diff --git a/src/main/java/io/github/guacsec/trustifyda/providers/GoModulesProvider.java b/src/main/java/io/github/guacsec/trustifyda/providers/GoModulesProvider.java index 7203c112..59f1cd47 100644 --- a/src/main/java/io/github/guacsec/trustifyda/providers/GoModulesProvider.java +++ b/src/main/java/io/github/guacsec/trustifyda/providers/GoModulesProvider.java @@ -18,6 +18,9 @@ import static io.github.guacsec.trustifyda.impl.ExhortApi.debugLoggingIsNeeded; +import com.fasterxml.jackson.core.JsonProcessingException; +import com.fasterxml.jackson.databind.JsonNode; +import com.fasterxml.jackson.databind.ObjectMapper; import com.github.packageurl.MalformedPackageURLException; import com.github.packageurl.PackageURL; import io.github.guacsec.trustifyda.Api; @@ -40,9 +43,11 @@ import java.util.ArrayList; import java.util.Arrays; import java.util.HashMap; +import java.util.HashSet; import java.util.List; import java.util.Map; import java.util.Objects; +import java.util.Set; import java.util.logging.Logger; import java.util.regex.Pattern; import java.util.stream.Collectors; @@ -136,6 +141,7 @@ Sbom getDependenciesSbom(Path manifestPath, boolean buildTree) throws IOExceptio determineMainModuleVersion(manifestPath.getParent()); Sbom sbom; List ignoredDeps = getIgnoredDeps(manifestPath); + Set directDepPaths = getDirectDependencyPaths(manifestPath); boolean matchManifestVersions = Environment.getBoolean(Provider.PROP_MATCH_MANIFEST_VERSIONS, false); if (matchManifestVersions) { @@ -143,9 +149,9 @@ Sbom getDependenciesSbom(Path manifestPath, boolean buildTree) throws IOExceptio performManifestVersionsCheck(goModGraphLines, manifestPath); } if (!buildTree) { - sbom = buildSbomFromList(goModulesResult, ignoredDeps); + sbom = buildSbomFromList(goModulesResult, ignoredDeps, directDepPaths); } else { - sbom = buildSbomFromGraph(goModulesResult, ignoredDeps, manifestPath); + sbom = buildSbomFromGraph(goModulesResult, ignoredDeps, manifestPath, directDepPaths); } return sbom; } @@ -264,7 +270,10 @@ public void determineMainModuleVersion(Path directory) { } private Sbom buildSbomFromGraph( - String goModulesResult, List ignoredDeps, Path manifestPath) { + String goModulesResult, + List ignoredDeps, + Path manifestPath, + Set directDepPaths) { // Each entry contains a key of the module, and the list represents the module direct // dependencies , so // pairing of the key with each of the dependencies in a list is basically an edge in the graph. @@ -300,6 +309,17 @@ private Sbom buildSbomFromGraph( PackageURL source = toPurl(key, "@"); value.stream() .filter(dep -> !isGoToolchainEntry(dep)) + .filter( + dep -> { + // When processing root-level edges, skip indirect dependencies. + // In Go 1.17+, go mod graph emits edges for all modules in go.mod, + // including those marked // indirect. Only keep edges whose child + // module path is in the direct dependency set. + if (getModulePath(key).equals(getModulePath(rootPackage))) { + return directDepPaths.contains(getModulePath(dep)); + } + return true; + }) .forEach( dep -> { PackageURL targetPurl = toPurl(dep, "@"); @@ -422,7 +442,59 @@ private String buildGoModulesDependencies(Path manifestPath) { return goModulesOutput; } - private Sbom buildSbomFromList(String golangDeps, List ignoredDeps) { + /** + * Runs {@code go mod edit -json} and returns the set of module paths that are direct dependencies + * (i.e., entries in the Require array where {@code Indirect} is false or absent). This + * distinguishes direct from indirect dependencies in Go 1.17+ modules, where {@code go mod tidy} + * records all transitively-imported modules in go.mod with an {@code // indirect} marker. + */ + private Set getDirectDependencyPaths(Path manifestPath) { + String[] goModEditCmd = new String[] {goExecutable, "mod", "edit", "-json"}; + String goModEditOutput = Operations.runProcessGetOutput(manifestPath.getParent(), goModEditCmd); + if (debugLoggingIsNeeded()) { + log.info( + String.format( + "Package Manager Go Mod Edit -json output : %s%s", + System.lineSeparator(), goModEditOutput)); + } + Set directDepPaths = new HashSet<>(); + try { + ObjectMapper mapper = new ObjectMapper(); + JsonNode root = mapper.readTree(goModEditOutput); + JsonNode requireArray = root.get("Require"); + if (requireArray != null && requireArray.isArray()) { + for (JsonNode req : requireArray) { + JsonNode indirectNode = req.get("Indirect"); + if (indirectNode == null || !indirectNode.asBoolean()) { + if (req.get("Path") != null) { + directDepPaths.add(req.get("Path").asText()); + } + } + } + } + } catch (JsonProcessingException e) { + throw new IllegalStateException("Failed to parse go mod edit -json output", e); + } + if (debugLoggingIsNeeded()) { + log.info(String.format("Direct dependency paths from go mod edit -json: %s", directDepPaths)); + } + return directDepPaths; + } + + /** + * Extracts the module path from a go mod graph entry by stripping the version suffix. For + * example, {@code "github.com/foo/bar@v1.2.3"} returns {@code "github.com/foo/bar"}. + */ + private static String getModulePath(String graphEntry) { + int atIndex = graphEntry.indexOf("@"); + if (atIndex == -1) { + return graphEntry; + } + return graphEntry.substring(0, atIndex); + } + + private Sbom buildSbomFromList( + String golangDeps, List ignoredDeps, Set directDepPaths) { String[] allModulesFlat = golangDeps.split(Operations.GENERIC_LINE_SEPARATOR); String parentVertex = getParentVertex(allModulesFlat[0]); PackageURL root = toPurl(parentVertex, "@"); @@ -433,6 +505,7 @@ private Sbom buildSbomFromList(String golangDeps, List ignoredDeps) sbom.addRoot(root, readLicenseFromManifest()); deps.stream() .filter(dep -> !isGoToolchainEntry(dep)) + .filter(dep -> directDepPaths.contains(getModulePath(dep))) .forEach( dep -> { PackageURL targetPurl = toPurl(dep, "@"); diff --git a/src/main/java/io/github/guacsec/trustifyda/sbom/CycloneDXSbom.java b/src/main/java/io/github/guacsec/trustifyda/sbom/CycloneDXSbom.java index f38121d2..4c26fb28 100644 --- a/src/main/java/io/github/guacsec/trustifyda/sbom/CycloneDXSbom.java +++ b/src/main/java/io/github/guacsec/trustifyda/sbom/CycloneDXSbom.java @@ -18,6 +18,9 @@ import static io.github.guacsec.trustifyda.impl.ExhortApi.debugLoggingIsNeeded; +import com.fasterxml.jackson.core.JsonProcessingException; +import com.fasterxml.jackson.databind.ObjectMapper; +import com.fasterxml.jackson.databind.node.ObjectNode; import com.github.packageurl.MalformedPackageURLException; import com.github.packageurl.PackageURL; import io.github.guacsec.trustifyda.logging.LoggersFactory; @@ -67,8 +70,8 @@ public CycloneDXSbom() { Metadata metadata = new Metadata(); metadata.setTimestamp(new Date()); bom.setMetadata(metadata); - bom.setComponents(new ArrayList<>()); bom.setDependencies(new ArrayList<>()); + bom.setComponents(new ArrayList<>()); belongingCriteriaBinaryAlgorithm = getBelongingConditionByName(); this.exhortIgnoreMethod = "insensitive"; } @@ -230,6 +233,9 @@ private Sbom removeIgnoredDepsFromSbom(List refsToIgnore) { d.setDependencies(filteredDeps); } }); + if (bom.getComponents().isEmpty()) { + bom.setDependencies(new ArrayList<>()); + } return this; } @@ -302,12 +308,36 @@ public Sbom addDependency(PackageURL sourceRef, PackageURL targetRef, String s) public String getAsJsonString() { try { var jsonString = BomGeneratorFactory.createJson(VERSION, bom).toJsonString(); + jsonString = ensureComponentsField(jsonString); if (debugLoggingIsNeeded()) { log.info("Generated Sbom Json:" + System.lineSeparator() + jsonString); } return jsonString; } catch (GeneratorException e) { - throw new RuntimeException("Unable to genenerate JSON from SBOM", e); + throw new RuntimeException("Unable to generate JSON from SBOM", e); + } + } + + private String ensureComponentsField(String json) throws GeneratorException { + try { + var mapper = new ObjectMapper(); + var rootNode = (ObjectNode) mapper.readTree(json); + if (!rootNode.has("components")) { + var ordered = mapper.createObjectNode(); + rootNode + .properties() + .forEach( + field -> { + ordered.set(field.getKey(), field.getValue()); + if (field.getKey().equals("metadata")) { + ordered.set("components", mapper.createArrayNode()); + } + }); + return mapper.writerWithDefaultPrettyPrinter().writeValueAsString(ordered); + } + return json; + } catch (JsonProcessingException e) { + throw new GeneratorException("Unable to ensure components field in JSON", e); } } diff --git a/src/test/resources/msc/golang/mvs_logic/expected_sbom_stack_analysis.json b/src/test/resources/msc/golang/mvs_logic/expected_sbom_stack_analysis.json index 8a394608..7e4fce4b 100644 --- a/src/test/resources/msc/golang/mvs_logic/expected_sbom_stack_analysis.json +++ b/src/test/resources/msc/golang/mvs_logic/expected_sbom_stack_analysis.json @@ -3989,51 +3989,13 @@ { "ref": "pkg:golang/github.com/rhecosystemappeng/saasi/deployer@v0.0.0", "dependsOn": [ - "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0", "pkg:golang/github.com/gin-gonic/gin@v1.9.1", - "pkg:golang/github.com/go-logr/logr@v1.2.3", - "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5", - "pkg:golang/github.com/go-openapi/jsonreference@v0.20.0", - "pkg:golang/github.com/go-openapi/swag@v0.19.14", - "pkg:golang/github.com/gogo/protobuf@v1.3.2", - "pkg:golang/github.com/golang/protobuf@v1.5.2", - "pkg:golang/github.com/google/gnostic@v0.5.7-v3refs", - "pkg:golang/github.com/google/go-cmp@v0.5.9", - "pkg:golang/github.com/google/gofuzz@v1.1.0", "pkg:golang/github.com/google/uuid@v1.1.2", - "pkg:golang/github.com/imdario/mergo@v0.3.6", "pkg:golang/github.com/jessevdk/go-flags@v1.5.0", - "pkg:golang/github.com/josharian/intern@v1.0.0", - "pkg:golang/github.com/json-iterator/go@v1.1.12", "pkg:golang/github.com/kr/pretty@v0.3.1", - "pkg:golang/github.com/kr/text@v0.2.0", - "pkg:golang/github.com/mailru/easyjson@v0.7.6", - "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", - "pkg:golang/github.com/modern-go/reflect2@v1.0.2", - "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", - "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0", - "pkg:golang/github.com/spf13/pflag@v1.0.5", - "pkg:golang/golang.org/x/net@v0.10.0", - "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b", - "pkg:golang/golang.org/x/sys@v0.8.0", - "pkg:golang/golang.org/x/term@v0.8.0", - "pkg:golang/golang.org/x/text@v0.9.0", - "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8", - "pkg:golang/google.golang.org/appengine@v1.6.7", - "pkg:golang/google.golang.org/protobuf@v1.30.0", - "pkg:golang/gopkg.in/inf.v0@v0.9.1", "pkg:golang/gopkg.in/yaml.v2@v2.4.0", - "pkg:golang/gopkg.in/yaml.v3@v3.0.1", - "pkg:golang/k8s.io/api@v0.26.1", "pkg:golang/k8s.io/apimachinery@v0.26.1", - "pkg:golang/k8s.io/client-go@v0.26.1", - "pkg:golang/k8s.io/klog/v2@v2.80.1", - "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280", - "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", - "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2", - "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", - "pkg:golang/sigs.k8s.io/yaml@v1.3.0" + "pkg:golang/k8s.io/client-go@v0.26.1" ] }, { diff --git a/src/test/resources/tst_manifests/golang/go_mod_light_no_ignore/expected_sbom_component_analysis.json b/src/test/resources/tst_manifests/golang/go_mod_light_no_ignore/expected_sbom_component_analysis.json index fe3f982a..f1c5ca32 100644 --- a/src/test/resources/tst_manifests/golang/go_mod_light_no_ignore/expected_sbom_component_analysis.json +++ b/src/test/resources/tst_manifests/golang/go_mod_light_no_ignore/expected_sbom_component_analysis.json @@ -29,14 +29,6 @@ "name" : "tools", "version" : "v0.0.0-20210112183307-1e6ecd4bf1b0", "purl" : "pkg:golang/golang.org/x/tools@v0.0.0-20210112183307-1e6ecd4bf1b0" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/gopkg.in/yaml.v3@v3.0.1", - "group" : "gopkg.in", - "name" : "yaml.v3", - "version" : "v3.0.1", - "purl" : "pkg:golang/gopkg.in/yaml.v3@v3.0.1" } ], "dependencies" : [ @@ -44,8 +36,7 @@ "ref" : "pkg:golang/golang.org/x/example@v0.0.0", "dependsOn" : [ "pkg:golang/github.com/spf13/cobra@v0.0.5", - "pkg:golang/golang.org/x/tools@v0.0.0-20210112183307-1e6ecd4bf1b0", - "pkg:golang/gopkg.in/yaml.v3@v3.0.1" + "pkg:golang/golang.org/x/tools@v0.0.0-20210112183307-1e6ecd4bf1b0" ] }, { @@ -55,10 +46,6 @@ { "ref" : "pkg:golang/golang.org/x/tools@v0.0.0-20210112183307-1e6ecd4bf1b0", "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/gopkg.in/yaml.v3@v3.0.1", - "dependsOn" : [ ] } ] -} \ No newline at end of file +} diff --git a/src/test/resources/tst_manifests/golang/go_mod_light_no_ignore/expected_sbom_stack_analysis.json b/src/test/resources/tst_manifests/golang/go_mod_light_no_ignore/expected_sbom_stack_analysis.json index 78d46527..431520b8 100644 --- a/src/test/resources/tst_manifests/golang/go_mod_light_no_ignore/expected_sbom_stack_analysis.json +++ b/src/test/resources/tst_manifests/golang/go_mod_light_no_ignore/expected_sbom_stack_analysis.json @@ -315,8 +315,7 @@ "ref": "pkg:golang/golang.org/x/example@v0.0.0", "dependsOn": [ "pkg:golang/github.com/spf13/cobra@v0.0.5", - "pkg:golang/golang.org/x/tools@v0.0.0-20210112183307-1e6ecd4bf1b0", - "pkg:golang/gopkg.in/yaml.v3@v3.0.1" + "pkg:golang/golang.org/x/tools@v0.0.0-20210112183307-1e6ecd4bf1b0" ] }, { diff --git a/src/test/resources/tst_manifests/golang/go_mod_no_ignore/expected_sbom_component_analysis.json b/src/test/resources/tst_manifests/golang/go_mod_no_ignore/expected_sbom_component_analysis.json index a4d48a3d..8875dc21 100644 --- a/src/test/resources/tst_manifests/golang/go_mod_no_ignore/expected_sbom_component_analysis.json +++ b/src/test/resources/tst_manifests/golang/go_mod_no_ignore/expected_sbom_component_analysis.json @@ -14,22 +14,6 @@ } }, "components" : [ - { - "type" : "library", - "bom-ref" : "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "group" : "github.com/davecgh", - "name" : "go-spew", - "version" : "v1.1.1", - "purl" : "pkg:golang/github.com/davecgh/go-spew@v1.1.1" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0", - "group" : "github.com/emicklei/go-restful", - "name" : "v3", - "version" : "v3.9.0", - "purl" : "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0" - }, { "type" : "library", "bom-ref" : "pkg:golang/github.com/gin-gonic/gin@v1.9.1", @@ -38,78 +22,6 @@ "version" : "v1.9.1", "purl" : "pkg:golang/github.com/gin-gonic/gin@v1.9.1" }, - { - "type" : "library", - "bom-ref" : "pkg:golang/github.com/go-logr/logr@v1.2.3", - "group" : "github.com/go-logr", - "name" : "logr", - "version" : "v1.2.3", - "purl" : "pkg:golang/github.com/go-logr/logr@v1.2.3" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5", - "group" : "github.com/go-openapi", - "name" : "jsonpointer", - "version" : "v0.19.5", - "purl" : "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/github.com/go-openapi/jsonreference@v0.20.0", - "group" : "github.com/go-openapi", - "name" : "jsonreference", - "version" : "v0.20.0", - "purl" : "pkg:golang/github.com/go-openapi/jsonreference@v0.20.0" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/github.com/go-openapi/swag@v0.19.14", - "group" : "github.com/go-openapi", - "name" : "swag", - "version" : "v0.19.14", - "purl" : "pkg:golang/github.com/go-openapi/swag@v0.19.14" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/github.com/gogo/protobuf@v1.3.2", - "group" : "github.com/gogo", - "name" : "protobuf", - "version" : "v1.3.2", - "purl" : "pkg:golang/github.com/gogo/protobuf@v1.3.2" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/github.com/golang/protobuf@v1.5.2", - "group" : "github.com/golang", - "name" : "protobuf", - "version" : "v1.5.2", - "purl" : "pkg:golang/github.com/golang/protobuf@v1.5.2" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/github.com/google/gnostic@v0.5.7-v3refs", - "group" : "github.com/google", - "name" : "gnostic", - "version" : "v0.5.7-v3refs", - "purl" : "pkg:golang/github.com/google/gnostic@v0.5.7-v3refs" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/github.com/google/go-cmp@v0.5.9", - "group" : "github.com/google", - "name" : "go-cmp", - "version" : "v0.5.9", - "purl" : "pkg:golang/github.com/google/go-cmp@v0.5.9" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/github.com/google/gofuzz@v1.1.0", - "group" : "github.com/google", - "name" : "gofuzz", - "version" : "v1.1.0", - "purl" : "pkg:golang/github.com/google/gofuzz@v1.1.0" - }, { "type" : "library", "bom-ref" : "pkg:golang/github.com/google/uuid@v1.1.2", @@ -118,14 +30,6 @@ "version" : "v1.1.2", "purl" : "pkg:golang/github.com/google/uuid@v1.1.2" }, - { - "type" : "library", - "bom-ref" : "pkg:golang/github.com/imdario/mergo@v0.3.6", - "group" : "github.com/imdario", - "name" : "mergo", - "version" : "v0.3.6", - "purl" : "pkg:golang/github.com/imdario/mergo@v0.3.6" - }, { "type" : "library", "bom-ref" : "pkg:golang/github.com/jessevdk/go-flags@v1.5.0", @@ -134,22 +38,6 @@ "version" : "v1.5.0", "purl" : "pkg:golang/github.com/jessevdk/go-flags@v1.5.0" }, - { - "type" : "library", - "bom-ref" : "pkg:golang/github.com/josharian/intern@v1.0.0", - "group" : "github.com/josharian", - "name" : "intern", - "version" : "v1.0.0", - "purl" : "pkg:golang/github.com/josharian/intern@v1.0.0" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/github.com/json-iterator/go@v1.1.12", - "group" : "github.com/json-iterator", - "name" : "go", - "version" : "v1.1.12", - "purl" : "pkg:golang/github.com/json-iterator/go@v1.1.12" - }, { "type" : "library", "bom-ref" : "pkg:golang/github.com/kr/pretty@v0.3.1", @@ -158,134 +46,6 @@ "version" : "v0.3.1", "purl" : "pkg:golang/github.com/kr/pretty@v0.3.1" }, - { - "type" : "library", - "bom-ref" : "pkg:golang/github.com/kr/text@v0.2.0", - "group" : "github.com/kr", - "name" : "text", - "version" : "v0.2.0", - "purl" : "pkg:golang/github.com/kr/text@v0.2.0" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/github.com/mailru/easyjson@v0.7.6", - "group" : "github.com/mailru", - "name" : "easyjson", - "version" : "v0.7.6", - "purl" : "pkg:golang/github.com/mailru/easyjson@v0.7.6" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", - "group" : "github.com/modern-go", - "name" : "concurrent", - "version" : "v0.0.0-20180306012644-bacd9c7ef1dd", - "purl" : "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/github.com/modern-go/reflect2@v1.0.2", - "group" : "github.com/modern-go", - "name" : "reflect2", - "version" : "v1.0.2", - "purl" : "pkg:golang/github.com/modern-go/reflect2@v1.0.2" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", - "group" : "github.com/munnerz", - "name" : "goautoneg", - "version" : "v0.0.0-20191010083416-a7dc8b61c822", - "purl" : "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0", - "group" : "github.com/rogpeppe", - "name" : "go-internal", - "version" : "v1.9.0", - "purl" : "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/github.com/spf13/pflag@v1.0.5", - "group" : "github.com/spf13", - "name" : "pflag", - "version" : "v1.0.5", - "purl" : "pkg:golang/github.com/spf13/pflag@v1.0.5" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/golang.org/x/net@v0.10.0", - "group" : "golang.org/x", - "name" : "net", - "version" : "v0.10.0", - "purl" : "pkg:golang/golang.org/x/net@v0.10.0" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b", - "group" : "golang.org/x", - "name" : "oauth2", - "version" : "v0.0.0-20220223155221-ee480838109b", - "purl" : "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/golang.org/x/sys@v0.8.0", - "group" : "golang.org/x", - "name" : "sys", - "version" : "v0.8.0", - "purl" : "pkg:golang/golang.org/x/sys@v0.8.0" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/golang.org/x/term@v0.8.0", - "group" : "golang.org/x", - "name" : "term", - "version" : "v0.8.0", - "purl" : "pkg:golang/golang.org/x/term@v0.8.0" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/golang.org/x/text@v0.9.0", - "group" : "golang.org/x", - "name" : "text", - "version" : "v0.9.0", - "purl" : "pkg:golang/golang.org/x/text@v0.9.0" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8", - "group" : "golang.org/x", - "name" : "time", - "version" : "v0.0.0-20220210224613-90d013bbcef8", - "purl" : "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/google.golang.org/appengine@v1.6.7", - "group" : "google.golang.org", - "name" : "appengine", - "version" : "v1.6.7", - "purl" : "pkg:golang/google.golang.org/appengine@v1.6.7" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/google.golang.org/protobuf@v1.30.0", - "group" : "google.golang.org", - "name" : "protobuf", - "version" : "v1.30.0", - "purl" : "pkg:golang/google.golang.org/protobuf@v1.30.0" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/gopkg.in/inf.v0@v0.9.1", - "group" : "gopkg.in", - "name" : "inf.v0", - "version" : "v0.9.1", - "purl" : "pkg:golang/gopkg.in/inf.v0@v0.9.1" - }, { "type" : "library", "bom-ref" : "pkg:golang/gopkg.in/yaml.v2@v2.4.0", @@ -294,22 +54,6 @@ "version" : "v2.4.0", "purl" : "pkg:golang/gopkg.in/yaml.v2@v2.4.0" }, - { - "type" : "library", - "bom-ref" : "pkg:golang/gopkg.in/yaml.v3@v3.0.1", - "group" : "gopkg.in", - "name" : "yaml.v3", - "version" : "v3.0.1", - "purl" : "pkg:golang/gopkg.in/yaml.v3@v3.0.1" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/k8s.io/api@v0.26.1", - "group" : "k8s.io", - "name" : "api", - "version" : "v0.26.1", - "purl" : "pkg:golang/k8s.io/api@v0.26.1" - }, { "type" : "library", "bom-ref" : "pkg:golang/k8s.io/apimachinery@v0.26.1", @@ -325,255 +69,41 @@ "name" : "client-go", "version" : "v0.26.1", "purl" : "pkg:golang/k8s.io/client-go@v0.26.1" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/k8s.io/klog/v2@v2.80.1", - "group" : "k8s.io/klog", - "name" : "v2", - "version" : "v2.80.1", - "purl" : "pkg:golang/k8s.io/klog/v2@v2.80.1" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280", - "group" : "k8s.io", - "name" : "kube-openapi", - "version" : "v0.0.0-20221012153701-172d655c2280", - "purl" : "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", - "group" : "k8s.io", - "name" : "utils", - "version" : "v0.0.0-20221107191617-1a15be271d1d", - "purl" : "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2", - "group" : "sigs.k8s.io", - "name" : "json", - "version" : "v0.0.0-20220713155537-f223a00ba0e2", - "purl" : "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", - "group" : "sigs.k8s.io/structured-merge-diff", - "name" : "v4", - "version" : "v4.2.3", - "purl" : "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/sigs.k8s.io/yaml@v1.3.0", - "group" : "sigs.k8s.io", - "name" : "yaml", - "version" : "v1.3.0", - "purl" : "pkg:golang/sigs.k8s.io/yaml@v1.3.0" } ], "dependencies" : [ { "ref" : "pkg:golang/github.com/rhecosystemappeng/saasi/deployer@v0.0.0", "dependsOn" : [ - "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0", "pkg:golang/github.com/gin-gonic/gin@v1.9.1", - "pkg:golang/github.com/go-logr/logr@v1.2.3", - "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5", - "pkg:golang/github.com/go-openapi/jsonreference@v0.20.0", - "pkg:golang/github.com/go-openapi/swag@v0.19.14", - "pkg:golang/github.com/gogo/protobuf@v1.3.2", - "pkg:golang/github.com/golang/protobuf@v1.5.2", - "pkg:golang/github.com/google/gnostic@v0.5.7-v3refs", - "pkg:golang/github.com/google/go-cmp@v0.5.9", - "pkg:golang/github.com/google/gofuzz@v1.1.0", "pkg:golang/github.com/google/uuid@v1.1.2", - "pkg:golang/github.com/imdario/mergo@v0.3.6", "pkg:golang/github.com/jessevdk/go-flags@v1.5.0", - "pkg:golang/github.com/josharian/intern@v1.0.0", - "pkg:golang/github.com/json-iterator/go@v1.1.12", "pkg:golang/github.com/kr/pretty@v0.3.1", - "pkg:golang/github.com/kr/text@v0.2.0", - "pkg:golang/github.com/mailru/easyjson@v0.7.6", - "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", - "pkg:golang/github.com/modern-go/reflect2@v1.0.2", - "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", - "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0", - "pkg:golang/github.com/spf13/pflag@v1.0.5", - "pkg:golang/golang.org/x/net@v0.10.0", - "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b", - "pkg:golang/golang.org/x/sys@v0.8.0", - "pkg:golang/golang.org/x/term@v0.8.0", - "pkg:golang/golang.org/x/text@v0.9.0", - "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8", - "pkg:golang/google.golang.org/appengine@v1.6.7", - "pkg:golang/google.golang.org/protobuf@v1.30.0", - "pkg:golang/gopkg.in/inf.v0@v0.9.1", "pkg:golang/gopkg.in/yaml.v2@v2.4.0", - "pkg:golang/gopkg.in/yaml.v3@v3.0.1", - "pkg:golang/k8s.io/api@v0.26.1", "pkg:golang/k8s.io/apimachinery@v0.26.1", - "pkg:golang/k8s.io/client-go@v0.26.1", - "pkg:golang/k8s.io/klog/v2@v2.80.1", - "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280", - "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", - "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2", - "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", - "pkg:golang/sigs.k8s.io/yaml@v1.3.0" + "pkg:golang/k8s.io/client-go@v0.26.1" ] }, - { - "ref" : "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0", - "dependsOn" : [ ] - }, { "ref" : "pkg:golang/github.com/gin-gonic/gin@v1.9.1", "dependsOn" : [ ] }, - { - "ref" : "pkg:golang/github.com/go-logr/logr@v1.2.3", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/github.com/go-openapi/jsonreference@v0.20.0", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/github.com/go-openapi/swag@v0.19.14", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/github.com/gogo/protobuf@v1.3.2", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/github.com/golang/protobuf@v1.5.2", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/github.com/google/gnostic@v0.5.7-v3refs", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/github.com/google/go-cmp@v0.5.9", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/github.com/google/gofuzz@v1.1.0", - "dependsOn" : [ ] - }, { "ref" : "pkg:golang/github.com/google/uuid@v1.1.2", "dependsOn" : [ ] }, - { - "ref" : "pkg:golang/github.com/imdario/mergo@v0.3.6", - "dependsOn" : [ ] - }, { "ref" : "pkg:golang/github.com/jessevdk/go-flags@v1.5.0", "dependsOn" : [ ] }, - { - "ref" : "pkg:golang/github.com/josharian/intern@v1.0.0", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/github.com/json-iterator/go@v1.1.12", - "dependsOn" : [ ] - }, { "ref" : "pkg:golang/github.com/kr/pretty@v0.3.1", "dependsOn" : [ ] }, - { - "ref" : "pkg:golang/github.com/kr/text@v0.2.0", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/github.com/mailru/easyjson@v0.7.6", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/github.com/modern-go/reflect2@v1.0.2", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/github.com/spf13/pflag@v1.0.5", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/golang.org/x/net@v0.10.0", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/golang.org/x/sys@v0.8.0", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/golang.org/x/term@v0.8.0", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/golang.org/x/text@v0.9.0", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/google.golang.org/appengine@v1.6.7", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/google.golang.org/protobuf@v1.30.0", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/gopkg.in/inf.v0@v0.9.1", - "dependsOn" : [ ] - }, { "ref" : "pkg:golang/gopkg.in/yaml.v2@v2.4.0", "dependsOn" : [ ] }, - { - "ref" : "pkg:golang/gopkg.in/yaml.v3@v3.0.1", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/k8s.io/api@v0.26.1", - "dependsOn" : [ ] - }, { "ref" : "pkg:golang/k8s.io/apimachinery@v0.26.1", "dependsOn" : [ ] @@ -581,30 +111,6 @@ { "ref" : "pkg:golang/k8s.io/client-go@v0.26.1", "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/k8s.io/klog/v2@v2.80.1", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/sigs.k8s.io/yaml@v1.3.0", - "dependsOn" : [ ] } ] -} \ No newline at end of file +} diff --git a/src/test/resources/tst_manifests/golang/go_mod_no_ignore/expected_sbom_stack_analysis.json b/src/test/resources/tst_manifests/golang/go_mod_no_ignore/expected_sbom_stack_analysis.json index d5f349cb..6b5e4d4c 100644 --- a/src/test/resources/tst_manifests/golang/go_mod_no_ignore/expected_sbom_stack_analysis.json +++ b/src/test/resources/tst_manifests/golang/go_mod_no_ignore/expected_sbom_stack_analysis.json @@ -316,14 +316,6 @@ "version": "v1.0.0-20200227125254-8fa46927fb4f", "purl": "pkg:golang/gopkg.in/check.v1@v1.0.0-20200227125254-8fa46927fb4f" }, - { - "type": "library", - "bom-ref": "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0", - "group": "github.com/emicklei/go-restful", - "name": "v3", - "version": "v3.9.0", - "purl": "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0" - }, { "type": "library", "bom-ref": "pkg:golang/github.com/gin-gonic/gin@v1.9.1", @@ -332,38 +324,6 @@ "version": "v1.9.1", "purl": "pkg:golang/github.com/gin-gonic/gin@v1.9.1" }, - { - "type": "library", - "bom-ref": "pkg:golang/github.com/go-openapi/swag@v0.19.14", - "group": "github.com/go-openapi", - "name": "swag", - "version": "v0.19.14", - "purl": "pkg:golang/github.com/go-openapi/swag@v0.19.14" - }, - { - "type": "library", - "bom-ref": "pkg:golang/github.com/gogo/protobuf@v1.3.2", - "group": "github.com/gogo", - "name": "protobuf", - "version": "v1.3.2", - "purl": "pkg:golang/github.com/gogo/protobuf@v1.3.2" - }, - { - "type": "library", - "bom-ref": "pkg:golang/github.com/google/gnostic@v0.5.7-v3refs", - "group": "github.com/google", - "name": "gnostic", - "version": "v0.5.7-v3refs", - "purl": "pkg:golang/github.com/google/gnostic@v0.5.7-v3refs" - }, - { - "type": "library", - "bom-ref": "pkg:golang/github.com/google/gofuzz@v1.1.0", - "group": "github.com/google", - "name": "gofuzz", - "version": "v1.1.0", - "purl": "pkg:golang/github.com/google/gofuzz@v1.1.0" - }, { "type": "library", "bom-ref": "pkg:golang/github.com/google/uuid@v1.1.2", @@ -372,14 +332,6 @@ "version": "v1.1.2", "purl": "pkg:golang/github.com/google/uuid@v1.1.2" }, - { - "type": "library", - "bom-ref": "pkg:golang/github.com/imdario/mergo@v0.3.6", - "group": "github.com/imdario", - "name": "mergo", - "version": "v0.3.6", - "purl": "pkg:golang/github.com/imdario/mergo@v0.3.6" - }, { "type": "library", "bom-ref": "pkg:golang/github.com/jessevdk/go-flags@v1.5.0", @@ -388,14 +340,6 @@ "version": "v1.5.0", "purl": "pkg:golang/github.com/jessevdk/go-flags@v1.5.0" }, - { - "type": "library", - "bom-ref": "pkg:golang/github.com/json-iterator/go@v1.1.12", - "group": "github.com/json-iterator", - "name": "go", - "version": "v1.1.12", - "purl": "pkg:golang/github.com/json-iterator/go@v1.1.12" - }, { "type": "library", "bom-ref": "pkg:golang/github.com/kr/pretty@v0.3.1", @@ -404,102 +348,6 @@ "version": "v0.3.1", "purl": "pkg:golang/github.com/kr/pretty@v0.3.1" }, - { - "type": "library", - "bom-ref": "pkg:golang/github.com/kr/text@v0.2.0", - "group": "github.com/kr", - "name": "text", - "version": "v0.2.0", - "purl": "pkg:golang/github.com/kr/text@v0.2.0" - }, - { - "type": "library", - "bom-ref": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", - "group": "github.com/modern-go", - "name": "concurrent", - "version": "v0.0.0-20180306012644-bacd9c7ef1dd", - "purl": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd" - }, - { - "type": "library", - "bom-ref": "pkg:golang/github.com/modern-go/reflect2@v1.0.2", - "group": "github.com/modern-go", - "name": "reflect2", - "version": "v1.0.2", - "purl": "pkg:golang/github.com/modern-go/reflect2@v1.0.2" - }, - { - "type": "library", - "bom-ref": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", - "group": "github.com/munnerz", - "name": "goautoneg", - "version": "v0.0.0-20191010083416-a7dc8b61c822", - "purl": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822" - }, - { - "type": "library", - "bom-ref": "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0", - "group": "github.com/rogpeppe", - "name": "go-internal", - "version": "v1.9.0", - "purl": "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0" - }, - { - "type": "library", - "bom-ref": "pkg:golang/github.com/spf13/pflag@v1.0.5", - "group": "github.com/spf13", - "name": "pflag", - "version": "v1.0.5", - "purl": "pkg:golang/github.com/spf13/pflag@v1.0.5" - }, - { - "type": "library", - "bom-ref": "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b", - "group": "golang.org/x", - "name": "oauth2", - "version": "v0.0.0-20220223155221-ee480838109b", - "purl": "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b" - }, - { - "type": "library", - "bom-ref": "pkg:golang/golang.org/x/term@v0.8.0", - "group": "golang.org/x", - "name": "term", - "version": "v0.8.0", - "purl": "pkg:golang/golang.org/x/term@v0.8.0" - }, - { - "type": "library", - "bom-ref": "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8", - "group": "golang.org/x", - "name": "time", - "version": "v0.0.0-20220210224613-90d013bbcef8", - "purl": "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8" - }, - { - "type": "library", - "bom-ref": "pkg:golang/google.golang.org/protobuf@v1.30.0", - "group": "google.golang.org", - "name": "protobuf", - "version": "v1.30.0", - "purl": "pkg:golang/google.golang.org/protobuf@v1.30.0" - }, - { - "type": "library", - "bom-ref": "pkg:golang/gopkg.in/inf.v0@v0.9.1", - "group": "gopkg.in", - "name": "inf.v0", - "version": "v0.9.1", - "purl": "pkg:golang/gopkg.in/inf.v0@v0.9.1" - }, - { - "type": "library", - "bom-ref": "pkg:golang/k8s.io/api@v0.26.1", - "group": "k8s.io", - "name": "api", - "version": "v0.26.1", - "purl": "pkg:golang/k8s.io/api@v0.26.1" - }, { "type": "library", "bom-ref": "pkg:golang/k8s.io/apimachinery@v0.26.1", @@ -516,46 +364,6 @@ "version": "v0.26.1", "purl": "pkg:golang/k8s.io/client-go@v0.26.1" }, - { - "type": "library", - "bom-ref": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280", - "group": "k8s.io", - "name": "kube-openapi", - "version": "v0.0.0-20221012153701-172d655c2280", - "purl": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280" - }, - { - "type": "library", - "bom-ref": "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", - "group": "k8s.io", - "name": "utils", - "version": "v0.0.0-20221107191617-1a15be271d1d", - "purl": "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d" - }, - { - "type": "library", - "bom-ref": "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2", - "group": "sigs.k8s.io", - "name": "json", - "version": "v0.0.0-20220713155537-f223a00ba0e2", - "purl": "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2" - }, - { - "type": "library", - "bom-ref": "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", - "group": "sigs.k8s.io/structured-merge-diff", - "name": "v4", - "version": "v4.2.3", - "purl": "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3" - }, - { - "type": "library", - "bom-ref": "pkg:golang/sigs.k8s.io/yaml@v1.3.0", - "group": "sigs.k8s.io", - "name": "yaml", - "version": "v1.3.0", - "purl": "pkg:golang/sigs.k8s.io/yaml@v1.3.0" - }, { "type": "library", "bom-ref": "pkg:golang/golang.org/x/xerrors@v0.0.0-20200804184101-5ec99f83aff1", @@ -572,6 +380,14 @@ "version": "v0.9.0", "purl": "pkg:golang/golang.org/x/crypto@v0.9.0" }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/gogo/protobuf@v1.3.2", + "group": "github.com/gogo", + "name": "protobuf", + "version": "v1.3.2", + "purl": "pkg:golang/github.com/gogo/protobuf@v1.3.2" + }, { "type": "library", "bom-ref": "pkg:golang/github.com/kisielk/errcheck@v1.5.0", @@ -588,6 +404,14 @@ "version": "v1.0.0", "purl": "pkg:golang/github.com/kisielk/gotool@v1.0.0" }, + { + "type": "library", + "bom-ref": "pkg:golang/google.golang.org/protobuf@v1.30.0", + "group": "google.golang.org", + "name": "protobuf", + "version": "v1.30.0", + "purl": "pkg:golang/google.golang.org/protobuf@v1.30.0" + }, { "type": "library", "bom-ref": "pkg:golang/github.com/golang/mock@v1.4.4", @@ -612,6 +436,22 @@ "version": "v0.0.0-20201020160332-67f06af15bc9", "purl": "pkg:golang/golang.org/x/sync@v0.0.0-20201020160332-67f06af15bc9" }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/go-openapi/swag@v0.19.14", + "group": "github.com/go-openapi", + "name": "swag", + "version": "v0.19.14", + "purl": "pkg:golang/github.com/go-openapi/swag@v0.19.14" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/kr/text@v0.2.0", + "group": "github.com/kr", + "name": "text", + "version": "v0.2.0", + "purl": "pkg:golang/github.com/kr/text@v0.2.0" + }, { "type": "library", "bom-ref": "pkg:golang/github.com/niemeyer/pretty@v0.0.0-20200227124842-a10e7caefd8e", @@ -652,6 +492,22 @@ "version": "v4.12.0+incompatible", "purl": "pkg:golang/github.com/evanphx/json-patch@v4.12.0%2Bincompatible" }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/google/gnostic@v0.5.7-v3refs", + "group": "github.com/google", + "name": "gnostic", + "version": "v0.5.7-v3refs", + "purl": "pkg:golang/github.com/google/gnostic@v0.5.7-v3refs" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/google/gofuzz@v1.1.0", + "group": "github.com/google", + "name": "gofuzz", + "version": "v1.1.0", + "purl": "pkg:golang/github.com/google/gofuzz@v1.1.0" + }, { "type": "library", "bom-ref": "pkg:golang/github.com/moby/spdystream@v0.2.0", @@ -668,6 +524,86 @@ "version": "v0.0.0-20140419014527-cca7078d478f", "purl": "pkg:golang/github.com/mxk/go-flowrate@v0.0.0-20140419014527-cca7078d478f" }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/spf13/pflag@v1.0.5", + "group": "github.com/spf13", + "name": "pflag", + "version": "v1.0.5", + "purl": "pkg:golang/github.com/spf13/pflag@v1.0.5" + }, + { + "type": "library", + "bom-ref": "pkg:golang/gopkg.in/inf.v0@v0.9.1", + "group": "gopkg.in", + "name": "inf.v0", + "version": "v0.9.1", + "purl": "pkg:golang/gopkg.in/inf.v0@v0.9.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280", + "group": "k8s.io", + "name": "kube-openapi", + "version": "v0.0.0-20221012153701-172d655c2280", + "purl": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", + "group": "k8s.io", + "name": "utils", + "version": "v0.0.0-20221107191617-1a15be271d1d", + "purl": "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d" + }, + { + "type": "library", + "bom-ref": "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2", + "group": "sigs.k8s.io", + "name": "json", + "version": "v0.0.0-20220713155537-f223a00ba0e2", + "purl": "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", + "group": "sigs.k8s.io/structured-merge-diff", + "name": "v4", + "version": "v4.2.3", + "purl": "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3" + }, + { + "type": "library", + "bom-ref": "pkg:golang/sigs.k8s.io/yaml@v1.3.0", + "group": "sigs.k8s.io", + "name": "yaml", + "version": "v1.3.0", + "purl": "pkg:golang/sigs.k8s.io/yaml@v1.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/json-iterator/go@v1.1.12", + "group": "github.com/json-iterator", + "name": "go", + "version": "v1.1.12", + "purl": "pkg:golang/github.com/json-iterator/go@v1.1.12" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", + "group": "github.com/modern-go", + "name": "concurrent", + "version": "v0.0.0-20180306012644-bacd9c7ef1dd", + "purl": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/modern-go/reflect2@v1.0.2", + "group": "github.com/modern-go", + "name": "reflect2", + "version": "v1.0.2", + "purl": "pkg:golang/github.com/modern-go/reflect2@v1.0.2" + }, { "type": "library", "bom-ref": "pkg:golang/github.com/onsi/ginkgo/v2@v2.4.0", @@ -852,6 +788,14 @@ "version": "v0.0.0-20180305231024-9cad4c3443a7", "purl": "pkg:golang/github.com/gregjones/httpcache@v0.0.0-20180305231024-9cad4c3443a7" }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/imdario/mergo@v0.3.6", + "group": "github.com/imdario", + "name": "mergo", + "version": "v0.3.6", + "purl": "pkg:golang/github.com/imdario/mergo@v0.3.6" + }, { "type": "library", "bom-ref": "pkg:golang/github.com/peterbourgon/diskv@v2.0.1%2Bincompatible", @@ -860,6 +804,46 @@ "version": "v2.0.1+incompatible", "purl": "pkg:golang/github.com/peterbourgon/diskv@v2.0.1%2Bincompatible" }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b", + "group": "golang.org/x", + "name": "oauth2", + "version": "v0.0.0-20220223155221-ee480838109b", + "purl": "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/term@v0.8.0", + "group": "golang.org/x", + "name": "term", + "version": "v0.8.0", + "purl": "pkg:golang/golang.org/x/term@v0.8.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8", + "group": "golang.org/x", + "name": "time", + "version": "v0.0.0-20220210224613-90d013bbcef8", + "purl": "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/api@v0.26.1", + "group": "k8s.io", + "name": "api", + "version": "v0.26.1", + "purl": "pkg:golang/k8s.io/api@v0.26.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0", + "group": "github.com/emicklei/go-restful", + "name": "v3", + "version": "v3.9.0", + "purl": "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0" + }, { "type": "library", "bom-ref": "pkg:golang/github.com/google/btree@v1.0.1", @@ -868,6 +852,22 @@ "version": "v1.0.1", "purl": "pkg:golang/github.com/google/btree@v1.0.1" }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", + "group": "github.com/munnerz", + "name": "goautoneg", + "version": "v0.0.0-20191010083416-a7dc8b61c822", + "purl": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0", + "group": "github.com/rogpeppe", + "name": "go-internal", + "version": "v1.9.0", + "purl": "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0" + }, { "type": "library", "bom-ref": "pkg:golang/gopkg.in/errgo.v2@v2.1.0", @@ -1121,51 +1121,13 @@ { "ref": "pkg:golang/github.com/rhecosystemappeng/saasi/deployer@v0.0.0", "dependsOn": [ - "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0", "pkg:golang/github.com/gin-gonic/gin@v1.9.1", - "pkg:golang/github.com/go-logr/logr@v1.2.3", - "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5", - "pkg:golang/github.com/go-openapi/jsonreference@v0.20.0", - "pkg:golang/github.com/go-openapi/swag@v0.19.14", - "pkg:golang/github.com/gogo/protobuf@v1.3.2", - "pkg:golang/github.com/golang/protobuf@v1.5.2", - "pkg:golang/github.com/google/gnostic@v0.5.7-v3refs", - "pkg:golang/github.com/google/go-cmp@v0.5.9", - "pkg:golang/github.com/google/gofuzz@v1.1.0", "pkg:golang/github.com/google/uuid@v1.1.2", - "pkg:golang/github.com/imdario/mergo@v0.3.6", - "pkg:golang/github.com/jessevdk/go-flags@v1.5.0", - "pkg:golang/github.com/josharian/intern@v1.0.0", - "pkg:golang/github.com/json-iterator/go@v1.1.12", - "pkg:golang/github.com/kr/pretty@v0.3.1", - "pkg:golang/github.com/kr/text@v0.2.0", - "pkg:golang/github.com/mailru/easyjson@v0.7.6", - "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", - "pkg:golang/github.com/modern-go/reflect2@v1.0.2", - "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", - "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0", - "pkg:golang/github.com/spf13/pflag@v1.0.5", - "pkg:golang/golang.org/x/net@v0.10.0", - "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b", - "pkg:golang/golang.org/x/sys@v0.8.0", - "pkg:golang/golang.org/x/term@v0.8.0", - "pkg:golang/golang.org/x/text@v0.9.0", - "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8", - "pkg:golang/google.golang.org/appengine@v1.6.7", - "pkg:golang/google.golang.org/protobuf@v1.30.0", - "pkg:golang/gopkg.in/inf.v0@v0.9.1", - "pkg:golang/gopkg.in/yaml.v2@v2.4.0", - "pkg:golang/gopkg.in/yaml.v3@v3.0.1", - "pkg:golang/k8s.io/api@v0.26.1", - "pkg:golang/k8s.io/apimachinery@v0.26.1", - "pkg:golang/k8s.io/client-go@v0.26.1", - "pkg:golang/k8s.io/klog/v2@v2.80.1", - "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280", - "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", - "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2", - "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", - "pkg:golang/sigs.k8s.io/yaml@v1.3.0" + "pkg:golang/github.com/jessevdk/go-flags@v1.5.0", + "pkg:golang/github.com/kr/pretty@v0.3.1", + "pkg:golang/gopkg.in/yaml.v2@v2.4.0", + "pkg:golang/k8s.io/apimachinery@v0.26.1", + "pkg:golang/k8s.io/client-go@v0.26.1" ] }, { @@ -1555,10 +1517,6 @@ "ref": "pkg:golang/gopkg.in/check.v1@v1.0.0-20200227125254-8fa46927fb4f", "dependsOn": [] }, - { - "ref": "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0", - "dependsOn": [] - }, { "ref": "pkg:golang/github.com/gin-gonic/gin@v1.9.1", "dependsOn": [ @@ -1592,125 +1550,144 @@ ] }, { - "ref": "pkg:golang/github.com/go-openapi/swag@v0.19.14", + "ref": "pkg:golang/github.com/google/uuid@v1.1.2", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/jessevdk/go-flags@v1.5.0", "dependsOn": [ - "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "pkg:golang/github.com/kr/pretty@v0.3.1", - "pkg:golang/github.com/mailru/easyjson@v0.7.6", - "pkg:golang/github.com/stretchr/testify@v1.8.3", - "pkg:golang/gopkg.in/check.v1@v1.0.0-20200227125254-8fa46927fb4f", - "pkg:golang/gopkg.in/yaml.v2@v2.4.0", - "pkg:golang/github.com/kr/text@v0.2.0", - "pkg:golang/github.com/niemeyer/pretty@v0.0.0-20200227124842-a10e7caefd8e", - "pkg:golang/gopkg.in/yaml.v3@v3.0.1" + "pkg:golang/golang.org/x/sys@v0.8.0" ] }, { - "ref": "pkg:golang/github.com/gogo/protobuf@v1.3.2", + "ref": "pkg:golang/github.com/kr/pretty@v0.3.1", "dependsOn": [ - "pkg:golang/github.com/kisielk/errcheck@v1.5.0", - "pkg:golang/github.com/kisielk/gotool@v1.0.0", - "pkg:golang/golang.org/x/tools@v0.6.0" + "pkg:golang/github.com/kr/text@v0.2.0", + "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0" ] }, { - "ref": "pkg:golang/github.com/google/gnostic@v0.5.7-v3refs", + "ref": "pkg:golang/k8s.io/apimachinery@v0.26.1", "dependsOn": [ + "pkg:golang/github.com/armon/go-socks5@v0.0.0-20160902184237-e75332964ef5", "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "pkg:golang/github.com/docopt/docopt-go@v0.0.0-20180111231733-ee0de3bc6815", + "pkg:golang/github.com/elazarl/goproxy@v0.0.0-20180725130230-947c36da3153", + "pkg:golang/github.com/evanphx/json-patch@v4.12.0%2Bincompatible", + "pkg:golang/github.com/gogo/protobuf@v1.3.2", "pkg:golang/github.com/golang/protobuf@v1.5.2", - "pkg:golang/github.com/kr/pretty@v0.3.1", - "pkg:golang/github.com/stoewer/go-strcase@v1.2.0", - "pkg:golang/golang.org/x/tools@v0.6.0", - "pkg:golang/golang.org/x/xerrors@v0.0.0-20200804184101-5ec99f83aff1", - "pkg:golang/google.golang.org/genproto@v0.0.0-20201019141844-1ed22bb0c154", + "pkg:golang/github.com/google/gnostic@v0.5.7-v3refs", + "pkg:golang/github.com/google/go-cmp@v0.5.9", + "pkg:golang/github.com/google/gofuzz@v1.1.0", + "pkg:golang/github.com/google/uuid@v1.1.2", + "pkg:golang/github.com/moby/spdystream@v0.2.0", + "pkg:golang/github.com/mxk/go-flowrate@v0.0.0-20140419014527-cca7078d478f", + "pkg:golang/github.com/spf13/pflag@v1.0.5", + "pkg:golang/github.com/stretchr/testify@v1.8.3", + "pkg:golang/golang.org/x/net@v0.10.0", + "pkg:golang/gopkg.in/inf.v0@v0.9.1", + "pkg:golang/k8s.io/klog/v2@v2.80.1", + "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280", + "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", + "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2", + "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", + "pkg:golang/sigs.k8s.io/yaml@v1.3.0", + "pkg:golang/github.com/go-logr/logr@v1.2.3", + "pkg:golang/github.com/json-iterator/go@v1.1.12", + "pkg:golang/github.com/kr/text@v0.2.0", + "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", + "pkg:golang/github.com/modern-go/reflect2@v1.0.2", + "pkg:golang/github.com/niemeyer/pretty@v0.0.0-20200227124842-a10e7caefd8e", + "pkg:golang/github.com/onsi/ginkgo/v2@v2.4.0", + "pkg:golang/github.com/onsi/gomega@v1.23.0", + "pkg:golang/github.com/pkg/errors@v0.9.1", + "pkg:golang/github.com/pmezard/go-difflib@v1.0.0", + "pkg:golang/golang.org/x/text@v0.9.0", "pkg:golang/google.golang.org/protobuf@v1.30.0", "pkg:golang/gopkg.in/check.v1@v1.0.0-20200227125254-8fa46927fb4f", + "pkg:golang/gopkg.in/yaml.v2@v2.4.0", "pkg:golang/gopkg.in/yaml.v3@v3.0.1" ] }, { - "ref": "pkg:golang/github.com/google/gofuzz@v1.1.0", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/google/uuid@v1.1.2", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/imdario/mergo@v0.3.6", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/jessevdk/go-flags@v1.5.0", - "dependsOn": [ - "pkg:golang/golang.org/x/sys@v0.8.0" - ] - }, - { - "ref": "pkg:golang/github.com/json-iterator/go@v1.1.12", + "ref": "pkg:golang/k8s.io/client-go@v0.26.1", "dependsOn": [ "pkg:golang/github.com/davecgh/go-spew@v1.1.1", + "pkg:golang/github.com/evanphx/json-patch@v4.12.0%2Bincompatible", + "pkg:golang/github.com/gogo/protobuf@v1.3.2", + "pkg:golang/github.com/golang/groupcache@v0.0.0-20210331224755-41bb18bfe9da", + "pkg:golang/github.com/golang/protobuf@v1.5.2", + "pkg:golang/github.com/google/gnostic@v0.5.7-v3refs", + "pkg:golang/github.com/google/go-cmp@v0.5.9", "pkg:golang/github.com/google/gofuzz@v1.1.0", + "pkg:golang/github.com/google/uuid@v1.1.2", + "pkg:golang/github.com/gregjones/httpcache@v0.0.0-20180305231024-9cad4c3443a7", + "pkg:golang/github.com/imdario/mergo@v0.3.6", + "pkg:golang/github.com/peterbourgon/diskv@v2.0.1%2Bincompatible", + "pkg:golang/github.com/spf13/pflag@v1.0.5", + "pkg:golang/github.com/stretchr/testify@v1.8.3", + "pkg:golang/golang.org/x/net@v0.10.0", + "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b", + "pkg:golang/golang.org/x/term@v0.8.0", + "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8", + "pkg:golang/google.golang.org/protobuf@v1.30.0", + "pkg:golang/k8s.io/api@v0.26.1", + "pkg:golang/k8s.io/apimachinery@v0.26.1", + "pkg:golang/k8s.io/klog/v2@v2.80.1", + "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280", + "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", + "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", + "pkg:golang/sigs.k8s.io/yaml@v1.3.0", + "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0", + "pkg:golang/github.com/go-logr/logr@v1.2.3", + "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5", + "pkg:golang/github.com/go-openapi/jsonreference@v0.20.0", + "pkg:golang/github.com/go-openapi/swag@v0.19.14", + "pkg:golang/github.com/google/btree@v1.0.1", + "pkg:golang/github.com/josharian/intern@v1.0.0", + "pkg:golang/github.com/json-iterator/go@v1.1.12", + "pkg:golang/github.com/mailru/easyjson@v0.7.6", + "pkg:golang/github.com/moby/spdystream@v0.2.0", "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", "pkg:golang/github.com/modern-go/reflect2@v1.0.2", - "pkg:golang/github.com/stretchr/testify@v1.8.3" - ] - }, - { - "ref": "pkg:golang/github.com/kr/pretty@v0.3.1", - "dependsOn": [ - "pkg:golang/github.com/kr/text@v0.2.0", - "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0" - ] - }, - { - "ref": "pkg:golang/github.com/kr/text@v0.2.0", - "dependsOn": [ - "pkg:golang/github.com/kr/pty@v1.1.1", - "pkg:golang/github.com/creack/pty@v1.1.9" + "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", + "pkg:golang/github.com/pkg/errors@v0.9.1", + "pkg:golang/github.com/pmezard/go-difflib@v1.0.0", + "pkg:golang/golang.org/x/sys@v0.8.0", + "pkg:golang/golang.org/x/text@v0.9.0", + "pkg:golang/google.golang.org/appengine@v1.6.7", + "pkg:golang/gopkg.in/inf.v0@v0.9.1", + "pkg:golang/gopkg.in/yaml.v2@v2.4.0", + "pkg:golang/gopkg.in/yaml.v3@v3.0.1", + "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2" ] }, { - "ref": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/modern-go/reflect2@v1.0.2", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", + "ref": "pkg:golang/golang.org/x/xerrors@v0.0.0-20200804184101-5ec99f83aff1", "dependsOn": [] }, { - "ref": "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0", + "ref": "pkg:golang/golang.org/x/crypto@v0.9.0", "dependsOn": [ - "pkg:golang/gopkg.in/errgo.v2@v2.1.0", - "pkg:golang/github.com/pkg/diff@v0.0.0-20210226163009-20ebb0f2a09e" + "pkg:golang/golang.org/x/net@v0.10.0", + "pkg:golang/golang.org/x/sys@v0.8.0" ] }, { - "ref": "pkg:golang/github.com/spf13/pflag@v1.0.5", - "dependsOn": [] - }, - { - "ref": "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b", + "ref": "pkg:golang/github.com/gogo/protobuf@v1.3.2", "dependsOn": [ - "pkg:golang/cloud.google.com/go@v0.65.0", - "pkg:golang/golang.org/x/net@v0.10.0", - "pkg:golang/golang.org/x/sync@v0.0.0-20201020160332-67f06af15bc9", - "pkg:golang/google.golang.org/appengine@v1.6.7" + "pkg:golang/github.com/kisielk/errcheck@v1.5.0", + "pkg:golang/github.com/kisielk/gotool@v1.0.0", + "pkg:golang/golang.org/x/tools@v0.6.0" ] }, { - "ref": "pkg:golang/golang.org/x/term@v0.8.0", + "ref": "pkg:golang/github.com/kisielk/errcheck@v1.5.0", "dependsOn": [ - "pkg:golang/golang.org/x/sys@v0.8.0" + "pkg:golang/golang.org/x/tools@v0.6.0" ] }, { - "ref": "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8", + "ref": "pkg:golang/github.com/kisielk/gotool@v1.0.0", "dependsOn": [] }, { @@ -1722,133 +1699,105 @@ ] }, { - "ref": "pkg:golang/gopkg.in/inf.v0@v0.9.1", - "dependsOn": [] + "ref": "pkg:golang/github.com/golang/mock@v1.4.4", + "dependsOn": [ + "pkg:golang/golang.org/x/tools@v0.6.0", + "pkg:golang/rsc.io/quote/v3@v3.1.0" + ] }, { - "ref": "pkg:golang/k8s.io/api@v0.26.1", + "ref": "pkg:golang/rsc.io/quote/v3@v3.1.0", "dependsOn": [ - "pkg:golang/github.com/gogo/protobuf@v1.3.2", - "pkg:golang/github.com/stretchr/testify@v1.8.3", - "pkg:golang/k8s.io/apimachinery@v0.26.1", - "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "pkg:golang/github.com/go-logr/logr@v1.2.3", - "pkg:golang/github.com/golang/protobuf@v1.5.2", - "pkg:golang/github.com/google/go-cmp@v0.5.9", - "pkg:golang/github.com/google/gofuzz@v1.1.0", - "pkg:golang/github.com/json-iterator/go@v1.1.12", - "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", - "pkg:golang/github.com/modern-go/reflect2@v1.0.2", - "pkg:golang/github.com/pmezard/go-difflib@v1.0.0", - "pkg:golang/github.com/spf13/pflag@v1.0.5", - "pkg:golang/golang.org/x/net@v0.10.0", - "pkg:golang/golang.org/x/text@v0.9.0", - "pkg:golang/google.golang.org/protobuf@v1.30.0", - "pkg:golang/gopkg.in/inf.v0@v0.9.1", - "pkg:golang/gopkg.in/yaml.v2@v2.4.0", - "pkg:golang/gopkg.in/yaml.v3@v3.0.1", - "pkg:golang/k8s.io/klog/v2@v2.80.1", - "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", - "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2", - "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", - "pkg:golang/sigs.k8s.io/yaml@v1.3.0" + "pkg:golang/rsc.io/sampler@v1.3.0" ] }, { - "ref": "pkg:golang/k8s.io/apimachinery@v0.26.1", - "dependsOn": [ - "pkg:golang/github.com/armon/go-socks5@v0.0.0-20160902184237-e75332964ef5", - "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "pkg:golang/github.com/elazarl/goproxy@v0.0.0-20180725130230-947c36da3153", - "pkg:golang/github.com/evanphx/json-patch@v4.12.0%2Bincompatible", - "pkg:golang/github.com/gogo/protobuf@v1.3.2", - "pkg:golang/github.com/golang/protobuf@v1.5.2", - "pkg:golang/github.com/google/gnostic@v0.5.7-v3refs", - "pkg:golang/github.com/google/go-cmp@v0.5.9", - "pkg:golang/github.com/google/gofuzz@v1.1.0", - "pkg:golang/github.com/google/uuid@v1.1.2", - "pkg:golang/github.com/moby/spdystream@v0.2.0", - "pkg:golang/github.com/mxk/go-flowrate@v0.0.0-20140419014527-cca7078d478f", - "pkg:golang/github.com/spf13/pflag@v1.0.5", - "pkg:golang/github.com/stretchr/testify@v1.8.3", - "pkg:golang/golang.org/x/net@v0.10.0", - "pkg:golang/gopkg.in/inf.v0@v0.9.1", - "pkg:golang/k8s.io/klog/v2@v2.80.1", - "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280", - "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", - "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2", - "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", - "pkg:golang/sigs.k8s.io/yaml@v1.3.0", - "pkg:golang/github.com/go-logr/logr@v1.2.3", - "pkg:golang/github.com/json-iterator/go@v1.1.12", - "pkg:golang/github.com/kr/text@v0.2.0", - "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", - "pkg:golang/github.com/modern-go/reflect2@v1.0.2", - "pkg:golang/github.com/niemeyer/pretty@v0.0.0-20200227124842-a10e7caefd8e", - "pkg:golang/github.com/onsi/ginkgo/v2@v2.4.0", - "pkg:golang/github.com/onsi/gomega@v1.23.0", - "pkg:golang/github.com/pkg/errors@v0.9.1", - "pkg:golang/github.com/pmezard/go-difflib@v1.0.0", - "pkg:golang/golang.org/x/text@v0.9.0", - "pkg:golang/google.golang.org/protobuf@v1.30.0", + "ref": "pkg:golang/golang.org/x/sync@v0.0.0-20201020160332-67f06af15bc9", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/go-openapi/swag@v0.19.14", + "dependsOn": [ + "pkg:golang/github.com/davecgh/go-spew@v1.1.1", + "pkg:golang/github.com/kr/pretty@v0.3.1", + "pkg:golang/github.com/mailru/easyjson@v0.7.6", + "pkg:golang/github.com/stretchr/testify@v1.8.3", "pkg:golang/gopkg.in/check.v1@v1.0.0-20200227125254-8fa46927fb4f", "pkg:golang/gopkg.in/yaml.v2@v2.4.0", + "pkg:golang/github.com/kr/text@v0.2.0", + "pkg:golang/github.com/niemeyer/pretty@v0.0.0-20200227124842-a10e7caefd8e", "pkg:golang/gopkg.in/yaml.v3@v3.0.1" ] }, { - "ref": "pkg:golang/k8s.io/client-go@v0.26.1", + "ref": "pkg:golang/github.com/kr/text@v0.2.0", + "dependsOn": [ + "pkg:golang/github.com/kr/pty@v1.1.1", + "pkg:golang/github.com/creack/pty@v1.1.9" + ] + }, + { + "ref": "pkg:golang/github.com/niemeyer/pretty@v0.0.0-20200227124842-a10e7caefd8e", + "dependsOn": [ + "pkg:golang/github.com/kr/text@v0.2.0" + ] + }, + { + "ref": "pkg:golang/golang.org/x/mobile@v0.0.0-20190719004257-d2bd2a29d028", + "dependsOn": [ + "pkg:golang/golang.org/x/exp@v0.0.0-20200224162631-6cc2880d07d6", + "pkg:golang/golang.org/x/image@v0.0.0-20190802002840-cff245a6509b", + "pkg:golang/golang.org/x/sys@v0.8.0" + ] + }, + { + "ref": "pkg:golang/github.com/armon/go-socks5@v0.0.0-20160902184237-e75332964ef5", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/elazarl/goproxy@v0.0.0-20180725130230-947c36da3153", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/evanphx/json-patch@v4.12.0%2Bincompatible", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/google/gnostic@v0.5.7-v3refs", "dependsOn": [ "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "pkg:golang/github.com/evanphx/json-patch@v4.12.0%2Bincompatible", - "pkg:golang/github.com/gogo/protobuf@v1.3.2", - "pkg:golang/github.com/golang/groupcache@v0.0.0-20210331224755-41bb18bfe9da", + "pkg:golang/github.com/docopt/docopt-go@v0.0.0-20180111231733-ee0de3bc6815", "pkg:golang/github.com/golang/protobuf@v1.5.2", - "pkg:golang/github.com/google/gnostic@v0.5.7-v3refs", - "pkg:golang/github.com/google/go-cmp@v0.5.9", - "pkg:golang/github.com/google/gofuzz@v1.1.0", - "pkg:golang/github.com/google/uuid@v1.1.2", - "pkg:golang/github.com/gregjones/httpcache@v0.0.0-20180305231024-9cad4c3443a7", - "pkg:golang/github.com/imdario/mergo@v0.3.6", - "pkg:golang/github.com/peterbourgon/diskv@v2.0.1%2Bincompatible", - "pkg:golang/github.com/spf13/pflag@v1.0.5", - "pkg:golang/github.com/stretchr/testify@v1.8.3", - "pkg:golang/golang.org/x/net@v0.10.0", - "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b", - "pkg:golang/golang.org/x/term@v0.8.0", - "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8", + "pkg:golang/github.com/kr/pretty@v0.3.1", + "pkg:golang/github.com/stoewer/go-strcase@v1.2.0", + "pkg:golang/golang.org/x/tools@v0.6.0", + "pkg:golang/golang.org/x/xerrors@v0.0.0-20200804184101-5ec99f83aff1", + "pkg:golang/google.golang.org/genproto@v0.0.0-20201019141844-1ed22bb0c154", "pkg:golang/google.golang.org/protobuf@v1.30.0", - "pkg:golang/k8s.io/api@v0.26.1", - "pkg:golang/k8s.io/apimachinery@v0.26.1", - "pkg:golang/k8s.io/klog/v2@v2.80.1", - "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280", - "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", - "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", - "pkg:golang/sigs.k8s.io/yaml@v1.3.0", - "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0", - "pkg:golang/github.com/go-logr/logr@v1.2.3", - "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5", - "pkg:golang/github.com/go-openapi/jsonreference@v0.20.0", - "pkg:golang/github.com/go-openapi/swag@v0.19.14", - "pkg:golang/github.com/google/btree@v1.0.1", - "pkg:golang/github.com/josharian/intern@v1.0.0", - "pkg:golang/github.com/json-iterator/go@v1.1.12", - "pkg:golang/github.com/mailru/easyjson@v0.7.6", - "pkg:golang/github.com/moby/spdystream@v0.2.0", - "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", - "pkg:golang/github.com/modern-go/reflect2@v1.0.2", - "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", - "pkg:golang/github.com/pkg/errors@v0.9.1", - "pkg:golang/github.com/pmezard/go-difflib@v1.0.0", - "pkg:golang/golang.org/x/sys@v0.8.0", - "pkg:golang/golang.org/x/text@v0.9.0", - "pkg:golang/google.golang.org/appengine@v1.6.7", - "pkg:golang/gopkg.in/inf.v0@v0.9.1", - "pkg:golang/gopkg.in/yaml.v2@v2.4.0", - "pkg:golang/gopkg.in/yaml.v3@v3.0.1", - "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2" + "pkg:golang/gopkg.in/check.v1@v1.0.0-20200227125254-8fa46927fb4f", + "pkg:golang/gopkg.in/yaml.v3@v3.0.1" ] }, + { + "ref": "pkg:golang/github.com/google/gofuzz@v1.1.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/moby/spdystream@v0.2.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/mxk/go-flowrate@v0.0.0-20140419014527-cca7078d478f", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/spf13/pflag@v1.0.5", + "dependsOn": [] + }, + { + "ref": "pkg:golang/gopkg.in/inf.v0@v0.9.1", + "dependsOn": [] + }, { "ref": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280", "dependsOn": [ @@ -1923,75 +1872,21 @@ ] }, { - "ref": "pkg:golang/golang.org/x/xerrors@v0.0.0-20200804184101-5ec99f83aff1", - "dependsOn": [] - }, - { - "ref": "pkg:golang/golang.org/x/crypto@v0.9.0", - "dependsOn": [ - "pkg:golang/golang.org/x/net@v0.10.0", - "pkg:golang/golang.org/x/sys@v0.8.0" - ] - }, - { - "ref": "pkg:golang/github.com/kisielk/errcheck@v1.5.0", - "dependsOn": [ - "pkg:golang/golang.org/x/tools@v0.6.0" - ] - }, - { - "ref": "pkg:golang/github.com/kisielk/gotool@v1.0.0", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/golang/mock@v1.4.4", - "dependsOn": [ - "pkg:golang/golang.org/x/tools@v0.6.0", - "pkg:golang/rsc.io/quote/v3@v3.1.0" - ] - }, - { - "ref": "pkg:golang/rsc.io/quote/v3@v3.1.0", - "dependsOn": [ - "pkg:golang/rsc.io/sampler@v1.3.0" - ] - }, - { - "ref": "pkg:golang/golang.org/x/sync@v0.0.0-20201020160332-67f06af15bc9", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/niemeyer/pretty@v0.0.0-20200227124842-a10e7caefd8e", - "dependsOn": [ - "pkg:golang/github.com/kr/text@v0.2.0" - ] - }, - { - "ref": "pkg:golang/golang.org/x/mobile@v0.0.0-20190719004257-d2bd2a29d028", + "ref": "pkg:golang/github.com/json-iterator/go@v1.1.12", "dependsOn": [ - "pkg:golang/golang.org/x/exp@v0.0.0-20200224162631-6cc2880d07d6", - "pkg:golang/golang.org/x/image@v0.0.0-20190802002840-cff245a6509b", - "pkg:golang/golang.org/x/sys@v0.8.0" + "pkg:golang/github.com/davecgh/go-spew@v1.1.1", + "pkg:golang/github.com/google/gofuzz@v1.1.0", + "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", + "pkg:golang/github.com/modern-go/reflect2@v1.0.2", + "pkg:golang/github.com/stretchr/testify@v1.8.3" ] }, { - "ref": "pkg:golang/github.com/armon/go-socks5@v0.0.0-20160902184237-e75332964ef5", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/elazarl/goproxy@v0.0.0-20180725130230-947c36da3153", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/evanphx/json-patch@v4.12.0%2Bincompatible", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/moby/spdystream@v0.2.0", + "ref": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", "dependsOn": [] }, { - "ref": "pkg:golang/github.com/mxk/go-flowrate@v0.0.0-20140419014527-cca7078d478f", + "ref": "pkg:golang/github.com/modern-go/reflect2@v1.0.2", "dependsOn": [] }, { @@ -2100,14 +1995,81 @@ "ref": "pkg:golang/github.com/gregjones/httpcache@v0.0.0-20180305231024-9cad4c3443a7", "dependsOn": [] }, + { + "ref": "pkg:golang/github.com/imdario/mergo@v0.3.6", + "dependsOn": [] + }, { "ref": "pkg:golang/github.com/peterbourgon/diskv@v2.0.1%2Bincompatible", "dependsOn": [] }, + { + "ref": "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b", + "dependsOn": [ + "pkg:golang/cloud.google.com/go@v0.65.0", + "pkg:golang/golang.org/x/net@v0.10.0", + "pkg:golang/golang.org/x/sync@v0.0.0-20201020160332-67f06af15bc9", + "pkg:golang/google.golang.org/appengine@v1.6.7" + ] + }, + { + "ref": "pkg:golang/golang.org/x/term@v0.8.0", + "dependsOn": [ + "pkg:golang/golang.org/x/sys@v0.8.0" + ] + }, + { + "ref": "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8", + "dependsOn": [] + }, + { + "ref": "pkg:golang/k8s.io/api@v0.26.1", + "dependsOn": [ + "pkg:golang/github.com/gogo/protobuf@v1.3.2", + "pkg:golang/github.com/stretchr/testify@v1.8.3", + "pkg:golang/k8s.io/apimachinery@v0.26.1", + "pkg:golang/github.com/davecgh/go-spew@v1.1.1", + "pkg:golang/github.com/go-logr/logr@v1.2.3", + "pkg:golang/github.com/golang/protobuf@v1.5.2", + "pkg:golang/github.com/google/go-cmp@v0.5.9", + "pkg:golang/github.com/google/gofuzz@v1.1.0", + "pkg:golang/github.com/json-iterator/go@v1.1.12", + "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", + "pkg:golang/github.com/modern-go/reflect2@v1.0.2", + "pkg:golang/github.com/pmezard/go-difflib@v1.0.0", + "pkg:golang/github.com/spf13/pflag@v1.0.5", + "pkg:golang/golang.org/x/net@v0.10.0", + "pkg:golang/golang.org/x/text@v0.9.0", + "pkg:golang/google.golang.org/protobuf@v1.30.0", + "pkg:golang/gopkg.in/inf.v0@v0.9.1", + "pkg:golang/gopkg.in/yaml.v2@v2.4.0", + "pkg:golang/gopkg.in/yaml.v3@v3.0.1", + "pkg:golang/k8s.io/klog/v2@v2.80.1", + "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", + "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2", + "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", + "pkg:golang/sigs.k8s.io/yaml@v1.3.0" + ] + }, + { + "ref": "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0", + "dependsOn": [] + }, { "ref": "pkg:golang/github.com/google/btree@v1.0.1", "dependsOn": [] }, + { + "ref": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0", + "dependsOn": [ + "pkg:golang/gopkg.in/errgo.v2@v2.1.0", + "pkg:golang/github.com/pkg/diff@v0.0.0-20210226163009-20ebb0f2a09e" + ] + }, { "ref": "pkg:golang/gopkg.in/errgo.v2@v2.1.0", "dependsOn": [ diff --git a/src/test/resources/tst_manifests/golang/go_mod_with_all_ignore/expected_sbom_component_analysis.json b/src/test/resources/tst_manifests/golang/go_mod_with_all_ignore/expected_sbom_component_analysis.json index 4dbc9922..68d1fb2c 100644 --- a/src/test/resources/tst_manifests/golang/go_mod_with_all_ignore/expected_sbom_component_analysis.json +++ b/src/test/resources/tst_manifests/golang/go_mod_with_all_ignore/expected_sbom_component_analysis.json @@ -12,10 +12,6 @@ "purl": "pkg:golang/github.com/devfile-samples/devfile-sample-go-basic@v0.0.0" } }, - "dependencies": [ - { - "ref": "pkg:golang/github.com/devfile-samples/devfile-sample-go-basic@v0.0.0", - "dependsOn": [ ] - } - ] + "components": [ ], + "dependencies": [ ] } \ No newline at end of file diff --git a/src/test/resources/tst_manifests/golang/go_mod_with_ignore/expected_sbom_component_analysis.json b/src/test/resources/tst_manifests/golang/go_mod_with_ignore/expected_sbom_component_analysis.json index 8cf4dc61..1c2d38eb 100644 --- a/src/test/resources/tst_manifests/golang/go_mod_with_ignore/expected_sbom_component_analysis.json +++ b/src/test/resources/tst_manifests/golang/go_mod_with_ignore/expected_sbom_component_analysis.json @@ -3,7 +3,7 @@ "specVersion" : "1.4", "version" : 1, "metadata" : { - "timestamp" : "2025-04-09T14:09:55Z", + "timestamp" : "2025-04-09T14:09:52Z", "component" : { "type" : "application", "bom-ref" : "pkg:golang/github.com/rhecosystemappeng/saasi/deployer@v0.0.0", @@ -14,22 +14,6 @@ } }, "components" : [ - { - "type" : "library", - "bom-ref" : "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "group" : "github.com/davecgh", - "name" : "go-spew", - "version" : "v1.1.1", - "purl" : "pkg:golang/github.com/davecgh/go-spew@v1.1.1" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0", - "group" : "github.com/emicklei/go-restful", - "name" : "v3", - "version" : "v3.9.0", - "purl" : "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0" - }, { "type" : "library", "bom-ref" : "pkg:golang/github.com/gin-gonic/gin@v1.9.1", @@ -38,62 +22,6 @@ "version" : "v1.9.1", "purl" : "pkg:golang/github.com/gin-gonic/gin@v1.9.1" }, - { - "type" : "library", - "bom-ref" : "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5", - "group" : "github.com/go-openapi", - "name" : "jsonpointer", - "version" : "v0.19.5", - "purl" : "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/github.com/go-openapi/jsonreference@v0.20.0", - "group" : "github.com/go-openapi", - "name" : "jsonreference", - "version" : "v0.20.0", - "purl" : "pkg:golang/github.com/go-openapi/jsonreference@v0.20.0" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/github.com/go-openapi/swag@v0.19.14", - "group" : "github.com/go-openapi", - "name" : "swag", - "version" : "v0.19.14", - "purl" : "pkg:golang/github.com/go-openapi/swag@v0.19.14" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/github.com/gogo/protobuf@v1.3.2", - "group" : "github.com/gogo", - "name" : "protobuf", - "version" : "v1.3.2", - "purl" : "pkg:golang/github.com/gogo/protobuf@v1.3.2" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/github.com/golang/protobuf@v1.5.2", - "group" : "github.com/golang", - "name" : "protobuf", - "version" : "v1.5.2", - "purl" : "pkg:golang/github.com/golang/protobuf@v1.5.2" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/github.com/google/go-cmp@v0.5.9", - "group" : "github.com/google", - "name" : "go-cmp", - "version" : "v0.5.9", - "purl" : "pkg:golang/github.com/google/go-cmp@v0.5.9" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/github.com/google/gofuzz@v1.1.0", - "group" : "github.com/google", - "name" : "gofuzz", - "version" : "v1.1.0", - "purl" : "pkg:golang/github.com/google/gofuzz@v1.1.0" - }, { "type" : "library", "bom-ref" : "pkg:golang/github.com/google/uuid@v1.1.2", @@ -102,30 +30,6 @@ "version" : "v1.1.2", "purl" : "pkg:golang/github.com/google/uuid@v1.1.2" }, - { - "type" : "library", - "bom-ref" : "pkg:golang/github.com/imdario/mergo@v0.3.6", - "group" : "github.com/imdario", - "name" : "mergo", - "version" : "v0.3.6", - "purl" : "pkg:golang/github.com/imdario/mergo@v0.3.6" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/github.com/josharian/intern@v1.0.0", - "group" : "github.com/josharian", - "name" : "intern", - "version" : "v1.0.0", - "purl" : "pkg:golang/github.com/josharian/intern@v1.0.0" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/github.com/json-iterator/go@v1.1.12", - "group" : "github.com/json-iterator", - "name" : "go", - "version" : "v1.1.12", - "purl" : "pkg:golang/github.com/json-iterator/go@v1.1.12" - }, { "type" : "library", "bom-ref" : "pkg:golang/github.com/kr/pretty@v0.3.1", @@ -134,134 +38,6 @@ "version" : "v0.3.1", "purl" : "pkg:golang/github.com/kr/pretty@v0.3.1" }, - { - "type" : "library", - "bom-ref" : "pkg:golang/github.com/kr/text@v0.2.0", - "group" : "github.com/kr", - "name" : "text", - "version" : "v0.2.0", - "purl" : "pkg:golang/github.com/kr/text@v0.2.0" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/github.com/mailru/easyjson@v0.7.6", - "group" : "github.com/mailru", - "name" : "easyjson", - "version" : "v0.7.6", - "purl" : "pkg:golang/github.com/mailru/easyjson@v0.7.6" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", - "group" : "github.com/modern-go", - "name" : "concurrent", - "version" : "v0.0.0-20180306012644-bacd9c7ef1dd", - "purl" : "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/github.com/modern-go/reflect2@v1.0.2", - "group" : "github.com/modern-go", - "name" : "reflect2", - "version" : "v1.0.2", - "purl" : "pkg:golang/github.com/modern-go/reflect2@v1.0.2" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", - "group" : "github.com/munnerz", - "name" : "goautoneg", - "version" : "v0.0.0-20191010083416-a7dc8b61c822", - "purl" : "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0", - "group" : "github.com/rogpeppe", - "name" : "go-internal", - "version" : "v1.9.0", - "purl" : "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/github.com/spf13/pflag@v1.0.5", - "group" : "github.com/spf13", - "name" : "pflag", - "version" : "v1.0.5", - "purl" : "pkg:golang/github.com/spf13/pflag@v1.0.5" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/golang.org/x/net@v0.10.0", - "group" : "golang.org/x", - "name" : "net", - "version" : "v0.10.0", - "purl" : "pkg:golang/golang.org/x/net@v0.10.0" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b", - "group" : "golang.org/x", - "name" : "oauth2", - "version" : "v0.0.0-20220223155221-ee480838109b", - "purl" : "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/golang.org/x/sys@v0.8.0", - "group" : "golang.org/x", - "name" : "sys", - "version" : "v0.8.0", - "purl" : "pkg:golang/golang.org/x/sys@v0.8.0" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/golang.org/x/term@v0.8.0", - "group" : "golang.org/x", - "name" : "term", - "version" : "v0.8.0", - "purl" : "pkg:golang/golang.org/x/term@v0.8.0" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/golang.org/x/text@v0.9.0", - "group" : "golang.org/x", - "name" : "text", - "version" : "v0.9.0", - "purl" : "pkg:golang/golang.org/x/text@v0.9.0" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8", - "group" : "golang.org/x", - "name" : "time", - "version" : "v0.0.0-20220210224613-90d013bbcef8", - "purl" : "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/google.golang.org/appengine@v1.6.7", - "group" : "google.golang.org", - "name" : "appengine", - "version" : "v1.6.7", - "purl" : "pkg:golang/google.golang.org/appengine@v1.6.7" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/google.golang.org/protobuf@v1.30.0", - "group" : "google.golang.org", - "name" : "protobuf", - "version" : "v1.30.0", - "purl" : "pkg:golang/google.golang.org/protobuf@v1.30.0" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/gopkg.in/inf.v0@v0.9.1", - "group" : "gopkg.in", - "name" : "inf.v0", - "version" : "v0.9.1", - "purl" : "pkg:golang/gopkg.in/inf.v0@v0.9.1" - }, { "type" : "library", "bom-ref" : "pkg:golang/gopkg.in/yaml.v2@v2.4.0", @@ -270,22 +46,6 @@ "version" : "v2.4.0", "purl" : "pkg:golang/gopkg.in/yaml.v2@v2.4.0" }, - { - "type" : "library", - "bom-ref" : "pkg:golang/gopkg.in/yaml.v3@v3.0.1", - "group" : "gopkg.in", - "name" : "yaml.v3", - "version" : "v3.0.1", - "purl" : "pkg:golang/gopkg.in/yaml.v3@v3.0.1" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/k8s.io/api@v0.26.1", - "group" : "k8s.io", - "name" : "api", - "version" : "v0.26.1", - "purl" : "pkg:golang/k8s.io/api@v0.26.1" - }, { "type" : "library", "bom-ref" : "pkg:golang/k8s.io/apimachinery@v0.26.1", @@ -301,240 +61,36 @@ "name" : "client-go", "version" : "v0.26.1", "purl" : "pkg:golang/k8s.io/client-go@v0.26.1" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/k8s.io/klog/v2@v2.80.1", - "group" : "k8s.io/klog", - "name" : "v2", - "version" : "v2.80.1", - "purl" : "pkg:golang/k8s.io/klog/v2@v2.80.1" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280", - "group" : "k8s.io", - "name" : "kube-openapi", - "version" : "v0.0.0-20221012153701-172d655c2280", - "purl" : "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", - "group" : "k8s.io", - "name" : "utils", - "version" : "v0.0.0-20221107191617-1a15be271d1d", - "purl" : "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2", - "group" : "sigs.k8s.io", - "name" : "json", - "version" : "v0.0.0-20220713155537-f223a00ba0e2", - "purl" : "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", - "group" : "sigs.k8s.io/structured-merge-diff", - "name" : "v4", - "version" : "v4.2.3", - "purl" : "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3" - }, - { - "type" : "library", - "bom-ref" : "pkg:golang/sigs.k8s.io/yaml@v1.3.0", - "group" : "sigs.k8s.io", - "name" : "yaml", - "version" : "v1.3.0", - "purl" : "pkg:golang/sigs.k8s.io/yaml@v1.3.0" } ], "dependencies" : [ { "ref" : "pkg:golang/github.com/rhecosystemappeng/saasi/deployer@v0.0.0", "dependsOn" : [ - "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0", "pkg:golang/github.com/gin-gonic/gin@v1.9.1", - "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5", - "pkg:golang/github.com/go-openapi/jsonreference@v0.20.0", - "pkg:golang/github.com/go-openapi/swag@v0.19.14", - "pkg:golang/github.com/gogo/protobuf@v1.3.2", - "pkg:golang/github.com/golang/protobuf@v1.5.2", - "pkg:golang/github.com/google/go-cmp@v0.5.9", - "pkg:golang/github.com/google/gofuzz@v1.1.0", "pkg:golang/github.com/google/uuid@v1.1.2", - "pkg:golang/github.com/imdario/mergo@v0.3.6", - "pkg:golang/github.com/josharian/intern@v1.0.0", - "pkg:golang/github.com/json-iterator/go@v1.1.12", "pkg:golang/github.com/kr/pretty@v0.3.1", - "pkg:golang/github.com/kr/text@v0.2.0", - "pkg:golang/github.com/mailru/easyjson@v0.7.6", - "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", - "pkg:golang/github.com/modern-go/reflect2@v1.0.2", - "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", - "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0", - "pkg:golang/github.com/spf13/pflag@v1.0.5", - "pkg:golang/golang.org/x/net@v0.10.0", - "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b", - "pkg:golang/golang.org/x/sys@v0.8.0", - "pkg:golang/golang.org/x/term@v0.8.0", - "pkg:golang/golang.org/x/text@v0.9.0", - "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8", - "pkg:golang/google.golang.org/appengine@v1.6.7", - "pkg:golang/google.golang.org/protobuf@v1.30.0", - "pkg:golang/gopkg.in/inf.v0@v0.9.1", "pkg:golang/gopkg.in/yaml.v2@v2.4.0", - "pkg:golang/gopkg.in/yaml.v3@v3.0.1", - "pkg:golang/k8s.io/api@v0.26.1", "pkg:golang/k8s.io/apimachinery@v0.26.1", - "pkg:golang/k8s.io/client-go@v0.26.1", - "pkg:golang/k8s.io/klog/v2@v2.80.1", - "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280", - "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", - "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2", - "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", - "pkg:golang/sigs.k8s.io/yaml@v1.3.0" + "pkg:golang/k8s.io/client-go@v0.26.1" ] }, - { - "ref" : "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0", - "dependsOn" : [ ] - }, { "ref" : "pkg:golang/github.com/gin-gonic/gin@v1.9.1", "dependsOn" : [ ] }, - { - "ref" : "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/github.com/go-openapi/jsonreference@v0.20.0", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/github.com/go-openapi/swag@v0.19.14", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/github.com/gogo/protobuf@v1.3.2", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/github.com/golang/protobuf@v1.5.2", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/github.com/google/go-cmp@v0.5.9", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/github.com/google/gofuzz@v1.1.0", - "dependsOn" : [ ] - }, { "ref" : "pkg:golang/github.com/google/uuid@v1.1.2", "dependsOn" : [ ] }, - { - "ref" : "pkg:golang/github.com/imdario/mergo@v0.3.6", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/github.com/josharian/intern@v1.0.0", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/github.com/json-iterator/go@v1.1.12", - "dependsOn" : [ ] - }, { "ref" : "pkg:golang/github.com/kr/pretty@v0.3.1", "dependsOn" : [ ] }, - { - "ref" : "pkg:golang/github.com/kr/text@v0.2.0", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/github.com/mailru/easyjson@v0.7.6", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/github.com/modern-go/reflect2@v1.0.2", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/github.com/spf13/pflag@v1.0.5", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/golang.org/x/net@v0.10.0", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/golang.org/x/sys@v0.8.0", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/golang.org/x/term@v0.8.0", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/golang.org/x/text@v0.9.0", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/google.golang.org/appengine@v1.6.7", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/google.golang.org/protobuf@v1.30.0", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/gopkg.in/inf.v0@v0.9.1", - "dependsOn" : [ ] - }, { "ref" : "pkg:golang/gopkg.in/yaml.v2@v2.4.0", "dependsOn" : [ ] }, - { - "ref" : "pkg:golang/gopkg.in/yaml.v3@v3.0.1", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/k8s.io/api@v0.26.1", - "dependsOn" : [ ] - }, { "ref" : "pkg:golang/k8s.io/apimachinery@v0.26.1", "dependsOn" : [ ] @@ -542,30 +98,6 @@ { "ref" : "pkg:golang/k8s.io/client-go@v0.26.1", "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/k8s.io/klog/v2@v2.80.1", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:golang/sigs.k8s.io/yaml@v1.3.0", - "dependsOn" : [ ] } ] -} \ No newline at end of file +} diff --git a/src/test/resources/tst_manifests/golang/go_mod_with_ignore/expected_sbom_stack_analysis.json b/src/test/resources/tst_manifests/golang/go_mod_with_ignore/expected_sbom_stack_analysis.json index 2c44434c..779a8870 100644 --- a/src/test/resources/tst_manifests/golang/go_mod_with_ignore/expected_sbom_stack_analysis.json +++ b/src/test/resources/tst_manifests/golang/go_mod_with_ignore/expected_sbom_stack_analysis.json @@ -308,14 +308,6 @@ "version": "v1.0.0-20200227125254-8fa46927fb4f", "purl": "pkg:golang/gopkg.in/check.v1@v1.0.0-20200227125254-8fa46927fb4f" }, - { - "type": "library", - "bom-ref": "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0", - "group": "github.com/emicklei/go-restful", - "name": "v3", - "version": "v3.9.0", - "purl": "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0" - }, { "type": "library", "bom-ref": "pkg:golang/github.com/gin-gonic/gin@v1.9.1", @@ -324,30 +316,6 @@ "version": "v1.9.1", "purl": "pkg:golang/github.com/gin-gonic/gin@v1.9.1" }, - { - "type": "library", - "bom-ref": "pkg:golang/github.com/go-openapi/swag@v0.19.14", - "group": "github.com/go-openapi", - "name": "swag", - "version": "v0.19.14", - "purl": "pkg:golang/github.com/go-openapi/swag@v0.19.14" - }, - { - "type": "library", - "bom-ref": "pkg:golang/github.com/gogo/protobuf@v1.3.2", - "group": "github.com/gogo", - "name": "protobuf", - "version": "v1.3.2", - "purl": "pkg:golang/github.com/gogo/protobuf@v1.3.2" - }, - { - "type": "library", - "bom-ref": "pkg:golang/github.com/google/gofuzz@v1.1.0", - "group": "github.com/google", - "name": "gofuzz", - "version": "v1.1.0", - "purl": "pkg:golang/github.com/google/gofuzz@v1.1.0" - }, { "type": "library", "bom-ref": "pkg:golang/github.com/google/uuid@v1.1.2", @@ -356,22 +324,6 @@ "version": "v1.1.2", "purl": "pkg:golang/github.com/google/uuid@v1.1.2" }, - { - "type": "library", - "bom-ref": "pkg:golang/github.com/imdario/mergo@v0.3.6", - "group": "github.com/imdario", - "name": "mergo", - "version": "v0.3.6", - "purl": "pkg:golang/github.com/imdario/mergo@v0.3.6" - }, - { - "type": "library", - "bom-ref": "pkg:golang/github.com/json-iterator/go@v1.1.12", - "group": "github.com/json-iterator", - "name": "go", - "version": "v1.1.12", - "purl": "pkg:golang/github.com/json-iterator/go@v1.1.12" - }, { "type": "library", "bom-ref": "pkg:golang/github.com/kr/pretty@v0.3.1", @@ -380,102 +332,6 @@ "version": "v0.3.1", "purl": "pkg:golang/github.com/kr/pretty@v0.3.1" }, - { - "type": "library", - "bom-ref": "pkg:golang/github.com/kr/text@v0.2.0", - "group": "github.com/kr", - "name": "text", - "version": "v0.2.0", - "purl": "pkg:golang/github.com/kr/text@v0.2.0" - }, - { - "type": "library", - "bom-ref": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", - "group": "github.com/modern-go", - "name": "concurrent", - "version": "v0.0.0-20180306012644-bacd9c7ef1dd", - "purl": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd" - }, - { - "type": "library", - "bom-ref": "pkg:golang/github.com/modern-go/reflect2@v1.0.2", - "group": "github.com/modern-go", - "name": "reflect2", - "version": "v1.0.2", - "purl": "pkg:golang/github.com/modern-go/reflect2@v1.0.2" - }, - { - "type": "library", - "bom-ref": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", - "group": "github.com/munnerz", - "name": "goautoneg", - "version": "v0.0.0-20191010083416-a7dc8b61c822", - "purl": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822" - }, - { - "type": "library", - "bom-ref": "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0", - "group": "github.com/rogpeppe", - "name": "go-internal", - "version": "v1.9.0", - "purl": "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0" - }, - { - "type": "library", - "bom-ref": "pkg:golang/github.com/spf13/pflag@v1.0.5", - "group": "github.com/spf13", - "name": "pflag", - "version": "v1.0.5", - "purl": "pkg:golang/github.com/spf13/pflag@v1.0.5" - }, - { - "type": "library", - "bom-ref": "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b", - "group": "golang.org/x", - "name": "oauth2", - "version": "v0.0.0-20220223155221-ee480838109b", - "purl": "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b" - }, - { - "type": "library", - "bom-ref": "pkg:golang/golang.org/x/term@v0.8.0", - "group": "golang.org/x", - "name": "term", - "version": "v0.8.0", - "purl": "pkg:golang/golang.org/x/term@v0.8.0" - }, - { - "type": "library", - "bom-ref": "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8", - "group": "golang.org/x", - "name": "time", - "version": "v0.0.0-20220210224613-90d013bbcef8", - "purl": "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8" - }, - { - "type": "library", - "bom-ref": "pkg:golang/google.golang.org/protobuf@v1.30.0", - "group": "google.golang.org", - "name": "protobuf", - "version": "v1.30.0", - "purl": "pkg:golang/google.golang.org/protobuf@v1.30.0" - }, - { - "type": "library", - "bom-ref": "pkg:golang/gopkg.in/inf.v0@v0.9.1", - "group": "gopkg.in", - "name": "inf.v0", - "version": "v0.9.1", - "purl": "pkg:golang/gopkg.in/inf.v0@v0.9.1" - }, - { - "type": "library", - "bom-ref": "pkg:golang/k8s.io/api@v0.26.1", - "group": "k8s.io", - "name": "api", - "version": "v0.26.1", - "purl": "pkg:golang/k8s.io/api@v0.26.1" - }, { "type": "library", "bom-ref": "pkg:golang/k8s.io/apimachinery@v0.26.1", @@ -492,46 +348,6 @@ "version": "v0.26.1", "purl": "pkg:golang/k8s.io/client-go@v0.26.1" }, - { - "type": "library", - "bom-ref": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280", - "group": "k8s.io", - "name": "kube-openapi", - "version": "v0.0.0-20221012153701-172d655c2280", - "purl": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280" - }, - { - "type": "library", - "bom-ref": "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", - "group": "k8s.io", - "name": "utils", - "version": "v0.0.0-20221107191617-1a15be271d1d", - "purl": "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d" - }, - { - "type": "library", - "bom-ref": "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2", - "group": "sigs.k8s.io", - "name": "json", - "version": "v0.0.0-20220713155537-f223a00ba0e2", - "purl": "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2" - }, - { - "type": "library", - "bom-ref": "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", - "group": "sigs.k8s.io/structured-merge-diff", - "name": "v4", - "version": "v4.2.3", - "purl": "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3" - }, - { - "type": "library", - "bom-ref": "pkg:golang/sigs.k8s.io/yaml@v1.3.0", - "group": "sigs.k8s.io", - "name": "yaml", - "version": "v1.3.0", - "purl": "pkg:golang/sigs.k8s.io/yaml@v1.3.0" - }, { "type": "library", "bom-ref": "pkg:golang/golang.org/x/xerrors@v0.0.0-20200804184101-5ec99f83aff1", @@ -548,6 +364,14 @@ "version": "v0.9.0", "purl": "pkg:golang/golang.org/x/crypto@v0.9.0" }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/gogo/protobuf@v1.3.2", + "group": "github.com/gogo", + "name": "protobuf", + "version": "v1.3.2", + "purl": "pkg:golang/github.com/gogo/protobuf@v1.3.2" + }, { "type": "library", "bom-ref": "pkg:golang/github.com/kisielk/errcheck@v1.5.0", @@ -564,6 +388,14 @@ "version": "v1.0.0", "purl": "pkg:golang/github.com/kisielk/gotool@v1.0.0" }, + { + "type": "library", + "bom-ref": "pkg:golang/google.golang.org/protobuf@v1.30.0", + "group": "google.golang.org", + "name": "protobuf", + "version": "v1.30.0", + "purl": "pkg:golang/google.golang.org/protobuf@v1.30.0" + }, { "type": "library", "bom-ref": "pkg:golang/github.com/golang/mock@v1.4.4", @@ -588,6 +420,22 @@ "version": "v0.0.0-20201020160332-67f06af15bc9", "purl": "pkg:golang/golang.org/x/sync@v0.0.0-20201020160332-67f06af15bc9" }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/go-openapi/swag@v0.19.14", + "group": "github.com/go-openapi", + "name": "swag", + "version": "v0.19.14", + "purl": "pkg:golang/github.com/go-openapi/swag@v0.19.14" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/kr/text@v0.2.0", + "group": "github.com/kr", + "name": "text", + "version": "v0.2.0", + "purl": "pkg:golang/github.com/kr/text@v0.2.0" + }, { "type": "library", "bom-ref": "pkg:golang/github.com/niemeyer/pretty@v0.0.0-20200227124842-a10e7caefd8e", @@ -628,6 +476,14 @@ "version": "v4.12.0+incompatible", "purl": "pkg:golang/github.com/evanphx/json-patch@v4.12.0%2Bincompatible" }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/google/gofuzz@v1.1.0", + "group": "github.com/google", + "name": "gofuzz", + "version": "v1.1.0", + "purl": "pkg:golang/github.com/google/gofuzz@v1.1.0" + }, { "type": "library", "bom-ref": "pkg:golang/github.com/moby/spdystream@v0.2.0", @@ -644,6 +500,86 @@ "version": "v0.0.0-20140419014527-cca7078d478f", "purl": "pkg:golang/github.com/mxk/go-flowrate@v0.0.0-20140419014527-cca7078d478f" }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/spf13/pflag@v1.0.5", + "group": "github.com/spf13", + "name": "pflag", + "version": "v1.0.5", + "purl": "pkg:golang/github.com/spf13/pflag@v1.0.5" + }, + { + "type": "library", + "bom-ref": "pkg:golang/gopkg.in/inf.v0@v0.9.1", + "group": "gopkg.in", + "name": "inf.v0", + "version": "v0.9.1", + "purl": "pkg:golang/gopkg.in/inf.v0@v0.9.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280", + "group": "k8s.io", + "name": "kube-openapi", + "version": "v0.0.0-20221012153701-172d655c2280", + "purl": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", + "group": "k8s.io", + "name": "utils", + "version": "v0.0.0-20221107191617-1a15be271d1d", + "purl": "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d" + }, + { + "type": "library", + "bom-ref": "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2", + "group": "sigs.k8s.io", + "name": "json", + "version": "v0.0.0-20220713155537-f223a00ba0e2", + "purl": "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2" + }, + { + "type": "library", + "bom-ref": "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", + "group": "sigs.k8s.io/structured-merge-diff", + "name": "v4", + "version": "v4.2.3", + "purl": "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3" + }, + { + "type": "library", + "bom-ref": "pkg:golang/sigs.k8s.io/yaml@v1.3.0", + "group": "sigs.k8s.io", + "name": "yaml", + "version": "v1.3.0", + "purl": "pkg:golang/sigs.k8s.io/yaml@v1.3.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/json-iterator/go@v1.1.12", + "group": "github.com/json-iterator", + "name": "go", + "version": "v1.1.12", + "purl": "pkg:golang/github.com/json-iterator/go@v1.1.12" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", + "group": "github.com/modern-go", + "name": "concurrent", + "version": "v0.0.0-20180306012644-bacd9c7ef1dd", + "purl": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/modern-go/reflect2@v1.0.2", + "group": "github.com/modern-go", + "name": "reflect2", + "version": "v1.0.2", + "purl": "pkg:golang/github.com/modern-go/reflect2@v1.0.2" + }, { "type": "library", "bom-ref": "pkg:golang/github.com/onsi/ginkgo/v2@v2.4.0", @@ -828,6 +764,14 @@ "version": "v0.0.0-20180305231024-9cad4c3443a7", "purl": "pkg:golang/github.com/gregjones/httpcache@v0.0.0-20180305231024-9cad4c3443a7" }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/imdario/mergo@v0.3.6", + "group": "github.com/imdario", + "name": "mergo", + "version": "v0.3.6", + "purl": "pkg:golang/github.com/imdario/mergo@v0.3.6" + }, { "type": "library", "bom-ref": "pkg:golang/github.com/peterbourgon/diskv@v2.0.1%2Bincompatible", @@ -836,6 +780,46 @@ "version": "v2.0.1+incompatible", "purl": "pkg:golang/github.com/peterbourgon/diskv@v2.0.1%2Bincompatible" }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b", + "group": "golang.org/x", + "name": "oauth2", + "version": "v0.0.0-20220223155221-ee480838109b", + "purl": "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/term@v0.8.0", + "group": "golang.org/x", + "name": "term", + "version": "v0.8.0", + "purl": "pkg:golang/golang.org/x/term@v0.8.0" + }, + { + "type": "library", + "bom-ref": "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8", + "group": "golang.org/x", + "name": "time", + "version": "v0.0.0-20220210224613-90d013bbcef8", + "purl": "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8" + }, + { + "type": "library", + "bom-ref": "pkg:golang/k8s.io/api@v0.26.1", + "group": "k8s.io", + "name": "api", + "version": "v0.26.1", + "purl": "pkg:golang/k8s.io/api@v0.26.1" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0", + "group": "github.com/emicklei/go-restful", + "name": "v3", + "version": "v3.9.0", + "purl": "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0" + }, { "type": "library", "bom-ref": "pkg:golang/github.com/google/btree@v1.0.1", @@ -844,6 +828,22 @@ "version": "v1.0.1", "purl": "pkg:golang/github.com/google/btree@v1.0.1" }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", + "group": "github.com/munnerz", + "name": "goautoneg", + "version": "v0.0.0-20191010083416-a7dc8b61c822", + "purl": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822" + }, + { + "type": "library", + "bom-ref": "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0", + "group": "github.com/rogpeppe", + "name": "go-internal", + "version": "v1.9.0", + "purl": "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0" + }, { "type": "library", "bom-ref": "pkg:golang/gopkg.in/errgo.v2@v2.1.0", @@ -1097,48 +1097,12 @@ { "ref": "pkg:golang/github.com/rhecosystemappeng/saasi/deployer@v0.0.0", "dependsOn": [ - "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0", "pkg:golang/github.com/gin-gonic/gin@v1.9.1", - "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5", - "pkg:golang/github.com/go-openapi/jsonreference@v0.20.0", - "pkg:golang/github.com/go-openapi/swag@v0.19.14", - "pkg:golang/github.com/gogo/protobuf@v1.3.2", - "pkg:golang/github.com/golang/protobuf@v1.5.2", - "pkg:golang/github.com/google/go-cmp@v0.5.9", - "pkg:golang/github.com/google/gofuzz@v1.1.0", "pkg:golang/github.com/google/uuid@v1.1.2", - "pkg:golang/github.com/imdario/mergo@v0.3.6", - "pkg:golang/github.com/josharian/intern@v1.0.0", - "pkg:golang/github.com/json-iterator/go@v1.1.12", "pkg:golang/github.com/kr/pretty@v0.3.1", - "pkg:golang/github.com/kr/text@v0.2.0", - "pkg:golang/github.com/mailru/easyjson@v0.7.6", - "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", - "pkg:golang/github.com/modern-go/reflect2@v1.0.2", - "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", - "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0", - "pkg:golang/github.com/spf13/pflag@v1.0.5", - "pkg:golang/golang.org/x/net@v0.10.0", - "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b", - "pkg:golang/golang.org/x/sys@v0.8.0", - "pkg:golang/golang.org/x/term@v0.8.0", - "pkg:golang/golang.org/x/text@v0.9.0", - "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8", - "pkg:golang/google.golang.org/appengine@v1.6.7", - "pkg:golang/google.golang.org/protobuf@v1.30.0", - "pkg:golang/gopkg.in/inf.v0@v0.9.1", "pkg:golang/gopkg.in/yaml.v2@v2.4.0", - "pkg:golang/gopkg.in/yaml.v3@v3.0.1", - "pkg:golang/k8s.io/api@v0.26.1", "pkg:golang/k8s.io/apimachinery@v0.26.1", - "pkg:golang/k8s.io/client-go@v0.26.1", - "pkg:golang/k8s.io/klog/v2@v2.80.1", - "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280", - "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", - "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2", - "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", - "pkg:golang/sigs.k8s.io/yaml@v1.3.0" + "pkg:golang/k8s.io/client-go@v0.26.1" ] }, { @@ -1522,10 +1486,6 @@ "ref": "pkg:golang/gopkg.in/check.v1@v1.0.0-20200227125254-8fa46927fb4f", "dependsOn": [] }, - { - "ref": "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0", - "dependsOn": [] - }, { "ref": "pkg:golang/github.com/gin-gonic/gin@v1.9.1", "dependsOn": [ @@ -1558,104 +1518,135 @@ "pkg:golang/golang.org/x/text@v0.9.0" ] }, - { - "ref": "pkg:golang/github.com/go-openapi/swag@v0.19.14", - "dependsOn": [ - "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "pkg:golang/github.com/kr/pretty@v0.3.1", - "pkg:golang/github.com/mailru/easyjson@v0.7.6", - "pkg:golang/github.com/stretchr/testify@v1.8.3", - "pkg:golang/gopkg.in/check.v1@v1.0.0-20200227125254-8fa46927fb4f", - "pkg:golang/gopkg.in/yaml.v2@v2.4.0", - "pkg:golang/github.com/kr/text@v0.2.0", - "pkg:golang/github.com/niemeyer/pretty@v0.0.0-20200227124842-a10e7caefd8e", - "pkg:golang/gopkg.in/yaml.v3@v3.0.1" - ] - }, - { - "ref": "pkg:golang/github.com/gogo/protobuf@v1.3.2", - "dependsOn": [ - "pkg:golang/github.com/kisielk/errcheck@v1.5.0", - "pkg:golang/github.com/kisielk/gotool@v1.0.0", - "pkg:golang/golang.org/x/tools@v0.6.0" - ] - }, - { - "ref": "pkg:golang/github.com/google/gofuzz@v1.1.0", - "dependsOn": [] - }, { "ref": "pkg:golang/github.com/google/uuid@v1.1.2", "dependsOn": [] }, { - "ref": "pkg:golang/github.com/imdario/mergo@v0.3.6", - "dependsOn": [] + "ref": "pkg:golang/github.com/kr/pretty@v0.3.1", + "dependsOn": [ + "pkg:golang/github.com/kr/text@v0.2.0", + "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0" + ] }, { - "ref": "pkg:golang/github.com/json-iterator/go@v1.1.12", + "ref": "pkg:golang/k8s.io/apimachinery@v0.26.1", "dependsOn": [ + "pkg:golang/github.com/armon/go-socks5@v0.0.0-20160902184237-e75332964ef5", "pkg:golang/github.com/davecgh/go-spew@v1.1.1", + "pkg:golang/github.com/elazarl/goproxy@v0.0.0-20180725130230-947c36da3153", + "pkg:golang/github.com/evanphx/json-patch@v4.12.0%2Bincompatible", + "pkg:golang/github.com/gogo/protobuf@v1.3.2", + "pkg:golang/github.com/golang/protobuf@v1.5.2", + "pkg:golang/github.com/google/go-cmp@v0.5.9", "pkg:golang/github.com/google/gofuzz@v1.1.0", + "pkg:golang/github.com/google/uuid@v1.1.2", + "pkg:golang/github.com/moby/spdystream@v0.2.0", + "pkg:golang/github.com/mxk/go-flowrate@v0.0.0-20140419014527-cca7078d478f", + "pkg:golang/github.com/spf13/pflag@v1.0.5", + "pkg:golang/github.com/stretchr/testify@v1.8.3", + "pkg:golang/golang.org/x/net@v0.10.0", + "pkg:golang/gopkg.in/inf.v0@v0.9.1", + "pkg:golang/k8s.io/klog/v2@v2.80.1", + "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280", + "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", + "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2", + "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", + "pkg:golang/sigs.k8s.io/yaml@v1.3.0", + "pkg:golang/github.com/json-iterator/go@v1.1.12", + "pkg:golang/github.com/kr/text@v0.2.0", "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", "pkg:golang/github.com/modern-go/reflect2@v1.0.2", - "pkg:golang/github.com/stretchr/testify@v1.8.3" - ] - }, - { - "ref": "pkg:golang/github.com/kr/pretty@v0.3.1", - "dependsOn": [ - "pkg:golang/github.com/kr/text@v0.2.0", - "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0" + "pkg:golang/github.com/niemeyer/pretty@v0.0.0-20200227124842-a10e7caefd8e", + "pkg:golang/github.com/onsi/ginkgo/v2@v2.4.0", + "pkg:golang/github.com/onsi/gomega@v1.23.0", + "pkg:golang/github.com/pkg/errors@v0.9.1", + "pkg:golang/github.com/pmezard/go-difflib@v1.0.0", + "pkg:golang/golang.org/x/text@v0.9.0", + "pkg:golang/google.golang.org/protobuf@v1.30.0", + "pkg:golang/gopkg.in/check.v1@v1.0.0-20200227125254-8fa46927fb4f", + "pkg:golang/gopkg.in/yaml.v2@v2.4.0", + "pkg:golang/gopkg.in/yaml.v3@v3.0.1" ] }, { - "ref": "pkg:golang/github.com/kr/text@v0.2.0", + "ref": "pkg:golang/k8s.io/client-go@v0.26.1", "dependsOn": [ - "pkg:golang/github.com/kr/pty@v1.1.1", - "pkg:golang/github.com/creack/pty@v1.1.9" + "pkg:golang/github.com/davecgh/go-spew@v1.1.1", + "pkg:golang/github.com/evanphx/json-patch@v4.12.0%2Bincompatible", + "pkg:golang/github.com/gogo/protobuf@v1.3.2", + "pkg:golang/github.com/golang/groupcache@v0.0.0-20210331224755-41bb18bfe9da", + "pkg:golang/github.com/golang/protobuf@v1.5.2", + "pkg:golang/github.com/google/go-cmp@v0.5.9", + "pkg:golang/github.com/google/gofuzz@v1.1.0", + "pkg:golang/github.com/google/uuid@v1.1.2", + "pkg:golang/github.com/gregjones/httpcache@v0.0.0-20180305231024-9cad4c3443a7", + "pkg:golang/github.com/imdario/mergo@v0.3.6", + "pkg:golang/github.com/peterbourgon/diskv@v2.0.1%2Bincompatible", + "pkg:golang/github.com/spf13/pflag@v1.0.5", + "pkg:golang/github.com/stretchr/testify@v1.8.3", + "pkg:golang/golang.org/x/net@v0.10.0", + "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b", + "pkg:golang/golang.org/x/term@v0.8.0", + "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8", + "pkg:golang/google.golang.org/protobuf@v1.30.0", + "pkg:golang/k8s.io/api@v0.26.1", + "pkg:golang/k8s.io/apimachinery@v0.26.1", + "pkg:golang/k8s.io/klog/v2@v2.80.1", + "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280", + "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", + "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", + "pkg:golang/sigs.k8s.io/yaml@v1.3.0", + "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0", + "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5", + "pkg:golang/github.com/go-openapi/jsonreference@v0.20.0", + "pkg:golang/github.com/go-openapi/swag@v0.19.14", + "pkg:golang/github.com/google/btree@v1.0.1", + "pkg:golang/github.com/josharian/intern@v1.0.0", + "pkg:golang/github.com/json-iterator/go@v1.1.12", + "pkg:golang/github.com/mailru/easyjson@v0.7.6", + "pkg:golang/github.com/moby/spdystream@v0.2.0", + "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", + "pkg:golang/github.com/modern-go/reflect2@v1.0.2", + "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", + "pkg:golang/github.com/pkg/errors@v0.9.1", + "pkg:golang/github.com/pmezard/go-difflib@v1.0.0", + "pkg:golang/golang.org/x/sys@v0.8.0", + "pkg:golang/golang.org/x/text@v0.9.0", + "pkg:golang/google.golang.org/appengine@v1.6.7", + "pkg:golang/gopkg.in/inf.v0@v0.9.1", + "pkg:golang/gopkg.in/yaml.v2@v2.4.0", + "pkg:golang/gopkg.in/yaml.v3@v3.0.1", + "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2" ] }, { - "ref": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/modern-go/reflect2@v1.0.2", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", + "ref": "pkg:golang/golang.org/x/xerrors@v0.0.0-20200804184101-5ec99f83aff1", "dependsOn": [] }, { - "ref": "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0", + "ref": "pkg:golang/golang.org/x/crypto@v0.9.0", "dependsOn": [ - "pkg:golang/gopkg.in/errgo.v2@v2.1.0", - "pkg:golang/github.com/pkg/diff@v0.0.0-20210226163009-20ebb0f2a09e" + "pkg:golang/golang.org/x/net@v0.10.0", + "pkg:golang/golang.org/x/sys@v0.8.0" ] }, { - "ref": "pkg:golang/github.com/spf13/pflag@v1.0.5", - "dependsOn": [] - }, - { - "ref": "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b", + "ref": "pkg:golang/github.com/gogo/protobuf@v1.3.2", "dependsOn": [ - "pkg:golang/cloud.google.com/go@v0.65.0", - "pkg:golang/golang.org/x/net@v0.10.0", - "pkg:golang/golang.org/x/sync@v0.0.0-20201020160332-67f06af15bc9", - "pkg:golang/google.golang.org/appengine@v1.6.7" + "pkg:golang/github.com/kisielk/errcheck@v1.5.0", + "pkg:golang/github.com/kisielk/gotool@v1.0.0", + "pkg:golang/golang.org/x/tools@v0.6.0" ] }, { - "ref": "pkg:golang/golang.org/x/term@v0.8.0", + "ref": "pkg:golang/github.com/kisielk/errcheck@v1.5.0", "dependsOn": [ - "pkg:golang/golang.org/x/sys@v0.8.0" + "pkg:golang/golang.org/x/tools@v0.6.0" ] }, { - "ref": "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8", + "ref": "pkg:golang/github.com/kisielk/gotool@v1.0.0", "dependsOn": [] }, { @@ -1667,128 +1658,89 @@ ] }, { - "ref": "pkg:golang/gopkg.in/inf.v0@v0.9.1", - "dependsOn": [] + "ref": "pkg:golang/github.com/golang/mock@v1.4.4", + "dependsOn": [ + "pkg:golang/golang.org/x/tools@v0.6.0", + "pkg:golang/rsc.io/quote/v3@v3.1.0" + ] }, { - "ref": "pkg:golang/k8s.io/api@v0.26.1", + "ref": "pkg:golang/rsc.io/quote/v3@v3.1.0", "dependsOn": [ - "pkg:golang/github.com/gogo/protobuf@v1.3.2", - "pkg:golang/github.com/stretchr/testify@v1.8.3", - "pkg:golang/k8s.io/apimachinery@v0.26.1", - "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "pkg:golang/github.com/golang/protobuf@v1.5.2", - "pkg:golang/github.com/google/go-cmp@v0.5.9", - "pkg:golang/github.com/google/gofuzz@v1.1.0", - "pkg:golang/github.com/json-iterator/go@v1.1.12", - "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", - "pkg:golang/github.com/modern-go/reflect2@v1.0.2", - "pkg:golang/github.com/pmezard/go-difflib@v1.0.0", - "pkg:golang/github.com/spf13/pflag@v1.0.5", - "pkg:golang/golang.org/x/net@v0.10.0", - "pkg:golang/golang.org/x/text@v0.9.0", - "pkg:golang/google.golang.org/protobuf@v1.30.0", - "pkg:golang/gopkg.in/inf.v0@v0.9.1", - "pkg:golang/gopkg.in/yaml.v2@v2.4.0", - "pkg:golang/gopkg.in/yaml.v3@v3.0.1", - "pkg:golang/k8s.io/klog/v2@v2.80.1", - "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", - "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2", - "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", - "pkg:golang/sigs.k8s.io/yaml@v1.3.0" + "pkg:golang/rsc.io/sampler@v1.3.0" ] }, { - "ref": "pkg:golang/k8s.io/apimachinery@v0.26.1", + "ref": "pkg:golang/golang.org/x/sync@v0.0.0-20201020160332-67f06af15bc9", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/go-openapi/swag@v0.19.14", "dependsOn": [ - "pkg:golang/github.com/armon/go-socks5@v0.0.0-20160902184237-e75332964ef5", - "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "pkg:golang/github.com/elazarl/goproxy@v0.0.0-20180725130230-947c36da3153", - "pkg:golang/github.com/evanphx/json-patch@v4.12.0%2Bincompatible", - "pkg:golang/github.com/gogo/protobuf@v1.3.2", - "pkg:golang/github.com/golang/protobuf@v1.5.2", - "pkg:golang/github.com/google/go-cmp@v0.5.9", - "pkg:golang/github.com/google/gofuzz@v1.1.0", - "pkg:golang/github.com/google/uuid@v1.1.2", - "pkg:golang/github.com/moby/spdystream@v0.2.0", - "pkg:golang/github.com/mxk/go-flowrate@v0.0.0-20140419014527-cca7078d478f", - "pkg:golang/github.com/spf13/pflag@v1.0.5", + "pkg:golang/github.com/davecgh/go-spew@v1.1.1", + "pkg:golang/github.com/kr/pretty@v0.3.1", + "pkg:golang/github.com/mailru/easyjson@v0.7.6", "pkg:golang/github.com/stretchr/testify@v1.8.3", - "pkg:golang/golang.org/x/net@v0.10.0", - "pkg:golang/gopkg.in/inf.v0@v0.9.1", - "pkg:golang/k8s.io/klog/v2@v2.80.1", - "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280", - "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", - "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2", - "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", - "pkg:golang/sigs.k8s.io/yaml@v1.3.0", - "pkg:golang/github.com/json-iterator/go@v1.1.12", - "pkg:golang/github.com/kr/text@v0.2.0", - "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", - "pkg:golang/github.com/modern-go/reflect2@v1.0.2", - "pkg:golang/github.com/niemeyer/pretty@v0.0.0-20200227124842-a10e7caefd8e", - "pkg:golang/github.com/onsi/ginkgo/v2@v2.4.0", - "pkg:golang/github.com/onsi/gomega@v1.23.0", - "pkg:golang/github.com/pkg/errors@v0.9.1", - "pkg:golang/github.com/pmezard/go-difflib@v1.0.0", - "pkg:golang/golang.org/x/text@v0.9.0", - "pkg:golang/google.golang.org/protobuf@v1.30.0", "pkg:golang/gopkg.in/check.v1@v1.0.0-20200227125254-8fa46927fb4f", "pkg:golang/gopkg.in/yaml.v2@v2.4.0", + "pkg:golang/github.com/kr/text@v0.2.0", + "pkg:golang/github.com/niemeyer/pretty@v0.0.0-20200227124842-a10e7caefd8e", "pkg:golang/gopkg.in/yaml.v3@v3.0.1" ] }, { - "ref": "pkg:golang/k8s.io/client-go@v0.26.1", + "ref": "pkg:golang/github.com/kr/text@v0.2.0", "dependsOn": [ - "pkg:golang/github.com/davecgh/go-spew@v1.1.1", - "pkg:golang/github.com/evanphx/json-patch@v4.12.0%2Bincompatible", - "pkg:golang/github.com/gogo/protobuf@v1.3.2", - "pkg:golang/github.com/golang/groupcache@v0.0.0-20210331224755-41bb18bfe9da", - "pkg:golang/github.com/golang/protobuf@v1.5.2", - "pkg:golang/github.com/google/go-cmp@v0.5.9", - "pkg:golang/github.com/google/gofuzz@v1.1.0", - "pkg:golang/github.com/google/uuid@v1.1.2", - "pkg:golang/github.com/gregjones/httpcache@v0.0.0-20180305231024-9cad4c3443a7", - "pkg:golang/github.com/imdario/mergo@v0.3.6", - "pkg:golang/github.com/peterbourgon/diskv@v2.0.1%2Bincompatible", - "pkg:golang/github.com/spf13/pflag@v1.0.5", - "pkg:golang/github.com/stretchr/testify@v1.8.3", - "pkg:golang/golang.org/x/net@v0.10.0", - "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b", - "pkg:golang/golang.org/x/term@v0.8.0", - "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8", - "pkg:golang/google.golang.org/protobuf@v1.30.0", - "pkg:golang/k8s.io/api@v0.26.1", - "pkg:golang/k8s.io/apimachinery@v0.26.1", - "pkg:golang/k8s.io/klog/v2@v2.80.1", - "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280", - "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", - "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", - "pkg:golang/sigs.k8s.io/yaml@v1.3.0", - "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0", - "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.5", - "pkg:golang/github.com/go-openapi/jsonreference@v0.20.0", - "pkg:golang/github.com/go-openapi/swag@v0.19.14", - "pkg:golang/github.com/google/btree@v1.0.1", - "pkg:golang/github.com/josharian/intern@v1.0.0", - "pkg:golang/github.com/json-iterator/go@v1.1.12", - "pkg:golang/github.com/mailru/easyjson@v0.7.6", - "pkg:golang/github.com/moby/spdystream@v0.2.0", - "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", - "pkg:golang/github.com/modern-go/reflect2@v1.0.2", - "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", - "pkg:golang/github.com/pkg/errors@v0.9.1", - "pkg:golang/github.com/pmezard/go-difflib@v1.0.0", - "pkg:golang/golang.org/x/sys@v0.8.0", - "pkg:golang/golang.org/x/text@v0.9.0", - "pkg:golang/google.golang.org/appengine@v1.6.7", - "pkg:golang/gopkg.in/inf.v0@v0.9.1", - "pkg:golang/gopkg.in/yaml.v2@v2.4.0", - "pkg:golang/gopkg.in/yaml.v3@v3.0.1", - "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2" + "pkg:golang/github.com/kr/pty@v1.1.1", + "pkg:golang/github.com/creack/pty@v1.1.9" + ] + }, + { + "ref": "pkg:golang/github.com/niemeyer/pretty@v0.0.0-20200227124842-a10e7caefd8e", + "dependsOn": [ + "pkg:golang/github.com/kr/text@v0.2.0" ] }, + { + "ref": "pkg:golang/golang.org/x/mobile@v0.0.0-20190719004257-d2bd2a29d028", + "dependsOn": [ + "pkg:golang/golang.org/x/exp@v0.0.0-20200224162631-6cc2880d07d6", + "pkg:golang/golang.org/x/image@v0.0.0-20190802002840-cff245a6509b", + "pkg:golang/golang.org/x/sys@v0.8.0" + ] + }, + { + "ref": "pkg:golang/github.com/armon/go-socks5@v0.0.0-20160902184237-e75332964ef5", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/elazarl/goproxy@v0.0.0-20180725130230-947c36da3153", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/evanphx/json-patch@v4.12.0%2Bincompatible", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/google/gofuzz@v1.1.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/moby/spdystream@v0.2.0", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/mxk/go-flowrate@v0.0.0-20140419014527-cca7078d478f", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/spf13/pflag@v1.0.5", + "dependsOn": [] + }, + { + "ref": "pkg:golang/gopkg.in/inf.v0@v0.9.1", + "dependsOn": [] + }, { "ref": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20221012153701-172d655c2280", "dependsOn": [ @@ -1860,75 +1812,21 @@ ] }, { - "ref": "pkg:golang/golang.org/x/xerrors@v0.0.0-20200804184101-5ec99f83aff1", - "dependsOn": [] - }, - { - "ref": "pkg:golang/golang.org/x/crypto@v0.9.0", - "dependsOn": [ - "pkg:golang/golang.org/x/net@v0.10.0", - "pkg:golang/golang.org/x/sys@v0.8.0" - ] - }, - { - "ref": "pkg:golang/github.com/kisielk/errcheck@v1.5.0", - "dependsOn": [ - "pkg:golang/golang.org/x/tools@v0.6.0" - ] - }, - { - "ref": "pkg:golang/github.com/kisielk/gotool@v1.0.0", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/golang/mock@v1.4.4", - "dependsOn": [ - "pkg:golang/golang.org/x/tools@v0.6.0", - "pkg:golang/rsc.io/quote/v3@v3.1.0" - ] - }, - { - "ref": "pkg:golang/rsc.io/quote/v3@v3.1.0", - "dependsOn": [ - "pkg:golang/rsc.io/sampler@v1.3.0" - ] - }, - { - "ref": "pkg:golang/golang.org/x/sync@v0.0.0-20201020160332-67f06af15bc9", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/niemeyer/pretty@v0.0.0-20200227124842-a10e7caefd8e", - "dependsOn": [ - "pkg:golang/github.com/kr/text@v0.2.0" - ] - }, - { - "ref": "pkg:golang/golang.org/x/mobile@v0.0.0-20190719004257-d2bd2a29d028", + "ref": "pkg:golang/github.com/json-iterator/go@v1.1.12", "dependsOn": [ - "pkg:golang/golang.org/x/exp@v0.0.0-20200224162631-6cc2880d07d6", - "pkg:golang/golang.org/x/image@v0.0.0-20190802002840-cff245a6509b", - "pkg:golang/golang.org/x/sys@v0.8.0" + "pkg:golang/github.com/davecgh/go-spew@v1.1.1", + "pkg:golang/github.com/google/gofuzz@v1.1.0", + "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", + "pkg:golang/github.com/modern-go/reflect2@v1.0.2", + "pkg:golang/github.com/stretchr/testify@v1.8.3" ] }, { - "ref": "pkg:golang/github.com/armon/go-socks5@v0.0.0-20160902184237-e75332964ef5", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/elazarl/goproxy@v0.0.0-20180725130230-947c36da3153", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/evanphx/json-patch@v4.12.0%2Bincompatible", - "dependsOn": [] - }, - { - "ref": "pkg:golang/github.com/moby/spdystream@v0.2.0", + "ref": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", "dependsOn": [] }, { - "ref": "pkg:golang/github.com/mxk/go-flowrate@v0.0.0-20140419014527-cca7078d478f", + "ref": "pkg:golang/github.com/modern-go/reflect2@v1.0.2", "dependsOn": [] }, { @@ -2037,14 +1935,80 @@ "ref": "pkg:golang/github.com/gregjones/httpcache@v0.0.0-20180305231024-9cad4c3443a7", "dependsOn": [] }, + { + "ref": "pkg:golang/github.com/imdario/mergo@v0.3.6", + "dependsOn": [] + }, { "ref": "pkg:golang/github.com/peterbourgon/diskv@v2.0.1%2Bincompatible", "dependsOn": [] }, + { + "ref": "pkg:golang/golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b", + "dependsOn": [ + "pkg:golang/cloud.google.com/go@v0.65.0", + "pkg:golang/golang.org/x/net@v0.10.0", + "pkg:golang/golang.org/x/sync@v0.0.0-20201020160332-67f06af15bc9", + "pkg:golang/google.golang.org/appengine@v1.6.7" + ] + }, + { + "ref": "pkg:golang/golang.org/x/term@v0.8.0", + "dependsOn": [ + "pkg:golang/golang.org/x/sys@v0.8.0" + ] + }, + { + "ref": "pkg:golang/golang.org/x/time@v0.0.0-20220210224613-90d013bbcef8", + "dependsOn": [] + }, + { + "ref": "pkg:golang/k8s.io/api@v0.26.1", + "dependsOn": [ + "pkg:golang/github.com/gogo/protobuf@v1.3.2", + "pkg:golang/github.com/stretchr/testify@v1.8.3", + "pkg:golang/k8s.io/apimachinery@v0.26.1", + "pkg:golang/github.com/davecgh/go-spew@v1.1.1", + "pkg:golang/github.com/golang/protobuf@v1.5.2", + "pkg:golang/github.com/google/go-cmp@v0.5.9", + "pkg:golang/github.com/google/gofuzz@v1.1.0", + "pkg:golang/github.com/json-iterator/go@v1.1.12", + "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", + "pkg:golang/github.com/modern-go/reflect2@v1.0.2", + "pkg:golang/github.com/pmezard/go-difflib@v1.0.0", + "pkg:golang/github.com/spf13/pflag@v1.0.5", + "pkg:golang/golang.org/x/net@v0.10.0", + "pkg:golang/golang.org/x/text@v0.9.0", + "pkg:golang/google.golang.org/protobuf@v1.30.0", + "pkg:golang/gopkg.in/inf.v0@v0.9.1", + "pkg:golang/gopkg.in/yaml.v2@v2.4.0", + "pkg:golang/gopkg.in/yaml.v3@v3.0.1", + "pkg:golang/k8s.io/klog/v2@v2.80.1", + "pkg:golang/k8s.io/utils@v0.0.0-20221107191617-1a15be271d1d", + "pkg:golang/sigs.k8s.io/json@v0.0.0-20220713155537-f223a00ba0e2", + "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.2.3", + "pkg:golang/sigs.k8s.io/yaml@v1.3.0" + ] + }, + { + "ref": "pkg:golang/github.com/emicklei/go-restful/v3@v3.9.0", + "dependsOn": [] + }, { "ref": "pkg:golang/github.com/google/btree@v1.0.1", "dependsOn": [] }, + { + "ref": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", + "dependsOn": [] + }, + { + "ref": "pkg:golang/github.com/rogpeppe/go-internal@v1.9.0", + "dependsOn": [ + "pkg:golang/gopkg.in/errgo.v2@v2.1.0", + "pkg:golang/github.com/pkg/diff@v0.0.0-20210226163009-20ebb0f2a09e" + ] + }, { "ref": "pkg:golang/gopkg.in/errgo.v2@v2.1.0", "dependsOn": [ diff --git a/src/test/resources/tst_manifests/maven/deps_with_ignore_on_artifact/expected_component_sbom.json b/src/test/resources/tst_manifests/maven/deps_with_ignore_on_artifact/expected_component_sbom.json index cb6d5594..5f4b41de 100644 --- a/src/test/resources/tst_manifests/maven/deps_with_ignore_on_artifact/expected_component_sbom.json +++ b/src/test/resources/tst_manifests/maven/deps_with_ignore_on_artifact/expected_component_sbom.json @@ -1,22 +1,23 @@ { - "bomFormat" : "CycloneDX", - "specVersion" : "1.4", - "version" : 1, - "metadata" : { - "timestamp" : "2025-04-09T12:15:45Z", - "component" : { - "type" : "application", - "bom-ref" : "pkg:maven/pom-with-deps-and-ignore/pom-with-dependency-not-ignored-for-tests@0.0.1", - "group" : "pom-with-deps-and-ignore", - "name" : "pom-with-dependency-not-ignored-for-tests", - "version" : "0.0.1", - "purl" : "pkg:maven/pom-with-deps-and-ignore/pom-with-dependency-not-ignored-for-tests@0.0.1" + "bomFormat": "CycloneDX", + "specVersion": "1.4", + "version": 1, + "metadata": { + "timestamp": "2025-04-09T12:15:45Z", + "component": { + "type": "application", + "bom-ref": "pkg:maven/pom-with-deps-and-ignore/pom-with-dependency-not-ignored-for-tests@0.0.1", + "group": "pom-with-deps-and-ignore", + "name": "pom-with-dependency-not-ignored-for-tests", + "version": "0.0.1", + "purl": "pkg:maven/pom-with-deps-and-ignore/pom-with-dependency-not-ignored-for-tests@0.0.1" } }, - "dependencies" : [ + "components": [], + "dependencies": [ { - "ref" : "pkg:maven/pom-with-deps-and-ignore/pom-with-dependency-not-ignored-for-tests@0.0.1", - "dependsOn" : [ ] + "ref": "pkg:maven/pom-with-deps-and-ignore/pom-with-dependency-not-ignored-for-tests@0.0.1", + "dependsOn": [] } ] -} \ No newline at end of file +} diff --git a/src/test/resources/tst_manifests/maven/deps_with_ignore_on_artifact/expected_stack_sbom.json b/src/test/resources/tst_manifests/maven/deps_with_ignore_on_artifact/expected_stack_sbom.json index 116d77e8..00f9b2b8 100644 --- a/src/test/resources/tst_manifests/maven/deps_with_ignore_on_artifact/expected_stack_sbom.json +++ b/src/test/resources/tst_manifests/maven/deps_with_ignore_on_artifact/expected_stack_sbom.json @@ -1,22 +1,18 @@ { - "bomFormat" : "CycloneDX", - "specVersion" : "1.4", - "version" : 1, - "metadata" : { - "timestamp" : "2025-04-09T12:14:35Z", - "component" : { - "type" : "application", - "bom-ref" : "pkg:maven/pom-with-deps-and-ignore/pom-with-dependency-not-ignored-for-tests@0.0.1", - "group" : "pom-with-deps-and-ignore", - "name" : "pom-with-dependency-not-ignored-for-tests", - "version" : "0.0.1", - "purl" : "pkg:maven/pom-with-deps-and-ignore/pom-with-dependency-not-ignored-for-tests@0.0.1" + "bomFormat": "CycloneDX", + "specVersion": "1.4", + "version": 1, + "metadata": { + "timestamp": "2025-04-09T12:14:35Z", + "component": { + "type": "application", + "bom-ref": "pkg:maven/pom-with-deps-and-ignore/pom-with-dependency-not-ignored-for-tests@0.0.1", + "group": "pom-with-deps-and-ignore", + "name": "pom-with-dependency-not-ignored-for-tests", + "version": "0.0.1", + "purl": "pkg:maven/pom-with-deps-and-ignore/pom-with-dependency-not-ignored-for-tests@0.0.1" } }, - "dependencies" : [ - { - "ref" : "pkg:maven/pom-with-deps-and-ignore/pom-with-dependency-not-ignored-for-tests@0.0.1", - "dependsOn" : [ ] - } - ] -} \ No newline at end of file + "components": [], + "dependencies": [] +} diff --git a/src/test/resources/tst_manifests/maven/deps_with_ignore_on_dependency/expected_component_sbom.json b/src/test/resources/tst_manifests/maven/deps_with_ignore_on_dependency/expected_component_sbom.json index cb6d5594..5f4b41de 100644 --- a/src/test/resources/tst_manifests/maven/deps_with_ignore_on_dependency/expected_component_sbom.json +++ b/src/test/resources/tst_manifests/maven/deps_with_ignore_on_dependency/expected_component_sbom.json @@ -1,22 +1,23 @@ { - "bomFormat" : "CycloneDX", - "specVersion" : "1.4", - "version" : 1, - "metadata" : { - "timestamp" : "2025-04-09T12:15:45Z", - "component" : { - "type" : "application", - "bom-ref" : "pkg:maven/pom-with-deps-and-ignore/pom-with-dependency-not-ignored-for-tests@0.0.1", - "group" : "pom-with-deps-and-ignore", - "name" : "pom-with-dependency-not-ignored-for-tests", - "version" : "0.0.1", - "purl" : "pkg:maven/pom-with-deps-and-ignore/pom-with-dependency-not-ignored-for-tests@0.0.1" + "bomFormat": "CycloneDX", + "specVersion": "1.4", + "version": 1, + "metadata": { + "timestamp": "2025-04-09T12:15:45Z", + "component": { + "type": "application", + "bom-ref": "pkg:maven/pom-with-deps-and-ignore/pom-with-dependency-not-ignored-for-tests@0.0.1", + "group": "pom-with-deps-and-ignore", + "name": "pom-with-dependency-not-ignored-for-tests", + "version": "0.0.1", + "purl": "pkg:maven/pom-with-deps-and-ignore/pom-with-dependency-not-ignored-for-tests@0.0.1" } }, - "dependencies" : [ + "components": [], + "dependencies": [ { - "ref" : "pkg:maven/pom-with-deps-and-ignore/pom-with-dependency-not-ignored-for-tests@0.0.1", - "dependsOn" : [ ] + "ref": "pkg:maven/pom-with-deps-and-ignore/pom-with-dependency-not-ignored-for-tests@0.0.1", + "dependsOn": [] } ] -} \ No newline at end of file +} diff --git a/src/test/resources/tst_manifests/maven/deps_with_ignore_on_dependency/expected_stack_sbom.json b/src/test/resources/tst_manifests/maven/deps_with_ignore_on_dependency/expected_stack_sbom.json index 116d77e8..00f9b2b8 100644 --- a/src/test/resources/tst_manifests/maven/deps_with_ignore_on_dependency/expected_stack_sbom.json +++ b/src/test/resources/tst_manifests/maven/deps_with_ignore_on_dependency/expected_stack_sbom.json @@ -1,22 +1,18 @@ { - "bomFormat" : "CycloneDX", - "specVersion" : "1.4", - "version" : 1, - "metadata" : { - "timestamp" : "2025-04-09T12:14:35Z", - "component" : { - "type" : "application", - "bom-ref" : "pkg:maven/pom-with-deps-and-ignore/pom-with-dependency-not-ignored-for-tests@0.0.1", - "group" : "pom-with-deps-and-ignore", - "name" : "pom-with-dependency-not-ignored-for-tests", - "version" : "0.0.1", - "purl" : "pkg:maven/pom-with-deps-and-ignore/pom-with-dependency-not-ignored-for-tests@0.0.1" + "bomFormat": "CycloneDX", + "specVersion": "1.4", + "version": 1, + "metadata": { + "timestamp": "2025-04-09T12:14:35Z", + "component": { + "type": "application", + "bom-ref": "pkg:maven/pom-with-deps-and-ignore/pom-with-dependency-not-ignored-for-tests@0.0.1", + "group": "pom-with-deps-and-ignore", + "name": "pom-with-dependency-not-ignored-for-tests", + "version": "0.0.1", + "purl": "pkg:maven/pom-with-deps-and-ignore/pom-with-dependency-not-ignored-for-tests@0.0.1" } }, - "dependencies" : [ - { - "ref" : "pkg:maven/pom-with-deps-and-ignore/pom-with-dependency-not-ignored-for-tests@0.0.1", - "dependsOn" : [ ] - } - ] -} \ No newline at end of file + "components": [], + "dependencies": [] +} diff --git a/src/test/resources/tst_manifests/maven/deps_with_ignore_on_group/expected_component_sbom.json b/src/test/resources/tst_manifests/maven/deps_with_ignore_on_group/expected_component_sbom.json index cb6d5594..5f4b41de 100644 --- a/src/test/resources/tst_manifests/maven/deps_with_ignore_on_group/expected_component_sbom.json +++ b/src/test/resources/tst_manifests/maven/deps_with_ignore_on_group/expected_component_sbom.json @@ -1,22 +1,23 @@ { - "bomFormat" : "CycloneDX", - "specVersion" : "1.4", - "version" : 1, - "metadata" : { - "timestamp" : "2025-04-09T12:15:45Z", - "component" : { - "type" : "application", - "bom-ref" : "pkg:maven/pom-with-deps-and-ignore/pom-with-dependency-not-ignored-for-tests@0.0.1", - "group" : "pom-with-deps-and-ignore", - "name" : "pom-with-dependency-not-ignored-for-tests", - "version" : "0.0.1", - "purl" : "pkg:maven/pom-with-deps-and-ignore/pom-with-dependency-not-ignored-for-tests@0.0.1" + "bomFormat": "CycloneDX", + "specVersion": "1.4", + "version": 1, + "metadata": { + "timestamp": "2025-04-09T12:15:45Z", + "component": { + "type": "application", + "bom-ref": "pkg:maven/pom-with-deps-and-ignore/pom-with-dependency-not-ignored-for-tests@0.0.1", + "group": "pom-with-deps-and-ignore", + "name": "pom-with-dependency-not-ignored-for-tests", + "version": "0.0.1", + "purl": "pkg:maven/pom-with-deps-and-ignore/pom-with-dependency-not-ignored-for-tests@0.0.1" } }, - "dependencies" : [ + "components": [], + "dependencies": [ { - "ref" : "pkg:maven/pom-with-deps-and-ignore/pom-with-dependency-not-ignored-for-tests@0.0.1", - "dependsOn" : [ ] + "ref": "pkg:maven/pom-with-deps-and-ignore/pom-with-dependency-not-ignored-for-tests@0.0.1", + "dependsOn": [] } ] -} \ No newline at end of file +} diff --git a/src/test/resources/tst_manifests/maven/deps_with_ignore_on_group/expected_stack_sbom.json b/src/test/resources/tst_manifests/maven/deps_with_ignore_on_group/expected_stack_sbom.json index 116d77e8..00f9b2b8 100644 --- a/src/test/resources/tst_manifests/maven/deps_with_ignore_on_group/expected_stack_sbom.json +++ b/src/test/resources/tst_manifests/maven/deps_with_ignore_on_group/expected_stack_sbom.json @@ -1,22 +1,18 @@ { - "bomFormat" : "CycloneDX", - "specVersion" : "1.4", - "version" : 1, - "metadata" : { - "timestamp" : "2025-04-09T12:14:35Z", - "component" : { - "type" : "application", - "bom-ref" : "pkg:maven/pom-with-deps-and-ignore/pom-with-dependency-not-ignored-for-tests@0.0.1", - "group" : "pom-with-deps-and-ignore", - "name" : "pom-with-dependency-not-ignored-for-tests", - "version" : "0.0.1", - "purl" : "pkg:maven/pom-with-deps-and-ignore/pom-with-dependency-not-ignored-for-tests@0.0.1" + "bomFormat": "CycloneDX", + "specVersion": "1.4", + "version": 1, + "metadata": { + "timestamp": "2025-04-09T12:14:35Z", + "component": { + "type": "application", + "bom-ref": "pkg:maven/pom-with-deps-and-ignore/pom-with-dependency-not-ignored-for-tests@0.0.1", + "group": "pom-with-deps-and-ignore", + "name": "pom-with-dependency-not-ignored-for-tests", + "version": "0.0.1", + "purl": "pkg:maven/pom-with-deps-and-ignore/pom-with-dependency-not-ignored-for-tests@0.0.1" } }, - "dependencies" : [ - { - "ref" : "pkg:maven/pom-with-deps-and-ignore/pom-with-dependency-not-ignored-for-tests@0.0.1", - "dependsOn" : [ ] - } - ] -} \ No newline at end of file + "components": [], + "dependencies": [] +} diff --git a/src/test/resources/tst_manifests/maven/deps_with_ignore_on_version/expected_component_sbom.json b/src/test/resources/tst_manifests/maven/deps_with_ignore_on_version/expected_component_sbom.json index cb6d5594..5f4b41de 100644 --- a/src/test/resources/tst_manifests/maven/deps_with_ignore_on_version/expected_component_sbom.json +++ b/src/test/resources/tst_manifests/maven/deps_with_ignore_on_version/expected_component_sbom.json @@ -1,22 +1,23 @@ { - "bomFormat" : "CycloneDX", - "specVersion" : "1.4", - "version" : 1, - "metadata" : { - "timestamp" : "2025-04-09T12:15:45Z", - "component" : { - "type" : "application", - "bom-ref" : "pkg:maven/pom-with-deps-and-ignore/pom-with-dependency-not-ignored-for-tests@0.0.1", - "group" : "pom-with-deps-and-ignore", - "name" : "pom-with-dependency-not-ignored-for-tests", - "version" : "0.0.1", - "purl" : "pkg:maven/pom-with-deps-and-ignore/pom-with-dependency-not-ignored-for-tests@0.0.1" + "bomFormat": "CycloneDX", + "specVersion": "1.4", + "version": 1, + "metadata": { + "timestamp": "2025-04-09T12:15:45Z", + "component": { + "type": "application", + "bom-ref": "pkg:maven/pom-with-deps-and-ignore/pom-with-dependency-not-ignored-for-tests@0.0.1", + "group": "pom-with-deps-and-ignore", + "name": "pom-with-dependency-not-ignored-for-tests", + "version": "0.0.1", + "purl": "pkg:maven/pom-with-deps-and-ignore/pom-with-dependency-not-ignored-for-tests@0.0.1" } }, - "dependencies" : [ + "components": [], + "dependencies": [ { - "ref" : "pkg:maven/pom-with-deps-and-ignore/pom-with-dependency-not-ignored-for-tests@0.0.1", - "dependsOn" : [ ] + "ref": "pkg:maven/pom-with-deps-and-ignore/pom-with-dependency-not-ignored-for-tests@0.0.1", + "dependsOn": [] } ] -} \ No newline at end of file +} diff --git a/src/test/resources/tst_manifests/maven/deps_with_ignore_on_version/expected_stack_sbom.json b/src/test/resources/tst_manifests/maven/deps_with_ignore_on_version/expected_stack_sbom.json index 116d77e8..00f9b2b8 100644 --- a/src/test/resources/tst_manifests/maven/deps_with_ignore_on_version/expected_stack_sbom.json +++ b/src/test/resources/tst_manifests/maven/deps_with_ignore_on_version/expected_stack_sbom.json @@ -1,22 +1,18 @@ { - "bomFormat" : "CycloneDX", - "specVersion" : "1.4", - "version" : 1, - "metadata" : { - "timestamp" : "2025-04-09T12:14:35Z", - "component" : { - "type" : "application", - "bom-ref" : "pkg:maven/pom-with-deps-and-ignore/pom-with-dependency-not-ignored-for-tests@0.0.1", - "group" : "pom-with-deps-and-ignore", - "name" : "pom-with-dependency-not-ignored-for-tests", - "version" : "0.0.1", - "purl" : "pkg:maven/pom-with-deps-and-ignore/pom-with-dependency-not-ignored-for-tests@0.0.1" + "bomFormat": "CycloneDX", + "specVersion": "1.4", + "version": 1, + "metadata": { + "timestamp": "2025-04-09T12:14:35Z", + "component": { + "type": "application", + "bom-ref": "pkg:maven/pom-with-deps-and-ignore/pom-with-dependency-not-ignored-for-tests@0.0.1", + "group": "pom-with-deps-and-ignore", + "name": "pom-with-dependency-not-ignored-for-tests", + "version": "0.0.1", + "purl": "pkg:maven/pom-with-deps-and-ignore/pom-with-dependency-not-ignored-for-tests@0.0.1" } }, - "dependencies" : [ - { - "ref" : "pkg:maven/pom-with-deps-and-ignore/pom-with-dependency-not-ignored-for-tests@0.0.1", - "dependsOn" : [ ] - } - ] -} \ No newline at end of file + "components": [], + "dependencies": [] +}