Last active
October 28, 2021 05:25
-
-
Save imjasonh/d5e7c397ada62e8ac4454c5bec2257cf to your computer and use it in GitHub Desktop.
demo of `ko deps --spdx`: https://github.com/google/ko/compare/main...imjasonh:spdx
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| $ go run ./ deps $IMAGE --spdx | |
| SPDXVersion: SPDX-2.2 | |
| DataLicense: CC0-1.0 | |
| SPDXID: SPDXRef-DOCUMENT | |
| DocumentName: github.com/google/ko | |
| DocumentNamespace: http://spdx.org/spdxpackages/github.com/google/ko-999a6226-9c5c-4f6d-a09f-2bb7dde5dab3 | |
| Creator: Tool: ko (devel) | |
| Created: 2021-09-28T16:00:41Z | |
| ##### Package representing the github.com/google/ko | |
| PackageName: github.com/google/ko | |
| SPDXID: SPDXRef-Package-github.com.google.ko | |
| PackageSupplier: Organization: github.com/google/ko | |
| PackageDownloadLocation: git+https://github.com/google/ko | |
| FilesAnalyzed: false | |
| PackageHomePage: https://github.com/google/ko | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION | |
| Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-Package-github.com.google.ko | |
| Relationship: SPDXRef-Package-github.com.google.ko DEPENDS_ON SPDXRef-Package-github.com.BurntSushi.toml-v0.3.1 | |
| Relationship: SPDXRef-Package-github.com.google.ko DEPENDS_ON SPDXRef-Package-github.com.alessio.shellescape-v1.4.1 | |
| Relationship: SPDXRef-Package-github.com.google.ko DEPENDS_ON SPDXRef-Package-github.com.containerd.containerd-v1.5.2 | |
| Relationship: SPDXRef-Package-github.com.google.ko DEPENDS_ON SPDXRef-Package-github.com.containerd.stargz-snapshotter.estargz-v0.8.0 | |
| Relationship: SPDXRef-Package-github.com.google.ko DEPENDS_ON SPDXRef-Package-github.com.docker.cli-v20.10.7 | |
| Relationship: SPDXRef-Package-github.com.google.ko DEPENDS_ON SPDXRef-Package-github.com.docker.distribution-v2.7.1 | |
| Relationship: SPDXRef-Package-github.com.google.ko DEPENDS_ON SPDXRef-Package-github.com.docker.docker-v20.10.8 | |
| Relationship: SPDXRef-Package-github.com.google.ko DEPENDS_ON SPDXRef-Package-github.com.docker.docker-credential-helpers-v0.6.3 | |
| Relationship: SPDXRef-Package-github.com.google.ko DEPENDS_ON SPDXRef-Package-github.com.docker.go-connections-v0.4.0 | |
| Relationship: SPDXRef-Package-github.com.google.ko DEPENDS_ON SPDXRef-Package-github.com.docker.go-units-v0.4.0 | |
| Relationship: SPDXRef-Package-github.com.google.ko DEPENDS_ON SPDXRef-Package-github.com.dprotaso.go-yit-v0.0.0-20191028211022-135eb7262960 | |
| Relationship: SPDXRef-Package-github.com.google.ko DEPENDS_ON SPDXRef-Package-github.com.evanphx.json-patch.v5-v5.5.0 | |
| Relationship: SPDXRef-Package-github.com.google.ko DEPENDS_ON SPDXRef-Package-github.com.fsnotify.fsnotify-v1.5.1 | |
| Relationship: SPDXRef-Package-github.com.google.ko DEPENDS_ON SPDXRef-Package-github.com.go-logr.logr-v0.4.0 | |
| Relationship: SPDXRef-Package-github.com.google.ko DEPENDS_ON SPDXRef-Package-github.com.gogo.protobuf-v1.3.2 | |
| Relationship: SPDXRef-Package-github.com.google.ko DEPENDS_ON SPDXRef-Package-github.com.golang.protobuf-v1.5.2 | |
| Relationship: SPDXRef-Package-github.com.google.ko DEPENDS_ON SPDXRef-Package-github.com.google.go-cmp-v0.5.6 | |
| Relationship: SPDXRef-Package-github.com.google.ko DEPENDS_ON SPDXRef-Package-github.com.google.go-containerregistry-v0.6.0 | |
| Relationship: SPDXRef-Package-github.com.google.ko DEPENDS_ON SPDXRef-Package-github.com.google.uuid-v1.2.0 | |
| Relationship: SPDXRef-Package-github.com.google.ko DEPENDS_ON SPDXRef-Package-github.com.hashicorp.hcl-v1.0.0 | |
| Relationship: SPDXRef-Package-github.com.google.ko DEPENDS_ON SPDXRef-Package-github.com.klauspost.compress-v1.13.5 | |
| Relationship: SPDXRef-Package-github.com.google.ko DEPENDS_ON SPDXRef-Package-github.com.magiconair.properties-v1.8.5 | |
| Relationship: SPDXRef-Package-github.com.google.ko DEPENDS_ON SPDXRef-Package-github.com.mattmoor.dep-notify-v0.0.0-20190205035814-a45dec370a17 | |
| Relationship: SPDXRef-Package-github.com.google.ko DEPENDS_ON SPDXRef-Package-github.com.mattn.go-isatty-v0.0.13 | |
| Relationship: SPDXRef-Package-github.com.google.ko DEPENDS_ON SPDXRef-Package-github.com.mitchellh.mapstructure-v1.4.2 | |
| Relationship: SPDXRef-Package-github.com.google.ko DEPENDS_ON SPDXRef-Package-github.com.opencontainers.go-digest-v1.0.0 | |
| Relationship: SPDXRef-Package-github.com.google.ko DEPENDS_ON SPDXRef-Package-github.com.opencontainers.image-spec-v1.0.2-0.20210730191737-8e42a01fb1b7 | |
| Relationship: SPDXRef-Package-github.com.google.ko DEPENDS_ON SPDXRef-Package-github.com.pelletier.go-toml-v1.9.4 | |
| Relationship: SPDXRef-Package-github.com.google.ko DEPENDS_ON SPDXRef-Package-github.com.pkg.errors-v0.9.1 | |
| Relationship: SPDXRef-Package-github.com.google.ko DEPENDS_ON SPDXRef-Package-github.com.sirupsen.logrus-v1.8.1 | |
| Relationship: SPDXRef-Package-github.com.google.ko DEPENDS_ON SPDXRef-Package-github.com.spf13.afero-v1.6.0 | |
| Relationship: SPDXRef-Package-github.com.google.ko DEPENDS_ON SPDXRef-Package-github.com.spf13.cast-v1.4.1 | |
| Relationship: SPDXRef-Package-github.com.google.ko DEPENDS_ON SPDXRef-Package-github.com.spf13.cobra-v1.2.1 | |
| Relationship: SPDXRef-Package-github.com.google.ko DEPENDS_ON SPDXRef-Package-github.com.spf13.jwalterweatherman-v1.1.0 | |
| Relationship: SPDXRef-Package-github.com.google.ko DEPENDS_ON SPDXRef-Package-github.com.spf13.pflag-v1.0.5 | |
| Relationship: SPDXRef-Package-github.com.google.ko DEPENDS_ON SPDXRef-Package-github.com.spf13.viper-v1.9.0 | |
| Relationship: SPDXRef-Package-github.com.google.ko DEPENDS_ON SPDXRef-Package-github.com.subosito.gotenv-v1.2.0 | |
| Relationship: SPDXRef-Package-github.com.google.ko DEPENDS_ON SPDXRef-Package-golang.org.x.mod-v0.4.2 | |
| Relationship: SPDXRef-Package-github.com.google.ko DEPENDS_ON SPDXRef-Package-golang.org.x.net-v0.0.0-20210805182204-aaa1db679c0d | |
| Relationship: SPDXRef-Package-github.com.google.ko DEPENDS_ON SPDXRef-Package-golang.org.x.sync-v0.0.0-20210220032951-036812b2e83c | |
| Relationship: SPDXRef-Package-github.com.google.ko DEPENDS_ON SPDXRef-Package-golang.org.x.sys-v0.0.0-20210823070655-63515b42dcdf | |
| Relationship: SPDXRef-Package-github.com.google.ko DEPENDS_ON SPDXRef-Package-golang.org.x.text-v0.3.6 | |
| Relationship: SPDXRef-Package-github.com.google.ko DEPENDS_ON SPDXRef-Package-golang.org.x.tools-v0.1.6 | |
| Relationship: SPDXRef-Package-github.com.google.ko DEPENDS_ON SPDXRef-Package-golang.org.x.xerrors-v0.0.0-20200804184101-5ec99f83aff1 | |
| Relationship: SPDXRef-Package-github.com.google.ko DEPENDS_ON SPDXRef-Package-google.golang.org.genproto-v0.0.0-20210828152312-66f60bf46e71 | |
| Relationship: SPDXRef-Package-github.com.google.ko DEPENDS_ON SPDXRef-Package-google.golang.org.grpc-v1.40.0 | |
| Relationship: SPDXRef-Package-github.com.google.ko DEPENDS_ON SPDXRef-Package-google.golang.org.protobuf-v1.27.1 | |
| Relationship: SPDXRef-Package-github.com.google.ko DEPENDS_ON SPDXRef-Package-gopkg.in.ini.v1-v1.63.2 | |
| Relationship: SPDXRef-Package-github.com.google.ko DEPENDS_ON SPDXRef-Package-gopkg.in.yaml.v2-v2.4.0 | |
| Relationship: SPDXRef-Package-github.com.google.ko DEPENDS_ON SPDXRef-Package-gopkg.in.yaml.v3-v3.0.0-20210107192922-496545a6307b | |
| Relationship: SPDXRef-Package-github.com.google.ko DEPENDS_ON SPDXRef-Package-k8s.io.apimachinery-v0.22.2 | |
| Relationship: SPDXRef-Package-github.com.google.ko DEPENDS_ON SPDXRef-Package-k8s.io.klog.v2-v2.9.0 | |
| Relationship: SPDXRef-Package-github.com.google.ko DEPENDS_ON SPDXRef-Package-sigs.k8s.io.kind-v0.11.1 | |
| Relationship: SPDXRef-Package-github.com.google.ko DEPENDS_ON SPDXRef-Package-sigs.k8s.io.yaml-v1.2.0 | |
| ##### Package representing the github.com/BurntSushi/toml | |
| PackageName: github.com/BurntSushi/toml | |
| SPDXID: SPDXRef-Package-github.com.BurntSushi.toml-v0.3.1 | |
| PackageVersion: v0.3.1 | |
| PackageSupplier: Organization: github.com/BurntSushi/toml | |
| PackageDownloadLocation: git+https://github.com/BurntSushi/toml | |
| FilesAnalyzed: false | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION | |
| ##### Package representing the github.com/alessio/shellescape | |
| PackageName: github.com/alessio/shellescape | |
| SPDXID: SPDXRef-Package-github.com.alessio.shellescape-v1.4.1 | |
| PackageVersion: v1.4.1 | |
| PackageSupplier: Organization: github.com/alessio/shellescape | |
| PackageDownloadLocation: git+https://github.com/alessio/shellescape | |
| FilesAnalyzed: false | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION | |
| ##### Package representing the github.com/containerd/containerd | |
| PackageName: github.com/containerd/containerd | |
| SPDXID: SPDXRef-Package-github.com.containerd.containerd-v1.5.2 | |
| PackageVersion: v1.5.2 | |
| PackageSupplier: Organization: github.com/containerd/containerd | |
| PackageDownloadLocation: git+https://github.com/containerd/containerd | |
| FilesAnalyzed: false | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION | |
| ##### Package representing the github.com/containerd/stargz-snapshotter/estargz | |
| PackageName: github.com/containerd/stargz-snapshotter/estargz | |
| SPDXID: SPDXRef-Package-github.com.containerd.stargz-snapshotter.estargz-v0.8.0 | |
| PackageVersion: v0.8.0 | |
| PackageSupplier: Organization: github.com/containerd/stargz-snapshotter/estargz | |
| PackageDownloadLocation: git+https://github.com/containerd/stargz-snapshotter/estargz | |
| FilesAnalyzed: false | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION | |
| ##### Package representing the github.com/docker/cli | |
| PackageName: github.com/docker/cli | |
| SPDXID: SPDXRef-Package-github.com.docker.cli-v20.10.7 | |
| PackageVersion: v20.10.7 | |
| PackageSupplier: Organization: github.com/docker/cli | |
| PackageDownloadLocation: git+https://github.com/docker/cli | |
| FilesAnalyzed: false | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION | |
| ##### Package representing the github.com/docker/distribution | |
| PackageName: github.com/docker/distribution | |
| SPDXID: SPDXRef-Package-github.com.docker.distribution-v2.7.1 | |
| PackageVersion: v2.7.1 | |
| PackageSupplier: Organization: github.com/docker/distribution | |
| PackageDownloadLocation: git+https://github.com/docker/distribution | |
| FilesAnalyzed: false | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION | |
| ##### Package representing the github.com/docker/docker | |
| PackageName: github.com/docker/docker | |
| SPDXID: SPDXRef-Package-github.com.docker.docker-v20.10.8 | |
| PackageVersion: v20.10.8 | |
| PackageSupplier: Organization: github.com/docker/docker | |
| PackageDownloadLocation: git+https://github.com/docker/docker | |
| FilesAnalyzed: false | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION | |
| ##### Package representing the github.com/docker/docker-credential-helpers | |
| PackageName: github.com/docker/docker-credential-helpers | |
| SPDXID: SPDXRef-Package-github.com.docker.docker-credential-helpers-v0.6.3 | |
| PackageVersion: v0.6.3 | |
| PackageSupplier: Organization: github.com/docker/docker-credential-helpers | |
| PackageDownloadLocation: git+https://github.com/docker/docker-credential-helpers | |
| FilesAnalyzed: false | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION | |
| ##### Package representing the github.com/docker/go-connections | |
| PackageName: github.com/docker/go-connections | |
| SPDXID: SPDXRef-Package-github.com.docker.go-connections-v0.4.0 | |
| PackageVersion: v0.4.0 | |
| PackageSupplier: Organization: github.com/docker/go-connections | |
| PackageDownloadLocation: git+https://github.com/docker/go-connections | |
| FilesAnalyzed: false | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION | |
| ##### Package representing the github.com/docker/go-units | |
| PackageName: github.com/docker/go-units | |
| SPDXID: SPDXRef-Package-github.com.docker.go-units-v0.4.0 | |
| PackageVersion: v0.4.0 | |
| PackageSupplier: Organization: github.com/docker/go-units | |
| PackageDownloadLocation: git+https://github.com/docker/go-units | |
| FilesAnalyzed: false | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION | |
| ##### Package representing the github.com/dprotaso/go-yit | |
| PackageName: github.com/dprotaso/go-yit | |
| SPDXID: SPDXRef-Package-github.com.dprotaso.go-yit-v0.0.0-20191028211022-135eb7262960 | |
| PackageVersion: v0.0.0-20191028211022-135eb7262960 | |
| PackageSupplier: Organization: github.com/dprotaso/go-yit | |
| PackageDownloadLocation: git+https://github.com/dprotaso/go-yit | |
| FilesAnalyzed: false | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION | |
| ##### Package representing the github.com/evanphx/json-patch/v5 | |
| PackageName: github.com/evanphx/json-patch/v5 | |
| SPDXID: SPDXRef-Package-github.com.evanphx.json-patch.v5-v5.5.0 | |
| PackageVersion: v5.5.0 | |
| PackageSupplier: Organization: github.com/evanphx/json-patch/v5 | |
| PackageDownloadLocation: git+https://github.com/evanphx/json-patch/v5 | |
| FilesAnalyzed: false | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION | |
| ##### Package representing the github.com/fsnotify/fsnotify | |
| PackageName: github.com/fsnotify/fsnotify | |
| SPDXID: SPDXRef-Package-github.com.fsnotify.fsnotify-v1.5.1 | |
| PackageVersion: v1.5.1 | |
| PackageSupplier: Organization: github.com/fsnotify/fsnotify | |
| PackageDownloadLocation: git+https://github.com/fsnotify/fsnotify | |
| FilesAnalyzed: false | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION | |
| ##### Package representing the github.com/go-logr/logr | |
| PackageName: github.com/go-logr/logr | |
| SPDXID: SPDXRef-Package-github.com.go-logr.logr-v0.4.0 | |
| PackageVersion: v0.4.0 | |
| PackageSupplier: Organization: github.com/go-logr/logr | |
| PackageDownloadLocation: git+https://github.com/go-logr/logr | |
| FilesAnalyzed: false | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION | |
| ##### Package representing the github.com/gogo/protobuf | |
| PackageName: github.com/gogo/protobuf | |
| SPDXID: SPDXRef-Package-github.com.gogo.protobuf-v1.3.2 | |
| PackageVersion: v1.3.2 | |
| PackageSupplier: Organization: github.com/gogo/protobuf | |
| PackageDownloadLocation: git+https://github.com/gogo/protobuf | |
| FilesAnalyzed: false | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION | |
| ##### Package representing the github.com/golang/protobuf | |
| PackageName: github.com/golang/protobuf | |
| SPDXID: SPDXRef-Package-github.com.golang.protobuf-v1.5.2 | |
| PackageVersion: v1.5.2 | |
| PackageSupplier: Organization: github.com/golang/protobuf | |
| PackageDownloadLocation: git+https://github.com/golang/protobuf | |
| FilesAnalyzed: false | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION | |
| ##### Package representing the github.com/google/go-cmp | |
| PackageName: github.com/google/go-cmp | |
| SPDXID: SPDXRef-Package-github.com.google.go-cmp-v0.5.6 | |
| PackageVersion: v0.5.6 | |
| PackageSupplier: Organization: github.com/google/go-cmp | |
| PackageDownloadLocation: git+https://github.com/google/go-cmp | |
| FilesAnalyzed: false | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION | |
| ##### Package representing the github.com/google/go-containerregistry | |
| PackageName: github.com/google/go-containerregistry | |
| SPDXID: SPDXRef-Package-github.com.google.go-containerregistry-v0.6.0 | |
| PackageVersion: v0.6.0 | |
| PackageSupplier: Organization: github.com/google/go-containerregistry | |
| PackageDownloadLocation: git+https://github.com/google/go-containerregistry | |
| FilesAnalyzed: false | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION | |
| ##### Package representing the github.com/google/uuid | |
| PackageName: github.com/google/uuid | |
| SPDXID: SPDXRef-Package-github.com.google.uuid-v1.2.0 | |
| PackageVersion: v1.2.0 | |
| PackageSupplier: Organization: github.com/google/uuid | |
| PackageDownloadLocation: git+https://github.com/google/uuid | |
| FilesAnalyzed: false | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION | |
| ##### Package representing the github.com/hashicorp/hcl | |
| PackageName: github.com/hashicorp/hcl | |
| SPDXID: SPDXRef-Package-github.com.hashicorp.hcl-v1.0.0 | |
| PackageVersion: v1.0.0 | |
| PackageSupplier: Organization: github.com/hashicorp/hcl | |
| PackageDownloadLocation: git+https://github.com/hashicorp/hcl | |
| FilesAnalyzed: false | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION | |
| ##### Package representing the github.com/klauspost/compress | |
| PackageName: github.com/klauspost/compress | |
| SPDXID: SPDXRef-Package-github.com.klauspost.compress-v1.13.5 | |
| PackageVersion: v1.13.5 | |
| PackageSupplier: Organization: github.com/klauspost/compress | |
| PackageDownloadLocation: git+https://github.com/klauspost/compress | |
| FilesAnalyzed: false | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION | |
| ##### Package representing the github.com/magiconair/properties | |
| PackageName: github.com/magiconair/properties | |
| SPDXID: SPDXRef-Package-github.com.magiconair.properties-v1.8.5 | |
| PackageVersion: v1.8.5 | |
| PackageSupplier: Organization: github.com/magiconair/properties | |
| PackageDownloadLocation: git+https://github.com/magiconair/properties | |
| FilesAnalyzed: false | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION | |
| ##### Package representing the github.com/mattmoor/dep-notify | |
| PackageName: github.com/mattmoor/dep-notify | |
| SPDXID: SPDXRef-Package-github.com.mattmoor.dep-notify-v0.0.0-20190205035814-a45dec370a17 | |
| PackageVersion: v0.0.0-20190205035814-a45dec370a17 | |
| PackageSupplier: Organization: github.com/mattmoor/dep-notify | |
| PackageDownloadLocation: git+https://github.com/mattmoor/dep-notify | |
| FilesAnalyzed: false | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION | |
| ##### Package representing the github.com/mattn/go-isatty | |
| PackageName: github.com/mattn/go-isatty | |
| SPDXID: SPDXRef-Package-github.com.mattn.go-isatty-v0.0.13 | |
| PackageVersion: v0.0.13 | |
| PackageSupplier: Organization: github.com/mattn/go-isatty | |
| PackageDownloadLocation: git+https://github.com/mattn/go-isatty | |
| FilesAnalyzed: false | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION | |
| ##### Package representing the github.com/mitchellh/mapstructure | |
| PackageName: github.com/mitchellh/mapstructure | |
| SPDXID: SPDXRef-Package-github.com.mitchellh.mapstructure-v1.4.2 | |
| PackageVersion: v1.4.2 | |
| PackageSupplier: Organization: github.com/mitchellh/mapstructure | |
| PackageDownloadLocation: git+https://github.com/mitchellh/mapstructure | |
| FilesAnalyzed: false | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION | |
| ##### Package representing the github.com/opencontainers/go-digest | |
| PackageName: github.com/opencontainers/go-digest | |
| SPDXID: SPDXRef-Package-github.com.opencontainers.go-digest-v1.0.0 | |
| PackageVersion: v1.0.0 | |
| PackageSupplier: Organization: github.com/opencontainers/go-digest | |
| PackageDownloadLocation: git+https://github.com/opencontainers/go-digest | |
| FilesAnalyzed: false | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION | |
| ##### Package representing the github.com/opencontainers/image-spec | |
| PackageName: github.com/opencontainers/image-spec | |
| SPDXID: SPDXRef-Package-github.com.opencontainers.image-spec-v1.0.2-0.20210730191737-8e42a01fb1b7 | |
| PackageVersion: v1.0.2-0.20210730191737-8e42a01fb1b7 | |
| PackageSupplier: Organization: github.com/opencontainers/image-spec | |
| PackageDownloadLocation: git+https://github.com/opencontainers/image-spec | |
| FilesAnalyzed: false | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION | |
| ##### Package representing the github.com/pelletier/go-toml | |
| PackageName: github.com/pelletier/go-toml | |
| SPDXID: SPDXRef-Package-github.com.pelletier.go-toml-v1.9.4 | |
| PackageVersion: v1.9.4 | |
| PackageSupplier: Organization: github.com/pelletier/go-toml | |
| PackageDownloadLocation: git+https://github.com/pelletier/go-toml | |
| FilesAnalyzed: false | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION | |
| ##### Package representing the github.com/pkg/errors | |
| PackageName: github.com/pkg/errors | |
| SPDXID: SPDXRef-Package-github.com.pkg.errors-v0.9.1 | |
| PackageVersion: v0.9.1 | |
| PackageSupplier: Organization: github.com/pkg/errors | |
| PackageDownloadLocation: git+https://github.com/pkg/errors | |
| FilesAnalyzed: false | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION | |
| ##### Package representing the github.com/sirupsen/logrus | |
| PackageName: github.com/sirupsen/logrus | |
| SPDXID: SPDXRef-Package-github.com.sirupsen.logrus-v1.8.1 | |
| PackageVersion: v1.8.1 | |
| PackageSupplier: Organization: github.com/sirupsen/logrus | |
| PackageDownloadLocation: git+https://github.com/sirupsen/logrus | |
| FilesAnalyzed: false | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION | |
| ##### Package representing the github.com/spf13/afero | |
| PackageName: github.com/spf13/afero | |
| SPDXID: SPDXRef-Package-github.com.spf13.afero-v1.6.0 | |
| PackageVersion: v1.6.0 | |
| PackageSupplier: Organization: github.com/spf13/afero | |
| PackageDownloadLocation: git+https://github.com/spf13/afero | |
| FilesAnalyzed: false | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION | |
| ##### Package representing the github.com/spf13/cast | |
| PackageName: github.com/spf13/cast | |
| SPDXID: SPDXRef-Package-github.com.spf13.cast-v1.4.1 | |
| PackageVersion: v1.4.1 | |
| PackageSupplier: Organization: github.com/spf13/cast | |
| PackageDownloadLocation: git+https://github.com/spf13/cast | |
| FilesAnalyzed: false | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION | |
| ##### Package representing the github.com/spf13/cobra | |
| PackageName: github.com/spf13/cobra | |
| SPDXID: SPDXRef-Package-github.com.spf13.cobra-v1.2.1 | |
| PackageVersion: v1.2.1 | |
| PackageSupplier: Organization: github.com/spf13/cobra | |
| PackageDownloadLocation: git+https://github.com/spf13/cobra | |
| FilesAnalyzed: false | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION | |
| ##### Package representing the github.com/spf13/jwalterweatherman | |
| PackageName: github.com/spf13/jwalterweatherman | |
| SPDXID: SPDXRef-Package-github.com.spf13.jwalterweatherman-v1.1.0 | |
| PackageVersion: v1.1.0 | |
| PackageSupplier: Organization: github.com/spf13/jwalterweatherman | |
| PackageDownloadLocation: git+https://github.com/spf13/jwalterweatherman | |
| FilesAnalyzed: false | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION | |
| ##### Package representing the github.com/spf13/pflag | |
| PackageName: github.com/spf13/pflag | |
| SPDXID: SPDXRef-Package-github.com.spf13.pflag-v1.0.5 | |
| PackageVersion: v1.0.5 | |
| PackageSupplier: Organization: github.com/spf13/pflag | |
| PackageDownloadLocation: git+https://github.com/spf13/pflag | |
| FilesAnalyzed: false | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION | |
| ##### Package representing the github.com/spf13/viper | |
| PackageName: github.com/spf13/viper | |
| SPDXID: SPDXRef-Package-github.com.spf13.viper-v1.9.0 | |
| PackageVersion: v1.9.0 | |
| PackageSupplier: Organization: github.com/spf13/viper | |
| PackageDownloadLocation: git+https://github.com/spf13/viper | |
| FilesAnalyzed: false | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION | |
| ##### Package representing the github.com/subosito/gotenv | |
| PackageName: github.com/subosito/gotenv | |
| SPDXID: SPDXRef-Package-github.com.subosito.gotenv-v1.2.0 | |
| PackageVersion: v1.2.0 | |
| PackageSupplier: Organization: github.com/subosito/gotenv | |
| PackageDownloadLocation: git+https://github.com/subosito/gotenv | |
| FilesAnalyzed: false | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION | |
| ##### Package representing the golang.org/x/mod | |
| PackageName: golang.org/x/mod | |
| SPDXID: SPDXRef-Package-golang.org.x.mod-v0.4.2 | |
| PackageVersion: v0.4.2 | |
| PackageSupplier: Organization: golang.org/x/mod | |
| PackageDownloadLocation: git+https://golang.org/x/mod | |
| FilesAnalyzed: false | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION | |
| ##### Package representing the golang.org/x/net | |
| PackageName: golang.org/x/net | |
| SPDXID: SPDXRef-Package-golang.org.x.net-v0.0.0-20210805182204-aaa1db679c0d | |
| PackageVersion: v0.0.0-20210805182204-aaa1db679c0d | |
| PackageSupplier: Organization: golang.org/x/net | |
| PackageDownloadLocation: git+https://golang.org/x/net | |
| FilesAnalyzed: false | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION | |
| ##### Package representing the golang.org/x/sync | |
| PackageName: golang.org/x/sync | |
| SPDXID: SPDXRef-Package-golang.org.x.sync-v0.0.0-20210220032951-036812b2e83c | |
| PackageVersion: v0.0.0-20210220032951-036812b2e83c | |
| PackageSupplier: Organization: golang.org/x/sync | |
| PackageDownloadLocation: git+https://golang.org/x/sync | |
| FilesAnalyzed: false | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION | |
| ##### Package representing the golang.org/x/sys | |
| PackageName: golang.org/x/sys | |
| SPDXID: SPDXRef-Package-golang.org.x.sys-v0.0.0-20210823070655-63515b42dcdf | |
| PackageVersion: v0.0.0-20210823070655-63515b42dcdf | |
| PackageSupplier: Organization: golang.org/x/sys | |
| PackageDownloadLocation: git+https://golang.org/x/sys | |
| FilesAnalyzed: false | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION | |
| ##### Package representing the golang.org/x/text | |
| PackageName: golang.org/x/text | |
| SPDXID: SPDXRef-Package-golang.org.x.text-v0.3.6 | |
| PackageVersion: v0.3.6 | |
| PackageSupplier: Organization: golang.org/x/text | |
| PackageDownloadLocation: git+https://golang.org/x/text | |
| FilesAnalyzed: false | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION | |
| ##### Package representing the golang.org/x/tools | |
| PackageName: golang.org/x/tools | |
| SPDXID: SPDXRef-Package-golang.org.x.tools-v0.1.6 | |
| PackageVersion: v0.1.6 | |
| PackageSupplier: Organization: golang.org/x/tools | |
| PackageDownloadLocation: git+https://golang.org/x/tools | |
| FilesAnalyzed: false | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION | |
| ##### Package representing the golang.org/x/xerrors | |
| PackageName: golang.org/x/xerrors | |
| SPDXID: SPDXRef-Package-golang.org.x.xerrors-v0.0.0-20200804184101-5ec99f83aff1 | |
| PackageVersion: v0.0.0-20200804184101-5ec99f83aff1 | |
| PackageSupplier: Organization: golang.org/x/xerrors | |
| PackageDownloadLocation: git+https://golang.org/x/xerrors | |
| FilesAnalyzed: false | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION | |
| ##### Package representing the google.golang.org/genproto | |
| PackageName: google.golang.org/genproto | |
| SPDXID: SPDXRef-Package-google.golang.org.genproto-v0.0.0-20210828152312-66f60bf46e71 | |
| PackageVersion: v0.0.0-20210828152312-66f60bf46e71 | |
| PackageSupplier: Organization: google.golang.org/genproto | |
| PackageDownloadLocation: git+https://google.golang.org/genproto | |
| FilesAnalyzed: false | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION | |
| ##### Package representing the google.golang.org/grpc | |
| PackageName: google.golang.org/grpc | |
| SPDXID: SPDXRef-Package-google.golang.org.grpc-v1.40.0 | |
| PackageVersion: v1.40.0 | |
| PackageSupplier: Organization: google.golang.org/grpc | |
| PackageDownloadLocation: git+https://google.golang.org/grpc | |
| FilesAnalyzed: false | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION | |
| ##### Package representing the google.golang.org/protobuf | |
| PackageName: google.golang.org/protobuf | |
| SPDXID: SPDXRef-Package-google.golang.org.protobuf-v1.27.1 | |
| PackageVersion: v1.27.1 | |
| PackageSupplier: Organization: google.golang.org/protobuf | |
| PackageDownloadLocation: git+https://google.golang.org/protobuf | |
| FilesAnalyzed: false | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION | |
| ##### Package representing the gopkg.in/ini.v1 | |
| PackageName: gopkg.in/ini.v1 | |
| SPDXID: SPDXRef-Package-gopkg.in.ini.v1-v1.63.2 | |
| PackageVersion: v1.63.2 | |
| PackageSupplier: Organization: gopkg.in/ini.v1 | |
| PackageDownloadLocation: git+https://gopkg.in/ini.v1 | |
| FilesAnalyzed: false | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION | |
| ##### Package representing the gopkg.in/yaml.v2 | |
| PackageName: gopkg.in/yaml.v2 | |
| SPDXID: SPDXRef-Package-gopkg.in.yaml.v2-v2.4.0 | |
| PackageVersion: v2.4.0 | |
| PackageSupplier: Organization: gopkg.in/yaml.v2 | |
| PackageDownloadLocation: git+https://gopkg.in/yaml.v2 | |
| FilesAnalyzed: false | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION | |
| ##### Package representing the gopkg.in/yaml.v3 | |
| PackageName: gopkg.in/yaml.v3 | |
| SPDXID: SPDXRef-Package-gopkg.in.yaml.v3-v3.0.0-20210107192922-496545a6307b | |
| PackageVersion: v3.0.0-20210107192922-496545a6307b | |
| PackageSupplier: Organization: gopkg.in/yaml.v3 | |
| PackageDownloadLocation: git+https://gopkg.in/yaml.v3 | |
| FilesAnalyzed: false | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION | |
| ##### Package representing the k8s.io/apimachinery | |
| PackageName: k8s.io/apimachinery | |
| SPDXID: SPDXRef-Package-k8s.io.apimachinery-v0.22.2 | |
| PackageVersion: v0.22.2 | |
| PackageSupplier: Organization: k8s.io/apimachinery | |
| PackageDownloadLocation: git+https://k8s.io/apimachinery | |
| FilesAnalyzed: false | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION | |
| ##### Package representing the k8s.io/klog/v2 | |
| PackageName: k8s.io/klog/v2 | |
| SPDXID: SPDXRef-Package-k8s.io.klog.v2-v2.9.0 | |
| PackageVersion: v2.9.0 | |
| PackageSupplier: Organization: k8s.io/klog/v2 | |
| PackageDownloadLocation: git+https://k8s.io/klog/v2 | |
| FilesAnalyzed: false | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION | |
| ##### Package representing the sigs.k8s.io/kind | |
| PackageName: sigs.k8s.io/kind | |
| SPDXID: SPDXRef-Package-sigs.k8s.io.kind-v0.11.1 | |
| PackageVersion: v0.11.1 | |
| PackageSupplier: Organization: sigs.k8s.io/kind | |
| PackageDownloadLocation: git+https://sigs.k8s.io/kind | |
| FilesAnalyzed: false | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION | |
| ##### Package representing the sigs.k8s.io/yaml | |
| PackageName: sigs.k8s.io/yaml | |
| SPDXID: SPDXRef-Package-sigs.k8s.io.yaml-v1.2.0 | |
| PackageVersion: v1.2.0 | |
| PackageSupplier: Organization: sigs.k8s.io/yaml | |
| PackageDownloadLocation: git+https://sigs.k8s.io/yaml | |
| FilesAnalyzed: false | |
| PackageLicenseConcluded: NOASSERTION | |
| PackageLicenseDeclared: NOASSERTION | |
| PackageCopyrightText: NOASSERTION | |
| PackageLicenseComments: NOASSERTION | |
| PackageComment: NOASSERTION |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment