{"spdxVersion":"SPDX-2.3","dataLicense":"CC0-1.0","SPDXID":"SPDXRef-DOCUMENT","name":"com.github.pkgforge/devscripts","documentNamespace":"https://spdx.org/spdxdocs/protobom/8370268e-8792-4012-8d5f-29b4769a13a2","comment":"Exact versions could not be resolved for some packages. For more information: https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-the-dependency-graph#dependencies-included.","creationInfo":{"creators":["Tool: protobom-v0.0.0-20260130170711-0b8e67cacb3b+dirty","Tool: GitHub.com-Dependency-Graph"],"created":"2026-02-06T17:14:36Z"},"packages":[{"name":"docker/login-action","SPDXID":"SPDXRef-githubactions-docker-login-action-3..-75c946","versionInfo":"3.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/docker/login-action@3.%2A.%2A"}]},{"name":"docker/setup-qemu-action","SPDXID":"SPDXRef-githubactions-docker-setup-qemu-action-3..-75c946","versionInfo":"3.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/docker/setup-qemu-action@3.%2A.%2A"}]},{"name":"docker/build-push-action","SPDXID":"SPDXRef-githubactions-docker-build-push-action-6..-75c946","versionInfo":"6.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/docker/build-push-action@6.%2A.%2A"}]},{"name":"docker/setup-buildx-action","SPDXID":"SPDXRef-githubactions-docker-setup-buildx-action-3..-75c946","versionInfo":"3.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/docker/setup-buildx-action@3.%2A.%2A"}]},{"name":"actions/checkout","SPDXID":"SPDXRef-githubactions-actions-checkout-4..-75c946","versionInfo":"4.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/checkout@4.%2A.%2A"}]},{"name":"actions/upload-artifact","SPDXID":"SPDXRef-githubactions-actions-upload-artifact-4..-75c946","versionInfo":"4.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/upload-artifact@4.%2A.%2A"}]},{"name":"softprops/action-gh-release","SPDXID":"SPDXRef-githubactions-softprops-action-gh-release-2.3.2-75c946","versionInfo":"2.3.2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/softprops/action-gh-release@2.3.2"}]},{"name":"actions/attest-build-provenance","SPDXID":"SPDXRef-githubactions-actions-attest-build-provenance-2.4.0-75c946","versionInfo":"2.4.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/attest-build-provenance@2.4.0"}]},{"name":"stefanzweifel/git-auto-commit-action","SPDXID":"SPDXRef-githubactions-stefanzweifel-git-auto-commit-action-6..-75c946","versionInfo":"6.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/stefanzweifel/git-auto-commit-action@6.%2A.%2A"}]},{"name":"blake3","SPDXID":"SPDXRef-cargo-blake3-75c946","versionInfo":"\u003e= 1.8.0,\u003c 2.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:cargo/blake3"}]},{"name":"thiserror","SPDXID":"SPDXRef-cargo-thiserror-75c946","versionInfo":"\u003e= 2.0.0,\u003c 3.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:cargo/thiserror"}]},{"name":"tokio","SPDXID":"SPDXRef-cargo-tokio-75c946","versionInfo":"\u003e= 1.0.0,\u003c 2.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:cargo/tokio"}]},{"name":"regex","SPDXID":"SPDXRef-cargo-regex-75c946","versionInfo":"\u003e= 1.0.0,\u003c 2.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:cargo/regex"}]},{"name":"anyhow","SPDXID":"SPDXRef-cargo-anyhow-75c946","versionInfo":"\u003e= 1.0.0,\u003c 2.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:cargo/anyhow"}]},{"name":"clap","SPDXID":"SPDXRef-cargo-clap-75c946","versionInfo":"\u003e= 4.0.0,\u003c 5.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:cargo/clap"}]},{"name":"atty","SPDXID":"SPDXRef-cargo-atty-75c946","versionInfo":"\u003e= 0.2.0,\u003c 0.3.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:cargo/atty"}]},{"name":"tracing","SPDXID":"SPDXRef-cargo-tracing-75c946","versionInfo":"\u003e= 0.1.0,\u003c 0.2.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:cargo/tracing"}]},{"name":"tracing-subscriber","SPDXID":"SPDXRef-cargo-tracing-subscriber-75c946","versionInfo":"\u003e= 0.3.0,\u003c 0.4.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:cargo/tracing-subscriber"}]},{"name":"futures","SPDXID":"SPDXRef-cargo-futures-75c946","versionInfo":"\u003e= 0.3.0,\u003c 0.4.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:cargo/futures"}]},{"name":"num_cpus","SPDXID":"SPDXRef-cargo-numcpus-75c946","versionInfo":"\u003e= 1.0.0,\u003c 2.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:cargo/num_cpus"}]},{"name":"glob","SPDXID":"SPDXRef-cargo-glob-75c946","versionInfo":"\u003e= 0.3.0,\u003c 0.4.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:cargo/glob"}]},{"name":"chrono","SPDXID":"SPDXRef-cargo-chrono-75c946","versionInfo":"\u003e= 0.4.0,\u003c 0.5.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:cargo/chrono"}]},{"name":"com.github.pkgforge/devscripts","SPDXID":"SPDXRef-github-pkgforge-devscripts-main-7c5cc3","versionInfo":"main","downloadLocation":"git+https://github.com/pkgforge/devscripts","filesAnalyzed":false,"licenseDeclared":"MIT","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:github/pkgforge/devscripts@main"}]}],"relationships":[{"spdxElementId":"SPDXRef-github-pkgforge-devscripts-main-7c5cc3","relatedSpdxElement":"SPDXRef-cargo-glob-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-pkgforge-devscripts-main-7c5cc3","relatedSpdxElement":"SPDXRef-githubactions-softprops-action-gh-release-2.3.2-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-pkgforge-devscripts-main-7c5cc3","relatedSpdxElement":"SPDXRef-githubactions-actions-attest-build-provenance-2.4.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-pkgforge-devscripts-main-7c5cc3","relatedSpdxElement":"SPDXRef-githubactions-stefanzweifel-git-auto-commit-action-6..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-pkgforge-devscripts-main-7c5cc3","relatedSpdxElement":"SPDXRef-cargo-anyhow-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-pkgforge-devscripts-main-7c5cc3","relatedSpdxElement":"SPDXRef-cargo-clap-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-pkgforge-devscripts-main-7c5cc3","relatedSpdxElement":"SPDXRef-cargo-numcpus-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-pkgforge-devscripts-main-7c5cc3","relatedSpdxElement":"SPDXRef-cargo-thiserror-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-pkgforge-devscripts-main-7c5cc3","relatedSpdxElement":"SPDXRef-cargo-atty-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-pkgforge-devscripts-main-7c5cc3","relatedSpdxElement":"SPDXRef-cargo-tracing-subscriber-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-pkgforge-devscripts-main-7c5cc3","relatedSpdxElement":"SPDXRef-cargo-futures-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-pkgforge-devscripts-main-7c5cc3","relatedSpdxElement":"SPDXRef-cargo-chrono-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-pkgforge-devscripts-main-7c5cc3","relatedSpdxElement":"SPDXRef-githubactions-docker-login-action-3..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-pkgforge-devscripts-main-7c5cc3","relatedSpdxElement":"SPDXRef-githubactions-docker-build-push-action-6..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-pkgforge-devscripts-main-7c5cc3","relatedSpdxElement":"SPDXRef-githubactions-docker-setup-buildx-action-3..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-pkgforge-devscripts-main-7c5cc3","relatedSpdxElement":"SPDXRef-githubactions-actions-checkout-4..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-pkgforge-devscripts-main-7c5cc3","relatedSpdxElement":"SPDXRef-githubactions-actions-upload-artifact-4..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-pkgforge-devscripts-main-7c5cc3","relatedSpdxElement":"SPDXRef-cargo-tokio-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-pkgforge-devscripts-main-7c5cc3","relatedSpdxElement":"SPDXRef-cargo-regex-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-pkgforge-devscripts-main-7c5cc3","relatedSpdxElement":"SPDXRef-githubactions-docker-setup-qemu-action-3..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-pkgforge-devscripts-main-7c5cc3","relatedSpdxElement":"SPDXRef-cargo-blake3-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-pkgforge-devscripts-main-7c5cc3","relatedSpdxElement":"SPDXRef-cargo-tracing-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-DOCUMENT","relatedSpdxElement":"SPDXRef-github-pkgforge-devscripts-main-7c5cc3","relationshipType":"DESCRIBES"}]}