{"spdxVersion":"SPDX-2.3","dataLicense":"CC0-1.0","SPDXID":"SPDXRef-DOCUMENT","name":"com.github.sourcegraph/deploy-sourcegraph-docker","documentNamespace":"https://spdx.org/spdxdocs/protobom/6788459b-d277-4a2a-b9f4-a739b5d3a5e6","creationInfo":{"creators":["Tool: protobom-v0.0.0-20260130170711-0b8e67cacb3b+dirty","Tool: GitHub.com-Dependency-Graph"],"created":"2026-02-06T19:21:28Z"},"packages":[{"name":"prettier","SPDXID":"SPDXRef-npm-prettier-1.19.1-ad114a","versionInfo":"1.19.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"(c) Sindre Sorhus, Copyright (c) 2013 Yusuke Suzuki \u003cutatane.tea@gmail.com\u003e, Copyright (c) 2013-2014 Yusuke Suzuki \u003cutatane.tea@gmail.com\u003e, Copyright (c) 2014 Ivan Nikulin \u003cifaaan@gmail.com\u003e, Copyright (c) 2014-2015, Jon Schlinkert., Copyright (c) 2014-2016, Jon Schlinkert., Copyright (c) 2014-2017, Jon Schlinkert., Copyright (c) 2014-2018, Jon Schlinkert., Copyright (c) 2015-2017, Jon Schlinkert., Copyright (c) Facebook, Inc. and its affiliates., Copyright (c) James Long and contributors, Copyright (c) Microsoft Corporation., Copyright 2014, 2015, 2016, 2017, 2018 Simon Lydell, copyright 2016 Titus Wormer, Copyright Google Inc., Copyright Jeremy Ashkenas, DocumentCloud and Investigative Reporters \u0026 Editors, Copyright jQuery Foundation and other contributors \u003chttps://jquery.org/\u003e","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/prettier@1.19.1"}]},{"name":"@sourcegraph/prettierrc","SPDXID":"SPDXRef-npm-sourcegraph-prettierrc-3.0.2-197fac","versionInfo":"3.0.2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"Apache-2.0","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:npm/%40sourcegraph/prettierrc@3.0.2"}]},{"name":"go.opentelemetry.io/otel/trace","SPDXID":"SPDXRef-golang-go.opentelemetry.iootel-trace-1.11.0-75c946","versionInfo":"1.11.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"Apache-2.0","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/go.opentelemetry.io/otel/trace@1.11.0"}]},{"name":"github.com/go-logr/stdr","SPDXID":"SPDXRef-golang-github.comgo-logr-stdr-1.2.2-75c946","versionInfo":"1.2.2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"Apache-2.0","copyrightText":"Copyright 2019 The logr, Copyright 2020 The Kubernetes Authors, Copyright 2021 The logr","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/go-logr/stdr@1.2.2"}]},{"name":"github.com/xrash/smetrics","SPDXID":"SPDXRef-golang-github.comxrash-smetrics-0.0.0-20201216005158-039620a65673-75c946","versionInfo":"0.0.0-20201216005158-039620a65673","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copyright (c) 2016 Felipe da Cunha Goncalves","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/xrash/smetrics@0.0.0-20201216005158-039620a65673"}]},{"name":"github.com/djherbis/nio/v3","SPDXID":"SPDXRef-golang-github.comdjherbisnio-v3-3.0.1-75c946","versionInfo":"3.0.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copyright (c) 2015 Dustin H","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/djherbis/nio/v3@3.0.1"}]},{"name":"github.com/sourcegraph/update-docker-tags","SPDXID":"SPDXRef-golang-github.comsourcegraph-update-docker-tags-0.10.0-75c946","versionInfo":"0.10.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"Apache-2.0","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/sourcegraph/update-docker-tags@0.10.0"}]},{"name":"github.com/pkg/errors","SPDXID":"SPDXRef-golang-github.compkg-errors-0.9.1-75c946","versionInfo":"0.9.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"BSD-2-Clause","copyrightText":"Copyright (c) 2015, Dave Cheney \u003cdave@cheney.net\u003e","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/pkg/errors@0.9.1"}]},{"name":"github.com/russross/blackfriday/v2","SPDXID":"SPDXRef-golang-github.comrussrossblackfriday-v2-2.1.0-75c946","versionInfo":"2.1.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"BSD-2-Clause","copyrightText":"(c) 2004 Foo Corporation, Copyright (c) 2011 Russ Ross, Copyright (c) 2011 Russ Ross \u003cruss@russross.com\u003e","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/russross/blackfriday/v2@2.1.0"}]},{"name":"github.com/itchyny/gojq","SPDXID":"SPDXRef-golang-github.comitchyny-gojq-0.12.11-75c946","versionInfo":"0.12.11","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copyright (c) 2019-2022 itchyny","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/itchyny/gojq@0.12.11"}]},{"name":"github.com/rogpeppe/go-internal","SPDXID":"SPDXRef-golang-github.comrogpeppe-go-internal-1.8.1-75c946","versionInfo":"1.8.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"BSD-3-Clause","copyrightText":"Copyright (c) 2018 The Go Authors, Copyright 2010 The Go Authors, Copyright 2011 The Go Authors, Copyright 2012 The Go Authors, Copyright 2014 The Go Authors, Copyright 2015 The Go Authors, Copyright 2016 The Go Authors, Copyright 2017 The Go Authors, Copyright 2018 The Go Authors, Copyright 2019 The Go Authors","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/rogpeppe/go-internal@1.8.1"}]},{"name":"bitbucket.org/creachadair/shell","SPDXID":"SPDXRef-golang-bitbucket.orgcreachadair-shell-0.0.7-75c946","versionInfo":"0.0.7","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"BSD-3-Clause","copyrightText":"Copyright (c) 2015, Michael J. Fromberger","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/bitbucket.org/creachadair/shell@0.0.7"}]},{"name":"github.com/go-logr/logr","SPDXID":"SPDXRef-golang-github.comgo-logr-logr-1.2.3-75c946","versionInfo":"1.2.3","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"Apache-2.0","copyrightText":"Copyright 2019 The logr, Copyright 2020 The Kubernetes Authors, Copyright 2020 The logr, Copyright 2021 The logr","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/go-logr/logr@1.2.3"}]},{"name":"github.com/cpuguy83/go-md2man/v2","SPDXID":"SPDXRef-golang-github.comcpuguy83go-md2man-v2-2.0.2-75c946","versionInfo":"2.0.2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copyright (c) 2014 Brian Goff","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/cpuguy83/go-md2man/v2@2.0.2"}]},{"name":"github.com/urfave/cli/v2","SPDXID":"SPDXRef-golang-github.comurfavecli-v2-2.25.7-75c946","versionInfo":"2.25.7","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"(c) 1999 Serious Enterprise, Copyright (c) 1999 Serious, Copyright (c) 2009 The Go Authors, Copyright (c) 2022 urfave/cli","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/urfave/cli/v2@2.25.7"}]},{"name":"github.com/Masterminds/semver/v3","SPDXID":"SPDXRef-golang-github.commastermindssemver-v3-3.1.0-75c946","versionInfo":"3.1.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copyright (c) 2014-2019, Matt Butcher and Matt Farina","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/masterminds/semver/v3@3.1.0"}]},{"name":"github.com/djherbis/buffer","SPDXID":"SPDXRef-golang-github.comdjherbis-buffer-1.2.0-75c946","versionInfo":"1.2.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copyright (c) 2015 Dustin H","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/djherbis/buffer@1.2.0"}]},{"name":"github.com/sourcegraph/run","SPDXID":"SPDXRef-golang-github.comsourcegraph-run-0.12.0-75c946","versionInfo":"0.12.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"Apache-2.0","copyrightText":"Copyright 2022 Sourcegraph, Inc.","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/sourcegraph/run@0.12.0"}]},{"name":"go.bobheadxi.dev/streamline","SPDXID":"SPDXRef-golang-go.bobheadxi.dev-streamline-1.2.1-75c946","versionInfo":"1.2.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copyright (c) 2023 Robert Lin","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/go.bobheadxi.dev/streamline@1.2.1"}]},{"name":"github.com/sourcegraph/sourcegraph/dev/ci/images","SPDXID":"SPDXRef-golang-github.comsourcegraphsourcegraphdevci-images-0.0.0-20240222005846-e3158c0c2717-75c946","versionInfo":"0.0.0-20240222005846-e3158c0c2717","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/sourcegraph/sourcegraph/dev/ci/images@0.0.0-20240222005846-e3158c0c2717"}]},{"name":"github.com/itchyny/timefmt-go","SPDXID":"SPDXRef-golang-github.comitchyny-timefmt-go-0.1.5-75c946","versionInfo":"0.1.5","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copyright (c) 2020-2022 itchyny","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/itchyny/timefmt-go@0.1.5"}]},{"name":"github.com/Masterminds/semver","SPDXID":"SPDXRef-golang-github.commasterminds-semver-1.5.0-75c946","versionInfo":"1.5.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"MIT","copyrightText":"Copyright (c) 2014-2019, Matt Butcher and Matt Farina","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/masterminds/semver@1.5.0"}]},{"name":"go.opentelemetry.io/otel","SPDXID":"SPDXRef-golang-go.opentelemetry.io-otel-1.11.0-75c946","versionInfo":"1.11.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"Apache-2.0","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/go.opentelemetry.io/otel@1.11.0"}]},{"name":"golang.org/x/mod","SPDXID":"SPDXRef-golang-golang.orgx-mod-0.4.2-75c946","versionInfo":"0.4.2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"licenseConcluded":"BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang","copyrightText":"Copyright (c) 2009 The Go Authors., Copyright 2018 The Go Authors., Copyright 2019 The Go Authors.","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/golang.org/x/mod@0.4.2"}]},{"name":"sourcegraph/backport","SPDXID":"SPDXRef-githubactions-sourcegraph-backport-2..-75c946","versionInfo":"2.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/sourcegraph/backport@2.%2A.%2A"}]},{"name":"com.github.sourcegraph/deploy-sourcegraph-docker","SPDXID":"SPDXRef-github-sourcegraph-deploy-sourcegraph-docker-main-2e72cf","versionInfo":"main","downloadLocation":"git+https://github.com/sourcegraph/deploy-sourcegraph-docker","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:github/sourcegraph/deploy-sourcegraph-docker@main"}]}],"relationships":[{"spdxElementId":"SPDXRef-github-sourcegraph-deploy-sourcegraph-docker-main-2e72cf","relatedSpdxElement":"SPDXRef-npm-prettier-1.19.1-ad114a","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-sourcegraph-deploy-sourcegraph-docker-main-2e72cf","relatedSpdxElement":"SPDXRef-npm-sourcegraph-prettierrc-3.0.2-197fac","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-sourcegraph-deploy-sourcegraph-docker-main-2e72cf","relatedSpdxElement":"SPDXRef-golang-go.opentelemetry.iootel-trace-1.11.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-sourcegraph-deploy-sourcegraph-docker-main-2e72cf","relatedSpdxElement":"SPDXRef-golang-github.comxrash-smetrics-0.0.0-20201216005158-039620a65673-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-sourcegraph-deploy-sourcegraph-docker-main-2e72cf","relatedSpdxElement":"SPDXRef-golang-github.comsourcegraph-update-docker-tags-0.10.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-sourcegraph-deploy-sourcegraph-docker-main-2e72cf","relatedSpdxElement":"SPDXRef-golang-github.comgo-logr-logr-1.2.3-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-sourcegraph-deploy-sourcegraph-docker-main-2e72cf","relatedSpdxElement":"SPDXRef-githubactions-sourcegraph-backport-2..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-sourcegraph-deploy-sourcegraph-docker-main-2e72cf","relatedSpdxElement":"SPDXRef-golang-github.comgo-logr-stdr-1.2.2-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-sourcegraph-deploy-sourcegraph-docker-main-2e72cf","relatedSpdxElement":"SPDXRef-golang-github.comrussrossblackfriday-v2-2.1.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-sourcegraph-deploy-sourcegraph-docker-main-2e72cf","relatedSpdxElement":"SPDXRef-golang-github.comrogpeppe-go-internal-1.8.1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-sourcegraph-deploy-sourcegraph-docker-main-2e72cf","relatedSpdxElement":"SPDXRef-golang-bitbucket.orgcreachadair-shell-0.0.7-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-sourcegraph-deploy-sourcegraph-docker-main-2e72cf","relatedSpdxElement":"SPDXRef-golang-github.commastermindssemver-v3-3.1.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-sourcegraph-deploy-sourcegraph-docker-main-2e72cf","relatedSpdxElement":"SPDXRef-golang-github.comsourcegraphsourcegraphdevci-images-0.0.0-20240222005846-e3158c0c2717-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-sourcegraph-deploy-sourcegraph-docker-main-2e72cf","relatedSpdxElement":"SPDXRef-golang-github.commasterminds-semver-1.5.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-sourcegraph-deploy-sourcegraph-docker-main-2e72cf","relatedSpdxElement":"SPDXRef-golang-golang.orgx-mod-0.4.2-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-sourcegraph-deploy-sourcegraph-docker-main-2e72cf","relatedSpdxElement":"SPDXRef-golang-github.compkg-errors-0.9.1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-sourcegraph-deploy-sourcegraph-docker-main-2e72cf","relatedSpdxElement":"SPDXRef-golang-github.comitchyny-gojq-0.12.11-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-sourcegraph-deploy-sourcegraph-docker-main-2e72cf","relatedSpdxElement":"SPDXRef-golang-github.comdjherbis-buffer-1.2.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-sourcegraph-deploy-sourcegraph-docker-main-2e72cf","relatedSpdxElement":"SPDXRef-golang-github.comitchyny-timefmt-go-0.1.5-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-sourcegraph-deploy-sourcegraph-docker-main-2e72cf","relatedSpdxElement":"SPDXRef-golang-go.opentelemetry.io-otel-1.11.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-sourcegraph-deploy-sourcegraph-docker-main-2e72cf","relatedSpdxElement":"SPDXRef-golang-github.comdjherbisnio-v3-3.0.1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-sourcegraph-deploy-sourcegraph-docker-main-2e72cf","relatedSpdxElement":"SPDXRef-golang-github.comcpuguy83go-md2man-v2-2.0.2-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-sourcegraph-deploy-sourcegraph-docker-main-2e72cf","relatedSpdxElement":"SPDXRef-golang-github.comurfavecli-v2-2.25.7-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-sourcegraph-deploy-sourcegraph-docker-main-2e72cf","relatedSpdxElement":"SPDXRef-golang-github.comsourcegraph-run-0.12.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-sourcegraph-deploy-sourcegraph-docker-main-2e72cf","relatedSpdxElement":"SPDXRef-golang-go.bobheadxi.dev-streamline-1.2.1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-DOCUMENT","relatedSpdxElement":"SPDXRef-github-sourcegraph-deploy-sourcegraph-docker-main-2e72cf","relationshipType":"DESCRIBES"}]}