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-contrib.go.opencensus.io.exporter.prometheus-v0.4.0
##### Package representing contrib.go.opencensus.io/exporter/prometheus
PackageName: contrib.go.opencensus.io/exporter/prometheus
SPDXID: SPDXRef-Package-contrib.go.opencensus.io.exporter.prometheus-v0.4.0
PackageVersion: v0.4.0
PackageSupplier: Organization: contrib.go.opencensus.io/exporter/prometheus
PackageDownloadLocation: https://proxy.golang.org/contrib.go.opencensus.io/exporter/prometheus/@v/v0.4.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.Azure.azure-sdk-for-go-v63.3.0+incompatible
##### Package representing github.com/Azure/azure-sdk-for-go
PackageName: github.com/Azure/azure-sdk-for-go
SPDXID: SPDXRef-Package-github.com.Azure.azure-sdk-for-go-v63.3.0+incompatible
PackageVersion: v63.3.0+incompatible
PackageSupplier: Organization: github.com/Azure/azure-sdk-for-go
PackageDownloadLocation: https://proxy.golang.org/github.com/Azure/azure-sdk-for-go/@v/v63.3.0+incompatible.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.Azure.go-autorest.autorest-v0.11.24
##### Package representing github.com/Azure/go-autorest/autorest
PackageName: github.com/Azure/go-autorest/autorest
SPDXID: SPDXRef-Package-github.com.Azure.go-autorest.autorest-v0.11.24
PackageVersion: v0.11.24
PackageSupplier: Organization: github.com/Azure/go-autorest/autorest
PackageDownloadLocation: https://proxy.golang.org/github.com/Azure/go-autorest/autorest/@v/v0.11.24.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.Azure.go-autorest.autorest.adal-v0.9.18
##### Package representing github.com/Azure/go-autorest/autorest/adal
PackageName: github.com/Azure/go-autorest/autorest/adal
SPDXID: SPDXRef-Package-github.com.Azure.go-autorest.autorest.adal-v0.9.18
PackageVersion: v0.9.18
PackageSupplier: Organization: github.com/Azure/go-autorest/autorest/adal
PackageDownloadLocation: https://proxy.golang.org/github.com/Azure/go-autorest/autorest/adal/@v/v0.9.18.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.Azure.go-autorest.autorest.azure.auth-v0.5.11
##### Package representing github.com/Azure/go-autorest/autorest/azure/auth
PackageName: github.com/Azure/go-autorest/autorest/azure/auth
SPDXID: SPDXRef-Package-github.com.Azure.go-autorest.autorest.azure.auth-v0.5.11
PackageVersion: v0.5.11
PackageSupplier: Organization: github.com/Azure/go-autorest/autorest/azure/auth
PackageDownloadLocation: https://proxy.golang.org/github.com/Azure/go-autorest/autorest/azure/auth/@v/v0.5.11.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.Azure.go-autorest.autorest.azure.cli-v0.4.5
##### Package representing github.com/Azure/go-autorest/autorest/azure/cli
PackageName: github.com/Azure/go-autorest/autorest/azure/cli
SPDXID: SPDXRef-Package-github.com.Azure.go-autorest.autorest.azure.cli-v0.4.5
PackageVersion: v0.4.5
PackageSupplier: Organization: github.com/Azure/go-autorest/autorest/azure/cli
PackageDownloadLocation: https://proxy.golang.org/github.com/Azure/go-autorest/autorest/azure/cli/@v/v0.4.5.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.Azure.go-autorest.autorest.date-v0.3.0
##### Package representing github.com/Azure/go-autorest/autorest/date
PackageName: github.com/Azure/go-autorest/autorest/date
SPDXID: SPDXRef-Package-github.com.Azure.go-autorest.autorest.date-v0.3.0
PackageVersion: v0.3.0
PackageSupplier: Organization: github.com/Azure/go-autorest/autorest/date
PackageDownloadLocation: https://proxy.golang.org/github.com/Azure/go-autorest/autorest/date/@v/v0.3.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.Azure.go-autorest.logger-v0.2.1
##### Package representing github.com/Azure/go-autorest/logger
PackageName: github.com/Azure/go-autorest/logger
SPDXID: SPDXRef-Package-github.com.Azure.go-autorest.logger-v0.2.1
PackageVersion: v0.2.1
PackageSupplier: Organization: github.com/Azure/go-autorest/logger
PackageDownloadLocation: https://proxy.golang.org/github.com/Azure/go-autorest/logger/@v/v0.2.1.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.Azure.go-autorest.tracing-v0.6.0
##### Package representing github.com/Azure/go-autorest/tracing
PackageName: github.com/Azure/go-autorest/tracing
SPDXID: SPDXRef-Package-github.com.Azure.go-autorest.tracing-v0.6.0
PackageVersion: v0.6.0
PackageSupplier: Organization: github.com/Azure/go-autorest/tracing
PackageDownloadLocation: https://proxy.golang.org/github.com/Azure/go-autorest/tracing/@v/v0.6.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.PuerkitoBio.purell-v1.1.1
##### Package representing github.com/PuerkitoBio/purell
PackageName: github.com/PuerkitoBio/purell
SPDXID: SPDXRef-Package-github.com.PuerkitoBio.purell-v1.1.1
PackageVersion: v1.1.1
PackageSupplier: Organization: github.com/PuerkitoBio/purell
PackageDownloadLocation: https://proxy.golang.org/github.com/PuerkitoBio/purell/@v/v1.1.1.zip
FilesAnalyzed: false
PackageChecksum: SHA256: 58442a96a6866eb3e4c4b2567c1c1099f10013567b38d7432eaacddfcb4d15f2
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.PuerkitoBio.urlesc-v0.0.0-20170810143723-de5bf2ad4578
##### Package representing github.com/PuerkitoBio/urlesc
PackageName: github.com/PuerkitoBio/urlesc
SPDXID: SPDXRef-Package-github.com.PuerkitoBio.urlesc-v0.0.0-20170810143723-de5bf2ad4578
PackageVersion: v0.0.0-20170810143723-de5bf2ad4578
PackageSupplier: Organization: github.com/PuerkitoBio/urlesc
PackageDownloadLocation: https://proxy.golang.org/github.com/PuerkitoBio/urlesc/@v/v0.0.0-20170810143723-de5bf2ad4578.zip
FilesAnalyzed: false
PackageChecksum: SHA256: 77e05cedae6b2ee7d5fec4a4ffc76782e7ea7a57e1ea39eb8bce6b88c01a17f3
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.aws.aws-sdk-go-v2-v1.14.0
##### Package representing github.com/aws/aws-sdk-go-v2
PackageName: github.com/aws/aws-sdk-go-v2
SPDXID: SPDXRef-Package-github.com.aws.aws-sdk-go-v2-v1.14.0
PackageVersion: v1.14.0
PackageSupplier: Organization: github.com/aws/aws-sdk-go-v2
PackageDownloadLocation: https://proxy.golang.org/github.com/aws/aws-sdk-go-v2/@v/v1.14.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.aws.aws-sdk-go-v2.config-v1.14.0
##### Package representing github.com/aws/aws-sdk-go-v2/config
PackageName: github.com/aws/aws-sdk-go-v2/config
SPDXID: SPDXRef-Package-github.com.aws.aws-sdk-go-v2.config-v1.14.0
PackageVersion: v1.14.0
PackageSupplier: Organization: github.com/aws/aws-sdk-go-v2/config
PackageDownloadLocation: https://proxy.golang.org/github.com/aws/aws-sdk-go-v2/config/@v/v1.14.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.aws.aws-sdk-go-v2.credentials-v1.9.0
##### Package representing github.com/aws/aws-sdk-go-v2/credentials
PackageName: github.com/aws/aws-sdk-go-v2/credentials
SPDXID: SPDXRef-Package-github.com.aws.aws-sdk-go-v2.credentials-v1.9.0
PackageVersion: v1.9.0
PackageSupplier: Organization: github.com/aws/aws-sdk-go-v2/credentials
PackageDownloadLocation: https://proxy.golang.org/github.com/aws/aws-sdk-go-v2/credentials/@v/v1.9.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.aws.aws-sdk-go-v2.feature.ec2.imds-v1.11.0
##### Package representing github.com/aws/aws-sdk-go-v2/feature/ec2/imds
PackageName: github.com/aws/aws-sdk-go-v2/feature/ec2/imds
SPDXID: SPDXRef-Package-github.com.aws.aws-sdk-go-v2.feature.ec2.imds-v1.11.0
PackageVersion: v1.11.0
PackageSupplier: Organization: github.com/aws/aws-sdk-go-v2/feature/ec2/imds
PackageDownloadLocation: https://proxy.golang.org/github.com/aws/aws-sdk-go-v2/feature/ec2/imds/@v/v1.11.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.aws.aws-sdk-go-v2.internal.configsources-v1.1.5
##### Package representing github.com/aws/aws-sdk-go-v2/internal/configsources
PackageName: github.com/aws/aws-sdk-go-v2/internal/configsources
SPDXID: SPDXRef-Package-github.com.aws.aws-sdk-go-v2.internal.configsources-v1.1.5
PackageVersion: v1.1.5
PackageSupplier: Organization: github.com/aws/aws-sdk-go-v2/internal/configsources
PackageDownloadLocation: https://proxy.golang.org/github.com/aws/aws-sdk-go-v2/internal/configsources/@v/v1.1.5.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.aws.aws-sdk-go-v2.internal.endpoints.v2-v2.3.0
##### Package representing github.com/aws/aws-sdk-go-v2/internal/endpoints/v2
PackageName: github.com/aws/aws-sdk-go-v2/internal/endpoints/v2
SPDXID: SPDXRef-Package-github.com.aws.aws-sdk-go-v2.internal.endpoints.v2-v2.3.0
PackageVersion: v2.3.0
PackageSupplier: Organization: github.com/aws/aws-sdk-go-v2/internal/endpoints/v2
PackageDownloadLocation: https://proxy.golang.org/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2/@v/v2.3.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.aws.aws-sdk-go-v2.internal.ini-v1.3.6
##### Package representing github.com/aws/aws-sdk-go-v2/internal/ini
PackageName: github.com/aws/aws-sdk-go-v2/internal/ini
SPDXID: SPDXRef-Package-github.com.aws.aws-sdk-go-v2.internal.ini-v1.3.6
PackageVersion: v1.3.6
PackageSupplier: Organization: github.com/aws/aws-sdk-go-v2/internal/ini
PackageDownloadLocation: https://proxy.golang.org/github.com/aws/aws-sdk-go-v2/internal/ini/@v/v1.3.6.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.aws.aws-sdk-go-v2.service.ecr-v1.15.0
##### Package representing github.com/aws/aws-sdk-go-v2/service/ecr
PackageName: github.com/aws/aws-sdk-go-v2/service/ecr
SPDXID: SPDXRef-Package-github.com.aws.aws-sdk-go-v2.service.ecr-v1.15.0
PackageVersion: v1.15.0
PackageSupplier: Organization: github.com/aws/aws-sdk-go-v2/service/ecr
PackageDownloadLocation: https://proxy.golang.org/github.com/aws/aws-sdk-go-v2/service/ecr/@v/v1.15.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.aws.aws-sdk-go-v2.service.ecrpublic-v1.12.0
##### Package representing github.com/aws/aws-sdk-go-v2/service/ecrpublic
PackageName: github.com/aws/aws-sdk-go-v2/service/ecrpublic
SPDXID: SPDXRef-Package-github.com.aws.aws-sdk-go-v2.service.ecrpublic-v1.12.0
PackageVersion: v1.12.0
PackageSupplier: Organization: github.com/aws/aws-sdk-go-v2/service/ecrpublic
PackageDownloadLocation: https://proxy.golang.org/github.com/aws/aws-sdk-go-v2/service/ecrpublic/@v/v1.12.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.aws.aws-sdk-go-v2.service.internal.presigned-url-v1.8.0
##### Package representing github.com/aws/aws-sdk-go-v2/service/internal/presigned-url
PackageName: github.com/aws/aws-sdk-go-v2/service/internal/presigned-url
SPDXID: SPDXRef-Package-github.com.aws.aws-sdk-go-v2.service.internal.presigned-url-v1.8.0
PackageVersion: v1.8.0
PackageSupplier: Organization: github.com/aws/aws-sdk-go-v2/service/internal/presigned-url
PackageDownloadLocation: https://proxy.golang.org/github.com/aws/aws-sdk-go-v2/service/internal/presigned-url/@v/v1.8.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.aws.aws-sdk-go-v2.service.sso-v1.10.0
##### Package representing github.com/aws/aws-sdk-go-v2/service/sso
PackageName: github.com/aws/aws-sdk-go-v2/service/sso
SPDXID: SPDXRef-Package-github.com.aws.aws-sdk-go-v2.service.sso-v1.10.0
PackageVersion: v1.10.0
PackageSupplier: Organization: github.com/aws/aws-sdk-go-v2/service/sso
PackageDownloadLocation: https://proxy.golang.org/github.com/aws/aws-sdk-go-v2/service/sso/@v/v1.10.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.aws.aws-sdk-go-v2.service.sts-v1.15.0
##### Package representing github.com/aws/aws-sdk-go-v2/service/sts
PackageName: github.com/aws/aws-sdk-go-v2/service/sts
SPDXID: SPDXRef-Package-github.com.aws.aws-sdk-go-v2.service.sts-v1.15.0
PackageVersion: v1.15.0
PackageSupplier: Organization: github.com/aws/aws-sdk-go-v2/service/sts
PackageDownloadLocation: https://proxy.golang.org/github.com/aws/aws-sdk-go-v2/service/sts/@v/v1.15.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.aws.smithy-go-v1.11.0
##### Package representing github.com/aws/smithy-go
PackageName: github.com/aws/smithy-go
SPDXID: SPDXRef-Package-github.com.aws.smithy-go-v1.11.0
PackageVersion: v1.11.0
PackageSupplier: Organization: github.com/aws/smithy-go
PackageDownloadLocation: https://proxy.golang.org/github.com/aws/smithy-go/@v/v1.11.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.awslabs.amazon-ecr-credential-helper.ecr-login-v0.0.0-20220228164355-396b2034c795
##### Package representing github.com/awslabs/amazon-ecr-credential-helper/ecr-login
PackageName: github.com/awslabs/amazon-ecr-credential-helper/ecr-login
SPDXID: SPDXRef-Package-github.com.awslabs.amazon-ecr-credential-helper.ecr-login-v0.0.0-20220228164355-396b2034c795
PackageVersion: v0.0.0-20220228164355-396b2034c795
PackageSupplier: Organization: github.com/awslabs/amazon-ecr-credential-helper/ecr-login
PackageDownloadLocation: https://proxy.golang.org/github.com/awslabs/amazon-ecr-credential-helper/ecr-login/@v/v0.0.0-20220228164355-396b2034c795.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.beorn7.perks-v1.0.1
##### Package representing github.com/beorn7/perks
PackageName: github.com/beorn7/perks
SPDXID: SPDXRef-Package-github.com.beorn7.perks-v1.0.1
PackageVersion: v1.0.1
PackageSupplier: Organization: github.com/beorn7/perks
PackageDownloadLocation: https://proxy.golang.org/github.com/beorn7/perks/@v/v1.0.1.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.blang.semver.v4-v4.0.0
##### Package representing github.com/blang/semver/v4
PackageName: github.com/blang/semver/v4
SPDXID: SPDXRef-Package-github.com.blang.semver.v4-v4.0.0
PackageVersion: v4.0.0
PackageSupplier: Organization: github.com/blang/semver/v4
PackageDownloadLocation: https://proxy.golang.org/github.com/blang/semver/v4/@v/v4.0.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.blendle.zapdriver-v1.3.1
##### Package representing github.com/blendle/zapdriver
PackageName: github.com/blendle/zapdriver
SPDXID: SPDXRef-Package-github.com.blendle.zapdriver-v1.3.1
PackageVersion: v1.3.1
PackageSupplier: Organization: github.com/blendle/zapdriver
PackageDownloadLocation: https://proxy.golang.org/github.com/blendle/zapdriver/@v/v1.3.1.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.census-instrumentation.opencensus-proto-v0.3.0
##### Package representing github.com/census-instrumentation/opencensus-proto
PackageName: github.com/census-instrumentation/opencensus-proto
SPDXID: SPDXRef-Package-github.com.census-instrumentation.opencensus-proto-v0.3.0
PackageVersion: v0.3.0
PackageSupplier: Organization: github.com/census-instrumentation/opencensus-proto
PackageDownloadLocation: https://proxy.golang.org/github.com/census-instrumentation/opencensus-proto/@v/v0.3.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.cespare.xxhash.v2-v2.1.2
##### Package representing github.com/cespare/xxhash/v2
PackageName: github.com/cespare/xxhash/v2
SPDXID: SPDXRef-Package-github.com.cespare.xxhash.v2-v2.1.2
PackageVersion: v2.1.2
PackageSupplier: Organization: github.com/cespare/xxhash/v2
PackageDownloadLocation: https://proxy.golang.org/github.com/cespare/xxhash/v2/@v/v2.1.2.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.chrismellard.docker-credential-acr-env-v0.0.0-20220119192733-fe33c00cee21
##### Package representing github.com/chrismellard/docker-credential-acr-env
PackageName: github.com/chrismellard/docker-credential-acr-env
SPDXID: SPDXRef-Package-github.com.chrismellard.docker-credential-acr-env-v0.0.0-20220119192733-fe33c00cee21
PackageVersion: v0.0.0-20220119192733-fe33c00cee21
PackageSupplier: Organization: github.com/chrismellard/docker-credential-acr-env
PackageDownloadLocation: https://proxy.golang.org/github.com/chrismellard/docker-credential-acr-env/@v/v0.0.0-20220119192733-fe33c00cee21.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.cloudevents.sdk-go.v2-v2.5.0
##### Package representing github.com/cloudevents/sdk-go/v2
PackageName: github.com/cloudevents/sdk-go/v2
SPDXID: SPDXRef-Package-github.com.cloudevents.sdk-go.v2-v2.5.0
PackageVersion: v2.5.0
PackageSupplier: Organization: github.com/cloudevents/sdk-go/v2
PackageDownloadLocation: https://proxy.golang.org/github.com/cloudevents/sdk-go/v2/@v/v2.5.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.containerd.containerd-v1.5.10
##### Package representing github.com/containerd/containerd
PackageName: github.com/containerd/containerd
SPDXID: SPDXRef-Package-github.com.containerd.containerd-v1.5.10
PackageVersion: v1.5.10
PackageSupplier: Organization: github.com/containerd/containerd
PackageDownloadLocation: https://proxy.golang.org/github.com/containerd/containerd/@v/v1.5.10.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.davecgh.go-spew-v1.1.1
##### Package representing github.com/davecgh/go-spew
PackageName: github.com/davecgh/go-spew
SPDXID: SPDXRef-Package-github.com.davecgh.go-spew-v1.1.1
PackageVersion: v1.1.1
PackageSupplier: Organization: github.com/davecgh/go-spew
PackageDownloadLocation: https://proxy.golang.org/github.com/davecgh/go-spew/@v/v1.1.1.zip
FilesAnalyzed: false
PackageChecksum: SHA256: be3f63feed5baa7bc211f24ec1486d94e011aacdfeae41d8635de36164d4f7b7
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.dimchansky.utfbom-v1.1.1
##### Package representing github.com/dimchansky/utfbom
PackageName: github.com/dimchansky/utfbom
SPDXID: SPDXRef-Package-github.com.dimchansky.utfbom-v1.1.1
PackageVersion: v1.1.1
PackageSupplier: Organization: github.com/dimchansky/utfbom
PackageDownloadLocation: https://proxy.golang.org/github.com/dimchansky/utfbom/@v/v1.1.1.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.docker.cli-v20.10.12+incompatible
##### Package representing github.com/docker/cli
PackageName: github.com/docker/cli
SPDXID: SPDXRef-Package-github.com.docker.cli-v20.10.12+incompatible
PackageVersion: v20.10.12+incompatible
PackageSupplier: Organization: github.com/docker/cli
PackageDownloadLocation: https://proxy.golang.org/github.com/docker/cli/@v/v20.10.12+incompatible.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.docker.distribution-v2.8.0+incompatible
##### Package representing github.com/docker/distribution
PackageName: github.com/docker/distribution
SPDXID: SPDXRef-Package-github.com.docker.distribution-v2.8.0+incompatible
PackageVersion: v2.8.0+incompatible
PackageSupplier: Organization: github.com/docker/distribution
PackageDownloadLocation: https://proxy.golang.org/github.com/docker/distribution/@v/v2.8.0+incompatible.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.docker.docker-v20.10.12+incompatible
##### Package representing github.com/docker/docker
PackageName: github.com/docker/docker
SPDXID: SPDXRef-Package-github.com.docker.docker-v20.10.12+incompatible
PackageVersion: v20.10.12+incompatible
PackageSupplier: Organization: github.com/docker/docker
PackageDownloadLocation: https://proxy.golang.org/github.com/docker/docker/@v/v20.10.12+incompatible.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.docker.docker-credential-helpers-v0.6.4
##### Package representing github.com/docker/docker-credential-helpers
PackageName: github.com/docker/docker-credential-helpers
SPDXID: SPDXRef-Package-github.com.docker.docker-credential-helpers-v0.6.4
PackageVersion: v0.6.4
PackageSupplier: Organization: github.com/docker/docker-credential-helpers
PackageDownloadLocation: https://proxy.golang.org/github.com/docker/docker-credential-helpers/@v/v0.6.4.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.emicklei.go-restful-v2.15.0+incompatible
##### Package representing github.com/emicklei/go-restful
PackageName: github.com/emicklei/go-restful
SPDXID: SPDXRef-Package-github.com.emicklei.go-restful-v2.15.0+incompatible
PackageVersion: v2.15.0+incompatible
PackageSupplier: Organization: github.com/emicklei/go-restful
PackageDownloadLocation: https://proxy.golang.org/github.com/emicklei/go-restful/@v/v2.15.0+incompatible.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.evanphx.json-patch-v4.12.0+incompatible
##### Package representing github.com/evanphx/json-patch
PackageName: github.com/evanphx/json-patch
SPDXID: SPDXRef-Package-github.com.evanphx.json-patch-v4.12.0+incompatible
PackageVersion: v4.12.0+incompatible
PackageSupplier: Organization: github.com/evanphx/json-patch
PackageDownloadLocation: https://proxy.golang.org/github.com/evanphx/json-patch/@v/v4.12.0+incompatible.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.evanphx.json-patch.v5-v5.6.0
##### Package representing github.com/evanphx/json-patch/v5
PackageName: github.com/evanphx/json-patch/v5
SPDXID: SPDXRef-Package-github.com.evanphx.json-patch.v5-v5.6.0
PackageVersion: v5.6.0
PackageSupplier: Organization: github.com/evanphx/json-patch/v5
PackageDownloadLocation: https://proxy.golang.org/github.com/evanphx/json-patch/v5/@v/v5.6.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.go-kit.log-v0.1.0
##### Package representing github.com/go-kit/log
PackageName: github.com/go-kit/log
SPDXID: SPDXRef-Package-github.com.go-kit.log-v0.1.0
PackageVersion: v0.1.0
PackageSupplier: Organization: github.com/go-kit/log
PackageDownloadLocation: https://proxy.golang.org/github.com/go-kit/log/@v/v0.1.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.go-logfmt.logfmt-v0.5.0
##### Package representing github.com/go-logfmt/logfmt
PackageName: github.com/go-logfmt/logfmt
SPDXID: SPDXRef-Package-github.com.go-logfmt.logfmt-v0.5.0
PackageVersion: v0.5.0
PackageSupplier: Organization: github.com/go-logfmt/logfmt
PackageDownloadLocation: https://proxy.golang.org/github.com/go-logfmt/logfmt/@v/v0.5.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.go-logr.logr-v1.2.2
##### Package representing github.com/go-logr/logr
PackageName: github.com/go-logr/logr
SPDXID: SPDXRef-Package-github.com.go-logr.logr-v1.2.2
PackageVersion: v1.2.2
PackageSupplier: Organization: github.com/go-logr/logr
PackageDownloadLocation: https://proxy.golang.org/github.com/go-logr/logr/@v/v1.2.2.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.go-openapi.jsonpointer-v0.19.5
##### Package representing github.com/go-openapi/jsonpointer
PackageName: github.com/go-openapi/jsonpointer
SPDXID: SPDXRef-Package-github.com.go-openapi.jsonpointer-v0.19.5
PackageVersion: v0.19.5
PackageSupplier: Organization: github.com/go-openapi/jsonpointer
PackageDownloadLocation: https://proxy.golang.org/github.com/go-openapi/jsonpointer/@v/v0.19.5.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.go-openapi.jsonreference-v0.19.5
##### Package representing github.com/go-openapi/jsonreference
PackageName: github.com/go-openapi/jsonreference
SPDXID: SPDXRef-Package-github.com.go-openapi.jsonreference-v0.19.5
PackageVersion: v0.19.5
PackageSupplier: Organization: github.com/go-openapi/jsonreference
PackageDownloadLocation: https://proxy.golang.org/github.com/go-openapi/jsonreference/@v/v0.19.5.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.go-openapi.swag-v0.19.15
##### Package representing github.com/go-openapi/swag
PackageName: github.com/go-openapi/swag
SPDXID: SPDXRef-Package-github.com.go-openapi.swag-v0.19.15
PackageVersion: v0.19.15
PackageSupplier: Organization: github.com/go-openapi/swag
PackageDownloadLocation: https://proxy.golang.org/github.com/go-openapi/swag/@v/v0.19.15.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.gogo.protobuf-v1.3.2
##### Package representing github.com/gogo/protobuf
PackageName: github.com/gogo/protobuf
SPDXID: SPDXRef-Package-github.com.gogo.protobuf-v1.3.2
PackageVersion: v1.3.2
PackageSupplier: Organization: github.com/gogo/protobuf
PackageDownloadLocation: https://proxy.golang.org/github.com/gogo/protobuf/@v/v1.3.2.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.golang-jwt.jwt.v4-v4.3.0
##### Package representing github.com/golang-jwt/jwt/v4
PackageName: github.com/golang-jwt/jwt/v4
SPDXID: SPDXRef-Package-github.com.golang-jwt.jwt.v4-v4.3.0
PackageVersion: v4.3.0
PackageSupplier: Organization: github.com/golang-jwt/jwt/v4
PackageDownloadLocation: https://proxy.golang.org/github.com/golang-jwt/jwt/v4/@v/v4.3.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.golang.groupcache-v0.0.0-20210331224755-41bb18bfe9da
##### Package representing github.com/golang/groupcache
PackageName: github.com/golang/groupcache
SPDXID: SPDXRef-Package-github.com.golang.groupcache-v0.0.0-20210331224755-41bb18bfe9da
PackageVersion: v0.0.0-20210331224755-41bb18bfe9da
PackageSupplier: Organization: github.com/golang/groupcache
PackageDownloadLocation: https://proxy.golang.org/github.com/golang/groupcache/@v/v0.0.0-20210331224755-41bb18bfe9da.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.golang.protobuf-v1.5.2
##### Package representing github.com/golang/protobuf
PackageName: github.com/golang/protobuf
SPDXID: SPDXRef-Package-github.com.golang.protobuf-v1.5.2
PackageVersion: v1.5.2
PackageSupplier: Organization: github.com/golang/protobuf
PackageDownloadLocation: https://proxy.golang.org/github.com/golang/protobuf/@v/v1.5.2.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.google.go-cmp-v0.5.7
##### Package representing github.com/google/go-cmp
PackageName: github.com/google/go-cmp
SPDXID: SPDXRef-Package-github.com.google.go-cmp-v0.5.7
PackageVersion: v0.5.7
PackageSupplier: Organization: github.com/google/go-cmp
PackageDownloadLocation: https://proxy.golang.org/github.com/google/go-cmp/@v/v0.5.7.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.google.go-containerregistry-v0.8.1-0.20220216220642-00c59d91847c
##### Package representing github.com/google/go-containerregistry
PackageName: github.com/google/go-containerregistry
SPDXID: SPDXRef-Package-github.com.google.go-containerregistry-v0.8.1-0.20220216220642-00c59d91847c
PackageVersion: v0.8.1-0.20220216220642-00c59d91847c
PackageSupplier: Organization: github.com/google/go-containerregistry
PackageDownloadLocation: https://proxy.golang.org/github.com/google/go-containerregistry/@v/v0.8.1-0.20220216220642-00c59d91847c.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.google.go-containerregistry.pkg.authn.k8schain-v0.0.0-20220328141311-efc62d802606
##### Package representing github.com/google/go-containerregistry/pkg/authn/k8schain
PackageName: github.com/google/go-containerregistry/pkg/authn/k8schain
SPDXID: SPDXRef-Package-github.com.google.go-containerregistry.pkg.authn.k8schain-v0.0.0-20220328141311-efc62d802606
PackageVersion: v0.0.0-20220328141311-efc62d802606
PackageSupplier: Organization: github.com/google/go-containerregistry/pkg/authn/k8schain
PackageDownloadLocation: https://proxy.golang.org/github.com/google/go-containerregistry/pkg/authn/k8schain/@v/v0.0.0-20220328141311-efc62d802606.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.google.go-containerregistry.pkg.authn.kubernetes-v0.0.0-20220301182634-bfe2ffc6b6bd
##### Package representing github.com/google/go-containerregistry/pkg/authn/kubernetes
PackageName: github.com/google/go-containerregistry/pkg/authn/kubernetes
SPDXID: SPDXRef-Package-github.com.google.go-containerregistry.pkg.authn.kubernetes-v0.0.0-20220301182634-bfe2ffc6b6bd
PackageVersion: v0.0.0-20220301182634-bfe2ffc6b6bd
PackageSupplier: Organization: github.com/google/go-containerregistry/pkg/authn/kubernetes
PackageDownloadLocation: https://proxy.golang.org/github.com/google/go-containerregistry/pkg/authn/kubernetes/@v/v0.0.0-20220301182634-bfe2ffc6b6bd.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.google.gofuzz-v1.2.0
##### Package representing github.com/google/gofuzz
PackageName: github.com/google/gofuzz
SPDXID: SPDXRef-Package-github.com.google.gofuzz-v1.2.0
PackageVersion: v1.2.0
PackageSupplier: Organization: github.com/google/gofuzz
PackageDownloadLocation: https://proxy.golang.org/github.com/google/gofuzz/@v/v1.2.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.google.uuid-v1.3.0
##### Package representing github.com/google/uuid
PackageName: github.com/google/uuid
SPDXID: SPDXRef-Package-github.com.google.uuid-v1.3.0
PackageVersion: v1.3.0
PackageSupplier: Organization: github.com/google/uuid
PackageDownloadLocation: https://proxy.golang.org/github.com/google/uuid/@v/v1.3.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.googleapis.gnostic-v0.5.5
##### Package representing github.com/googleapis/gnostic
PackageName: github.com/googleapis/gnostic
SPDXID: SPDXRef-Package-github.com.googleapis.gnostic-v0.5.5
PackageVersion: v0.5.5
PackageSupplier: Organization: github.com/googleapis/gnostic
PackageDownloadLocation: https://proxy.golang.org/github.com/googleapis/gnostic/@v/v0.5.5.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.grpc-ecosystem.grpc-gateway-v1.16.0
##### Package representing github.com/grpc-ecosystem/grpc-gateway
PackageName: github.com/grpc-ecosystem/grpc-gateway
SPDXID: SPDXRef-Package-github.com.grpc-ecosystem.grpc-gateway-v1.16.0
PackageVersion: v1.16.0
PackageSupplier: Organization: github.com/grpc-ecosystem/grpc-gateway
PackageDownloadLocation: https://proxy.golang.org/github.com/grpc-ecosystem/grpc-gateway/@v/v1.16.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.hashicorp.errwrap-v1.0.0
##### Package representing github.com/hashicorp/errwrap
PackageName: github.com/hashicorp/errwrap
SPDXID: SPDXRef-Package-github.com.hashicorp.errwrap-v1.0.0
PackageVersion: v1.0.0
PackageSupplier: Organization: github.com/hashicorp/errwrap
PackageDownloadLocation: https://proxy.golang.org/github.com/hashicorp/errwrap/@v/v1.0.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.hashicorp.go-multierror-v1.1.1
##### Package representing github.com/hashicorp/go-multierror
PackageName: github.com/hashicorp/go-multierror
SPDXID: SPDXRef-Package-github.com.hashicorp.go-multierror-v1.1.1
PackageVersion: v1.1.1
PackageSupplier: Organization: github.com/hashicorp/go-multierror
PackageDownloadLocation: https://proxy.golang.org/github.com/hashicorp/go-multierror/@v/v1.1.1.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.hashicorp.golang-lru-v0.5.4
##### Package representing github.com/hashicorp/golang-lru
PackageName: github.com/hashicorp/golang-lru
SPDXID: SPDXRef-Package-github.com.hashicorp.golang-lru-v0.5.4
PackageVersion: v0.5.4
PackageSupplier: Organization: github.com/hashicorp/golang-lru
PackageDownloadLocation: https://proxy.golang.org/github.com/hashicorp/golang-lru/@v/v0.5.4.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.imdario.mergo-v0.3.12
##### Package representing github.com/imdario/mergo
PackageName: github.com/imdario/mergo
SPDXID: SPDXRef-Package-github.com.imdario.mergo-v0.3.12
PackageVersion: v0.3.12
PackageSupplier: Organization: github.com/imdario/mergo
PackageDownloadLocation: https://proxy.golang.org/github.com/imdario/mergo/@v/v0.3.12.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.jmespath.go-jmespath-v0.4.0
##### Package representing github.com/jmespath/go-jmespath
PackageName: github.com/jmespath/go-jmespath
SPDXID: SPDXRef-Package-github.com.jmespath.go-jmespath-v0.4.0
PackageVersion: v0.4.0
PackageSupplier: Organization: github.com/jmespath/go-jmespath
PackageDownloadLocation: https://proxy.golang.org/github.com/jmespath/go-jmespath/@v/v0.4.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.josharian.intern-v1.0.0
##### Package representing github.com/josharian/intern
PackageName: github.com/josharian/intern
SPDXID: SPDXRef-Package-github.com.josharian.intern-v1.0.0
PackageVersion: v1.0.0
PackageSupplier: Organization: github.com/josharian/intern
PackageDownloadLocation: https://proxy.golang.org/github.com/josharian/intern/@v/v1.0.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.json-iterator.go-v1.1.12
##### Package representing github.com/json-iterator/go
PackageName: github.com/json-iterator/go
SPDXID: SPDXRef-Package-github.com.json-iterator.go-v1.1.12
PackageVersion: v1.1.12
PackageSupplier: Organization: github.com/json-iterator/go
PackageDownloadLocation: https://proxy.golang.org/github.com/json-iterator/go/@v/v1.1.12.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.kelseyhightower.envconfig-v1.4.0
##### Package representing github.com/kelseyhightower/envconfig
PackageName: github.com/kelseyhightower/envconfig
SPDXID: SPDXRef-Package-github.com.kelseyhightower.envconfig-v1.4.0
PackageVersion: v1.4.0
PackageSupplier: Organization: github.com/kelseyhightower/envconfig
PackageDownloadLocation: https://proxy.golang.org/github.com/kelseyhightower/envconfig/@v/v1.4.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.mailru.easyjson-v0.7.7
##### Package representing github.com/mailru/easyjson
PackageName: github.com/mailru/easyjson
SPDXID: SPDXRef-Package-github.com.mailru.easyjson-v0.7.7
PackageVersion: v0.7.7
PackageSupplier: Organization: github.com/mailru/easyjson
PackageDownloadLocation: https://proxy.golang.org/github.com/mailru/easyjson/@v/v0.7.7.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.matttproud.golang_protobuf_extensions-v1.0.2-0.20181231171920-c182affec369
##### Package representing github.com/matttproud/golang_protobuf_extensions
PackageName: github.com/matttproud/golang_protobuf_extensions
SPDXID: SPDXRef-Package-github.com.matttproud.golang_protobuf_extensions-v1.0.2-0.20181231171920-c182affec369
PackageVersion: v1.0.2-0.20181231171920-c182affec369
PackageSupplier: Organization: github.com/matttproud/golang_protobuf_extensions
PackageDownloadLocation: https://proxy.golang.org/github.com/matttproud/golang_protobuf_extensions/@v/v1.0.2-0.20181231171920-c182affec369.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.mitchellh.go-homedir-v1.1.0
##### Package representing github.com/mitchellh/go-homedir
PackageName: github.com/mitchellh/go-homedir
SPDXID: SPDXRef-Package-github.com.mitchellh.go-homedir-v1.1.0
PackageVersion: v1.1.0
PackageSupplier: Organization: github.com/mitchellh/go-homedir
PackageDownloadLocation: https://proxy.golang.org/github.com/mitchellh/go-homedir/@v/v1.1.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.modern-go.concurrent-v0.0.0-20180306012644-bacd9c7ef1dd
##### Package representing github.com/modern-go/concurrent
PackageName: github.com/modern-go/concurrent
SPDXID: SPDXRef-Package-github.com.modern-go.concurrent-v0.0.0-20180306012644-bacd9c7ef1dd
PackageVersion: v0.0.0-20180306012644-bacd9c7ef1dd
PackageSupplier: Organization: github.com/modern-go/concurrent
PackageDownloadLocation: https://proxy.golang.org/github.com/modern-go/concurrent/@v/v0.0.0-20180306012644-bacd9c7ef1dd.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.modern-go.reflect2-v1.0.2
##### Package representing github.com/modern-go/reflect2
PackageName: github.com/modern-go/reflect2
SPDXID: SPDXRef-Package-github.com.modern-go.reflect2-v1.0.2
PackageVersion: v1.0.2
PackageSupplier: Organization: github.com/modern-go/reflect2
PackageDownloadLocation: https://proxy.golang.org/github.com/modern-go/reflect2/@v/v1.0.2.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.opencontainers.go-digest-v1.0.0
##### Package representing github.com/opencontainers/go-digest
PackageName: github.com/opencontainers/go-digest
SPDXID: SPDXRef-Package-github.com.opencontainers.go-digest-v1.0.0
PackageVersion: v1.0.0
PackageSupplier: Organization: github.com/opencontainers/go-digest
PackageDownloadLocation: https://proxy.golang.org/github.com/opencontainers/go-digest/@v/v1.0.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.opencontainers.image-spec-v1.0.3-0.20220114050600-8b9d41f48198
##### Package representing github.com/opencontainers/image-spec
PackageName: github.com/opencontainers/image-spec
SPDXID: SPDXRef-Package-github.com.opencontainers.image-spec-v1.0.3-0.20220114050600-8b9d41f48198
PackageVersion: v1.0.3-0.20220114050600-8b9d41f48198
PackageSupplier: Organization: github.com/opencontainers/image-spec
PackageDownloadLocation: https://proxy.golang.org/github.com/opencontainers/image-spec/@v/v1.0.3-0.20220114050600-8b9d41f48198.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.pkg.errors-v0.9.1
##### Package representing github.com/pkg/errors
PackageName: github.com/pkg/errors
SPDXID: SPDXRef-Package-github.com.pkg.errors-v0.9.1
PackageVersion: v0.9.1
PackageSupplier: Organization: github.com/pkg/errors
PackageDownloadLocation: https://proxy.golang.org/github.com/pkg/errors/@v/v0.9.1.zip
FilesAnalyzed: false
PackageChecksum: SHA256: 14404bc75cd2db5e28c298f2eeab017a2c5b51192e850030acae54c0b193c2de
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.prometheus.client_golang-v1.11.1
##### Package representing github.com/prometheus/client_golang
PackageName: github.com/prometheus/client_golang
SPDXID: SPDXRef-Package-github.com.prometheus.client_golang-v1.11.1
PackageVersion: v1.11.1
PackageSupplier: Organization: github.com/prometheus/client_golang
PackageDownloadLocation: https://proxy.golang.org/github.com/prometheus/client_golang/@v/v1.11.1.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.prometheus.client_model-v0.2.0
##### Package representing github.com/prometheus/client_model
PackageName: github.com/prometheus/client_model
SPDXID: SPDXRef-Package-github.com.prometheus.client_model-v0.2.0
PackageVersion: v0.2.0
PackageSupplier: Organization: github.com/prometheus/client_model
PackageDownloadLocation: https://proxy.golang.org/github.com/prometheus/client_model/@v/v0.2.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.prometheus.common-v0.32.1
##### Package representing github.com/prometheus/common
PackageName: github.com/prometheus/common
SPDXID: SPDXRef-Package-github.com.prometheus.common-v0.32.1
PackageVersion: v0.32.1
PackageSupplier: Organization: github.com/prometheus/common
PackageDownloadLocation: https://proxy.golang.org/github.com/prometheus/common/@v/v0.32.1.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.prometheus.procfs-v0.6.0
##### Package representing github.com/prometheus/procfs
PackageName: github.com/prometheus/procfs
SPDXID: SPDXRef-Package-github.com.prometheus.procfs-v0.6.0
PackageVersion: v0.6.0
PackageSupplier: Organization: github.com/prometheus/procfs
PackageDownloadLocation: https://proxy.golang.org/github.com/prometheus/procfs/@v/v0.6.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.prometheus.statsd_exporter-v0.21.0
##### Package representing github.com/prometheus/statsd_exporter
PackageName: github.com/prometheus/statsd_exporter
SPDXID: SPDXRef-Package-github.com.prometheus.statsd_exporter-v0.21.0
PackageVersion: v0.21.0
PackageSupplier: Organization: github.com/prometheus/statsd_exporter
PackageDownloadLocation: https://proxy.golang.org/github.com/prometheus/statsd_exporter/@v/v0.21.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.sirupsen.logrus-v1.8.1
##### Package representing github.com/sirupsen/logrus
PackageName: github.com/sirupsen/logrus
SPDXID: SPDXRef-Package-github.com.sirupsen.logrus-v1.8.1
PackageVersion: v1.8.1
PackageSupplier: Organization: github.com/sirupsen/logrus
PackageDownloadLocation: https://proxy.golang.org/github.com/sirupsen/logrus/@v/v1.8.1.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.spf13.pflag-v1.0.5
##### Package representing github.com/spf13/pflag
PackageName: github.com/spf13/pflag
SPDXID: SPDXRef-Package-github.com.spf13.pflag-v1.0.5
PackageVersion: v1.0.5
PackageSupplier: Organization: github.com/spf13/pflag
PackageDownloadLocation: https://proxy.golang.org/github.com/spf13/pflag/@v/v1.0.5.zip
FilesAnalyzed: false
PackageChecksum: SHA256: 8b2f951543823f56bef3216da3f76b836089e6ed3246807b7d9c370cabff2570
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.tektoncd.resolution-v0.0.0-20220331203013-e4203c70c5eb
##### Package representing github.com/tektoncd/resolution
PackageName: github.com/tektoncd/resolution
SPDXID: SPDXRef-Package-github.com.tektoncd.resolution-v0.0.0-20220331203013-e4203c70c5eb
PackageVersion: v0.0.0-20220331203013-e4203c70c5eb
PackageSupplier: Organization: github.com/tektoncd/resolution
PackageDownloadLocation: https://proxy.golang.org/github.com/tektoncd/resolution/@v/v0.0.0-20220331203013-e4203c70c5eb.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-go.opencensus.io-v0.23.0
##### Package representing go.opencensus.io
PackageName: go.opencensus.io
SPDXID: SPDXRef-Package-go.opencensus.io-v0.23.0
PackageVersion: v0.23.0
PackageSupplier: Organization: go.opencensus.io
PackageDownloadLocation: https://proxy.golang.org/go.opencensus.io/@v/v0.23.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-go.uber.org.atomic-v1.9.0
##### Package representing go.uber.org/atomic
PackageName: go.uber.org/atomic
SPDXID: SPDXRef-Package-go.uber.org.atomic-v1.9.0
PackageVersion: v1.9.0
PackageSupplier: Organization: go.uber.org/atomic
PackageDownloadLocation: https://proxy.golang.org/go.uber.org/atomic/@v/v1.9.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-go.uber.org.automaxprocs-v1.4.0
##### Package representing go.uber.org/automaxprocs
PackageName: go.uber.org/automaxprocs
SPDXID: SPDXRef-Package-go.uber.org.automaxprocs-v1.4.0
PackageVersion: v1.4.0
PackageSupplier: Organization: go.uber.org/automaxprocs
PackageDownloadLocation: https://proxy.golang.org/go.uber.org/automaxprocs/@v/v1.4.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-go.uber.org.multierr-v1.7.0
##### Package representing go.uber.org/multierr
PackageName: go.uber.org/multierr
SPDXID: SPDXRef-Package-go.uber.org.multierr-v1.7.0
PackageVersion: v1.7.0
PackageSupplier: Organization: go.uber.org/multierr
PackageDownloadLocation: https://proxy.golang.org/go.uber.org/multierr/@v/v1.7.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-go.uber.org.zap-v1.19.1
##### Package representing go.uber.org/zap
PackageName: go.uber.org/zap
SPDXID: SPDXRef-Package-go.uber.org.zap-v1.19.1
PackageVersion: v1.19.1
PackageSupplier: Organization: go.uber.org/zap
PackageDownloadLocation: https://proxy.golang.org/go.uber.org/zap/@v/v1.19.1.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-golang.org.x.crypto-v0.0.0-20220214200702-86341886e292
##### Package representing golang.org/x/crypto
PackageName: golang.org/x/crypto
SPDXID: SPDXRef-Package-golang.org.x.crypto-v0.0.0-20220214200702-86341886e292
PackageVersion: v0.0.0-20220214200702-86341886e292
PackageSupplier: Organization: golang.org/x/crypto
PackageDownloadLocation: https://proxy.golang.org/golang.org/x/crypto/@v/v0.0.0-20220214200702-86341886e292.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-golang.org.x.net-v0.0.0-20220225172249-27dd8689420f
##### Package representing golang.org/x/net
PackageName: golang.org/x/net
SPDXID: SPDXRef-Package-golang.org.x.net-v0.0.0-20220225172249-27dd8689420f
PackageVersion: v0.0.0-20220225172249-27dd8689420f
PackageSupplier: Organization: golang.org/x/net
PackageDownloadLocation: https://proxy.golang.org/golang.org/x/net/@v/v0.0.0-20220225172249-27dd8689420f.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-golang.org.x.oauth2-v0.0.0-20220223155221-ee480838109b
##### Package representing golang.org/x/oauth2
PackageName: golang.org/x/oauth2
SPDXID: SPDXRef-Package-golang.org.x.oauth2-v0.0.0-20220223155221-ee480838109b
PackageVersion: v0.0.0-20220223155221-ee480838109b
PackageSupplier: Organization: golang.org/x/oauth2
PackageDownloadLocation: https://proxy.golang.org/golang.org/x/oauth2/@v/v0.0.0-20220223155221-ee480838109b.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-golang.org.x.sync-v0.0.0-20210220032951-036812b2e83c
##### Package representing golang.org/x/sync
PackageName: golang.org/x/sync
SPDXID: SPDXRef-Package-golang.org.x.sync-v0.0.0-20210220032951-036812b2e83c
PackageVersion: v0.0.0-20210220032951-036812b2e83c
PackageSupplier: Organization: golang.org/x/sync
PackageDownloadLocation: https://proxy.golang.org/golang.org/x/sync/@v/v0.0.0-20210220032951-036812b2e83c.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-golang.org.x.sys-v0.0.0-20220227234510-4e6760a101f9
##### Package representing golang.org/x/sys
PackageName: golang.org/x/sys
SPDXID: SPDXRef-Package-golang.org.x.sys-v0.0.0-20220227234510-4e6760a101f9
PackageVersion: v0.0.0-20220227234510-4e6760a101f9
PackageSupplier: Organization: golang.org/x/sys
PackageDownloadLocation: https://proxy.golang.org/golang.org/x/sys/@v/v0.0.0-20220227234510-4e6760a101f9.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-golang.org.x.term-v0.0.0-20210927222741-03fcf44c2211
##### Package representing golang.org/x/term
PackageName: golang.org/x/term
SPDXID: SPDXRef-Package-golang.org.x.term-v0.0.0-20210927222741-03fcf44c2211
PackageVersion: v0.0.0-20210927222741-03fcf44c2211
PackageSupplier: Organization: golang.org/x/term
PackageDownloadLocation: https://proxy.golang.org/golang.org/x/term/@v/v0.0.0-20210927222741-03fcf44c2211.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-golang.org.x.text-v0.3.7
##### Package representing golang.org/x/text
PackageName: golang.org/x/text
SPDXID: SPDXRef-Package-golang.org.x.text-v0.3.7
PackageVersion: v0.3.7
PackageSupplier: Organization: golang.org/x/text
PackageDownloadLocation: https://proxy.golang.org/golang.org/x/text/@v/v0.3.7.zip
FilesAnalyzed: false
PackageChecksum: SHA256: a25a70bcfd8a69c5b5656bec47bb90868c9362f280ba97d0ad118114cdf9d869
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-golang.org.x.time-v0.0.0-20220224211638-0e9765cccd65
##### Package representing golang.org/x/time
PackageName: golang.org/x/time
SPDXID: SPDXRef-Package-golang.org.x.time-v0.0.0-20220224211638-0e9765cccd65
PackageVersion: v0.0.0-20220224211638-0e9765cccd65
PackageSupplier: Organization: golang.org/x/time
PackageDownloadLocation: https://proxy.golang.org/golang.org/x/time/@v/v0.0.0-20220224211638-0e9765cccd65.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-gomodules.xyz.jsonpatch.v2-v2.2.0
##### Package representing gomodules.xyz/jsonpatch/v2
PackageName: gomodules.xyz/jsonpatch/v2
SPDXID: SPDXRef-Package-gomodules.xyz.jsonpatch.v2-v2.2.0
PackageVersion: v2.2.0
PackageSupplier: Organization: gomodules.xyz/jsonpatch/v2
PackageDownloadLocation: https://proxy.golang.org/gomodules.xyz/jsonpatch/v2/@v/v2.2.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-google.golang.org.api-v0.70.0
##### Package representing google.golang.org/api
PackageName: google.golang.org/api
SPDXID: SPDXRef-Package-google.golang.org.api-v0.70.0
PackageVersion: v0.70.0
PackageSupplier: Organization: google.golang.org/api
PackageDownloadLocation: https://proxy.golang.org/google.golang.org/api/@v/v0.70.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-google.golang.org.genproto-v0.0.0-20220303160752-862486edd9cc
##### Package representing google.golang.org/genproto
PackageName: google.golang.org/genproto
SPDXID: SPDXRef-Package-google.golang.org.genproto-v0.0.0-20220303160752-862486edd9cc
PackageVersion: v0.0.0-20220303160752-862486edd9cc
PackageSupplier: Organization: google.golang.org/genproto
PackageDownloadLocation: https://proxy.golang.org/google.golang.org/genproto/@v/v0.0.0-20220303160752-862486edd9cc.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-google.golang.org.grpc-v1.44.0
##### Package representing google.golang.org/grpc
PackageName: google.golang.org/grpc
SPDXID: SPDXRef-Package-google.golang.org.grpc-v1.44.0
PackageVersion: v1.44.0
PackageSupplier: Organization: google.golang.org/grpc
PackageDownloadLocation: https://proxy.golang.org/google.golang.org/grpc/@v/v1.44.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-google.golang.org.protobuf-v1.27.1
##### Package representing google.golang.org/protobuf
PackageName: google.golang.org/protobuf
SPDXID: SPDXRef-Package-google.golang.org.protobuf-v1.27.1
PackageVersion: v1.27.1
PackageSupplier: Organization: google.golang.org/protobuf
PackageDownloadLocation: https://proxy.golang.org/google.golang.org/protobuf/@v/v1.27.1.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-gopkg.in.inf.v0-v0.9.1
##### Package representing gopkg.in/inf.v0
PackageName: gopkg.in/inf.v0
SPDXID: SPDXRef-Package-gopkg.in.inf.v0-v0.9.1
PackageVersion: v0.9.1
PackageSupplier: Organization: gopkg.in/inf.v0
PackageDownloadLocation: https://proxy.golang.org/gopkg.in/inf.v0/@v/v0.9.1.zip
FilesAnalyzed: false
PackageChecksum: SHA256: ef73390a86728b764b30ec83950874df50b1e8df4d0c9d95bdf97be840c08037
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-gopkg.in.yaml.v2-v2.4.0
##### Package representing gopkg.in/yaml.v2
PackageName: gopkg.in/yaml.v2
SPDXID: SPDXRef-Package-gopkg.in.yaml.v2-v2.4.0
PackageVersion: v2.4.0
PackageSupplier: Organization: gopkg.in/yaml.v2
PackageDownloadLocation: https://proxy.golang.org/gopkg.in/yaml.v2/@v/v2.4.0.zip
FilesAnalyzed: false
PackageChecksum: SHA256: 0fcc60c04098ec262fc7e6369f8b01cfddc99fd251bf1762cb2a3c0937ee29a6
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-gopkg.in.yaml.v3-v3.0.0-20210107192922-496545a6307b
##### Package representing gopkg.in/yaml.v3
PackageName: gopkg.in/yaml.v3
SPDXID: SPDXRef-Package-gopkg.in.yaml.v3-v3.0.0-20210107192922-496545a6307b
PackageVersion: v3.0.0-20210107192922-496545a6307b
PackageSupplier: Organization: gopkg.in/yaml.v3
PackageDownloadLocation: https://proxy.golang.org/gopkg.in/yaml.v3/@v/v3.0.0-20210107192922-496545a6307b.zip
FilesAnalyzed: false
PackageChecksum: SHA256: 87ca83a2d6843ee2404eb3265b4e0d0b083bbf6d9a1c7dbcc30a5ab9484af4ea
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-k8s.io.api-v0.23.5
##### Package representing k8s.io/api
PackageName: k8s.io/api
SPDXID: SPDXRef-Package-k8s.io.api-v0.23.5
PackageVersion: v0.23.5
PackageSupplier: Organization: k8s.io/api
PackageDownloadLocation: https://proxy.golang.org/k8s.io/api/@v/v0.23.5.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-k8s.io.apiextensions-apiserver-v0.23.4
##### Package representing k8s.io/apiextensions-apiserver
PackageName: k8s.io/apiextensions-apiserver
SPDXID: SPDXRef-Package-k8s.io.apiextensions-apiserver-v0.23.4
PackageVersion: v0.23.4
PackageSupplier: Organization: k8s.io/apiextensions-apiserver
PackageDownloadLocation: https://proxy.golang.org/k8s.io/apiextensions-apiserver/@v/v0.23.4.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-k8s.io.apimachinery-v0.23.5
##### Package representing k8s.io/apimachinery
PackageName: k8s.io/apimachinery
SPDXID: SPDXRef-Package-k8s.io.apimachinery-v0.23.5
PackageVersion: v0.23.5
PackageSupplier: Organization: k8s.io/apimachinery
PackageDownloadLocation: https://proxy.golang.org/k8s.io/apimachinery/@v/v0.23.5.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-k8s.io.client-go-v0.23.5
##### Package representing k8s.io/client-go
PackageName: k8s.io/client-go
SPDXID: SPDXRef-Package-k8s.io.client-go-v0.23.5
PackageVersion: v0.23.5
PackageSupplier: Organization: k8s.io/client-go
PackageDownloadLocation: https://proxy.golang.org/k8s.io/client-go/@v/v0.23.5.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-k8s.io.klog.v2-v2.60.1-0.20220317184644-43cc75f9ae89
##### Package representing k8s.io/klog/v2
PackageName: k8s.io/klog/v2
SPDXID: SPDXRef-Package-k8s.io.klog.v2-v2.60.1-0.20220317184644-43cc75f9ae89
PackageVersion: v2.60.1-0.20220317184644-43cc75f9ae89
PackageSupplier: Organization: k8s.io/klog/v2
PackageDownloadLocation: https://proxy.golang.org/k8s.io/klog/v2/@v/v2.60.1-0.20220317184644-43cc75f9ae89.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-k8s.io.kube-openapi-v0.0.0-20220124234850-424119656bbf
##### Package representing k8s.io/kube-openapi
PackageName: k8s.io/kube-openapi
SPDXID: SPDXRef-Package-k8s.io.kube-openapi-v0.0.0-20220124234850-424119656bbf
PackageVersion: v0.0.0-20220124234850-424119656bbf
PackageSupplier: Organization: k8s.io/kube-openapi
PackageDownloadLocation: https://proxy.golang.org/k8s.io/kube-openapi/@v/v0.0.0-20220124234850-424119656bbf.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-k8s.io.utils-v0.0.0-20220210201930-3a6ce19ff2f9
##### Package representing k8s.io/utils
PackageName: k8s.io/utils
SPDXID: SPDXRef-Package-k8s.io.utils-v0.0.0-20220210201930-3a6ce19ff2f9
PackageVersion: v0.0.0-20220210201930-3a6ce19ff2f9
PackageSupplier: Organization: k8s.io/utils
PackageDownloadLocation: https://proxy.golang.org/k8s.io/utils/@v/v0.0.0-20220210201930-3a6ce19ff2f9.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-knative.dev.pkg-v0.0.0-20220329144915-0a1ec2e0d46c
##### Package representing knative.dev/pkg
PackageName: knative.dev/pkg
SPDXID: SPDXRef-Package-knative.dev.pkg-v0.0.0-20220329144915-0a1ec2e0d46c
PackageVersion: v0.0.0-20220329144915-0a1ec2e0d46c
PackageSupplier: Organization: knative.dev/pkg
PackageDownloadLocation: https://proxy.golang.org/knative.dev/pkg/@v/v0.0.0-20220329144915-0a1ec2e0d46c.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-sigs.k8s.io.json-v0.0.0-20211208200746-9f7c6b3444d2
##### Package representing sigs.k8s.io/json
PackageName: sigs.k8s.io/json
SPDXID: SPDXRef-Package-sigs.k8s.io.json-v0.0.0-20211208200746-9f7c6b3444d2
PackageVersion: v0.0.0-20211208200746-9f7c6b3444d2
PackageSupplier: Organization: sigs.k8s.io/json
PackageDownloadLocation: https://proxy.golang.org/sigs.k8s.io/json/@v/v0.0.0-20211208200746-9f7c6b3444d2.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-sigs.k8s.io.structured-merge-diff.v4-v4.2.1
##### Package representing sigs.k8s.io/structured-merge-diff/v4
PackageName: sigs.k8s.io/structured-merge-diff/v4
SPDXID: SPDXRef-Package-sigs.k8s.io.structured-merge-diff.v4-v4.2.1
PackageVersion: v4.2.1
PackageSupplier: Organization: sigs.k8s.io/structured-merge-diff/v4
PackageDownloadLocation: https://proxy.golang.org/sigs.k8s.io/structured-merge-diff/v4/@v/v4.2.1.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-sigs.k8s.io.yaml-v1.3.0
##### Package representing sigs.k8s.io/yaml
PackageName: sigs.k8s.io/yaml
SPDXID: SPDXRef-Package-sigs.k8s.io.yaml-v1.3.0
PackageVersion: v1.3.0
PackageSupplier: Organization: sigs.k8s.io/yaml
PackageDownloadLocation: https://proxy.golang.org/sigs.k8s.io/yaml/@v/v1.3.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
andreafrittoli@samwise:/go/src/github.com/tektoncd/pipeline (main)$ DIGEST=$(crane manifest gcr.io/tekton-nightly/github.com/tektoncd/pipeline/cmd/controller:v20220513-16d73c5543 | jq -r .manifests[0].digest)^C
andreafrittoli@samwise:/go/src/github.com/tektoncd/pipeline (main)$ cosign download sbom gcr.io/tekton-nightly/github.com/tektoncd/pipeline/cmd/controller@${DIGEST}
Found SBOM of media type: text/spdx
SPDXVersion: SPDX-2.2
DataLicense: CC0-1.0
SPDXID: SPDXRef-DOCUMENT
DocumentName: github.com/tektoncd/pipeline
DocumentNamespace: http://spdx.org/spdxpackages/github.com/tektoncd/pipeline
Creator: Tool: ko 0.11.2
Created: 1970-01-01T00:00:00Z
##### Package representing github.com/tektoncd/pipeline
PackageName: github.com/tektoncd/pipeline
SPDXID: SPDXRef-Package-github.com.tektoncd.pipeline
PackageSupplier: Organization: github.com/tektoncd/pipeline
PackageDownloadLocation: https://github.com/tektoncd/pipeline
FilesAnalyzed: false
PackageHomePage: https://github.com/tektoncd/pipeline
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-Package-github.com.tektoncd.pipeline
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-cloud.google.com.go.compute-v1.5.0
##### Package representing cloud.google.com/go/compute
PackageName: cloud.google.com/go/compute
SPDXID: SPDXRef-Package-cloud.google.com.go.compute-v1.5.0
PackageVersion: v1.5.0
PackageSupplier: Organization: cloud.google.com/go/compute
PackageDownloadLocation: https://proxy.golang.org/cloud.google.com/go/compute/@v/v1.5.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-contrib.go.opencensus.io.exporter.ocagent-v0.7.1-0.20200907061046-05415f1de66d
##### Package representing contrib.go.opencensus.io/exporter/ocagent
PackageName: contrib.go.opencensus.io/exporter/ocagent
SPDXID: SPDXRef-Package-contrib.go.opencensus.io.exporter.ocagent-v0.7.1-0.20200907061046-05415f1de66d
PackageVersion: v0.7.1-0.20200907061046-05415f1de66d
PackageSupplier: Organization: contrib.go.opencensus.io/exporter/ocagent
PackageDownloadLocation: https://proxy.golang.org/contrib.go.opencensus.io/exporter/ocagent/@v/v0.7.1-0.20200907061046-05415f1de66d.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-contrib.go.opencensus.io.exporter.prometheus-v0.4.0
##### Package representing contrib.go.opencensus.io/exporter/prometheus
PackageName: contrib.go.opencensus.io/exporter/prometheus
SPDXID: SPDXRef-Package-contrib.go.opencensus.io.exporter.prometheus-v0.4.0
PackageVersion: v0.4.0
PackageSupplier: Organization: contrib.go.opencensus.io/exporter/prometheus
PackageDownloadLocation: https://proxy.golang.org/contrib.go.opencensus.io/exporter/prometheus/@v/v0.4.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.Azure.azure-sdk-for-go-v63.3.0+incompatible
##### Package representing github.com/Azure/azure-sdk-for-go
PackageName: github.com/Azure/azure-sdk-for-go
SPDXID: SPDXRef-Package-github.com.Azure.azure-sdk-for-go-v63.3.0+incompatible
PackageVersion: v63.3.0+incompatible
PackageSupplier: Organization: github.com/Azure/azure-sdk-for-go
PackageDownloadLocation: https://proxy.golang.org/github.com/Azure/azure-sdk-for-go/@v/v63.3.0+incompatible.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.Azure.go-autorest.autorest-v0.11.24
##### Package representing github.com/Azure/go-autorest/autorest
PackageName: github.com/Azure/go-autorest/autorest
SPDXID: SPDXRef-Package-github.com.Azure.go-autorest.autorest-v0.11.24
PackageVersion: v0.11.24
PackageSupplier: Organization: github.com/Azure/go-autorest/autorest
PackageDownloadLocation: https://proxy.golang.org/github.com/Azure/go-autorest/autorest/@v/v0.11.24.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.Azure.go-autorest.autorest.adal-v0.9.18
##### Package representing github.com/Azure/go-autorest/autorest/adal
PackageName: github.com/Azure/go-autorest/autorest/adal
SPDXID: SPDXRef-Package-github.com.Azure.go-autorest.autorest.adal-v0.9.18
PackageVersion: v0.9.18
PackageSupplier: Organization: github.com/Azure/go-autorest/autorest/adal
PackageDownloadLocation: https://proxy.golang.org/github.com/Azure/go-autorest/autorest/adal/@v/v0.9.18.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.Azure.go-autorest.autorest.azure.auth-v0.5.11
##### Package representing github.com/Azure/go-autorest/autorest/azure/auth
PackageName: github.com/Azure/go-autorest/autorest/azure/auth
SPDXID: SPDXRef-Package-github.com.Azure.go-autorest.autorest.azure.auth-v0.5.11
PackageVersion: v0.5.11
PackageSupplier: Organization: github.com/Azure/go-autorest/autorest/azure/auth
PackageDownloadLocation: https://proxy.golang.org/github.com/Azure/go-autorest/autorest/azure/auth/@v/v0.5.11.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.Azure.go-autorest.autorest.azure.cli-v0.4.5
##### Package representing github.com/Azure/go-autorest/autorest/azure/cli
PackageName: github.com/Azure/go-autorest/autorest/azure/cli
SPDXID: SPDXRef-Package-github.com.Azure.go-autorest.autorest.azure.cli-v0.4.5
PackageVersion: v0.4.5
PackageSupplier: Organization: github.com/Azure/go-autorest/autorest/azure/cli
PackageDownloadLocation: https://proxy.golang.org/github.com/Azure/go-autorest/autorest/azure/cli/@v/v0.4.5.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.Azure.go-autorest.autorest.date-v0.3.0
##### Package representing github.com/Azure/go-autorest/autorest/date
PackageName: github.com/Azure/go-autorest/autorest/date
SPDXID: SPDXRef-Package-github.com.Azure.go-autorest.autorest.date-v0.3.0
PackageVersion: v0.3.0
PackageSupplier: Organization: github.com/Azure/go-autorest/autorest/date
PackageDownloadLocation: https://proxy.golang.org/github.com/Azure/go-autorest/autorest/date/@v/v0.3.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.Azure.go-autorest.logger-v0.2.1
##### Package representing github.com/Azure/go-autorest/logger
PackageName: github.com/Azure/go-autorest/logger
SPDXID: SPDXRef-Package-github.com.Azure.go-autorest.logger-v0.2.1
PackageVersion: v0.2.1
PackageSupplier: Organization: github.com/Azure/go-autorest/logger
PackageDownloadLocation: https://proxy.golang.org/github.com/Azure/go-autorest/logger/@v/v0.2.1.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.Azure.go-autorest.tracing-v0.6.0
##### Package representing github.com/Azure/go-autorest/tracing
PackageName: github.com/Azure/go-autorest/tracing
SPDXID: SPDXRef-Package-github.com.Azure.go-autorest.tracing-v0.6.0
PackageVersion: v0.6.0
PackageSupplier: Organization: github.com/Azure/go-autorest/tracing
PackageDownloadLocation: https://proxy.golang.org/github.com/Azure/go-autorest/tracing/@v/v0.6.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.PuerkitoBio.purell-v1.1.1
##### Package representing github.com/PuerkitoBio/purell
PackageName: github.com/PuerkitoBio/purell
SPDXID: SPDXRef-Package-github.com.PuerkitoBio.purell-v1.1.1
PackageVersion: v1.1.1
PackageSupplier: Organization: github.com/PuerkitoBio/purell
PackageDownloadLocation: https://proxy.golang.org/github.com/PuerkitoBio/purell/@v/v1.1.1.zip
FilesAnalyzed: false
PackageChecksum: SHA256: 58442a96a6866eb3e4c4b2567c1c1099f10013567b38d7432eaacddfcb4d15f2
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.PuerkitoBio.urlesc-v0.0.0-20170810143723-de5bf2ad4578
##### Package representing github.com/PuerkitoBio/urlesc
PackageName: github.com/PuerkitoBio/urlesc
SPDXID: SPDXRef-Package-github.com.PuerkitoBio.urlesc-v0.0.0-20170810143723-de5bf2ad4578
PackageVersion: v0.0.0-20170810143723-de5bf2ad4578
PackageSupplier: Organization: github.com/PuerkitoBio/urlesc
PackageDownloadLocation: https://proxy.golang.org/github.com/PuerkitoBio/urlesc/@v/v0.0.0-20170810143723-de5bf2ad4578.zip
FilesAnalyzed: false
PackageChecksum: SHA256: 77e05cedae6b2ee7d5fec4a4ffc76782e7ea7a57e1ea39eb8bce6b88c01a17f3
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.aws.aws-sdk-go-v2-v1.14.0
##### Package representing github.com/aws/aws-sdk-go-v2
PackageName: github.com/aws/aws-sdk-go-v2
SPDXID: SPDXRef-Package-github.com.aws.aws-sdk-go-v2-v1.14.0
PackageVersion: v1.14.0
PackageSupplier: Organization: github.com/aws/aws-sdk-go-v2
PackageDownloadLocation: https://proxy.golang.org/github.com/aws/aws-sdk-go-v2/@v/v1.14.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.aws.aws-sdk-go-v2.config-v1.14.0
##### Package representing github.com/aws/aws-sdk-go-v2/config
PackageName: github.com/aws/aws-sdk-go-v2/config
SPDXID: SPDXRef-Package-github.com.aws.aws-sdk-go-v2.config-v1.14.0
PackageVersion: v1.14.0
PackageSupplier: Organization: github.com/aws/aws-sdk-go-v2/config
PackageDownloadLocation: https://proxy.golang.org/github.com/aws/aws-sdk-go-v2/config/@v/v1.14.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.aws.aws-sdk-go-v2.credentials-v1.9.0
##### Package representing github.com/aws/aws-sdk-go-v2/credentials
PackageName: github.com/aws/aws-sdk-go-v2/credentials
SPDXID: SPDXRef-Package-github.com.aws.aws-sdk-go-v2.credentials-v1.9.0
PackageVersion: v1.9.0
PackageSupplier: Organization: github.com/aws/aws-sdk-go-v2/credentials
PackageDownloadLocation: https://proxy.golang.org/github.com/aws/aws-sdk-go-v2/credentials/@v/v1.9.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.aws.aws-sdk-go-v2.feature.ec2.imds-v1.11.0
##### Package representing github.com/aws/aws-sdk-go-v2/feature/ec2/imds
PackageName: github.com/aws/aws-sdk-go-v2/feature/ec2/imds
SPDXID: SPDXRef-Package-github.com.aws.aws-sdk-go-v2.feature.ec2.imds-v1.11.0
PackageVersion: v1.11.0
PackageSupplier: Organization: github.com/aws/aws-sdk-go-v2/feature/ec2/imds
PackageDownloadLocation: https://proxy.golang.org/github.com/aws/aws-sdk-go-v2/feature/ec2/imds/@v/v1.11.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.aws.aws-sdk-go-v2.internal.configsources-v1.1.5
##### Package representing github.com/aws/aws-sdk-go-v2/internal/configsources
PackageName: github.com/aws/aws-sdk-go-v2/internal/configsources
SPDXID: SPDXRef-Package-github.com.aws.aws-sdk-go-v2.internal.configsources-v1.1.5
PackageVersion: v1.1.5
PackageSupplier: Organization: github.com/aws/aws-sdk-go-v2/internal/configsources
PackageDownloadLocation: https://proxy.golang.org/github.com/aws/aws-sdk-go-v2/internal/configsources/@v/v1.1.5.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.aws.aws-sdk-go-v2.internal.endpoints.v2-v2.3.0
##### Package representing github.com/aws/aws-sdk-go-v2/internal/endpoints/v2
PackageName: github.com/aws/aws-sdk-go-v2/internal/endpoints/v2
SPDXID: SPDXRef-Package-github.com.aws.aws-sdk-go-v2.internal.endpoints.v2-v2.3.0
PackageVersion: v2.3.0
PackageSupplier: Organization: github.com/aws/aws-sdk-go-v2/internal/endpoints/v2
PackageDownloadLocation: https://proxy.golang.org/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2/@v/v2.3.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.aws.aws-sdk-go-v2.internal.ini-v1.3.6
##### Package representing github.com/aws/aws-sdk-go-v2/internal/ini
PackageName: github.com/aws/aws-sdk-go-v2/internal/ini
SPDXID: SPDXRef-Package-github.com.aws.aws-sdk-go-v2.internal.ini-v1.3.6
PackageVersion: v1.3.6
PackageSupplier: Organization: github.com/aws/aws-sdk-go-v2/internal/ini
PackageDownloadLocation: https://proxy.golang.org/github.com/aws/aws-sdk-go-v2/internal/ini/@v/v1.3.6.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.aws.aws-sdk-go-v2.service.ecr-v1.15.0
##### Package representing github.com/aws/aws-sdk-go-v2/service/ecr
PackageName: github.com/aws/aws-sdk-go-v2/service/ecr
SPDXID: SPDXRef-Package-github.com.aws.aws-sdk-go-v2.service.ecr-v1.15.0
PackageVersion: v1.15.0
PackageSupplier: Organization: github.com/aws/aws-sdk-go-v2/service/ecr
PackageDownloadLocation: https://proxy.golang.org/github.com/aws/aws-sdk-go-v2/service/ecr/@v/v1.15.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.aws.aws-sdk-go-v2.service.ecrpublic-v1.12.0
##### Package representing github.com/aws/aws-sdk-go-v2/service/ecrpublic
PackageName: github.com/aws/aws-sdk-go-v2/service/ecrpublic
SPDXID: SPDXRef-Package-github.com.aws.aws-sdk-go-v2.service.ecrpublic-v1.12.0
PackageVersion: v1.12.0
PackageSupplier: Organization: github.com/aws/aws-sdk-go-v2/service/ecrpublic
PackageDownloadLocation: https://proxy.golang.org/github.com/aws/aws-sdk-go-v2/service/ecrpublic/@v/v1.12.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.aws.aws-sdk-go-v2.service.internal.presigned-url-v1.8.0
##### Package representing github.com/aws/aws-sdk-go-v2/service/internal/presigned-url
PackageName: github.com/aws/aws-sdk-go-v2/service/internal/presigned-url
SPDXID: SPDXRef-Package-github.com.aws.aws-sdk-go-v2.service.internal.presigned-url-v1.8.0
PackageVersion: v1.8.0
PackageSupplier: Organization: github.com/aws/aws-sdk-go-v2/service/internal/presigned-url
PackageDownloadLocation: https://proxy.golang.org/github.com/aws/aws-sdk-go-v2/service/internal/presigned-url/@v/v1.8.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.aws.aws-sdk-go-v2.service.sso-v1.10.0
##### Package representing github.com/aws/aws-sdk-go-v2/service/sso
PackageName: github.com/aws/aws-sdk-go-v2/service/sso
SPDXID: SPDXRef-Package-github.com.aws.aws-sdk-go-v2.service.sso-v1.10.0
PackageVersion: v1.10.0
PackageSupplier: Organization: github.com/aws/aws-sdk-go-v2/service/sso
PackageDownloadLocation: https://proxy.golang.org/github.com/aws/aws-sdk-go-v2/service/sso/@v/v1.10.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.aws.aws-sdk-go-v2.service.sts-v1.15.0
##### Package representing github.com/aws/aws-sdk-go-v2/service/sts
PackageName: github.com/aws/aws-sdk-go-v2/service/sts
SPDXID: SPDXRef-Package-github.com.aws.aws-sdk-go-v2.service.sts-v1.15.0
PackageVersion: v1.15.0
PackageSupplier: Organization: github.com/aws/aws-sdk-go-v2/service/sts
PackageDownloadLocation: https://proxy.golang.org/github.com/aws/aws-sdk-go-v2/service/sts/@v/v1.15.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.aws.smithy-go-v1.11.0
##### Package representing github.com/aws/smithy-go
PackageName: github.com/aws/smithy-go
SPDXID: SPDXRef-Package-github.com.aws.smithy-go-v1.11.0
PackageVersion: v1.11.0
PackageSupplier: Organization: github.com/aws/smithy-go
PackageDownloadLocation: https://proxy.golang.org/github.com/aws/smithy-go/@v/v1.11.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.awslabs.amazon-ecr-credential-helper.ecr-login-v0.0.0-20220228164355-396b2034c795
##### Package representing github.com/awslabs/amazon-ecr-credential-helper/ecr-login
PackageName: github.com/awslabs/amazon-ecr-credential-helper/ecr-login
SPDXID: SPDXRef-Package-github.com.awslabs.amazon-ecr-credential-helper.ecr-login-v0.0.0-20220228164355-396b2034c795
PackageVersion: v0.0.0-20220228164355-396b2034c795
PackageSupplier: Organization: github.com/awslabs/amazon-ecr-credential-helper/ecr-login
PackageDownloadLocation: https://proxy.golang.org/github.com/awslabs/amazon-ecr-credential-helper/ecr-login/@v/v0.0.0-20220228164355-396b2034c795.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.beorn7.perks-v1.0.1
##### Package representing github.com/beorn7/perks
PackageName: github.com/beorn7/perks
SPDXID: SPDXRef-Package-github.com.beorn7.perks-v1.0.1
PackageVersion: v1.0.1
PackageSupplier: Organization: github.com/beorn7/perks
PackageDownloadLocation: https://proxy.golang.org/github.com/beorn7/perks/@v/v1.0.1.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.blang.semver.v4-v4.0.0
##### Package representing github.com/blang/semver/v4
PackageName: github.com/blang/semver/v4
SPDXID: SPDXRef-Package-github.com.blang.semver.v4-v4.0.0
PackageVersion: v4.0.0
PackageSupplier: Organization: github.com/blang/semver/v4
PackageDownloadLocation: https://proxy.golang.org/github.com/blang/semver/v4/@v/v4.0.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.blendle.zapdriver-v1.3.1
##### Package representing github.com/blendle/zapdriver
PackageName: github.com/blendle/zapdriver
SPDXID: SPDXRef-Package-github.com.blendle.zapdriver-v1.3.1
PackageVersion: v1.3.1
PackageSupplier: Organization: github.com/blendle/zapdriver
PackageDownloadLocation: https://proxy.golang.org/github.com/blendle/zapdriver/@v/v1.3.1.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.census-instrumentation.opencensus-proto-v0.3.0
##### Package representing github.com/census-instrumentation/opencensus-proto
PackageName: github.com/census-instrumentation/opencensus-proto
SPDXID: SPDXRef-Package-github.com.census-instrumentation.opencensus-proto-v0.3.0
PackageVersion: v0.3.0
PackageSupplier: Organization: github.com/census-instrumentation/opencensus-proto
PackageDownloadLocation: https://proxy.golang.org/github.com/census-instrumentation/opencensus-proto/@v/v0.3.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.cespare.xxhash.v2-v2.1.2
##### Package representing github.com/cespare/xxhash/v2
PackageName: github.com/cespare/xxhash/v2
SPDXID: SPDXRef-Package-github.com.cespare.xxhash.v2-v2.1.2
PackageVersion: v2.1.2
PackageSupplier: Organization: github.com/cespare/xxhash/v2
PackageDownloadLocation: https://proxy.golang.org/github.com/cespare/xxhash/v2/@v/v2.1.2.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.chrismellard.docker-credential-acr-env-v0.0.0-20220119192733-fe33c00cee21
##### Package representing github.com/chrismellard/docker-credential-acr-env
PackageName: github.com/chrismellard/docker-credential-acr-env
SPDXID: SPDXRef-Package-github.com.chrismellard.docker-credential-acr-env-v0.0.0-20220119192733-fe33c00cee21
PackageVersion: v0.0.0-20220119192733-fe33c00cee21
PackageSupplier: Organization: github.com/chrismellard/docker-credential-acr-env
PackageDownloadLocation: https://proxy.golang.org/github.com/chrismellard/docker-credential-acr-env/@v/v0.0.0-20220119192733-fe33c00cee21.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.cloudevents.sdk-go.v2-v2.5.0
##### Package representing github.com/cloudevents/sdk-go/v2
PackageName: github.com/cloudevents/sdk-go/v2
SPDXID: SPDXRef-Package-github.com.cloudevents.sdk-go.v2-v2.5.0
PackageVersion: v2.5.0
PackageSupplier: Organization: github.com/cloudevents/sdk-go/v2
PackageDownloadLocation: https://proxy.golang.org/github.com/cloudevents/sdk-go/v2/@v/v2.5.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.containerd.containerd-v1.5.10
##### Package representing github.com/containerd/containerd
PackageName: github.com/containerd/containerd
SPDXID: SPDXRef-Package-github.com.containerd.containerd-v1.5.10
PackageVersion: v1.5.10
PackageSupplier: Organization: github.com/containerd/containerd
PackageDownloadLocation: https://proxy.golang.org/github.com/containerd/containerd/@v/v1.5.10.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.davecgh.go-spew-v1.1.1
##### Package representing github.com/davecgh/go-spew
PackageName: github.com/davecgh/go-spew
SPDXID: SPDXRef-Package-github.com.davecgh.go-spew-v1.1.1
PackageVersion: v1.1.1
PackageSupplier: Organization: github.com/davecgh/go-spew
PackageDownloadLocation: https://proxy.golang.org/github.com/davecgh/go-spew/@v/v1.1.1.zip
FilesAnalyzed: false
PackageChecksum: SHA256: be3f63feed5baa7bc211f24ec1486d94e011aacdfeae41d8635de36164d4f7b7
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.dimchansky.utfbom-v1.1.1
##### Package representing github.com/dimchansky/utfbom
PackageName: github.com/dimchansky/utfbom
SPDXID: SPDXRef-Package-github.com.dimchansky.utfbom-v1.1.1
PackageVersion: v1.1.1
PackageSupplier: Organization: github.com/dimchansky/utfbom
PackageDownloadLocation: https://proxy.golang.org/github.com/dimchansky/utfbom/@v/v1.1.1.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.docker.cli-v20.10.12+incompatible
##### Package representing github.com/docker/cli
PackageName: github.com/docker/cli
SPDXID: SPDXRef-Package-github.com.docker.cli-v20.10.12+incompatible
PackageVersion: v20.10.12+incompatible
PackageSupplier: Organization: github.com/docker/cli
PackageDownloadLocation: https://proxy.golang.org/github.com/docker/cli/@v/v20.10.12+incompatible.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.docker.distribution-v2.8.0+incompatible
##### Package representing github.com/docker/distribution
PackageName: github.com/docker/distribution
SPDXID: SPDXRef-Package-github.com.docker.distribution-v2.8.0+incompatible
PackageVersion: v2.8.0+incompatible
PackageSupplier: Organization: github.com/docker/distribution
PackageDownloadLocation: https://proxy.golang.org/github.com/docker/distribution/@v/v2.8.0+incompatible.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.docker.docker-v20.10.12+incompatible
##### Package representing github.com/docker/docker
PackageName: github.com/docker/docker
SPDXID: SPDXRef-Package-github.com.docker.docker-v20.10.12+incompatible
PackageVersion: v20.10.12+incompatible
PackageSupplier: Organization: github.com/docker/docker
PackageDownloadLocation: https://proxy.golang.org/github.com/docker/docker/@v/v20.10.12+incompatible.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.docker.docker-credential-helpers-v0.6.4
##### Package representing github.com/docker/docker-credential-helpers
PackageName: github.com/docker/docker-credential-helpers
SPDXID: SPDXRef-Package-github.com.docker.docker-credential-helpers-v0.6.4
PackageVersion: v0.6.4
PackageSupplier: Organization: github.com/docker/docker-credential-helpers
PackageDownloadLocation: https://proxy.golang.org/github.com/docker/docker-credential-helpers/@v/v0.6.4.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.emicklei.go-restful-v2.15.0+incompatible
##### Package representing github.com/emicklei/go-restful
PackageName: github.com/emicklei/go-restful
SPDXID: SPDXRef-Package-github.com.emicklei.go-restful-v2.15.0+incompatible
PackageVersion: v2.15.0+incompatible
PackageSupplier: Organization: github.com/emicklei/go-restful
PackageDownloadLocation: https://proxy.golang.org/github.com/emicklei/go-restful/@v/v2.15.0+incompatible.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.evanphx.json-patch-v4.12.0+incompatible
##### Package representing github.com/evanphx/json-patch
PackageName: github.com/evanphx/json-patch
SPDXID: SPDXRef-Package-github.com.evanphx.json-patch-v4.12.0+incompatible
PackageVersion: v4.12.0+incompatible
PackageSupplier: Organization: github.com/evanphx/json-patch
PackageDownloadLocation: https://proxy.golang.org/github.com/evanphx/json-patch/@v/v4.12.0+incompatible.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.evanphx.json-patch.v5-v5.6.0
##### Package representing github.com/evanphx/json-patch/v5
PackageName: github.com/evanphx/json-patch/v5
SPDXID: SPDXRef-Package-github.com.evanphx.json-patch.v5-v5.6.0
PackageVersion: v5.6.0
PackageSupplier: Organization: github.com/evanphx/json-patch/v5
PackageDownloadLocation: https://proxy.golang.org/github.com/evanphx/json-patch/v5/@v/v5.6.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.go-kit.log-v0.1.0
##### Package representing github.com/go-kit/log
PackageName: github.com/go-kit/log
SPDXID: SPDXRef-Package-github.com.go-kit.log-v0.1.0
PackageVersion: v0.1.0
PackageSupplier: Organization: github.com/go-kit/log
PackageDownloadLocation: https://proxy.golang.org/github.com/go-kit/log/@v/v0.1.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.go-logfmt.logfmt-v0.5.0
##### Package representing github.com/go-logfmt/logfmt
PackageName: github.com/go-logfmt/logfmt
SPDXID: SPDXRef-Package-github.com.go-logfmt.logfmt-v0.5.0
PackageVersion: v0.5.0
PackageSupplier: Organization: github.com/go-logfmt/logfmt
PackageDownloadLocation: https://proxy.golang.org/github.com/go-logfmt/logfmt/@v/v0.5.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.go-logr.logr-v1.2.2
##### Package representing github.com/go-logr/logr
PackageName: github.com/go-logr/logr
SPDXID: SPDXRef-Package-github.com.go-logr.logr-v1.2.2
PackageVersion: v1.2.2
PackageSupplier: Organization: github.com/go-logr/logr
PackageDownloadLocation: https://proxy.golang.org/github.com/go-logr/logr/@v/v1.2.2.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.go-openapi.jsonpointer-v0.19.5
##### Package representing github.com/go-openapi/jsonpointer
PackageName: github.com/go-openapi/jsonpointer
SPDXID: SPDXRef-Package-github.com.go-openapi.jsonpointer-v0.19.5
PackageVersion: v0.19.5
PackageSupplier: Organization: github.com/go-openapi/jsonpointer
PackageDownloadLocation: https://proxy.golang.org/github.com/go-openapi/jsonpointer/@v/v0.19.5.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.go-openapi.jsonreference-v0.19.5
##### Package representing github.com/go-openapi/jsonreference
PackageName: github.com/go-openapi/jsonreference
SPDXID: SPDXRef-Package-github.com.go-openapi.jsonreference-v0.19.5
PackageVersion: v0.19.5
PackageSupplier: Organization: github.com/go-openapi/jsonreference
PackageDownloadLocation: https://proxy.golang.org/github.com/go-openapi/jsonreference/@v/v0.19.5.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.go-openapi.swag-v0.19.15
##### Package representing github.com/go-openapi/swag
PackageName: github.com/go-openapi/swag
SPDXID: SPDXRef-Package-github.com.go-openapi.swag-v0.19.15
PackageVersion: v0.19.15
PackageSupplier: Organization: github.com/go-openapi/swag
PackageDownloadLocation: https://proxy.golang.org/github.com/go-openapi/swag/@v/v0.19.15.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.gogo.protobuf-v1.3.2
##### Package representing github.com/gogo/protobuf
PackageName: github.com/gogo/protobuf
SPDXID: SPDXRef-Package-github.com.gogo.protobuf-v1.3.2
PackageVersion: v1.3.2
PackageSupplier: Organization: github.com/gogo/protobuf
PackageDownloadLocation: https://proxy.golang.org/github.com/gogo/protobuf/@v/v1.3.2.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.golang-jwt.jwt.v4-v4.3.0
##### Package representing github.com/golang-jwt/jwt/v4
PackageName: github.com/golang-jwt/jwt/v4
SPDXID: SPDXRef-Package-github.com.golang-jwt.jwt.v4-v4.3.0
PackageVersion: v4.3.0
PackageSupplier: Organization: github.com/golang-jwt/jwt/v4
PackageDownloadLocation: https://proxy.golang.org/github.com/golang-jwt/jwt/v4/@v/v4.3.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.golang.groupcache-v0.0.0-20210331224755-41bb18bfe9da
##### Package representing github.com/golang/groupcache
PackageName: github.com/golang/groupcache
SPDXID: SPDXRef-Package-github.com.golang.groupcache-v0.0.0-20210331224755-41bb18bfe9da
PackageVersion: v0.0.0-20210331224755-41bb18bfe9da
PackageSupplier: Organization: github.com/golang/groupcache
PackageDownloadLocation: https://proxy.golang.org/github.com/golang/groupcache/@v/v0.0.0-20210331224755-41bb18bfe9da.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.golang.protobuf-v1.5.2
##### Package representing github.com/golang/protobuf
PackageName: github.com/golang/protobuf
SPDXID: SPDXRef-Package-github.com.golang.protobuf-v1.5.2
PackageVersion: v1.5.2
PackageSupplier: Organization: github.com/golang/protobuf
PackageDownloadLocation: https://proxy.golang.org/github.com/golang/protobuf/@v/v1.5.2.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.google.go-cmp-v0.5.7
##### Package representing github.com/google/go-cmp
PackageName: github.com/google/go-cmp
SPDXID: SPDXRef-Package-github.com.google.go-cmp-v0.5.7
PackageVersion: v0.5.7
PackageSupplier: Organization: github.com/google/go-cmp
PackageDownloadLocation: https://proxy.golang.org/github.com/google/go-cmp/@v/v0.5.7.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.google.go-containerregistry-v0.8.1-0.20220216220642-00c59d91847c
##### Package representing github.com/google/go-containerregistry
PackageName: github.com/google/go-containerregistry
SPDXID: SPDXRef-Package-github.com.google.go-containerregistry-v0.8.1-0.20220216220642-00c59d91847c
PackageVersion: v0.8.1-0.20220216220642-00c59d91847c
PackageSupplier: Organization: github.com/google/go-containerregistry
PackageDownloadLocation: https://proxy.golang.org/github.com/google/go-containerregistry/@v/v0.8.1-0.20220216220642-00c59d91847c.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.google.go-containerregistry.pkg.authn.k8schain-v0.0.0-20220328141311-efc62d802606
##### Package representing github.com/google/go-containerregistry/pkg/authn/k8schain
PackageName: github.com/google/go-containerregistry/pkg/authn/k8schain
SPDXID: SPDXRef-Package-github.com.google.go-containerregistry.pkg.authn.k8schain-v0.0.0-20220328141311-efc62d802606
PackageVersion: v0.0.0-20220328141311-efc62d802606
PackageSupplier: Organization: github.com/google/go-containerregistry/pkg/authn/k8schain
PackageDownloadLocation: https://proxy.golang.org/github.com/google/go-containerregistry/pkg/authn/k8schain/@v/v0.0.0-20220328141311-efc62d802606.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.google.go-containerregistry.pkg.authn.kubernetes-v0.0.0-20220301182634-bfe2ffc6b6bd
##### Package representing github.com/google/go-containerregistry/pkg/authn/kubernetes
PackageName: github.com/google/go-containerregistry/pkg/authn/kubernetes
SPDXID: SPDXRef-Package-github.com.google.go-containerregistry.pkg.authn.kubernetes-v0.0.0-20220301182634-bfe2ffc6b6bd
PackageVersion: v0.0.0-20220301182634-bfe2ffc6b6bd
PackageSupplier: Organization: github.com/google/go-containerregistry/pkg/authn/kubernetes
PackageDownloadLocation: https://proxy.golang.org/github.com/google/go-containerregistry/pkg/authn/kubernetes/@v/v0.0.0-20220301182634-bfe2ffc6b6bd.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.google.gofuzz-v1.2.0
##### Package representing github.com/google/gofuzz
PackageName: github.com/google/gofuzz
SPDXID: SPDXRef-Package-github.com.google.gofuzz-v1.2.0
PackageVersion: v1.2.0
PackageSupplier: Organization: github.com/google/gofuzz
PackageDownloadLocation: https://proxy.golang.org/github.com/google/gofuzz/@v/v1.2.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.google.uuid-v1.3.0
##### Package representing github.com/google/uuid
PackageName: github.com/google/uuid
SPDXID: SPDXRef-Package-github.com.google.uuid-v1.3.0
PackageVersion: v1.3.0
PackageSupplier: Organization: github.com/google/uuid
PackageDownloadLocation: https://proxy.golang.org/github.com/google/uuid/@v/v1.3.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.googleapis.gnostic-v0.5.5
##### Package representing github.com/googleapis/gnostic
PackageName: github.com/googleapis/gnostic
SPDXID: SPDXRef-Package-github.com.googleapis.gnostic-v0.5.5
PackageVersion: v0.5.5
PackageSupplier: Organization: github.com/googleapis/gnostic
PackageDownloadLocation: https://proxy.golang.org/github.com/googleapis/gnostic/@v/v0.5.5.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.grpc-ecosystem.grpc-gateway-v1.16.0
##### Package representing github.com/grpc-ecosystem/grpc-gateway
PackageName: github.com/grpc-ecosystem/grpc-gateway
SPDXID: SPDXRef-Package-github.com.grpc-ecosystem.grpc-gateway-v1.16.0
PackageVersion: v1.16.0
PackageSupplier: Organization: github.com/grpc-ecosystem/grpc-gateway
PackageDownloadLocation: https://proxy.golang.org/github.com/grpc-ecosystem/grpc-gateway/@v/v1.16.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.hashicorp.errwrap-v1.0.0
##### Package representing github.com/hashicorp/errwrap
PackageName: github.com/hashicorp/errwrap
SPDXID: SPDXRef-Package-github.com.hashicorp.errwrap-v1.0.0
PackageVersion: v1.0.0
PackageSupplier: Organization: github.com/hashicorp/errwrap
PackageDownloadLocation: https://proxy.golang.org/github.com/hashicorp/errwrap/@v/v1.0.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.hashicorp.go-multierror-v1.1.1
##### Package representing github.com/hashicorp/go-multierror
PackageName: github.com/hashicorp/go-multierror
SPDXID: SPDXRef-Package-github.com.hashicorp.go-multierror-v1.1.1
PackageVersion: v1.1.1
PackageSupplier: Organization: github.com/hashicorp/go-multierror
PackageDownloadLocation: https://proxy.golang.org/github.com/hashicorp/go-multierror/@v/v1.1.1.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.hashicorp.golang-lru-v0.5.4
##### Package representing github.com/hashicorp/golang-lru
PackageName: github.com/hashicorp/golang-lru
SPDXID: SPDXRef-Package-github.com.hashicorp.golang-lru-v0.5.4
PackageVersion: v0.5.4
PackageSupplier: Organization: github.com/hashicorp/golang-lru
PackageDownloadLocation: https://proxy.golang.org/github.com/hashicorp/golang-lru/@v/v0.5.4.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.imdario.mergo-v0.3.12
##### Package representing github.com/imdario/mergo
PackageName: github.com/imdario/mergo
SPDXID: SPDXRef-Package-github.com.imdario.mergo-v0.3.12
PackageVersion: v0.3.12
PackageSupplier: Organization: github.com/imdario/mergo
PackageDownloadLocation: https://proxy.golang.org/github.com/imdario/mergo/@v/v0.3.12.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.jmespath.go-jmespath-v0.4.0
##### Package representing github.com/jmespath/go-jmespath
PackageName: github.com/jmespath/go-jmespath
SPDXID: SPDXRef-Package-github.com.jmespath.go-jmespath-v0.4.0
PackageVersion: v0.4.0
PackageSupplier: Organization: github.com/jmespath/go-jmespath
PackageDownloadLocation: https://proxy.golang.org/github.com/jmespath/go-jmespath/@v/v0.4.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.josharian.intern-v1.0.0
##### Package representing github.com/josharian/intern
PackageName: github.com/josharian/intern
SPDXID: SPDXRef-Package-github.com.josharian.intern-v1.0.0
PackageVersion: v1.0.0
PackageSupplier: Organization: github.com/josharian/intern
PackageDownloadLocation: https://proxy.golang.org/github.com/josharian/intern/@v/v1.0.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.json-iterator.go-v1.1.12
##### Package representing github.com/json-iterator/go
PackageName: github.com/json-iterator/go
SPDXID: SPDXRef-Package-github.com.json-iterator.go-v1.1.12
PackageVersion: v1.1.12
PackageSupplier: Organization: github.com/json-iterator/go
PackageDownloadLocation: https://proxy.golang.org/github.com/json-iterator/go/@v/v1.1.12.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.kelseyhightower.envconfig-v1.4.0
##### Package representing github.com/kelseyhightower/envconfig
PackageName: github.com/kelseyhightower/envconfig
SPDXID: SPDXRef-Package-github.com.kelseyhightower.envconfig-v1.4.0
PackageVersion: v1.4.0
PackageSupplier: Organization: github.com/kelseyhightower/envconfig
PackageDownloadLocation: https://proxy.golang.org/github.com/kelseyhightower/envconfig/@v/v1.4.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.mailru.easyjson-v0.7.7
##### Package representing github.com/mailru/easyjson
PackageName: github.com/mailru/easyjson
SPDXID: SPDXRef-Package-github.com.mailru.easyjson-v0.7.7
PackageVersion: v0.7.7
PackageSupplier: Organization: github.com/mailru/easyjson
PackageDownloadLocation: https://proxy.golang.org/github.com/mailru/easyjson/@v/v0.7.7.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.matttproud.golang_protobuf_extensions-v1.0.2-0.20181231171920-c182affec369
##### Package representing github.com/matttproud/golang_protobuf_extensions
PackageName: github.com/matttproud/golang_protobuf_extensions
SPDXID: SPDXRef-Package-github.com.matttproud.golang_protobuf_extensions-v1.0.2-0.20181231171920-c182affec369
PackageVersion: v1.0.2-0.20181231171920-c182affec369
PackageSupplier: Organization: github.com/matttproud/golang_protobuf_extensions
PackageDownloadLocation: https://proxy.golang.org/github.com/matttproud/golang_protobuf_extensions/@v/v1.0.2-0.20181231171920-c182affec369.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.mitchellh.go-homedir-v1.1.0
##### Package representing github.com/mitchellh/go-homedir
PackageName: github.com/mitchellh/go-homedir
SPDXID: SPDXRef-Package-github.com.mitchellh.go-homedir-v1.1.0
PackageVersion: v1.1.0
PackageSupplier: Organization: github.com/mitchellh/go-homedir
PackageDownloadLocation: https://proxy.golang.org/github.com/mitchellh/go-homedir/@v/v1.1.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.modern-go.concurrent-v0.0.0-20180306012644-bacd9c7ef1dd
##### Package representing github.com/modern-go/concurrent
PackageName: github.com/modern-go/concurrent
SPDXID: SPDXRef-Package-github.com.modern-go.concurrent-v0.0.0-20180306012644-bacd9c7ef1dd
PackageVersion: v0.0.0-20180306012644-bacd9c7ef1dd
PackageSupplier: Organization: github.com/modern-go/concurrent
PackageDownloadLocation: https://proxy.golang.org/github.com/modern-go/concurrent/@v/v0.0.0-20180306012644-bacd9c7ef1dd.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.modern-go.reflect2-v1.0.2
##### Package representing github.com/modern-go/reflect2
PackageName: github.com/modern-go/reflect2
SPDXID: SPDXRef-Package-github.com.modern-go.reflect2-v1.0.2
PackageVersion: v1.0.2
PackageSupplier: Organization: github.com/modern-go/reflect2
PackageDownloadLocation: https://proxy.golang.org/github.com/modern-go/reflect2/@v/v1.0.2.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.opencontainers.go-digest-v1.0.0
##### Package representing github.com/opencontainers/go-digest
PackageName: github.com/opencontainers/go-digest
SPDXID: SPDXRef-Package-github.com.opencontainers.go-digest-v1.0.0
PackageVersion: v1.0.0
PackageSupplier: Organization: github.com/opencontainers/go-digest
PackageDownloadLocation: https://proxy.golang.org/github.com/opencontainers/go-digest/@v/v1.0.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.opencontainers.image-spec-v1.0.3-0.20220114050600-8b9d41f48198
##### Package representing github.com/opencontainers/image-spec
PackageName: github.com/opencontainers/image-spec
SPDXID: SPDXRef-Package-github.com.opencontainers.image-spec-v1.0.3-0.20220114050600-8b9d41f48198
PackageVersion: v1.0.3-0.20220114050600-8b9d41f48198
PackageSupplier: Organization: github.com/opencontainers/image-spec
PackageDownloadLocation: https://proxy.golang.org/github.com/opencontainers/image-spec/@v/v1.0.3-0.20220114050600-8b9d41f48198.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.pkg.errors-v0.9.1
##### Package representing github.com/pkg/errors
PackageName: github.com/pkg/errors
SPDXID: SPDXRef-Package-github.com.pkg.errors-v0.9.1
PackageVersion: v0.9.1
PackageSupplier: Organization: github.com/pkg/errors
PackageDownloadLocation: https://proxy.golang.org/github.com/pkg/errors/@v/v0.9.1.zip
FilesAnalyzed: false
PackageChecksum: SHA256: 14404bc75cd2db5e28c298f2eeab017a2c5b51192e850030acae54c0b193c2de
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.prometheus.client_golang-v1.11.1
##### Package representing github.com/prometheus/client_golang
PackageName: github.com/prometheus/client_golang
SPDXID: SPDXRef-Package-github.com.prometheus.client_golang-v1.11.1
PackageVersion: v1.11.1
PackageSupplier: Organization: github.com/prometheus/client_golang
PackageDownloadLocation: https://proxy.golang.org/github.com/prometheus/client_golang/@v/v1.11.1.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.prometheus.client_model-v0.2.0
##### Package representing github.com/prometheus/client_model
PackageName: github.com/prometheus/client_model
SPDXID: SPDXRef-Package-github.com.prometheus.client_model-v0.2.0
PackageVersion: v0.2.0
PackageSupplier: Organization: github.com/prometheus/client_model
PackageDownloadLocation: https://proxy.golang.org/github.com/prometheus/client_model/@v/v0.2.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.prometheus.common-v0.32.1
##### Package representing github.com/prometheus/common
PackageName: github.com/prometheus/common
SPDXID: SPDXRef-Package-github.com.prometheus.common-v0.32.1
PackageVersion: v0.32.1
PackageSupplier: Organization: github.com/prometheus/common
PackageDownloadLocation: https://proxy.golang.org/github.com/prometheus/common/@v/v0.32.1.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.prometheus.procfs-v0.6.0
##### Package representing github.com/prometheus/procfs
PackageName: github.com/prometheus/procfs
SPDXID: SPDXRef-Package-github.com.prometheus.procfs-v0.6.0
PackageVersion: v0.6.0
PackageSupplier: Organization: github.com/prometheus/procfs
PackageDownloadLocation: https://proxy.golang.org/github.com/prometheus/procfs/@v/v0.6.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.prometheus.statsd_exporter-v0.21.0
##### Package representing github.com/prometheus/statsd_exporter
PackageName: github.com/prometheus/statsd_exporter
SPDXID: SPDXRef-Package-github.com.prometheus.statsd_exporter-v0.21.0
PackageVersion: v0.21.0
PackageSupplier: Organization: github.com/prometheus/statsd_exporter
PackageDownloadLocation: https://proxy.golang.org/github.com/prometheus/statsd_exporter/@v/v0.21.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.sirupsen.logrus-v1.8.1
##### Package representing github.com/sirupsen/logrus
PackageName: github.com/sirupsen/logrus
SPDXID: SPDXRef-Package-github.com.sirupsen.logrus-v1.8.1
PackageVersion: v1.8.1
PackageSupplier: Organization: github.com/sirupsen/logrus
PackageDownloadLocation: https://proxy.golang.org/github.com/sirupsen/logrus/@v/v1.8.1.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.spf13.pflag-v1.0.5
##### Package representing github.com/spf13/pflag
PackageName: github.com/spf13/pflag
SPDXID: SPDXRef-Package-github.com.spf13.pflag-v1.0.5
PackageVersion: v1.0.5
PackageSupplier: Organization: github.com/spf13/pflag
PackageDownloadLocation: https://proxy.golang.org/github.com/spf13/pflag/@v/v1.0.5.zip
FilesAnalyzed: false
PackageChecksum: SHA256: 8b2f951543823f56bef3216da3f76b836089e6ed3246807b7d9c370cabff2570
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-github.com.tektoncd.resolution-v0.0.0-20220331203013-e4203c70c5eb
##### Package representing github.com/tektoncd/resolution
PackageName: github.com/tektoncd/resolution
SPDXID: SPDXRef-Package-github.com.tektoncd.resolution-v0.0.0-20220331203013-e4203c70c5eb
PackageVersion: v0.0.0-20220331203013-e4203c70c5eb
PackageSupplier: Organization: github.com/tektoncd/resolution
PackageDownloadLocation: https://proxy.golang.org/github.com/tektoncd/resolution/@v/v0.0.0-20220331203013-e4203c70c5eb.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-go.opencensus.io-v0.23.0
##### Package representing go.opencensus.io
PackageName: go.opencensus.io
SPDXID: SPDXRef-Package-go.opencensus.io-v0.23.0
PackageVersion: v0.23.0
PackageSupplier: Organization: go.opencensus.io
PackageDownloadLocation: https://proxy.golang.org/go.opencensus.io/@v/v0.23.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-go.uber.org.atomic-v1.9.0
##### Package representing go.uber.org/atomic
PackageName: go.uber.org/atomic
SPDXID: SPDXRef-Package-go.uber.org.atomic-v1.9.0
PackageVersion: v1.9.0
PackageSupplier: Organization: go.uber.org/atomic
PackageDownloadLocation: https://proxy.golang.org/go.uber.org/atomic/@v/v1.9.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-go.uber.org.automaxprocs-v1.4.0
##### Package representing go.uber.org/automaxprocs
PackageName: go.uber.org/automaxprocs
SPDXID: SPDXRef-Package-go.uber.org.automaxprocs-v1.4.0
PackageVersion: v1.4.0
PackageSupplier: Organization: go.uber.org/automaxprocs
PackageDownloadLocation: https://proxy.golang.org/go.uber.org/automaxprocs/@v/v1.4.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-go.uber.org.multierr-v1.7.0
##### Package representing go.uber.org/multierr
PackageName: go.uber.org/multierr
SPDXID: SPDXRef-Package-go.uber.org.multierr-v1.7.0
PackageVersion: v1.7.0
PackageSupplier: Organization: go.uber.org/multierr
PackageDownloadLocation: https://proxy.golang.org/go.uber.org/multierr/@v/v1.7.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-go.uber.org.zap-v1.19.1
##### Package representing go.uber.org/zap
PackageName: go.uber.org/zap
SPDXID: SPDXRef-Package-go.uber.org.zap-v1.19.1
PackageVersion: v1.19.1
PackageSupplier: Organization: go.uber.org/zap
PackageDownloadLocation: https://proxy.golang.org/go.uber.org/zap/@v/v1.19.1.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-golang.org.x.crypto-v0.0.0-20220214200702-86341886e292
##### Package representing golang.org/x/crypto
PackageName: golang.org/x/crypto
SPDXID: SPDXRef-Package-golang.org.x.crypto-v0.0.0-20220214200702-86341886e292
PackageVersion: v0.0.0-20220214200702-86341886e292
PackageSupplier: Organization: golang.org/x/crypto
PackageDownloadLocation: https://proxy.golang.org/golang.org/x/crypto/@v/v0.0.0-20220214200702-86341886e292.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-golang.org.x.net-v0.0.0-20220225172249-27dd8689420f
##### Package representing golang.org/x/net
PackageName: golang.org/x/net
SPDXID: SPDXRef-Package-golang.org.x.net-v0.0.0-20220225172249-27dd8689420f
PackageVersion: v0.0.0-20220225172249-27dd8689420f
PackageSupplier: Organization: golang.org/x/net
PackageDownloadLocation: https://proxy.golang.org/golang.org/x/net/@v/v0.0.0-20220225172249-27dd8689420f.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-golang.org.x.oauth2-v0.0.0-20220223155221-ee480838109b
##### Package representing golang.org/x/oauth2
PackageName: golang.org/x/oauth2
SPDXID: SPDXRef-Package-golang.org.x.oauth2-v0.0.0-20220223155221-ee480838109b
PackageVersion: v0.0.0-20220223155221-ee480838109b
PackageSupplier: Organization: golang.org/x/oauth2
PackageDownloadLocation: https://proxy.golang.org/golang.org/x/oauth2/@v/v0.0.0-20220223155221-ee480838109b.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-golang.org.x.sync-v0.0.0-20210220032951-036812b2e83c
##### Package representing golang.org/x/sync
PackageName: golang.org/x/sync
SPDXID: SPDXRef-Package-golang.org.x.sync-v0.0.0-20210220032951-036812b2e83c
PackageVersion: v0.0.0-20210220032951-036812b2e83c
PackageSupplier: Organization: golang.org/x/sync
PackageDownloadLocation: https://proxy.golang.org/golang.org/x/sync/@v/v0.0.0-20210220032951-036812b2e83c.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-golang.org.x.sys-v0.0.0-20220227234510-4e6760a101f9
##### Package representing golang.org/x/sys
PackageName: golang.org/x/sys
SPDXID: SPDXRef-Package-golang.org.x.sys-v0.0.0-20220227234510-4e6760a101f9
PackageVersion: v0.0.0-20220227234510-4e6760a101f9
PackageSupplier: Organization: golang.org/x/sys
PackageDownloadLocation: https://proxy.golang.org/golang.org/x/sys/@v/v0.0.0-20220227234510-4e6760a101f9.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-golang.org.x.term-v0.0.0-20210927222741-03fcf44c2211
##### Package representing golang.org/x/term
PackageName: golang.org/x/term
SPDXID: SPDXRef-Package-golang.org.x.term-v0.0.0-20210927222741-03fcf44c2211
PackageVersion: v0.0.0-20210927222741-03fcf44c2211
PackageSupplier: Organization: golang.org/x/term
PackageDownloadLocation: https://proxy.golang.org/golang.org/x/term/@v/v0.0.0-20210927222741-03fcf44c2211.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-golang.org.x.text-v0.3.7
##### Package representing golang.org/x/text
PackageName: golang.org/x/text
SPDXID: SPDXRef-Package-golang.org.x.text-v0.3.7
PackageVersion: v0.3.7
PackageSupplier: Organization: golang.org/x/text
PackageDownloadLocation: https://proxy.golang.org/golang.org/x/text/@v/v0.3.7.zip
FilesAnalyzed: false
PackageChecksum: SHA256: a25a70bcfd8a69c5b5656bec47bb90868c9362f280ba97d0ad118114cdf9d869
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-golang.org.x.time-v0.0.0-20220224211638-0e9765cccd65
##### Package representing golang.org/x/time
PackageName: golang.org/x/time
SPDXID: SPDXRef-Package-golang.org.x.time-v0.0.0-20220224211638-0e9765cccd65
PackageVersion: v0.0.0-20220224211638-0e9765cccd65
PackageSupplier: Organization: golang.org/x/time
PackageDownloadLocation: https://proxy.golang.org/golang.org/x/time/@v/v0.0.0-20220224211638-0e9765cccd65.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-gomodules.xyz.jsonpatch.v2-v2.2.0
##### Package representing gomodules.xyz/jsonpatch/v2
PackageName: gomodules.xyz/jsonpatch/v2
SPDXID: SPDXRef-Package-gomodules.xyz.jsonpatch.v2-v2.2.0
PackageVersion: v2.2.0
PackageSupplier: Organization: gomodules.xyz/jsonpatch/v2
PackageDownloadLocation: https://proxy.golang.org/gomodules.xyz/jsonpatch/v2/@v/v2.2.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-google.golang.org.api-v0.70.0
##### Package representing google.golang.org/api
PackageName: google.golang.org/api
SPDXID: SPDXRef-Package-google.golang.org.api-v0.70.0
PackageVersion: v0.70.0
PackageSupplier: Organization: google.golang.org/api
PackageDownloadLocation: https://proxy.golang.org/google.golang.org/api/@v/v0.70.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-google.golang.org.genproto-v0.0.0-20220303160752-862486edd9cc
##### Package representing google.golang.org/genproto
PackageName: google.golang.org/genproto
SPDXID: SPDXRef-Package-google.golang.org.genproto-v0.0.0-20220303160752-862486edd9cc
PackageVersion: v0.0.0-20220303160752-862486edd9cc
PackageSupplier: Organization: google.golang.org/genproto
PackageDownloadLocation: https://proxy.golang.org/google.golang.org/genproto/@v/v0.0.0-20220303160752-862486edd9cc.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-google.golang.org.grpc-v1.44.0
##### Package representing google.golang.org/grpc
PackageName: google.golang.org/grpc
SPDXID: SPDXRef-Package-google.golang.org.grpc-v1.44.0
PackageVersion: v1.44.0
PackageSupplier: Organization: google.golang.org/grpc
PackageDownloadLocation: https://proxy.golang.org/google.golang.org/grpc/@v/v1.44.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-google.golang.org.protobuf-v1.27.1
##### Package representing google.golang.org/protobuf
PackageName: google.golang.org/protobuf
SPDXID: SPDXRef-Package-google.golang.org.protobuf-v1.27.1
PackageVersion: v1.27.1
PackageSupplier: Organization: google.golang.org/protobuf
PackageDownloadLocation: https://proxy.golang.org/google.golang.org/protobuf/@v/v1.27.1.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-gopkg.in.inf.v0-v0.9.1
##### Package representing gopkg.in/inf.v0
PackageName: gopkg.in/inf.v0
SPDXID: SPDXRef-Package-gopkg.in.inf.v0-v0.9.1
PackageVersion: v0.9.1
PackageSupplier: Organization: gopkg.in/inf.v0
PackageDownloadLocation: https://proxy.golang.org/gopkg.in/inf.v0/@v/v0.9.1.zip
FilesAnalyzed: false
PackageChecksum: SHA256: ef73390a86728b764b30ec83950874df50b1e8df4d0c9d95bdf97be840c08037
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-gopkg.in.yaml.v2-v2.4.0
##### Package representing gopkg.in/yaml.v2
PackageName: gopkg.in/yaml.v2
SPDXID: SPDXRef-Package-gopkg.in.yaml.v2-v2.4.0
PackageVersion: v2.4.0
PackageSupplier: Organization: gopkg.in/yaml.v2
PackageDownloadLocation: https://proxy.golang.org/gopkg.in/yaml.v2/@v/v2.4.0.zip
FilesAnalyzed: false
PackageChecksum: SHA256: 0fcc60c04098ec262fc7e6369f8b01cfddc99fd251bf1762cb2a3c0937ee29a6
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-gopkg.in.yaml.v3-v3.0.0-20210107192922-496545a6307b
##### Package representing gopkg.in/yaml.v3
PackageName: gopkg.in/yaml.v3
SPDXID: SPDXRef-Package-gopkg.in.yaml.v3-v3.0.0-20210107192922-496545a6307b
PackageVersion: v3.0.0-20210107192922-496545a6307b
PackageSupplier: Organization: gopkg.in/yaml.v3
PackageDownloadLocation: https://proxy.golang.org/gopkg.in/yaml.v3/@v/v3.0.0-20210107192922-496545a6307b.zip
FilesAnalyzed: false
PackageChecksum: SHA256: 87ca83a2d6843ee2404eb3265b4e0d0b083bbf6d9a1c7dbcc30a5ab9484af4ea
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-k8s.io.api-v0.23.5
##### Package representing k8s.io/api
PackageName: k8s.io/api
SPDXID: SPDXRef-Package-k8s.io.api-v0.23.5
PackageVersion: v0.23.5
PackageSupplier: Organization: k8s.io/api
PackageDownloadLocation: https://proxy.golang.org/k8s.io/api/@v/v0.23.5.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-k8s.io.apiextensions-apiserver-v0.23.4
##### Package representing k8s.io/apiextensions-apiserver
PackageName: k8s.io/apiextensions-apiserver
SPDXID: SPDXRef-Package-k8s.io.apiextensions-apiserver-v0.23.4
PackageVersion: v0.23.4
PackageSupplier: Organization: k8s.io/apiextensions-apiserver
PackageDownloadLocation: https://proxy.golang.org/k8s.io/apiextensions-apiserver/@v/v0.23.4.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-k8s.io.apimachinery-v0.23.5
##### Package representing k8s.io/apimachinery
PackageName: k8s.io/apimachinery
SPDXID: SPDXRef-Package-k8s.io.apimachinery-v0.23.5
PackageVersion: v0.23.5
PackageSupplier: Organization: k8s.io/apimachinery
PackageDownloadLocation: https://proxy.golang.org/k8s.io/apimachinery/@v/v0.23.5.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-k8s.io.client-go-v0.23.5
##### Package representing k8s.io/client-go
PackageName: k8s.io/client-go
SPDXID: SPDXRef-Package-k8s.io.client-go-v0.23.5
PackageVersion: v0.23.5
PackageSupplier: Organization: k8s.io/client-go
PackageDownloadLocation: https://proxy.golang.org/k8s.io/client-go/@v/v0.23.5.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-k8s.io.klog.v2-v2.60.1-0.20220317184644-43cc75f9ae89
##### Package representing k8s.io/klog/v2
PackageName: k8s.io/klog/v2
SPDXID: SPDXRef-Package-k8s.io.klog.v2-v2.60.1-0.20220317184644-43cc75f9ae89
PackageVersion: v2.60.1-0.20220317184644-43cc75f9ae89
PackageSupplier: Organization: k8s.io/klog/v2
PackageDownloadLocation: https://proxy.golang.org/k8s.io/klog/v2/@v/v2.60.1-0.20220317184644-43cc75f9ae89.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-k8s.io.kube-openapi-v0.0.0-20220124234850-424119656bbf
##### Package representing k8s.io/kube-openapi
PackageName: k8s.io/kube-openapi
SPDXID: SPDXRef-Package-k8s.io.kube-openapi-v0.0.0-20220124234850-424119656bbf
PackageVersion: v0.0.0-20220124234850-424119656bbf
PackageSupplier: Organization: k8s.io/kube-openapi
PackageDownloadLocation: https://proxy.golang.org/k8s.io/kube-openapi/@v/v0.0.0-20220124234850-424119656bbf.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-k8s.io.utils-v0.0.0-20220210201930-3a6ce19ff2f9
##### Package representing k8s.io/utils
PackageName: k8s.io/utils
SPDXID: SPDXRef-Package-k8s.io.utils-v0.0.0-20220210201930-3a6ce19ff2f9
PackageVersion: v0.0.0-20220210201930-3a6ce19ff2f9
PackageSupplier: Organization: k8s.io/utils
PackageDownloadLocation: https://proxy.golang.org/k8s.io/utils/@v/v0.0.0-20220210201930-3a6ce19ff2f9.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-knative.dev.pkg-v0.0.0-20220329144915-0a1ec2e0d46c
##### Package representing knative.dev/pkg
PackageName: knative.dev/pkg
SPDXID: SPDXRef-Package-knative.dev.pkg-v0.0.0-20220329144915-0a1ec2e0d46c
PackageVersion: v0.0.0-20220329144915-0a1ec2e0d46c
PackageSupplier: Organization: knative.dev/pkg
PackageDownloadLocation: https://proxy.golang.org/knative.dev/pkg/@v/v0.0.0-20220329144915-0a1ec2e0d46c.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-sigs.k8s.io.json-v0.0.0-20211208200746-9f7c6b3444d2
##### Package representing sigs.k8s.io/json
PackageName: sigs.k8s.io/json
SPDXID: SPDXRef-Package-sigs.k8s.io.json-v0.0.0-20211208200746-9f7c6b3444d2
PackageVersion: v0.0.0-20211208200746-9f7c6b3444d2
PackageSupplier: Organization: sigs.k8s.io/json
PackageDownloadLocation: https://proxy.golang.org/sigs.k8s.io/json/@v/v0.0.0-20211208200746-9f7c6b3444d2.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-sigs.k8s.io.structured-merge-diff.v4-v4.2.1
##### Package representing sigs.k8s.io/structured-merge-diff/v4
PackageName: sigs.k8s.io/structured-merge-diff/v4
SPDXID: SPDXRef-Package-sigs.k8s.io.structured-merge-diff.v4-v4.2.1
PackageVersion: v4.2.1
PackageSupplier: Organization: sigs.k8s.io/structured-merge-diff/v4
PackageDownloadLocation: https://proxy.golang.org/sigs.k8s.io/structured-merge-diff/v4/@v/v4.2.1.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Relationship: SPDXRef-Package-github.com.tektoncd.pipeline DEPENDS_ON SPDXRef-Package-sigs.k8s.io.yaml-v1.3.0
##### Package representing sigs.k8s.io/yaml
PackageName: sigs.k8s.io/yaml
SPDXID: SPDXRef-Package-sigs.k8s.io.yaml-v1.3.0
PackageVersion: v1.3.0
PackageSupplier: Organization: sigs.k8s.io/yaml
PackageDownloadLocation: https://proxy.golang.org/sigs.k8s.io/yaml/@v/v1.3.0.zip
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseComments: NOASSERTION
PackageComment: NOASSERTION
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment