{"spdxVersion":"SPDX-2.3","dataLicense":"CC0-1.0","SPDXID":"SPDXRef-DOCUMENT","name":"com.github.shiftstack/shiftstack-ci","documentNamespace":"https://spdx.org/spdxdocs/protobom/d7c9eeab-2c15-4eef-9ed9-111041aede63","comment":"Exact versions could not be resolved for some packages. For more information: https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-the-dependency-graph#dependencies-included.","creationInfo":{"creators":["Tool: protobom-v0.0.0-20251216165153-1f3f3060931e+dirty","Tool: GitHub.com-Dependency-Graph"],"created":"2026-01-01T13:11:02Z"},"packages":[{"name":"pygithub","SPDXID":"SPDXRef-pypi-pygithub-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/pygithub"}]},{"name":"jira","SPDXID":"SPDXRef-pypi-jira-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/jira"}]},{"name":"com.github.shiftstack/shiftstack-ci","SPDXID":"SPDXRef-github-shiftstack-shiftstack-ci-main-5b3618","versionInfo":"main","downloadLocation":"git+https://github.com/shiftstack/shiftstack-ci","filesAnalyzed":false,"licenseDeclared":"GPL-3.0","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:github/shiftstack/shiftstack-ci@main"}]}],"relationships":[{"spdxElementId":"SPDXRef-github-shiftstack-shiftstack-ci-main-5b3618","relatedSpdxElement":"SPDXRef-pypi-jira-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-shiftstack-shiftstack-ci-main-5b3618","relatedSpdxElement":"SPDXRef-pypi-pygithub-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-DOCUMENT","relatedSpdxElement":"SPDXRef-github-shiftstack-shiftstack-ci-main-5b3618","relationshipType":"DESCRIBES"}]}