Code Review / policy / opa-pdp.git / commitdiff
? search:
summary | shortlog | log | commit | commitdiff | review | tree
raw | patch | inline | side by side (parent: 995735d)
Add CycloneDX sbom with v1.5 format 86/140886/1
authorKevin Sandi <ksandi@contractor.linuxfoundation.org>
Wed, 14 May 2025 22:52:20 +0000 (16:52 -0600)
committerKevin Sandi <ksandi@contractor.linuxfoundation.org>
Wed, 14 May 2025 22:53:02 +0000 (16:53 -0600)
Issue-ID: CIMAN-33
Change-Id: I22385b0fa23f751fb9b46495a29f1519dcc9eb04
Signed-off-by: Kevin Sandi <ksandi@contractor.linuxfoundation.org>
sbom.xml [new file with mode: 0644] patch | blob

diff --git a/sbom.xml b/sbom.xml
new file mode 100644 (file)
index 0000000..999dc7a
--- /dev/null
+++ b/sbom.xml
@@ -0,0 +1,1280 @@
+<?xml version="1.0" encoding="utf-8"?>
+<bom xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" serialNumber="urn:uuid:b47bf58e-a2e5-40be-95f2-9b504389e31c" version="1" xmlns="http://cyclonedx.org/schema/bom/1.5">
+  <metadata>
+    <timestamp>2025-05-14T22:29:54Z</timestamp>
+    <tools>
+      <tool>
+        <vendor>CycloneDX</vendor>
+        <name>cyclonedx-gomod</name>
+        <version>v1.8.0</version>
+        <hashes>
+          <hash alg="MD5">6620d749547cb13e63b42ae26a8e543f</hash>
+          <hash alg="SHA-1">ead550fe441c66a4f320d060bd601b1009aee12a</hash>
+          <hash alg="SHA-256">b525153dee71f1384b15c515693b9871a5edd2d46f805587019371b4265a2fa4</hash>
+          <hash alg="SHA-384">353673ce407aa6aefaf23663f33862c64fabe07853be7f8a843f5a858eecb3b91464fa7e9481d7b3a821fb0ec1707927</hash>
+          <hash alg="SHA-512">8f7f53d20c04a71b9a67a8528fb7448e45302e3e029dea7cab15c3518e2e8c9dd4a30e4f7f19e9f720cf9c94ef6094868536d6db6826d8a73a65ed1b6cb457d8</hash>
+        </hashes>
+        <externalReferences>
+          <reference type="vcs">
+            <url>https://github.com/CycloneDX/cyclonedx-gomod</url>
+          </reference>
+          <reference type="website">
+            <url>https://cyclonedx.org</url>
+          </reference>
+        </externalReferences>
+      </tool>
+    </tools>
+    <component type="application" bom-ref="pkg:golang/policy-opa-pdp@v0.0.0-20250509074659-995735dc3763?type=module">
+      <name>policy-opa-pdp</name>
+      <version>v0.0.0-20250509074659-995735dc3763</version>
+      <purl>pkg:golang/policy-opa-pdp@v0.0.0-20250509074659-995735dc3763?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+    </component>
+  </metadata>
+  <components>
+    <component type="library" bom-ref="pkg:golang/github.com/AdaLogics/go-fuzz-headers@v0.0.0-20230811130428-ced1acdcaa24?type=module">
+      <name>github.com/AdaLogics/go-fuzz-headers</name>
+      <version>v0.0.0-20230811130428-ced1acdcaa24</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">6ef0d5f6f9269c760e32c3abe162e4f95a34ef2288cddf78b15a08aac850e1b5</hash>
+      </hashes>
+      <purl>pkg:golang/github.com/AdaLogics/go-fuzz-headers@v0.0.0-20230811130428-ced1acdcaa24?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+      <externalReferences>
+        <reference type="vcs">
+          <url>https://github.com/AdaLogics/go-fuzz-headers</url>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:golang/github.com/OneOfOne/xxhash@v1.2.8?type=module">
+      <name>github.com/OneOfOne/xxhash</name>
+      <version>v1.2.8</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">df57332bf4c8f6c364c4829f6947c6954e3b040c50d33b4681df6f3f2aa299ff</hash>
+      </hashes>
+      <purl>pkg:golang/github.com/OneOfOne/xxhash@v1.2.8?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+      <externalReferences>
+        <reference type="vcs">
+          <url>https://github.com/OneOfOne/xxhash</url>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:golang/github.com/agnivade/levenshtein@v1.2.0?type=module">
+      <name>github.com/agnivade/levenshtein</name>
+      <version>v1.2.0</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">53d2f820e4f46378b44c895420327bad553388a8bfccf6eb246685aed607dd26</hash>
+      </hashes>
+      <purl>pkg:golang/github.com/agnivade/levenshtein@v1.2.0?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+      <externalReferences>
+        <reference type="vcs">
+          <url>https://github.com/agnivade/levenshtein</url>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:golang/github.com/apapsch/go-jsonmerge/v2@v2.0.0?type=module">
+      <name>github.com/apapsch/go-jsonmerge/v2</name>
+      <version>v2.0.0</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">6b11a74f581121f8a623b80989f07af7d1a813fa2af85d8c53b0e697a9f0f6b4</hash>
+      </hashes>
+      <purl>pkg:golang/github.com/apapsch/go-jsonmerge/v2@v2.0.0?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+      <externalReferences>
+        <reference type="vcs">
+          <url>https://github.com/apapsch/go-jsonmerge</url>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:golang/github.com/beorn7/perks@v1.0.1?type=module">
+      <name>github.com/beorn7/perks</name>
+      <version>v1.0.1</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">5656ca2a735f57c6c9cdeaa86b870e2aa3ba6d8af75a0299c4ef19d7afa1b0e3</hash>
+      </hashes>
+      <purl>pkg:golang/github.com/beorn7/perks@v1.0.1?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+      <externalReferences>
+        <reference type="vcs">
+          <url>https://github.com/beorn7/perks</url>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:golang/github.com/bytecodealliance/wasmtime-go/v3@v3.0.2?type=module">
+      <name>github.com/bytecodealliance/wasmtime-go/v3</name>
+      <version>v3.0.2</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">dee64203f04b4c8bbe0ea09f82e07234c25ad87547a57be37f2d03cbb83a7ee0</hash>
+      </hashes>
+      <purl>pkg:golang/github.com/bytecodealliance/wasmtime-go/v3@v3.0.2?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+      <externalReferences>
+        <reference type="vcs">
+          <url>https://github.com/bytecodealliance/wasmtime-go</url>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:golang/github.com/cespare/xxhash/v2@v2.3.0?type=module">
+      <name>github.com/cespare/xxhash/v2</name>
+      <version>v2.3.0</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">50bf35e7153d4aab059626f3ba08338d786883b6cbea85fd05b3599cbd9416fb</hash>
+      </hashes>
+      <purl>pkg:golang/github.com/cespare/xxhash/v2@v2.3.0?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+      <externalReferences>
+        <reference type="vcs">
+          <url>https://github.com/cespare/xxhash</url>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:golang/github.com/confluentinc/confluent-kafka-go/v2@v2.8.0?type=module">
+      <name>github.com/confluentinc/confluent-kafka-go/v2</name>
+      <version>v2.8.0</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">d0795c48d5a0e0ba4b03d9c88f350c22a58723ec344baf1437b6a55c07374de0</hash>
+      </hashes>
+      <purl>pkg:golang/github.com/confluentinc/confluent-kafka-go/v2@v2.8.0?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+      <externalReferences>
+        <reference type="vcs">
+          <url>https://github.com/confluentinc/confluent-kafka-go</url>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:golang/github.com/containerd/containerd@v1.7.25?type=module">
+      <name>github.com/containerd/containerd</name>
+      <version>v1.7.25</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">9211103805ce1096a544edb6f32cd5b2e0122c7e36bd3ec3228f52b3ef523054</hash>
+      </hashes>
+      <purl>pkg:golang/github.com/containerd/containerd@v1.7.25?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+      <externalReferences>
+        <reference type="vcs">
+          <url>https://github.com/containerd/containerd</url>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:golang/github.com/containerd/errdefs@v1.0.0?type=module">
+      <name>github.com/containerd/errdefs</name>
+      <version>v1.0.0</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">b60e7221f225408af162dbbd6a3a98e365b79694b5f57a9dc5141e130606f0f2</hash>
+      </hashes>
+      <purl>pkg:golang/github.com/containerd/errdefs@v1.0.0?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+      <externalReferences>
+        <reference type="vcs">
+          <url>https://github.com/containerd/errdefs</url>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:golang/github.com/containerd/log@v0.1.0?type=module">
+      <name>github.com/containerd/log</name>
+      <version>v0.1.0</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">4c226dee2a0cd9caffb5f47c18f6c67fdfd54405fc0f60783e3cc2a5f5f9e342</hash>
+      </hashes>
+      <purl>pkg:golang/github.com/containerd/log@v0.1.0?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+      <externalReferences>
+        <reference type="vcs">
+          <url>https://github.com/containerd/log</url>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:golang/github.com/containerd/platforms@v0.2.1?type=module">
+      <name>github.com/containerd/platforms</name>
+      <version>v0.2.1</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">cefc2d337af3d981cf42c17608760cf3e2ad07976f8484a25e1e59a52050bfa0</hash>
+      </hashes>
+      <purl>pkg:golang/github.com/containerd/platforms@v0.2.1?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+      <externalReferences>
+        <reference type="vcs">
+          <url>https://github.com/containerd/platforms</url>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:golang/github.com/davecgh/go-spew@v1.1.1?type=module">
+      <name>github.com/davecgh/go-spew</name>
+      <version>v1.1.1</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">be3f63feed5baa7bc211f24ec1486d94e011aacdfeae41d8635de36164d4f7b7</hash>
+      </hashes>
+      <purl>pkg:golang/github.com/davecgh/go-spew@v1.1.1?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+      <externalReferences>
+        <reference type="vcs">
+          <url>https://github.com/davecgh/go-spew</url>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:golang/github.com/felixge/httpsnoop@v1.0.4?type=module">
+      <name>github.com/felixge/httpsnoop</name>
+      <version>v1.0.4</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">3454d5d998f56cbe2673db2a5800976d01550418365b718fbeaa7cfc4492d968</hash>
+      </hashes>
+      <purl>pkg:golang/github.com/felixge/httpsnoop@v1.0.4?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+      <externalReferences>
+        <reference type="vcs">
+          <url>https://github.com/felixge/httpsnoop</url>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:golang/github.com/fsnotify/fsnotify@v1.8.0?type=module">
+      <name>github.com/fsnotify/fsnotify</name>
+      <version>v1.8.0</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">740c2be900530592241bcae841a2631a87f4a69d04785fad355ed804fdc5ffc3</hash>
+      </hashes>
+      <purl>pkg:golang/github.com/fsnotify/fsnotify@v1.8.0?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+      <externalReferences>
+        <reference type="vcs">
+          <url>https://github.com/fsnotify/fsnotify</url>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:golang/github.com/gabriel-vasile/mimetype@v1.4.8?type=module">
+      <name>github.com/gabriel-vasile/mimetype</name>
+      <version>v1.4.8</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">15f677823dfc363965648789026321afea8a2fc5aefa73a82371aa69c2b0d4d3</hash>
+      </hashes>
+      <purl>pkg:golang/github.com/gabriel-vasile/mimetype@v1.4.8?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+      <externalReferences>
+        <reference type="vcs">
+          <url>https://github.com/gabriel-vasile/mimetype</url>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:golang/github.com/go-ini/ini@v1.67.0?type=module">
+      <name>github.com/go-ini/ini</name>
+      <version>v1.67.0</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">cfa66b4c466a496393c87d8596094d6cd8004721c6f282d6f603042ea2abd3a0</hash>
+      </hashes>
+      <purl>pkg:golang/github.com/go-ini/ini@v1.67.0?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+      <externalReferences>
+        <reference type="vcs">
+          <url>https://github.com/go-ini/ini</url>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:golang/github.com/go-logr/logr@v1.4.2?type=module">
+      <name>github.com/go-logr/logr</name>
+      <version>v1.4.2</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">ea91636a99fc6c57086e22a8dd74f88ff06100da651a2846eadbddfbcad882b6</hash>
+      </hashes>
+      <purl>pkg:golang/github.com/go-logr/logr@v1.4.2?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+      <externalReferences>
+        <reference type="vcs">
+          <url>https://github.com/go-logr/logr</url>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:golang/github.com/go-logr/stdr@v1.2.2?type=module">
+      <name>github.com/go-logr/stdr</name>
+      <version>v1.2.2</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">8525b11e8a93816d92daa19cd0b4c0239eb7299e582984614f730529931b8da8</hash>
+      </hashes>
+      <purl>pkg:golang/github.com/go-logr/stdr@v1.2.2?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+      <externalReferences>
+        <reference type="vcs">
+          <url>https://github.com/go-logr/stdr</url>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:golang/github.com/go-playground/locales@v0.14.1?type=module">
+      <name>github.com/go-playground/locales</name>
+      <version>v0.14.1</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">116690ff0b308e295f28b4c40a25f3ed187edc18c585f0c52affe85ec9448c90</hash>
+      </hashes>
+      <purl>pkg:golang/github.com/go-playground/locales@v0.14.1?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+      <externalReferences>
+        <reference type="vcs">
+          <url>https://github.com/go-playground/locales</url>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:golang/github.com/go-playground/universal-translator@v0.18.1?type=module">
+      <name>github.com/go-playground/universal-translator</name>
+      <version>v0.18.1</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">05c9e6d19c2c1b259b0b32265effa90099d82bd4b8ef72d016ecc26c36df4856</hash>
+      </hashes>
+      <purl>pkg:golang/github.com/go-playground/universal-translator@v0.18.1?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+      <externalReferences>
+        <reference type="vcs">
+          <url>https://github.com/go-playground/universal-translator</url>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:golang/github.com/go-playground/validator/v10@v10.25.0?type=module">
+      <name>github.com/go-playground/validator/v10</name>
+      <version>v10.25.0</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">e4387b723bf347b05165a767b153b33e15acaf052bd279ac649c4402714b34ef</hash>
+      </hashes>
+      <purl>pkg:golang/github.com/go-playground/validator/v10@v10.25.0?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+      <externalReferences>
+        <reference type="vcs">
+          <url>https://github.com/go-playground/validator</url>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:golang/github.com/gobwas/glob@v0.2.3?type=module">
+      <name>github.com/gobwas/glob</name>
+      <version>v0.2.3</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">038c436e58c82d744e87e90e6c88b2e6421a3d80fc7bdeb1d6d80185423927e6</hash>
+      </hashes>
+      <purl>pkg:golang/github.com/gobwas/glob@v0.2.3?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+      <externalReferences>
+        <reference type="vcs">
+          <url>https://github.com/gobwas/glob</url>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:golang/github.com/google/uuid@v1.6.0?type=module">
+      <name>github.com/google/uuid</name>
+      <version>v1.6.0</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">348bda24330eb231c0f27d630212d2833ac0cf2d4782bfa136b6f9edefbde05d</hash>
+      </hashes>
+      <purl>pkg:golang/github.com/google/uuid@v1.6.0?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+      <externalReferences>
+        <reference type="vcs">
+          <url>https://github.com/google/uuid</url>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:golang/github.com/gorilla/mux@v1.8.1?type=module">
+      <name>github.com/gorilla/mux</name>
+      <version>v1.8.1</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">4ee04be3db57c20ac561686aacd82b50d118f76bbcd523e1bbbb137734048966</hash>
+      </hashes>
+      <purl>pkg:golang/github.com/gorilla/mux@v1.8.1?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+      <externalReferences>
+        <reference type="vcs">
+          <url>https://github.com/gorilla/mux</url>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:golang/github.com/klauspost/compress@v1.17.11?type=module">
+      <name>github.com/klauspost/compress</name>
+      <version>v1.17.11</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">227eb12e9c963a2d7e0bbb575145afda8b7542f063c5ebca01a23a217ac99947</hash>
+      </hashes>
+      <purl>pkg:golang/github.com/klauspost/compress@v1.17.11?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+      <externalReferences>
+        <reference type="vcs">
+          <url>https://github.com/klauspost/compress</url>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:golang/github.com/leodido/go-urn@v1.4.0?type=module">
+      <name>github.com/leodido/go-urn</name>
+      <version>v1.4.0</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">593f47c04f521840aede583877f74803e8f19658c46b5fdf7d72a6463a9d9884</hash>
+      </hashes>
+      <purl>pkg:golang/github.com/leodido/go-urn@v1.4.0?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+      <externalReferences>
+        <reference type="vcs">
+          <url>https://github.com/leodido/go-urn</url>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:golang/github.com/moby/locker@v1.0.1?type=module">
+      <name>github.com/moby/locker</name>
+      <version>v1.0.1</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">7ce5ea478d737af7a0e1f14e0e2c7ed428789a3fe04f4344d5725ba7f7a9b818</hash>
+      </hashes>
+      <purl>pkg:golang/github.com/moby/locker@v1.0.1?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+      <externalReferences>
+        <reference type="vcs">
+          <url>https://github.com/moby/locker</url>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822?type=module">
+      <name>github.com/munnerz/goautoneg</name>
+      <version>v0.0.0-20191010083416-a7dc8b61c822</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">0b7c3d3ea208d35fceab57359d4026f3c30e1dc402f65e6622548c02964cac70</hash>
+      </hashes>
+      <purl>pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+      <externalReferences>
+        <reference type="vcs">
+          <url>https://github.com/munnerz/goautoneg</url>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:golang/github.com/oapi-codegen/runtime@v1.1.1?type=module">
+      <name>github.com/oapi-codegen/runtime</name>
+      <version>v1.1.1</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">1172c78740d72099d685d44f376c383170331721380ac93384d2d49ada4c62ba</hash>
+      </hashes>
+      <purl>pkg:golang/github.com/oapi-codegen/runtime@v1.1.1?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+      <externalReferences>
+        <reference type="vcs">
+          <url>https://github.com/oapi-codegen/runtime</url>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:golang/github.com/open-policy-agent/opa@v1.1.0?type=module">
+      <name>github.com/open-policy-agent/opa</name>
+      <version>v1.1.0</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">1cccf67af744313c8daad74b8e6bb7572c74e819a1358031ebb633dcb97dab6b</hash>
+      </hashes>
+      <purl>pkg:golang/github.com/open-policy-agent/opa@v1.1.0?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+      <externalReferences>
+        <reference type="vcs">
+          <url>https://github.com/open-policy-agent/opa</url>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:golang/github.com/opencontainers/go-digest@v1.0.0?type=module">
+      <name>github.com/opencontainers/go-digest</name>
+      <version>v1.0.0</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">6a93945ace755b93e586ec86cb3f4509e78120e50303fea75bc3a2ff23a18795</hash>
+      </hashes>
+      <purl>pkg:golang/github.com/opencontainers/go-digest@v1.0.0?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+      <externalReferences>
+        <reference type="vcs">
+          <url>https://github.com/opencontainers/go-digest</url>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:golang/github.com/opencontainers/image-spec@v1.1.0?type=module">
+      <name>github.com/opencontainers/image-spec</name>
+      <version>v1.1.0</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">f121bbfefc002e7e7895507fd3267f30cc2116b3d8b6910741bd88a56b02cee8</hash>
+      </hashes>
+      <purl>pkg:golang/github.com/opencontainers/image-spec@v1.1.0?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+      <externalReferences>
+        <reference type="vcs">
+          <url>https://github.com/opencontainers/image-spec</url>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:golang/github.com/pmezard/go-difflib@v1.0.0?type=module">
+      <name>github.com/pmezard/go-difflib</name>
+      <version>v1.0.0</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">e030700c4d0d1b24280476cb4183f04943e808c591e41133224fdfd6565b0103</hash>
+      </hashes>
+      <purl>pkg:golang/github.com/pmezard/go-difflib@v1.0.0?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+      <externalReferences>
+        <reference type="vcs">
+          <url>https://github.com/pmezard/go-difflib</url>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:golang/github.com/prometheus/client_golang@v1.20.5?type=module">
+      <name>github.com/prometheus/client_golang</name>
+      <version>v1.20.5</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">731a6904fb988549ec3baca8fdaa11a25e0beeaed415f766f9b47dafef25eb76</hash>
+      </hashes>
+      <purl>pkg:golang/github.com/prometheus/client_golang@v1.20.5?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+      <externalReferences>
+        <reference type="vcs">
+          <url>https://github.com/prometheus/client_golang</url>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:golang/github.com/prometheus/client_model@v0.6.1?type=module">
+      <name>github.com/prometheus/client_model</name>
+      <version>v0.6.1</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">64a4a1feb7a433e9f709e4bde7630b440745c082aa798f1beb6a7c6a2b367bd1</hash>
+      </hashes>
+      <purl>pkg:golang/github.com/prometheus/client_model@v0.6.1?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+      <externalReferences>
+        <reference type="vcs">
+          <url>https://github.com/prometheus/client_model</url>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:golang/github.com/prometheus/common@v0.55.0?type=module">
+      <name>github.com/prometheus/common</name>
+      <version>v0.55.0</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">2848ba0caee55d6fe6ec88398b8ef1d2f473b81b07baf25d8b979ee98dc6d5d7</hash>
+      </hashes>
+      <purl>pkg:golang/github.com/prometheus/common@v0.55.0?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+      <externalReferences>
+        <reference type="vcs">
+          <url>https://github.com/prometheus/common</url>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:golang/github.com/prometheus/procfs@v0.15.1?type=module">
+      <name>github.com/prometheus/procfs</name>
+      <version>v0.15.1</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">61a830385cd48187ca2875fa0ebfac1d3ee49bf8710bbe9407495e6ab8207a97</hash>
+      </hashes>
+      <purl>pkg:golang/github.com/prometheus/procfs@v0.15.1?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+      <externalReferences>
+        <reference type="vcs">
+          <url>https://github.com/prometheus/procfs</url>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:golang/github.com/rcrowley/go-metrics@v0.0.0-20200313005456-10cdbea86bc0?type=module">
+      <name>github.com/rcrowley/go-metrics</name>
+      <version>v0.0.0-20200313005456-10cdbea86bc0</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">32457eefb18b50da39a09d237fcef48ad5a6dc3d128e1efe65af606b329ce4b4</hash>
+      </hashes>
+      <purl>pkg:golang/github.com/rcrowley/go-metrics@v0.0.0-20200313005456-10cdbea86bc0?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+      <externalReferences>
+        <reference type="vcs">
+          <url>https://github.com/rcrowley/go-metrics</url>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:golang/github.com/sirupsen/logrus@v1.9.3?type=module">
+      <name>github.com/sirupsen/logrus</name>
+      <version>v1.9.3</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">76e794409d42daaf6813717bc2f992180695b539948b345ebba7e337cbaacdb4</hash>
+      </hashes>
+      <purl>pkg:golang/github.com/sirupsen/logrus@v1.9.3?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+      <externalReferences>
+        <reference type="vcs">
+          <url>https://github.com/sirupsen/logrus</url>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:golang/github.com/stretchr/objx@v0.5.2?type=module">
+      <name>github.com/stretchr/objx</name>
+      <version>v0.5.2</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">c6e31e27449da7964c457c7f6963ba459c5daf76de212906e7f1bf68846bde96</hash>
+      </hashes>
+      <purl>pkg:golang/github.com/stretchr/objx@v0.5.2?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+      <externalReferences>
+        <reference type="vcs">
+          <url>https://github.com/stretchr/objx</url>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:golang/github.com/stretchr/testify@v1.10.0?type=module">
+      <name>github.com/stretchr/testify</name>
+      <version>v1.10.0</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">5efe5eac18d3c1eff9231a94413757bf9920988bdb1e8dd0432470849b0e7c90</hash>
+      </hashes>
+      <purl>pkg:golang/github.com/stretchr/testify@v1.10.0?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+      <externalReferences>
+        <reference type="vcs">
+          <url>https://github.com/stretchr/testify</url>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:golang/github.com/tchap/go-patricia/v2@v2.3.2?type=module">
+      <name>github.com/tchap/go-patricia/v2</name>
+      <version>v2.3.2</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">c531c5badba2b4edb3a8a010e6b0913988146fb3abffe202ddfb6cf7f61cee73</hash>
+      </hashes>
+      <purl>pkg:golang/github.com/tchap/go-patricia/v2@v2.3.2?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+      <externalReferences>
+        <reference type="vcs">
+          <url>https://github.com/tchap/go-patricia</url>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb?type=module">
+      <name>github.com/xeipuuv/gojsonpointer</name>
+      <version>v0.0.0-20190905194746-02993c407bfb</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">cc658502d88c732af2507a148d4257d3f96dd47dbe8b629ada7f83dc322648da</hash>
+      </hashes>
+      <purl>pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+      <externalReferences>
+        <reference type="vcs">
+          <url>https://github.com/xeipuuv/gojsonpointer</url>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415?type=module">
+      <name>github.com/xeipuuv/gojsonreference</name>
+      <version>v0.0.0-20180127040603-bd5ef7bd5415</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">133256807a2fa27b7b36c723a40c57b0303c4bc04c62f7bc639fbb72e444ed1d</hash>
+      </hashes>
+      <purl>pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+      <externalReferences>
+        <reference type="vcs">
+          <url>https://github.com/xeipuuv/gojsonreference</url>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:golang/github.com/yashtewari/glob-intersection@v0.2.0?type=module">
+      <name>github.com/yashtewari/glob-intersection</name>
+      <version>v0.2.0</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">f22b8774df3cc98b82cc2763b748037bee9b02153005e116a93844c6ee784458</hash>
+      </hashes>
+      <purl>pkg:golang/github.com/yashtewari/glob-intersection@v0.2.0?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+      <externalReferences>
+        <reference type="vcs">
+          <url>https://github.com/yashtewari/glob-intersection</url>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:golang/go.opentelemetry.io/auto/sdk@v1.1.0?type=module">
+      <name>go.opentelemetry.io/auto/sdk</name>
+      <version>v1.1.0</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">707e778de84b50de9414b63bd73f8d0ce88d26a0dd3d1697cd37a5d2c2724980</hash>
+      </hashes>
+      <purl>pkg:golang/go.opentelemetry.io/auto/sdk@v1.1.0?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+    </component>
+    <component type="library" bom-ref="pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.59.0?type=module">
+      <name>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</name>
+      <version>v0.59.0</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">095ed4752189b7f028e86a780977242f155146c4600c7a08f178db2f73c397cb</hash>
+      </hashes>
+      <purl>pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.59.0?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+    </component>
+    <component type="library" bom-ref="pkg:golang/go.opentelemetry.io/otel@v1.34.0?type=module">
+      <name>go.opentelemetry.io/otel</name>
+      <version>v1.34.0</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">cd12d7c4b0a02f55b22ac3d5ae06d274c37873414c90302c9124d03fed217546</hash>
+      </hashes>
+      <purl>pkg:golang/go.opentelemetry.io/otel@v1.34.0?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+    </component>
+    <component type="library" bom-ref="pkg:golang/go.opentelemetry.io/otel/metric@v1.34.0?type=module">
+      <name>go.opentelemetry.io/otel/metric</name>
+      <version>v1.34.0</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">f9e4d1dd4d0cc9f5a344386614cc5ed92b16eb842b67ce003a1bea4bb63e3e84</hash>
+      </hashes>
+      <purl>pkg:golang/go.opentelemetry.io/otel/metric@v1.34.0?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+    </component>
+    <component type="library" bom-ref="pkg:golang/go.opentelemetry.io/otel/sdk@v1.34.0?type=module">
+      <name>go.opentelemetry.io/otel/sdk</name>
+      <version>v1.34.0</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">f79cd2e24ff618ecb4ebd777db53bc8d6818b16dcccd557e2ae48f2a9ed6af50</hash>
+      </hashes>
+      <purl>pkg:golang/go.opentelemetry.io/otel/sdk@v1.34.0?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+    </component>
+    <component type="library" bom-ref="pkg:golang/go.opentelemetry.io/otel/trace@v1.34.0?type=module">
+      <name>go.opentelemetry.io/otel/trace</name>
+      <version>v1.34.0</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">fa8b974b657c45de21a78e7cd1af2adb76e0d1acc5da723c72a2d89c2f2687f9</hash>
+      </hashes>
+      <purl>pkg:golang/go.opentelemetry.io/otel/trace@v1.34.0?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+    </component>
+    <component type="library" bom-ref="pkg:golang/golang.org/x/crypto@v0.32.0?type=module">
+      <name>golang.org/x/crypto</name>
+      <version>v0.32.0</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">7ae52971880cf1670fef580da53a900a7eab0b6b7a50b50f88ecdf59a5d555f7</hash>
+      </hashes>
+      <purl>pkg:golang/golang.org/x/crypto@v0.32.0?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+    </component>
+    <component type="library" bom-ref="pkg:golang/golang.org/x/net@v0.34.0?type=module">
+      <name>golang.org/x/net</name>
+      <version>v0.34.0</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">31beccae4d38df1cc782744cf3cb2ebc9170cd5ad17c7107244979ffbd422b0d</hash>
+      </hashes>
+      <purl>pkg:golang/golang.org/x/net@v0.34.0?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+    </component>
+    <component type="library" bom-ref="pkg:golang/golang.org/x/sync@v0.10.0?type=module">
+      <name>golang.org/x/sync</name>
+      <version>v0.10.0</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">dcd42b8c38b18e01b050e09a17cc36f95607bf455efef19849b7644daf7c8264</hash>
+      </hashes>
+      <purl>pkg:golang/golang.org/x/sync@v0.10.0?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+    </component>
+    <component type="library" bom-ref="pkg:golang/golang.org/x/sys@v0.29.0?type=module">
+      <name>golang.org/x/sys</name>
+      <version>v0.29.0</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">4cf6255c6c6fc753064e7d868990e19e33c0f7067365e18a1c798a84762f81a5</hash>
+      </hashes>
+      <purl>pkg:golang/golang.org/x/sys@v0.29.0?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+    </component>
+    <component type="library" bom-ref="pkg:golang/golang.org/x/text@v0.21.0?type=module">
+      <name>golang.org/x/text</name>
+      <version>v0.21.0</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">cf2400024af06a7790d3aeacb2947225a1bd54d8bf609d4d7f3706077859feaa</hash>
+      </hashes>
+      <purl>pkg:golang/golang.org/x/text@v0.21.0?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+    </component>
+    <component type="library" bom-ref="pkg:golang/golang.org/x/time@v0.9.0?type=module">
+      <name>golang.org/x/time</name>
+      <version>v0.9.0</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">12c46b9d87108861fee457db82f57800feea119b2da32ac70740f36ab390e196</hash>
+      </hashes>
+      <purl>pkg:golang/golang.org/x/time@v0.9.0?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+    </component>
+    <component type="library" bom-ref="pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20250115164207-1a7da9e5054f?type=module">
+      <name>google.golang.org/genproto/googleapis/rpc</name>
+      <version>v0.0.0-20250115164207-1a7da9e5054f</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">3b1624037c233ec672072970ca6c521daed58a25b54a69784e806b9dcbc57a12</hash>
+      </hashes>
+      <purl>pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20250115164207-1a7da9e5054f?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+    </component>
+    <component type="library" bom-ref="pkg:golang/google.golang.org/grpc@v1.70.0?type=module">
+      <name>google.golang.org/grpc</name>
+      <version>v1.70.0</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">a5616fd37699a07ce544a1d689c8ec672b4a022602b4d4b47476d79c876aee34</hash>
+      </hashes>
+      <purl>pkg:golang/google.golang.org/grpc@v1.70.0?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+    </component>
+    <component type="library" bom-ref="pkg:golang/google.golang.org/protobuf@v1.36.3?type=module">
+      <name>google.golang.org/protobuf</name>
+      <version>v1.36.3</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">f360d5ecc61d6fc6a70158b7aa07b5c129cc0eb9ca2bb79bafe23484744dd415</hash>
+      </hashes>
+      <purl>pkg:golang/google.golang.org/protobuf@v1.36.3?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+    </component>
+    <component type="library" bom-ref="pkg:golang/gopkg.in/natefinch/lumberjack.v2@v2.2.1?type=module">
+      <name>gopkg.in/natefinch/lumberjack.v2</name>
+      <version>v2.2.1</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">6c1465d5bd0e1fdb3f0ee3e1b97a4d97e56d09a257159e7fb841524fde71f737</hash>
+      </hashes>
+      <purl>pkg:golang/gopkg.in/natefinch/lumberjack.v2@v2.2.1?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+      <externalReferences>
+        <reference type="vcs">
+          <url>https://github.com/natefinch/lumberjack</url>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:golang/gopkg.in/yaml.v3@v3.0.1?type=module">
+      <name>gopkg.in/yaml.v3</name>
+      <version>v3.0.1</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">7f1566fc6cc0cc45aa2c7baf72d23dd4a4bd8613669963a85aed174d8252ec20</hash>
+      </hashes>
+      <purl>pkg:golang/gopkg.in/yaml.v3@v3.0.1?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+      <externalReferences>
+        <reference type="vcs">
+          <url>https://github.com/go-yaml/yaml</url>
+        </reference>
+      </externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:golang/oras.land/oras-go/v2@v2.3.1?type=module">
+      <name>oras.land/oras-go/v2</name>
+      <version>v2.3.1</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">9540baabc46479145e00d10444b7c7f3a8b01a7e7995b4963f6d1e81d14755e7</hash>
+      </hashes>
+      <purl>pkg:golang/oras.land/oras-go/v2@v2.3.1?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+    </component>
+    <component type="library" bom-ref="pkg:golang/sigs.k8s.io/yaml@v1.4.0?type=module">
+      <name>sigs.k8s.io/yaml</name>
+      <version>v1.4.0</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="SHA-256">324d7009cda0cbf1744c71f44c0a75418c89373466d8a08bcb7a390125d52391</hash>
+      </hashes>
+      <purl>pkg:golang/sigs.k8s.io/yaml@v1.4.0?type=module&amp;goos=darwin&amp;goarch=amd64</purl>
+    </component>
+  </components>
+  <dependencies>
+    <dependency ref="pkg:golang/policy-opa-pdp@v0.0.0-20250509074659-995735dc3763?type=module">
+      <dependency ref="pkg:golang/github.com/confluentinc/confluent-kafka-go/v2@v2.8.0?type=module" />
+      <dependency ref="pkg:golang/github.com/go-playground/validator/v10@v10.25.0?type=module" />
+      <dependency ref="pkg:golang/github.com/google/uuid@v1.6.0?type=module" />
+      <dependency ref="pkg:golang/github.com/oapi-codegen/runtime@v1.1.1?type=module" />
+      <dependency ref="pkg:golang/github.com/open-policy-agent/opa@v1.1.0?type=module" />
+      <dependency ref="pkg:golang/github.com/sirupsen/logrus@v1.9.3?type=module" />
+      <dependency ref="pkg:golang/github.com/stretchr/testify@v1.10.0?type=module" />
+      <dependency ref="pkg:golang/gopkg.in/natefinch/lumberjack.v2@v2.2.1?type=module" />
+    </dependency>
+    <dependency ref="pkg:golang/github.com/AdaLogics/go-fuzz-headers@v0.0.0-20230811130428-ced1acdcaa24?type=module" />
+    <dependency ref="pkg:golang/github.com/OneOfOne/xxhash@v1.2.8?type=module" />
+    <dependency ref="pkg:golang/github.com/agnivade/levenshtein@v1.2.0?type=module" />
+    <dependency ref="pkg:golang/github.com/apapsch/go-jsonmerge/v2@v2.0.0?type=module">
+      <dependency ref="pkg:golang/github.com/stretchr/testify@v1.10.0?type=module" />
+    </dependency>
+    <dependency ref="pkg:golang/github.com/beorn7/perks@v1.0.1?type=module" />
+    <dependency ref="pkg:golang/github.com/bytecodealliance/wasmtime-go/v3@v3.0.2?type=module">
+      <dependency ref="pkg:golang/github.com/davecgh/go-spew@v1.1.1?type=module" />
+      <dependency ref="pkg:golang/github.com/pmezard/go-difflib@v1.0.0?type=module" />
+      <dependency ref="pkg:golang/github.com/stretchr/testify@v1.10.0?type=module" />
+      <dependency ref="pkg:golang/gopkg.in/yaml.v3@v3.0.1?type=module" />
+    </dependency>
+    <dependency ref="pkg:golang/github.com/cespare/xxhash/v2@v2.3.0?type=module" />
+    <dependency ref="pkg:golang/github.com/confluentinc/confluent-kafka-go/v2@v2.8.0?type=module">
+      <dependency ref="pkg:golang/github.com/AdaLogics/go-fuzz-headers@v0.0.0-20230811130428-ced1acdcaa24?type=module" />
+      <dependency ref="pkg:golang/github.com/beorn7/perks@v1.0.1?type=module" />
+      <dependency ref="pkg:golang/github.com/cespare/xxhash/v2@v2.3.0?type=module" />
+      <dependency ref="pkg:golang/github.com/containerd/containerd@v1.7.25?type=module" />
+      <dependency ref="pkg:golang/github.com/containerd/errdefs@v1.0.0?type=module" />
+      <dependency ref="pkg:golang/github.com/containerd/log@v0.1.0?type=module" />
+      <dependency ref="pkg:golang/github.com/containerd/platforms@v0.2.1?type=module" />
+      <dependency ref="pkg:golang/github.com/davecgh/go-spew@v1.1.1?type=module" />
+      <dependency ref="pkg:golang/github.com/felixge/httpsnoop@v1.0.4?type=module" />
+      <dependency ref="pkg:golang/github.com/go-logr/logr@v1.4.2?type=module" />
+      <dependency ref="pkg:golang/github.com/go-logr/stdr@v1.2.2?type=module" />
+      <dependency ref="pkg:golang/github.com/google/uuid@v1.6.0?type=module" />
+      <dependency ref="pkg:golang/github.com/gorilla/mux@v1.8.1?type=module" />
+      <dependency ref="pkg:golang/github.com/klauspost/compress@v1.17.11?type=module" />
+      <dependency ref="pkg:golang/github.com/moby/locker@v1.0.1?type=module" />
+      <dependency ref="pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822?type=module" />
+      <dependency ref="pkg:golang/github.com/opencontainers/go-digest@v1.0.0?type=module" />
+      <dependency ref="pkg:golang/github.com/opencontainers/image-spec@v1.1.0?type=module" />
+      <dependency ref="pkg:golang/github.com/pmezard/go-difflib@v1.0.0?type=module" />
+      <dependency ref="pkg:golang/github.com/prometheus/client_golang@v1.20.5?type=module" />
+      <dependency ref="pkg:golang/github.com/prometheus/client_model@v0.6.1?type=module" />
+      <dependency ref="pkg:golang/github.com/prometheus/common@v0.55.0?type=module" />
+      <dependency ref="pkg:golang/github.com/prometheus/procfs@v0.15.1?type=module" />
+      <dependency ref="pkg:golang/github.com/sirupsen/logrus@v1.9.3?type=module" />
+      <dependency ref="pkg:golang/github.com/stretchr/testify@v1.10.0?type=module" />
+      <dependency ref="pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb?type=module" />
+      <dependency ref="pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415?type=module" />
+      <dependency ref="pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.59.0?type=module" />
+      <dependency ref="pkg:golang/go.opentelemetry.io/otel@v1.34.0?type=module" />
+      <dependency ref="pkg:golang/go.opentelemetry.io/otel/metric@v1.34.0?type=module" />
+      <dependency ref="pkg:golang/go.opentelemetry.io/otel/sdk@v1.34.0?type=module" />
+      <dependency ref="pkg:golang/go.opentelemetry.io/otel/trace@v1.34.0?type=module" />
+      <dependency ref="pkg:golang/golang.org/x/crypto@v0.32.0?type=module" />
+      <dependency ref="pkg:golang/golang.org/x/net@v0.34.0?type=module" />
+      <dependency ref="pkg:golang/golang.org/x/sync@v0.10.0?type=module" />
+      <dependency ref="pkg:golang/golang.org/x/sys@v0.29.0?type=module" />
+      <dependency ref="pkg:golang/golang.org/x/text@v0.21.0?type=module" />
+      <dependency ref="pkg:golang/golang.org/x/time@v0.9.0?type=module" />
+      <dependency ref="pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20250115164207-1a7da9e5054f?type=module" />
+      <dependency ref="pkg:golang/google.golang.org/grpc@v1.70.0?type=module" />
+      <dependency ref="pkg:golang/google.golang.org/protobuf@v1.36.3?type=module" />
+      <dependency ref="pkg:golang/gopkg.in/yaml.v3@v3.0.1?type=module" />
+      <dependency ref="pkg:golang/sigs.k8s.io/yaml@v1.4.0?type=module" />
+    </dependency>
+    <dependency ref="pkg:golang/github.com/containerd/containerd@v1.7.25?type=module">
+      <dependency ref="pkg:golang/github.com/AdaLogics/go-fuzz-headers@v0.0.0-20230811130428-ced1acdcaa24?type=module" />
+      <dependency ref="pkg:golang/github.com/beorn7/perks@v1.0.1?type=module" />
+      <dependency ref="pkg:golang/github.com/cespare/xxhash/v2@v2.3.0?type=module" />
+      <dependency ref="pkg:golang/github.com/containerd/errdefs@v1.0.0?type=module" />
+      <dependency ref="pkg:golang/github.com/containerd/log@v0.1.0?type=module" />
+      <dependency ref="pkg:golang/github.com/containerd/platforms@v0.2.1?type=module" />
+      <dependency ref="pkg:golang/github.com/davecgh/go-spew@v1.1.1?type=module" />
+      <dependency ref="pkg:golang/github.com/felixge/httpsnoop@v1.0.4?type=module" />
+      <dependency ref="pkg:golang/github.com/fsnotify/fsnotify@v1.8.0?type=module" />
+      <dependency ref="pkg:golang/github.com/go-logr/logr@v1.4.2?type=module" />
+      <dependency ref="pkg:golang/github.com/go-logr/stdr@v1.2.2?type=module" />
+      <dependency ref="pkg:golang/github.com/google/uuid@v1.6.0?type=module" />
+      <dependency ref="pkg:golang/github.com/klauspost/compress@v1.17.11?type=module" />
+      <dependency ref="pkg:golang/github.com/moby/locker@v1.0.1?type=module" />
+      <dependency ref="pkg:golang/github.com/opencontainers/go-digest@v1.0.0?type=module" />
+      <dependency ref="pkg:golang/github.com/opencontainers/image-spec@v1.1.0?type=module" />
+      <dependency ref="pkg:golang/github.com/pmezard/go-difflib@v1.0.0?type=module" />
+      <dependency ref="pkg:golang/github.com/prometheus/client_golang@v1.20.5?type=module" />
+      <dependency ref="pkg:golang/github.com/prometheus/client_model@v0.6.1?type=module" />
+      <dependency ref="pkg:golang/github.com/prometheus/common@v0.55.0?type=module" />
+      <dependency ref="pkg:golang/github.com/prometheus/procfs@v0.15.1?type=module" />
+      <dependency ref="pkg:golang/github.com/sirupsen/logrus@v1.9.3?type=module" />
+      <dependency ref="pkg:golang/github.com/stretchr/testify@v1.10.0?type=module" />
+      <dependency ref="pkg:golang/github.com/tchap/go-patricia/v2@v2.3.2?type=module" />
+      <dependency ref="pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.59.0?type=module" />
+      <dependency ref="pkg:golang/go.opentelemetry.io/otel@v1.34.0?type=module" />
+      <dependency ref="pkg:golang/go.opentelemetry.io/otel/metric@v1.34.0?type=module" />
+      <dependency ref="pkg:golang/go.opentelemetry.io/otel/sdk@v1.34.0?type=module" />
+      <dependency ref="pkg:golang/go.opentelemetry.io/otel/trace@v1.34.0?type=module" />
+      <dependency ref="pkg:golang/golang.org/x/crypto@v0.32.0?type=module" />
+      <dependency ref="pkg:golang/golang.org/x/net@v0.34.0?type=module" />
+      <dependency ref="pkg:golang/golang.org/x/sync@v0.10.0?type=module" />
+      <dependency ref="pkg:golang/golang.org/x/sys@v0.29.0?type=module" />
+      <dependency ref="pkg:golang/golang.org/x/text@v0.21.0?type=module" />
+      <dependency ref="pkg:golang/golang.org/x/time@v0.9.0?type=module" />
+      <dependency ref="pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20250115164207-1a7da9e5054f?type=module" />
+      <dependency ref="pkg:golang/google.golang.org/grpc@v1.70.0?type=module" />
+      <dependency ref="pkg:golang/google.golang.org/protobuf@v1.36.3?type=module" />
+      <dependency ref="pkg:golang/gopkg.in/yaml.v3@v3.0.1?type=module" />
+      <dependency ref="pkg:golang/sigs.k8s.io/yaml@v1.4.0?type=module" />
+    </dependency>
+    <dependency ref="pkg:golang/github.com/containerd/errdefs@v1.0.0?type=module" />
+    <dependency ref="pkg:golang/github.com/containerd/log@v0.1.0?type=module">
+      <dependency ref="pkg:golang/github.com/sirupsen/logrus@v1.9.3?type=module" />
+      <dependency ref="pkg:golang/github.com/stretchr/testify@v1.10.0?type=module" />
+      <dependency ref="pkg:golang/golang.org/x/sys@v0.29.0?type=module" />
+    </dependency>
+    <dependency ref="pkg:golang/github.com/containerd/platforms@v0.2.1?type=module">
+      <dependency ref="pkg:golang/github.com/containerd/log@v0.1.0?type=module" />
+      <dependency ref="pkg:golang/github.com/davecgh/go-spew@v1.1.1?type=module" />
+      <dependency ref="pkg:golang/github.com/opencontainers/go-digest@v1.0.0?type=module" />
+      <dependency ref="pkg:golang/github.com/opencontainers/image-spec@v1.1.0?type=module" />
+      <dependency ref="pkg:golang/github.com/pmezard/go-difflib@v1.0.0?type=module" />
+      <dependency ref="pkg:golang/github.com/sirupsen/logrus@v1.9.3?type=module" />
+      <dependency ref="pkg:golang/github.com/stretchr/testify@v1.10.0?type=module" />
+      <dependency ref="pkg:golang/golang.org/x/sys@v0.29.0?type=module" />
+      <dependency ref="pkg:golang/gopkg.in/yaml.v3@v3.0.1?type=module" />
+    </dependency>
+    <dependency ref="pkg:golang/github.com/davecgh/go-spew@v1.1.1?type=module" />
+    <dependency ref="pkg:golang/github.com/felixge/httpsnoop@v1.0.4?type=module" />
+    <dependency ref="pkg:golang/github.com/fsnotify/fsnotify@v1.8.0?type=module">
+      <dependency ref="pkg:golang/golang.org/x/sys@v0.29.0?type=module" />
+    </dependency>
+    <dependency ref="pkg:golang/github.com/gabriel-vasile/mimetype@v1.4.8?type=module">
+      <dependency ref="pkg:golang/golang.org/x/net@v0.34.0?type=module" />
+    </dependency>
+    <dependency ref="pkg:golang/github.com/go-ini/ini@v1.67.0?type=module" />
+    <dependency ref="pkg:golang/github.com/go-logr/logr@v1.4.2?type=module" />
+    <dependency ref="pkg:golang/github.com/go-logr/stdr@v1.2.2?type=module">
+      <dependency ref="pkg:golang/github.com/go-logr/logr@v1.4.2?type=module" />
+    </dependency>
+    <dependency ref="pkg:golang/github.com/go-playground/locales@v0.14.1?type=module">
+      <dependency ref="pkg:golang/golang.org/x/text@v0.21.0?type=module" />
+    </dependency>
+    <dependency ref="pkg:golang/github.com/go-playground/universal-translator@v0.18.1?type=module">
+      <dependency ref="pkg:golang/github.com/go-playground/locales@v0.14.1?type=module" />
+    </dependency>
+    <dependency ref="pkg:golang/github.com/go-playground/validator/v10@v10.25.0?type=module">
+      <dependency ref="pkg:golang/github.com/gabriel-vasile/mimetype@v1.4.8?type=module" />
+      <dependency ref="pkg:golang/github.com/go-playground/locales@v0.14.1?type=module" />
+      <dependency ref="pkg:golang/github.com/go-playground/universal-translator@v0.18.1?type=module" />
+      <dependency ref="pkg:golang/github.com/leodido/go-urn@v1.4.0?type=module" />
+      <dependency ref="pkg:golang/golang.org/x/crypto@v0.32.0?type=module" />
+      <dependency ref="pkg:golang/golang.org/x/net@v0.34.0?type=module" />
+      <dependency ref="pkg:golang/golang.org/x/sys@v0.29.0?type=module" />
+      <dependency ref="pkg:golang/golang.org/x/text@v0.21.0?type=module" />
+    </dependency>
+    <dependency ref="pkg:golang/github.com/gobwas/glob@v0.2.3?type=module" />
+    <dependency ref="pkg:golang/github.com/google/uuid@v1.6.0?type=module" />
+    <dependency ref="pkg:golang/github.com/gorilla/mux@v1.8.1?type=module" />
+    <dependency ref="pkg:golang/github.com/klauspost/compress@v1.17.11?type=module" />
+    <dependency ref="pkg:golang/github.com/leodido/go-urn@v1.4.0?type=module">
+      <dependency ref="pkg:golang/github.com/davecgh/go-spew@v1.1.1?type=module" />
+      <dependency ref="pkg:golang/github.com/pmezard/go-difflib@v1.0.0?type=module" />
+      <dependency ref="pkg:golang/github.com/stretchr/testify@v1.10.0?type=module" />
+      <dependency ref="pkg:golang/gopkg.in/yaml.v3@v3.0.1?type=module" />
+    </dependency>
+    <dependency ref="pkg:golang/github.com/moby/locker@v1.0.1?type=module" />
+    <dependency ref="pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822?type=module" />
+    <dependency ref="pkg:golang/github.com/oapi-codegen/runtime@v1.1.1?type=module">
+      <dependency ref="pkg:golang/github.com/apapsch/go-jsonmerge/v2@v2.0.0?type=module" />
+      <dependency ref="pkg:golang/github.com/davecgh/go-spew@v1.1.1?type=module" />
+      <dependency ref="pkg:golang/github.com/gabriel-vasile/mimetype@v1.4.8?type=module" />
+      <dependency ref="pkg:golang/github.com/go-playground/locales@v0.14.1?type=module" />
+      <dependency ref="pkg:golang/github.com/go-playground/universal-translator@v0.18.1?type=module" />
+      <dependency ref="pkg:golang/github.com/go-playground/validator/v10@v10.25.0?type=module" />
+      <dependency ref="pkg:golang/github.com/google/uuid@v1.6.0?type=module" />
+      <dependency ref="pkg:golang/github.com/klauspost/compress@v1.17.11?type=module" />
+      <dependency ref="pkg:golang/github.com/leodido/go-urn@v1.4.0?type=module" />
+      <dependency ref="pkg:golang/github.com/pmezard/go-difflib@v1.0.0?type=module" />
+      <dependency ref="pkg:golang/github.com/sirupsen/logrus@v1.9.3?type=module" />
+      <dependency ref="pkg:golang/github.com/stretchr/testify@v1.10.0?type=module" />
+      <dependency ref="pkg:golang/golang.org/x/crypto@v0.32.0?type=module" />
+      <dependency ref="pkg:golang/golang.org/x/net@v0.34.0?type=module" />
+      <dependency ref="pkg:golang/golang.org/x/sys@v0.29.0?type=module" />
+      <dependency ref="pkg:golang/golang.org/x/text@v0.21.0?type=module" />
+      <dependency ref="pkg:golang/golang.org/x/time@v0.9.0?type=module" />
+      <dependency ref="pkg:golang/google.golang.org/protobuf@v1.36.3?type=module" />
+      <dependency ref="pkg:golang/gopkg.in/yaml.v3@v3.0.1?type=module" />
+    </dependency>
+    <dependency ref="pkg:golang/github.com/open-policy-agent/opa@v1.1.0?type=module">
+      <dependency ref="pkg:golang/github.com/AdaLogics/go-fuzz-headers@v0.0.0-20230811130428-ced1acdcaa24?type=module" />
+      <dependency ref="pkg:golang/github.com/OneOfOne/xxhash@v1.2.8?type=module" />
+      <dependency ref="pkg:golang/github.com/agnivade/levenshtein@v1.2.0?type=module" />
+      <dependency ref="pkg:golang/github.com/beorn7/perks@v1.0.1?type=module" />
+      <dependency ref="pkg:golang/github.com/bytecodealliance/wasmtime-go/v3@v3.0.2?type=module" />
+      <dependency ref="pkg:golang/github.com/cespare/xxhash/v2@v2.3.0?type=module" />
+      <dependency ref="pkg:golang/github.com/containerd/containerd@v1.7.25?type=module" />
+      <dependency ref="pkg:golang/github.com/containerd/errdefs@v1.0.0?type=module" />
+      <dependency ref="pkg:golang/github.com/containerd/log@v0.1.0?type=module" />
+      <dependency ref="pkg:golang/github.com/containerd/platforms@v0.2.1?type=module" />
+      <dependency ref="pkg:golang/github.com/felixge/httpsnoop@v1.0.4?type=module" />
+      <dependency ref="pkg:golang/github.com/fsnotify/fsnotify@v1.8.0?type=module" />
+      <dependency ref="pkg:golang/github.com/go-ini/ini@v1.67.0?type=module" />
+      <dependency ref="pkg:golang/github.com/go-logr/logr@v1.4.2?type=module" />
+      <dependency ref="pkg:golang/github.com/go-logr/stdr@v1.2.2?type=module" />
+      <dependency ref="pkg:golang/github.com/gobwas/glob@v0.2.3?type=module" />
+      <dependency ref="pkg:golang/github.com/google/uuid@v1.6.0?type=module" />
+      <dependency ref="pkg:golang/github.com/gorilla/mux@v1.8.1?type=module" />
+      <dependency ref="pkg:golang/github.com/klauspost/compress@v1.17.11?type=module" />
+      <dependency ref="pkg:golang/github.com/moby/locker@v1.0.1?type=module" />
+      <dependency ref="pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822?type=module" />
+      <dependency ref="pkg:golang/github.com/opencontainers/go-digest@v1.0.0?type=module" />
+      <dependency ref="pkg:golang/github.com/opencontainers/image-spec@v1.1.0?type=module" />
+      <dependency ref="pkg:golang/github.com/prometheus/client_golang@v1.20.5?type=module" />
+      <dependency ref="pkg:golang/github.com/prometheus/client_model@v0.6.1?type=module" />
+      <dependency ref="pkg:golang/github.com/prometheus/common@v0.55.0?type=module" />
+      <dependency ref="pkg:golang/github.com/prometheus/procfs@v0.15.1?type=module" />
+      <dependency ref="pkg:golang/github.com/rcrowley/go-metrics@v0.0.0-20200313005456-10cdbea86bc0?type=module" />
+      <dependency ref="pkg:golang/github.com/sirupsen/logrus@v1.9.3?type=module" />
+      <dependency ref="pkg:golang/github.com/tchap/go-patricia/v2@v2.3.2?type=module" />
+      <dependency ref="pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb?type=module" />
+      <dependency ref="pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415?type=module" />
+      <dependency ref="pkg:golang/github.com/yashtewari/glob-intersection@v0.2.0?type=module" />
+      <dependency ref="pkg:golang/go.opentelemetry.io/auto/sdk@v1.1.0?type=module" />
+      <dependency ref="pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.59.0?type=module" />
+      <dependency ref="pkg:golang/go.opentelemetry.io/otel@v1.34.0?type=module" />
+      <dependency ref="pkg:golang/go.opentelemetry.io/otel/metric@v1.34.0?type=module" />
+      <dependency ref="pkg:golang/go.opentelemetry.io/otel/sdk@v1.34.0?type=module" />
+      <dependency ref="pkg:golang/go.opentelemetry.io/otel/trace@v1.34.0?type=module" />
+      <dependency ref="pkg:golang/golang.org/x/net@v0.34.0?type=module" />
+      <dependency ref="pkg:golang/golang.org/x/sync@v0.10.0?type=module" />
+      <dependency ref="pkg:golang/golang.org/x/sys@v0.29.0?type=module" />
+      <dependency ref="pkg:golang/golang.org/x/text@v0.21.0?type=module" />
+      <dependency ref="pkg:golang/golang.org/x/time@v0.9.0?type=module" />
+      <dependency ref="pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20250115164207-1a7da9e5054f?type=module" />
+      <dependency ref="pkg:golang/google.golang.org/grpc@v1.70.0?type=module" />
+      <dependency ref="pkg:golang/google.golang.org/protobuf@v1.36.3?type=module" />
+      <dependency ref="pkg:golang/gopkg.in/yaml.v3@v3.0.1?type=module" />
+      <dependency ref="pkg:golang/oras.land/oras-go/v2@v2.3.1?type=module" />
+      <dependency ref="pkg:golang/sigs.k8s.io/yaml@v1.4.0?type=module" />
+    </dependency>
+    <dependency ref="pkg:golang/github.com/opencontainers/go-digest@v1.0.0?type=module" />
+    <dependency ref="pkg:golang/github.com/opencontainers/image-spec@v1.1.0?type=module">
+      <dependency ref="pkg:golang/github.com/davecgh/go-spew@v1.1.1?type=module" />
+      <dependency ref="pkg:golang/github.com/opencontainers/go-digest@v1.0.0?type=module" />
+      <dependency ref="pkg:golang/github.com/stretchr/testify@v1.10.0?type=module" />
+      <dependency ref="pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb?type=module" />
+      <dependency ref="pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415?type=module" />
+      <dependency ref="pkg:golang/gopkg.in/yaml.v3@v3.0.1?type=module" />
+    </dependency>
+    <dependency ref="pkg:golang/github.com/pmezard/go-difflib@v1.0.0?type=module" />
+    <dependency ref="pkg:golang/github.com/prometheus/client_golang@v1.20.5?type=module">
+      <dependency ref="pkg:golang/github.com/beorn7/perks@v1.0.1?type=module" />
+      <dependency ref="pkg:golang/github.com/cespare/xxhash/v2@v2.3.0?type=module" />
+      <dependency ref="pkg:golang/github.com/klauspost/compress@v1.17.11?type=module" />
+      <dependency ref="pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822?type=module" />
+      <dependency ref="pkg:golang/github.com/prometheus/client_model@v0.6.1?type=module" />
+      <dependency ref="pkg:golang/github.com/prometheus/common@v0.55.0?type=module" />
+      <dependency ref="pkg:golang/github.com/prometheus/procfs@v0.15.1?type=module" />
+      <dependency ref="pkg:golang/golang.org/x/net@v0.34.0?type=module" />
+      <dependency ref="pkg:golang/golang.org/x/sys@v0.29.0?type=module" />
+      <dependency ref="pkg:golang/golang.org/x/text@v0.21.0?type=module" />
+      <dependency ref="pkg:golang/google.golang.org/protobuf@v1.36.3?type=module" />
+    </dependency>
+    <dependency ref="pkg:golang/github.com/prometheus/client_model@v0.6.1?type=module">
+      <dependency ref="pkg:golang/google.golang.org/protobuf@v1.36.3?type=module" />
+    </dependency>
+    <dependency ref="pkg:golang/github.com/prometheus/common@v0.55.0?type=module">
+      <dependency ref="pkg:golang/github.com/beorn7/perks@v1.0.1?type=module" />
+      <dependency ref="pkg:golang/github.com/cespare/xxhash/v2@v2.3.0?type=module" />
+      <dependency ref="pkg:golang/github.com/davecgh/go-spew@v1.1.1?type=module" />
+      <dependency ref="pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822?type=module" />
+      <dependency ref="pkg:golang/github.com/pmezard/go-difflib@v1.0.0?type=module" />
+      <dependency ref="pkg:golang/github.com/prometheus/client_golang@v1.20.5?type=module" />
+      <dependency ref="pkg:golang/github.com/prometheus/client_model@v0.6.1?type=module" />
+      <dependency ref="pkg:golang/github.com/prometheus/procfs@v0.15.1?type=module" />
+      <dependency ref="pkg:golang/github.com/stretchr/testify@v1.10.0?type=module" />
+      <dependency ref="pkg:golang/golang.org/x/net@v0.34.0?type=module" />
+      <dependency ref="pkg:golang/golang.org/x/sys@v0.29.0?type=module" />
+      <dependency ref="pkg:golang/golang.org/x/text@v0.21.0?type=module" />
+      <dependency ref="pkg:golang/google.golang.org/protobuf@v1.36.3?type=module" />
+      <dependency ref="pkg:golang/gopkg.in/yaml.v3@v3.0.1?type=module" />
+    </dependency>
+    <dependency ref="pkg:golang/github.com/prometheus/procfs@v0.15.1?type=module">
+      <dependency ref="pkg:golang/golang.org/x/sync@v0.10.0?type=module" />
+      <dependency ref="pkg:golang/golang.org/x/sys@v0.29.0?type=module" />
+    </dependency>
+    <dependency ref="pkg:golang/github.com/rcrowley/go-metrics@v0.0.0-20200313005456-10cdbea86bc0?type=module" />
+    <dependency ref="pkg:golang/github.com/sirupsen/logrus@v1.9.3?type=module">
+      <dependency ref="pkg:golang/github.com/davecgh/go-spew@v1.1.1?type=module" />
+      <dependency ref="pkg:golang/github.com/stretchr/testify@v1.10.0?type=module" />
+      <dependency ref="pkg:golang/golang.org/x/sys@v0.29.0?type=module" />
+    </dependency>
+    <dependency ref="pkg:golang/github.com/stretchr/objx@v0.5.2?type=module">
+      <dependency ref="pkg:golang/github.com/davecgh/go-spew@v1.1.1?type=module" />
+      <dependency ref="pkg:golang/github.com/pmezard/go-difflib@v1.0.0?type=module" />
+      <dependency ref="pkg:golang/github.com/stretchr/testify@v1.10.0?type=module" />
+      <dependency ref="pkg:golang/gopkg.in/yaml.v3@v3.0.1?type=module" />
+    </dependency>
+    <dependency ref="pkg:golang/github.com/stretchr/testify@v1.10.0?type=module">
+      <dependency ref="pkg:golang/github.com/davecgh/go-spew@v1.1.1?type=module" />
+      <dependency ref="pkg:golang/github.com/pmezard/go-difflib@v1.0.0?type=module" />
+      <dependency ref="pkg:golang/github.com/stretchr/objx@v0.5.2?type=module" />
+      <dependency ref="pkg:golang/gopkg.in/yaml.v3@v3.0.1?type=module" />
+    </dependency>
+    <dependency ref="pkg:golang/github.com/tchap/go-patricia/v2@v2.3.2?type=module" />
+    <dependency ref="pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb?type=module" />
+    <dependency ref="pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415?type=module" />
+    <dependency ref="pkg:golang/github.com/yashtewari/glob-intersection@v0.2.0?type=module" />
+    <dependency ref="pkg:golang/go.opentelemetry.io/auto/sdk@v1.1.0?type=module">
+      <dependency ref="pkg:golang/github.com/davecgh/go-spew@v1.1.1?type=module" />
+      <dependency ref="pkg:golang/github.com/pmezard/go-difflib@v1.0.0?type=module" />
+      <dependency ref="pkg:golang/github.com/stretchr/testify@v1.10.0?type=module" />
+      <dependency ref="pkg:golang/go.opentelemetry.io/otel@v1.34.0?type=module" />
+      <dependency ref="pkg:golang/go.opentelemetry.io/otel/trace@v1.34.0?type=module" />
+      <dependency ref="pkg:golang/gopkg.in/yaml.v3@v3.0.1?type=module" />
+    </dependency>
+    <dependency ref="pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.59.0?type=module">
+      <dependency ref="pkg:golang/github.com/davecgh/go-spew@v1.1.1?type=module" />
+      <dependency ref="pkg:golang/github.com/felixge/httpsnoop@v1.0.4?type=module" />
+      <dependency ref="pkg:golang/github.com/go-logr/logr@v1.4.2?type=module" />
+      <dependency ref="pkg:golang/github.com/go-logr/stdr@v1.2.2?type=module" />
+      <dependency ref="pkg:golang/github.com/pmezard/go-difflib@v1.0.0?type=module" />
+      <dependency ref="pkg:golang/github.com/stretchr/testify@v1.10.0?type=module" />
+      <dependency ref="pkg:golang/go.opentelemetry.io/auto/sdk@v1.1.0?type=module" />
+      <dependency ref="pkg:golang/go.opentelemetry.io/otel@v1.34.0?type=module" />
+      <dependency ref="pkg:golang/go.opentelemetry.io/otel/metric@v1.34.0?type=module" />
+      <dependency ref="pkg:golang/go.opentelemetry.io/otel/trace@v1.34.0?type=module" />
+      <dependency ref="pkg:golang/gopkg.in/yaml.v3@v3.0.1?type=module" />
+    </dependency>
+    <dependency ref="pkg:golang/go.opentelemetry.io/otel@v1.34.0?type=module">
+      <dependency ref="pkg:golang/github.com/davecgh/go-spew@v1.1.1?type=module" />
+      <dependency ref="pkg:golang/github.com/go-logr/logr@v1.4.2?type=module" />
+      <dependency ref="pkg:golang/github.com/go-logr/stdr@v1.2.2?type=module" />
+      <dependency ref="pkg:golang/github.com/pmezard/go-difflib@v1.0.0?type=module" />
+      <dependency ref="pkg:golang/github.com/stretchr/testify@v1.10.0?type=module" />
+      <dependency ref="pkg:golang/go.opentelemetry.io/auto/sdk@v1.1.0?type=module" />
+      <dependency ref="pkg:golang/go.opentelemetry.io/otel/metric@v1.34.0?type=module" />
+      <dependency ref="pkg:golang/go.opentelemetry.io/otel/trace@v1.34.0?type=module" />
+      <dependency ref="pkg:golang/gopkg.in/yaml.v3@v3.0.1?type=module" />
+    </dependency>
+    <dependency ref="pkg:golang/go.opentelemetry.io/otel/metric@v1.34.0?type=module">
+      <dependency ref="pkg:golang/github.com/davecgh/go-spew@v1.1.1?type=module" />
+      <dependency ref="pkg:golang/github.com/go-logr/logr@v1.4.2?type=module" />
+      <dependency ref="pkg:golang/github.com/go-logr/stdr@v1.2.2?type=module" />
+      <dependency ref="pkg:golang/github.com/pmezard/go-difflib@v1.0.0?type=module" />
+      <dependency ref="pkg:golang/github.com/stretchr/testify@v1.10.0?type=module" />
+      <dependency ref="pkg:golang/go.opentelemetry.io/auto/sdk@v1.1.0?type=module" />
+      <dependency ref="pkg:golang/go.opentelemetry.io/otel@v1.34.0?type=module" />
+      <dependency ref="pkg:golang/go.opentelemetry.io/otel/trace@v1.34.0?type=module" />
+      <dependency ref="pkg:golang/gopkg.in/yaml.v3@v3.0.1?type=module" />
+    </dependency>
+    <dependency ref="pkg:golang/go.opentelemetry.io/otel/sdk@v1.34.0?type=module">
+      <dependency ref="pkg:golang/github.com/davecgh/go-spew@v1.1.1?type=module" />
+      <dependency ref="pkg:golang/github.com/go-logr/logr@v1.4.2?type=module" />
+      <dependency ref="pkg:golang/github.com/go-logr/stdr@v1.2.2?type=module" />
+      <dependency ref="pkg:golang/github.com/google/uuid@v1.6.0?type=module" />
+      <dependency ref="pkg:golang/github.com/pmezard/go-difflib@v1.0.0?type=module" />
+      <dependency ref="pkg:golang/github.com/stretchr/testify@v1.10.0?type=module" />
+      <dependency ref="pkg:golang/go.opentelemetry.io/auto/sdk@v1.1.0?type=module" />
+      <dependency ref="pkg:golang/go.opentelemetry.io/otel@v1.34.0?type=module" />
+      <dependency ref="pkg:golang/go.opentelemetry.io/otel/metric@v1.34.0?type=module" />
+      <dependency ref="pkg:golang/go.opentelemetry.io/otel/trace@v1.34.0?type=module" />
+      <dependency ref="pkg:golang/golang.org/x/sys@v0.29.0?type=module" />
+      <dependency ref="pkg:golang/gopkg.in/yaml.v3@v3.0.1?type=module" />
+    </dependency>
+    <dependency ref="pkg:golang/go.opentelemetry.io/otel/trace@v1.34.0?type=module">
+      <dependency ref="pkg:golang/github.com/davecgh/go-spew@v1.1.1?type=module" />
+      <dependency ref="pkg:golang/github.com/pmezard/go-difflib@v1.0.0?type=module" />
+      <dependency ref="pkg:golang/github.com/stretchr/testify@v1.10.0?type=module" />
+      <dependency ref="pkg:golang/go.opentelemetry.io/otel@v1.34.0?type=module" />
+      <dependency ref="pkg:golang/gopkg.in/yaml.v3@v3.0.1?type=module" />
+    </dependency>
+    <dependency ref="pkg:golang/golang.org/x/crypto@v0.32.0?type=module">
+      <dependency ref="pkg:golang/golang.org/x/net@v0.34.0?type=module" />
+      <dependency ref="pkg:golang/golang.org/x/sys@v0.29.0?type=module" />
+      <dependency ref="pkg:golang/golang.org/x/text@v0.21.0?type=module" />
+    </dependency>
+    <dependency ref="pkg:golang/golang.org/x/net@v0.34.0?type=module">
+      <dependency ref="pkg:golang/golang.org/x/crypto@v0.32.0?type=module" />
+      <dependency ref="pkg:golang/golang.org/x/sys@v0.29.0?type=module" />
+      <dependency ref="pkg:golang/golang.org/x/text@v0.21.0?type=module" />
+    </dependency>
+    <dependency ref="pkg:golang/golang.org/x/sync@v0.10.0?type=module" />
+    <dependency ref="pkg:golang/golang.org/x/sys@v0.29.0?type=module" />
+    <dependency ref="pkg:golang/golang.org/x/text@v0.21.0?type=module">
+      <dependency ref="pkg:golang/golang.org/x/sync@v0.10.0?type=module" />
+    </dependency>
+    <dependency ref="pkg:golang/golang.org/x/time@v0.9.0?type=module" />
+    <dependency ref="pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20250115164207-1a7da9e5054f?type=module">
+      <dependency ref="pkg:golang/google.golang.org/protobuf@v1.36.3?type=module" />
+    </dependency>
+    <dependency ref="pkg:golang/google.golang.org/grpc@v1.70.0?type=module">
+      <dependency ref="pkg:golang/github.com/cespare/xxhash/v2@v2.3.0?type=module" />
+      <dependency ref="pkg:golang/github.com/go-logr/logr@v1.4.2?type=module" />
+      <dependency ref="pkg:golang/github.com/go-logr/stdr@v1.2.2?type=module" />
+      <dependency ref="pkg:golang/github.com/google/uuid@v1.6.0?type=module" />
+      <dependency ref="pkg:golang/go.opentelemetry.io/otel@v1.34.0?type=module" />
+      <dependency ref="pkg:golang/go.opentelemetry.io/otel/metric@v1.34.0?type=module" />
+      <dependency ref="pkg:golang/go.opentelemetry.io/otel/sdk@v1.34.0?type=module" />
+      <dependency ref="pkg:golang/go.opentelemetry.io/otel/trace@v1.34.0?type=module" />
+      <dependency ref="pkg:golang/golang.org/x/net@v0.34.0?type=module" />
+      <dependency ref="pkg:golang/golang.org/x/sync@v0.10.0?type=module" />
+      <dependency ref="pkg:golang/golang.org/x/sys@v0.29.0?type=module" />
+      <dependency ref="pkg:golang/golang.org/x/text@v0.21.0?type=module" />
+      <dependency ref="pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20250115164207-1a7da9e5054f?type=module" />
+      <dependency ref="pkg:golang/google.golang.org/protobuf@v1.36.3?type=module" />
+    </dependency>
+    <dependency ref="pkg:golang/google.golang.org/protobuf@v1.36.3?type=module" />
+    <dependency ref="pkg:golang/gopkg.in/natefinch/lumberjack.v2@v2.2.1?type=module" />
+    <dependency ref="pkg:golang/gopkg.in/yaml.v3@v3.0.1?type=module" />
+    <dependency ref="pkg:golang/oras.land/oras-go/v2@v2.3.1?type=module">
+      <dependency ref="pkg:golang/github.com/opencontainers/go-digest@v1.0.0?type=module" />
+      <dependency ref="pkg:golang/github.com/opencontainers/image-spec@v1.1.0?type=module" />
+      <dependency ref="pkg:golang/golang.org/x/sync@v0.10.0?type=module" />
+    </dependency>
+    <dependency ref="pkg:golang/sigs.k8s.io/yaml@v1.4.0?type=module" />
+  </dependencies>
+</bom>
\ No newline at end of file
"policy-opa-pdp"