{"spdxVersion":"SPDX-2.3","dataLicense":"CC0-1.0","SPDXID":"SPDXRef-DOCUMENT","name":"com.github.code-asher/code-server","documentNamespace":"https://spdx.org/spdxdocs/protobom/ed829697-a78a-4c37-9276-62a7edecb60a","creationInfo":{"creators":["Tool: protobom-v0.0.0-20260402204407-e7dc5dd3ef04+dirty","Tool: GitHub.com-Dependency-Graph"],"created":"2026-04-03T14:05:23Z"},"packages":[{"name":"aquasecurity/trivy-action","SPDXID":"SPDXRef-githubactions-aquasecurity-trivy-action-1ccef265f594a7555a720f623a461a3d69b45bf7-75c946","versionInfo":"1ccef265f594a7555a720f623a461a3d69b45bf7","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/aquasecurity/trivy-action@1ccef265f594a7555a720f623a461a3d69b45bf7"}]},{"name":"actions/checkout","SPDXID":"SPDXRef-githubactions-actions-checkout-2-75c946","versionInfo":"2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/checkout@2"}]},{"name":"actions/upload-artifact","SPDXID":"SPDXRef-githubactions-actions-upload-artifact-2-75c946","versionInfo":"2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/upload-artifact@2"}]},{"name":"actions/download-artifact","SPDXID":"SPDXRef-githubactions-actions-download-artifact-2-75c946","versionInfo":"2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/download-artifact@2"}]},{"name":"actions/cache","SPDXID":"SPDXRef-githubactions-actions-cache-2-75c946","versionInfo":"2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/cache@2"}]},{"name":"actions/setup-node","SPDXID":"SPDXRef-githubactions-actions-setup-node-2-75c946","versionInfo":"2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/setup-node@2"}]},{"name":"github/codeql-action/upload-sarif","SPDXID":"SPDXRef-githubactions-githubcodeql-action-upload-sarif-1-75c946","versionInfo":"1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/github/codeql-action/upload-sarif@1"}]},{"name":"azure/setup-helm","SPDXID":"SPDXRef-githubactions-azure-setup-helm-1.1-75c946","versionInfo":"1.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/azure/setup-helm@1.1"}]},{"name":"github/codeql-action/analyze","SPDXID":"SPDXRef-githubactions-githubcodeql-action-analyze-1-75c946","versionInfo":"1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/github/codeql-action/analyze@1"}]},{"name":"github/codeql-action/autobuild","SPDXID":"SPDXRef-githubactions-githubcodeql-action-autobuild-1-75c946","versionInfo":"1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/github/codeql-action/autobuild@1"}]},{"name":"github/codeql-action/init","SPDXID":"SPDXRef-githubactions-githubcodeql-action-init-1-75c946","versionInfo":"1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/github/codeql-action/init@1"}]},{"name":"docker/setup-qemu-action","SPDXID":"SPDXRef-githubactions-docker-setup-qemu-action-1-75c946","versionInfo":"1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/docker/setup-qemu-action@1"}]},{"name":"docker/setup-buildx-action","SPDXID":"SPDXRef-githubactions-docker-setup-buildx-action-1-75c946","versionInfo":"1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/docker/setup-buildx-action@1"}]},{"name":"marocchino/sticky-pull-request-comment","SPDXID":"SPDXRef-githubactions-marocchino-sticky-pull-request-comment-2-75c946","versionInfo":"2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/marocchino/sticky-pull-request-comment@2"}]},{"name":"styfle/cancel-workflow-action","SPDXID":"SPDXRef-githubactions-styfle-cancel-workflow-action-0.9.1-75c946","versionInfo":"0.9.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/styfle/cancel-workflow-action@0.9.1"}]},{"name":"Homebrew/actions/setup-homebrew","SPDXID":"SPDXRef-githubactions-Homebrewactions-setup-homebrew-master-75c946","versionInfo":"master","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/Homebrew/actions/setup-homebrew@master"}]},{"name":"com.github.code-asher/code-server","SPDXID":"SPDXRef-github-code-asher-code-server-master-681c5a","versionInfo":"master","downloadLocation":"git+https://github.com/code-asher/code-server","filesAnalyzed":false,"licenseDeclared":"MIT","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:github/code-asher/code-server@master"}]}],"relationships":[{"spdxElementId":"SPDXRef-github-code-asher-code-server-master-681c5a","relatedSpdxElement":"SPDXRef-githubactions-aquasecurity-trivy-action-1ccef265f594a7555a720f623a461a3d69b45bf7-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-code-asher-code-server-master-681c5a","relatedSpdxElement":"SPDXRef-githubactions-actions-checkout-2-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-code-asher-code-server-master-681c5a","relatedSpdxElement":"SPDXRef-githubactions-actions-cache-2-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-code-asher-code-server-master-681c5a","relatedSpdxElement":"SPDXRef-githubactions-actions-setup-node-2-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-code-asher-code-server-master-681c5a","relatedSpdxElement":"SPDXRef-githubactions-githubcodeql-action-upload-sarif-1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-code-asher-code-server-master-681c5a","relatedSpdxElement":"SPDXRef-githubactions-githubcodeql-action-analyze-1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-code-asher-code-server-master-681c5a","relatedSpdxElement":"SPDXRef-githubactions-githubcodeql-action-autobuild-1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-code-asher-code-server-master-681c5a","relatedSpdxElement":"SPDXRef-githubactions-marocchino-sticky-pull-request-comment-2-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-code-asher-code-server-master-681c5a","relatedSpdxElement":"SPDXRef-githubactions-actions-upload-artifact-2-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-code-asher-code-server-master-681c5a","relatedSpdxElement":"SPDXRef-githubactions-actions-download-artifact-2-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-code-asher-code-server-master-681c5a","relatedSpdxElement":"SPDXRef-githubactions-azure-setup-helm-1.1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-code-asher-code-server-master-681c5a","relatedSpdxElement":"SPDXRef-githubactions-githubcodeql-action-init-1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-code-asher-code-server-master-681c5a","relatedSpdxElement":"SPDXRef-githubactions-docker-setup-qemu-action-1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-code-asher-code-server-master-681c5a","relatedSpdxElement":"SPDXRef-githubactions-docker-setup-buildx-action-1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-code-asher-code-server-master-681c5a","relatedSpdxElement":"SPDXRef-githubactions-styfle-cancel-workflow-action-0.9.1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-code-asher-code-server-master-681c5a","relatedSpdxElement":"SPDXRef-githubactions-Homebrewactions-setup-homebrew-master-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-DOCUMENT","relatedSpdxElement":"SPDXRef-github-code-asher-code-server-master-681c5a","relationshipType":"DESCRIBES"}]}