{"spdxVersion":"SPDX-2.3","dataLicense":"CC0-1.0","SPDXID":"SPDXRef-DOCUMENT","name":"com.github.NHSDigital/eps-devcontainers","documentNamespace":"https://spdx.org/spdxdocs/protobom/c54d57cf-509a-4bb2-a9d0-9b2b32f90366","creationInfo":{"creators":["Tool: protobom-v0.0.0-20260330165726-14d82a196d68+dirty","Tool: GitHub.com-Dependency-Graph"],"created":"2026-03-31T04:14:24Z"},"packages":[{"name":"@devcontainers/cli","SPDXID":"SPDXRef-npm-devcontainers-cli-0.84.1-d4e6f0","versionInfo":"0.84.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/%40devcontainers/cli@0.84.1"}]},{"name":"NHSDigital/eps-common-workflows/.github/workflows/get-repo-config.yml","SPDXID":"SPDXRef-githubactions-NHSDigitaleps-common-workflows.githubworkflows-get-repo-config.yml-f2d4d6942115472d3f08316cd25f400b02a9dc69-75c946","versionInfo":"f2d4d6942115472d3f08316cd25f400b02a9dc69","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/NHSDigital/eps-common-workflows/.github/workflows/get-repo-config.yml@f2d4d6942115472d3f08316cd25f400b02a9dc69"}]},{"name":"NHSDigital/eps-common-workflows/.github/workflows/quality-checks-devcontainer.yml","SPDXID":"SPDXRef-githubactions-NHSDigitaleps-common-workflows.githubworkflows-quality-checks-devcontainer.yml-f2d4d6942115472d3f08316cd25f400b02a9dc69-75c946","versionInfo":"f2d4d6942115472d3f08316cd25f400b02a9dc69","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/NHSDigital/eps-common-workflows/.github/workflows/quality-checks-devcontainer.yml@f2d4d6942115472d3f08316cd25f400b02a9dc69"}]},{"name":"NHSDigital/eps-common-workflows/.github/workflows/tag-release-devcontainer.yml","SPDXID":"SPDXRef-githubactions-NHSDigitaleps-common-workflows.githubworkflows-tag-release-devcontainer.yml-f2d4d6942115472d3f08316cd25f400b02a9dc69-75c946","versionInfo":"f2d4d6942115472d3f08316cd25f400b02a9dc69","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/NHSDigital/eps-common-workflows/.github/workflows/tag-release-devcontainer.yml@f2d4d6942115472d3f08316cd25f400b02a9dc69"}]},{"name":"actions/github-script","SPDXID":"SPDXRef-githubactions-actions-github-script-ed597411d8f924073f98dfc5c65a23a2325f34cd-75c946","versionInfo":"ed597411d8f924073f98dfc5c65a23a2325f34cd","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd"}]},{"name":"NHSDigital/eps-common-workflows/.github/workflows/dependabot-auto-approve-and-merge.yml","SPDXID":"SPDXRef-githubactions-NHSDigitaleps-common-workflows.githubworkflows-dependabot-auto-approve-and-merge.yml-f2d4d6942115472d3f08316cd25f400b02a9dc69-75c946","versionInfo":"f2d4d6942115472d3f08316cd25f400b02a9dc69","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/NHSDigital/eps-common-workflows/.github/workflows/dependabot-auto-approve-and-merge.yml@f2d4d6942115472d3f08316cd25f400b02a9dc69"}]},{"name":"NHSDigital/eps-common-workflows/.github/workflows/pr_title_check.yml","SPDXID":"SPDXRef-githubactions-NHSDigitaleps-common-workflows.githubworkflows-prtitlecheck.yml-f2d4d6942115472d3f08316cd25f400b02a9dc69-75c946","versionInfo":"f2d4d6942115472d3f08316cd25f400b02a9dc69","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/NHSDigital/eps-common-workflows/.github/workflows/pr_title_check.yml@f2d4d6942115472d3f08316cd25f400b02a9dc69"}]},{"name":"zizmor","SPDXID":"SPDXRef-pypi-zizmor-1.23.1-75c946","versionInfo":"1.23.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/zizmor@1.23.1"}]},{"name":"cfn-lint","SPDXID":"SPDXRef-pypi-cfn-lint-1.47.1-75c946","versionInfo":"1.47.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/cfn-lint@1.47.1"}]},{"name":"pre-commit","SPDXID":"SPDXRef-pypi-pre-commit-4.5.1-75c946","versionInfo":"4.5.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copyright (c) 2014 pre-commit dev team Anthony Sottile, Ken Struys, Copyright 2021 RStudio","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/pre-commit@4.5.1"}]},{"name":"nodeenv","SPDXID":"SPDXRef-pypi-nodeenv-1.10.0-75c946","versionInfo":"1.10.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"BSD-2-Clause AND BSD-3-Clause","copyrightText":"Copyright (c) 2011, Eugene Kalinin, copyright (c) 2014 by Eugene Kalinin","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/nodeenv@1.10.0"}]},{"name":"virtualenv","SPDXID":"SPDXRef-pypi-virtualenv-20.36.1-75c946","versionInfo":"20.36.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copyright (c) 2020-202x The virtualenv developers","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/virtualenv@20.36.1"}]},{"name":"identify","SPDXID":"SPDXRef-pypi-identify-2.6.16-75c946","versionInfo":"2.6.16","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"(c) the European Community 2007, (c) the European Union 2007, 2016, Copyright (c) 1989, 1991 Free Software Foundation, Inc., Copyright (c) 1991, 1999 Free Software Foundation, Inc., Copyright (c) 2000-2006, The Perl Foundation, Copyright (c) 2004 Sam Hocevar \u003csam@hocevar.net\u003e, Copyright (c) 2005 Lawrence Rosen, Copyright (c) 2007 Free Software Foundation, Inc. https://fsf.org, Copyright (c) 2017 Chris Kuehl, Anthony Sottile, Copyright (c) year fullname, Copyright 1999 2002-2008 LaTeX3 Project, copyrighted by the Free Software Foundation","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/identify@2.6.16"}]},{"name":"filelock","SPDXID":"SPDXRef-pypi-filelock-3.21.2-75c946","versionInfo":"3.21.2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/filelock@3.21.2"}]},{"name":"pyyaml","SPDXID":"SPDXRef-pypi-pyyaml-6.0.3-75c946","versionInfo":"6.0.3","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copyright (c) 2006-2016 Kirill Simonov, Copyright (c) 2017-2021 Ingy","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/pyyaml@6.0.3"}]},{"name":"distlib","SPDXID":"SPDXRef-pypi-distlib-0.4.0-75c946","versionInfo":"0.4.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"PSF-2.0 AND Python-2.0","copyrightText":"Copyright (c) 1991 - 1995, Stichting Mathematisch Centrum Amsterdam, The Netherlands, Copyright (c) 1995-2001 Corporation for National Research Initiatives, Copyright (c) 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010 Python Software Foundation, Copyright (c) 2011-2022 Vinay Sajip, Copyright (c) 2012 The Python Software Foundation, Copyright (c) 2012-2013 The Python Software Foundation, Copyright (c) 2012-2013 Vinay Sajip, Copyright (c) 2012-2023 Python Software Foundation, Copyright (c) 2012-2023 The Python Software Foundation, Copyright (c) 2012-2023 Vinay Sajip, Copyright (c) 2012-2024 Vinay Sajip, Copyright (c) 2013 by Test, Copyright (c) 2013 by Test User, Copyright (c) 2013 Vinay Sajip, Copyright (c) 2013-2017 Vinay Sajip, Copyright (c) 2013-2023 Vinay Sajip, Copyright (c) 2024 Stewart Miles, Copyright (c) Simple Launcher","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/distlib@0.4.0"}]},{"name":"cfgv","SPDXID":"SPDXRef-pypi-cfgv-3.5.0-75c946","versionInfo":"3.5.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copyright (c) 2018 Anthony Sottile","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/cfgv@3.5.0"}]},{"name":"platformdirs","SPDXID":"SPDXRef-pypi-platformdirs-4.7.0-75c946","versionInfo":"4.7.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copyright (c) 2010-202x The platformdirs developers","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/platformdirs@4.7.0"}]},{"name":"actions/checkout","SPDXID":"SPDXRef-githubactions-actions-checkout-de0fac2e4500dabe0009e67214ff5f5447ce83dd-75c946","versionInfo":"de0fac2e4500dabe0009e67214ff5f5447ce83dd","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd"}]},{"name":"actions/setup-node","SPDXID":"SPDXRef-githubactions-actions-setup-node-53b83947a5a98c8d113130e565377fae1a50d02f-75c946","versionInfo":"53b83947a5a98c8d113130e565377fae1a50d02f","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f"}]},{"name":"docker/login-action","SPDXID":"SPDXRef-githubactions-docker-login-action-b45d80f862d83dbcd57f89517bcf500b2ab88fb2-75c946","versionInfo":"b45d80f862d83dbcd57f89517bcf500b2ab88fb2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2"}]},{"name":"endersonmenezes/free-disk-space","SPDXID":"SPDXRef-githubactions-endersonmenezes-free-disk-space-7901478139cff6e9d44df5972fd8ab8fcade4db1-75c946","versionInfo":"7901478139cff6e9d44df5972fd8ab8fcade4db1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/endersonmenezes/free-disk-space@7901478139cff6e9d44df5972fd8ab8fcade4db1"}]},{"name":"actions/attest-build-provenance","SPDXID":"SPDXRef-githubactions-actions-attest-build-provenance-a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32-75c946","versionInfo":"a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32"}]},{"name":"com.github.NHSDigital/eps-devcontainers","SPDXID":"SPDXRef-github-NHSDigital-eps-devcontainers-main-da914c","versionInfo":"main","downloadLocation":"git+https://github.com/NHSDigital/eps-devcontainers","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:github/NHSDigital/eps-devcontainers@main"}]}],"relationships":[{"spdxElementId":"SPDXRef-github-NHSDigital-eps-devcontainers-main-da914c","relatedSpdxElement":"SPDXRef-npm-devcontainers-cli-0.84.1-d4e6f0","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-NHSDigital-eps-devcontainers-main-da914c","relatedSpdxElement":"SPDXRef-githubactions-NHSDigitaleps-common-workflows.githubworkflows-quality-checks-devcontainer.yml-f2d4d6942115472d3f08316cd25f400b02a9dc69-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-NHSDigital-eps-devcontainers-main-da914c","relatedSpdxElement":"SPDXRef-pypi-identify-2.6.16-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-NHSDigital-eps-devcontainers-main-da914c","relatedSpdxElement":"SPDXRef-pypi-filelock-3.21.2-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-NHSDigital-eps-devcontainers-main-da914c","relatedSpdxElement":"SPDXRef-githubactions-actions-setup-node-53b83947a5a98c8d113130e565377fae1a50d02f-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-NHSDigital-eps-devcontainers-main-da914c","relatedSpdxElement":"SPDXRef-githubactions-actions-attest-build-provenance-a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-NHSDigital-eps-devcontainers-main-da914c","relatedSpdxElement":"SPDXRef-githubactions-NHSDigitaleps-common-workflows.githubworkflows-dependabot-auto-approve-and-merge.yml-f2d4d6942115472d3f08316cd25f400b02a9dc69-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-NHSDigital-eps-devcontainers-main-da914c","relatedSpdxElement":"SPDXRef-pypi-zizmor-1.23.1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-NHSDigital-eps-devcontainers-main-da914c","relatedSpdxElement":"SPDXRef-pypi-nodeenv-1.10.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-NHSDigital-eps-devcontainers-main-da914c","relatedSpdxElement":"SPDXRef-pypi-virtualenv-20.36.1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-NHSDigital-eps-devcontainers-main-da914c","relatedSpdxElement":"SPDXRef-pypi-pyyaml-6.0.3-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-NHSDigital-eps-devcontainers-main-da914c","relatedSpdxElement":"SPDXRef-pypi-platformdirs-4.7.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-NHSDigital-eps-devcontainers-main-da914c","relatedSpdxElement":"SPDXRef-githubactions-actions-checkout-de0fac2e4500dabe0009e67214ff5f5447ce83dd-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-NHSDigital-eps-devcontainers-main-da914c","relatedSpdxElement":"SPDXRef-githubactions-endersonmenezes-free-disk-space-7901478139cff6e9d44df5972fd8ab8fcade4db1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-NHSDigital-eps-devcontainers-main-da914c","relatedSpdxElement":"SPDXRef-githubactions-NHSDigitaleps-common-workflows.githubworkflows-tag-release-devcontainer.yml-f2d4d6942115472d3f08316cd25f400b02a9dc69-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-NHSDigital-eps-devcontainers-main-da914c","relatedSpdxElement":"SPDXRef-githubactions-NHSDigitaleps-common-workflows.githubworkflows-prtitlecheck.yml-f2d4d6942115472d3f08316cd25f400b02a9dc69-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-NHSDigital-eps-devcontainers-main-da914c","relatedSpdxElement":"SPDXRef-pypi-cfn-lint-1.47.1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-NHSDigital-eps-devcontainers-main-da914c","relatedSpdxElement":"SPDXRef-pypi-pre-commit-4.5.1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-NHSDigital-eps-devcontainers-main-da914c","relatedSpdxElement":"SPDXRef-pypi-cfgv-3.5.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-NHSDigital-eps-devcontainers-main-da914c","relatedSpdxElement":"SPDXRef-githubactions-NHSDigitaleps-common-workflows.githubworkflows-get-repo-config.yml-f2d4d6942115472d3f08316cd25f400b02a9dc69-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-NHSDigital-eps-devcontainers-main-da914c","relatedSpdxElement":"SPDXRef-githubactions-actions-github-script-ed597411d8f924073f98dfc5c65a23a2325f34cd-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-NHSDigital-eps-devcontainers-main-da914c","relatedSpdxElement":"SPDXRef-pypi-distlib-0.4.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-NHSDigital-eps-devcontainers-main-da914c","relatedSpdxElement":"SPDXRef-githubactions-docker-login-action-b45d80f862d83dbcd57f89517bcf500b2ab88fb2-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-DOCUMENT","relatedSpdxElement":"SPDXRef-github-NHSDigital-eps-devcontainers-main-da914c","relationshipType":"DESCRIBES"}]}