@@ -312,8 +312,8 @@ github.com/opencontainers/runtime-spec v1.2.1 h1:S4k4ryNgEpxW1dzyqffOmhI1BHYcjzU
312312github.com/opencontainers/runtime-spec v1.2.1 /go.mod h1:jwyrGlmzljRJv/Fgzds9SsS/C5hL+LL3ko9hs6T5lQ0 =
313313github.com/opencontainers/selinux v1.12.0 h1:6n5JV4Cf+4y0KNXW48TLj5DwfXpvWlxXplUkdTrmPb8 =
314314github.com/opencontainers/selinux v1.12.0 /go.mod h1:BTPX+bjVbWGXw7ZZWUbdENt8w0htPSrlgOOysQaU62U =
315- github.com/ossf/osv-schema/bindings/go v0.0.0-20250804010012-a529c42c15de h1:4lHPN8y2EVTCX5Txoj7+aybi6ncNqhGGjUdEFHnpuT4 =
316- github.com/ossf/osv-schema/bindings/go v0.0.0-20250804010012-a529c42c15de /go.mod h1:lILztSxHU7VsdlYqCnwgxSDBhbXMf7iEQWtldJCDXPo =
315+ github.com/ossf/osv-schema/bindings/go v0.0.0-20250811013316-3418df24c5f8 h1:zCddeW2YyAcJrPMGmIAqaSavVTP0AHxk8kvAPMF+Gc0 =
316+ github.com/ossf/osv-schema/bindings/go v0.0.0-20250811013316-3418df24c5f8 /go.mod h1:lILztSxHU7VsdlYqCnwgxSDBhbXMf7iEQWtldJCDXPo =
317317github.com/owenrumney/go-sarif/v3 v3.2.1 h1:Dogf2wkOxxRkG3O/B9T6dokyDSl36q19tlMYtXOTThE =
318318github.com/owenrumney/go-sarif/v3 v3.2.1 /go.mod h1:S2sdyDnv0sxN5x+M8iFZIzZE2+uTX/1uXlwTRx0efT0 =
319319github.com/package-url/packageurl-go v0.1.3 h1:4juMED3hHiz0set3Vq3KeQ75KD1avthoXLtmE3I0PLs =
@@ -399,8 +399,8 @@ github.com/tklauser/numcpus v0.10.0 h1:18njr6LDBk1zuna922MgdjQuJFjrdppsZG60sHGfj
399399github.com/tklauser/numcpus v0.10.0 /go.mod h1:BiTKazU708GQTYF4mB+cmlpT2Is1gLk7XVuEeem8LsQ =
400400github.com/tonistiigi/go-csvvalue v0.0.0-20240814133006-030d3b2625d0 h1:2f304B10LaZdB8kkVEaoXvAMVan2tl9AiK4G0odjQtE =
401401github.com/tonistiigi/go-csvvalue v0.0.0-20240814133006-030d3b2625d0 /go.mod h1:278M4p8WsNh3n4a1eqiFcV2FGk7wE5fwUpUom9mK9lE =
402- github.com/urfave/cli/v3 v3.3.8 h1:BzolUExliMdet9NlJ/u4m5vHSotJ3PzEqSAZ1oPMa/E =
403- github.com/urfave/cli/v3 v3.3.8 /go.mod h1:FJSKtM/9AiiTOJL4fJ6TbMUkxBXn7GO9guZqoZtpYpo =
402+ github.com/urfave/cli/v3 v3.3.9 h1:54roEDJcTWuucl6MSQ3B+pQqt1ePh/xOQokhEYl5Gfs =
403+ github.com/urfave/cli/v3 v3.3.9 /go.mod h1:FJSKtM/9AiiTOJL4fJ6TbMUkxBXn7GO9guZqoZtpYpo =
404404github.com/vbatts/tar-split v0.12.1 h1:CqKoORW7BUWBe7UL/iqTVvkTBOF8UvOMKOIZykxnnbo =
405405github.com/vbatts/tar-split v0.12.1 /go.mod h1:eF6B6i6ftWQcDqEn3/iGFRFRo8cBIMSJVOpnNdfTMFA =
406406github.com/xanzy/ssh-agent v0.3.3 h1:+/15pJfg/RsTxqYcX6fHqOXZwwMP+2VyYWJeWM2qQFM =
@@ -458,8 +458,8 @@ golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550/go.mod h1:yigFU9vqHzYiE8U
458458golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9 /go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto =
459459golang.org/x/crypto v0.0.0-20210921155107-089bfa567519 /go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc =
460460golang.org/x/crypto v0.0.0-20220622213112-05595931fe9d /go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4 =
461- golang.org/x/crypto v0.40 .0 h1:r4x+VvoG5Fm+eJcxMaY8CQM7Lb0l1lsmjGBQ6s8BfKM =
462- golang.org/x/crypto v0.40 .0 /go.mod h1:Qr1vMER5WyS2dfPHAlsOj01wgLbsyWtFn/aY+5+ZdxY =
461+ golang.org/x/crypto v0.41 .0 h1:WKYxWedPGCTVVl5+WHSSrOBT0O8lx32+zxmHxijgXp4 =
462+ golang.org/x/crypto v0.41 .0 /go.mod h1:pO5AFd7FA68rFak7rOAGVuygIISepHftHnr8dr6+sUc =
463463golang.org/x/exp v0.0.0-20190121172915-509febef88a4 /go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA =
464464golang.org/x/exp v0.0.0-20250711185948-6ae5c78190dc h1:TS73t7x3KarrNd5qAipmspBDS1rkMcgVG/fS1aRb4Rc =
465465golang.org/x/exp v0.0.0-20250711185948-6ae5c78190dc /go.mod h1:A+z0yzpGtvnG90cToK5n2tu8UJVP2XUATh+r+sfOOOc =
@@ -483,8 +483,8 @@ golang.org/x/net v0.0.0-20201110031124-69a78807bb2b/go.mod h1:sp8m0HH+o8qH0wwXwY
483483golang.org/x/net v0.0.0-20210226172049-e18ecbb05110 /go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg =
484484golang.org/x/net v0.0.0-20211112202133-69e39bad7dc2 /go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y =
485485golang.org/x/net v0.0.0-20220722155237-a158d28d115b /go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c =
486- golang.org/x/net v0.42 .0 h1:jzkYrhi3YQWD6MLBJcsklgQsoAcw89EcZbJw8Z614hs =
487- golang.org/x/net v0.42 .0 /go.mod h1:FF1RA5d3u7nAYA4z2TkclSCKh68eSXtiFwcWQpPXdt8 =
486+ golang.org/x/net v0.43 .0 h1:lat02VYK2j4aLzMzecihNvTlJNQUq316m2Mr9rnM6YE =
487+ golang.org/x/net v0.43 .0 /go.mod h1:vhO1fvI4dGsIjh73sWfUVjj3N7CA9WkKJNQm2svM6Jg =
488488golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be /go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U =
489489golang.org/x/sync v0.0.0-20180314180146-1d60e4601c6f /go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM =
490490golang.org/x/sync v0.0.0-20181108010431-42b317875d0f /go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM =
@@ -510,21 +510,21 @@ golang.org/x/sys v0.0.0-20220520151302-bc2c85ada10a/go.mod h1:oPkhp1MJrh7nUepCBc
510510golang.org/x/sys v0.0.0-20220715151400-c0bba94af5f8 /go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg =
511511golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f /go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg =
512512golang.org/x/sys v0.6.0 /go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg =
513- golang.org/x/sys v0.34 .0 h1:H5Y5sJ2L2JRdyv7ROF1he/lPdvFsd0mJHFw2ThKHxLA =
514- golang.org/x/sys v0.34 .0 /go.mod h1:BJP2sWEmIv4KK5OTEluFJCKSidICx8ciO85XgH3Ak8k =
513+ golang.org/x/sys v0.35 .0 h1:vz1N37gP5bs89s7He8XuIYXpyY0+QlsKmzipCbUtyxI =
514+ golang.org/x/sys v0.35 .0 /go.mod h1:BJP2sWEmIv4KK5OTEluFJCKSidICx8ciO85XgH3Ak8k =
515515golang.org/x/telemetry v0.0.0-20250710130107-8d8967aff50b h1:DU+gwOBXU+6bO0sEyO7o/NeMlxZxCZEvI7v+J4a1zRQ =
516516golang.org/x/telemetry v0.0.0-20250710130107-8d8967aff50b /go.mod h1:4ZwOYna0/zsOKwuR5X/m0QFOJpSZvAxFfkQT+Erd9D4 =
517517golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1 /go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo =
518518golang.org/x/term v0.0.0-20210927222741-03fcf44c2211 /go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8 =
519- golang.org/x/term v0.33 .0 h1:NuFncQrRcaRvVmgRkvM3j/F00gWIAlcmlB8ACEKmGIg =
520- golang.org/x/term v0.33 .0 /go.mod h1:s18+ql9tYWp1IfpV9DmCtQDDSRBUjKaw9M1eAv5UeF0 =
519+ golang.org/x/term v0.34 .0 h1:O/2T7POpk0ZZ7MAzMeWFSg6S5IpWd/RXDlM9hgM3DR4 =
520+ golang.org/x/term v0.34 .0 /go.mod h1:5jC53AEywhIVebHgPVeg0mj8OD3VO9OzclacVrqpaAw =
521521golang.org/x/text v0.3.0 /go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ =
522522golang.org/x/text v0.3.3 /go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ =
523523golang.org/x/text v0.3.6 /go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ =
524524golang.org/x/text v0.3.7 /go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ =
525525golang.org/x/text v0.7.0 /go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8 =
526- golang.org/x/text v0.27 .0 h1:4fGWRpyh641NLlecmyl4LOe6yDdfaYNrGb2zdfo4JV4 =
527- golang.org/x/text v0.27 .0 /go.mod h1:1D28KMCvyooCX9hBiosv5Tz/+YLxj0j7XhWjpSUF7CU =
526+ golang.org/x/text v0.28 .0 h1:rhazDwis8INMIwQ4tpjLDzUhx6RlXqZNPEM0huQojng =
527+ golang.org/x/text v0.28 .0 /go.mod h1:U8nCwOR8jO/marOQ0QbDiOngZVEBB7MAiitBuMjXiNU =
528528golang.org/x/time v0.11.0 h1:/bpjEDfN9tkoN/ryeYHnv5hcMlc8ncjMcM4XBk5NWV0 =
529529golang.org/x/time v0.11.0 /go.mod h1:CDIdPxbZBQxdj6cxyCIdrNogrJKMJ7pr37NYpMcMDSg =
530530golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e /go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ =
@@ -577,8 +577,8 @@ google.golang.org/protobuf v1.22.0/go.mod h1:EGpADcykh3NcUnDUJcl1+ZksZNG86OlYog2
577577google.golang.org/protobuf v1.23.0 /go.mod h1:EGpADcykh3NcUnDUJcl1+ZksZNG86OlYog2l/sGQquU =
578578google.golang.org/protobuf v1.23.1-0.20200526195155-81db48ad09cc /go.mod h1:EGpADcykh3NcUnDUJcl1+ZksZNG86OlYog2l/sGQquU =
579579google.golang.org/protobuf v1.25.0 /go.mod h1:9JNX74DMeImyA3h4bdi1ymwjUzf21/xIlbajtzgsN7c =
580- google.golang.org/protobuf v1.36.6 h1:z1NpPI8ku2WgiWnf+t9wTPsn6eP1L7ksHUlkfLvd9xY =
581- google.golang.org/protobuf v1.36.6 /go.mod h1:jduwjTPXsFjZGTmRluh+L6NjiWu7pchiJ2/5YcXBHnY =
580+ google.golang.org/protobuf v1.36.7 h1:IgrO7UwFQGJdRNXH/sQux4R1Dj1WAKcLElzeeRaXV2A =
581+ google.golang.org/protobuf v1.36.7 /go.mod h1:jduwjTPXsFjZGTmRluh+L6NjiWu7pchiJ2/5YcXBHnY =
582582gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 /go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0 =
583583gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15 /go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0 =
584584gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk =
@@ -622,8 +622,8 @@ modernc.org/strutil v1.2.1 h1:UneZBkQA+DX2Rp35KcM69cSsNES9ly8mQWD71HKlOA0=
622622modernc.org/strutil v1.2.1 /go.mod h1:EHkiggD70koQxjVdSBM3JKM7k6L0FbGE5eymy9i3B9A =
623623modernc.org/token v1.1.0 h1:Xl7Ap9dKaEs5kLoOQeQmPWevfnk/DM5qcLcYlA8ys6Y =
624624modernc.org/token v1.1.0 /go.mod h1:UGzOrNV1mAFSEB63lOFHIpNRUVMvYTc6yu1SMY/XTDM =
625- osv.dev/bindings/go v0.0.0-20250731024040-0ecbb9ee94cb h1:MUde4iTH0gxioB5YauzkXRnhZ9wobvf/ulvYSC74GYI =
626- osv.dev/bindings/go v0.0.0-20250731024040-0ecbb9ee94cb /go.mod h1:CHonDDZJ91D/C8tbrijcMGlAKLxAom/IyOCKIS8jIAQ =
625+ osv.dev/bindings/go v0.0.0-20250808040635-c189436f8791 h1:UPwD9xNkZVS+WmfQv599Hd9HnD1Ph6MS3lPTInwmfV4 =
626+ osv.dev/bindings/go v0.0.0-20250808040635-c189436f8791 /go.mod h1:U5TQCqNDZIFATIofBLLRrG+1SSBl6z/PjsXoExyaHJ0 =
627627sigs.k8s.io/yaml v1.4.0 /go.mod h1:Ejl7/uTz7PSA4eKMyQCUTnhZYNmLIl+5c2lQPGR2BPY =
628628sigs.k8s.io/yaml v1.5.0 h1:M10b2U7aEUY6hRtU870n2VTPgR5RZiL/I6Lcc2F4NUQ =
629629sigs.k8s.io/yaml v1.5.0 /go.mod h1:wZs27Rbxoai4C0f8/9urLZtZtF3avA3gKvGyPdDqTO4 =
0 commit comments