https://bugzilla.redhat.com/show_bug.cgi?id=2272258 --- Comment #2 from Jerry James <loganjerry@xxxxxxxxx> --- There don't seem to be any golang packaging guidelines, which surprises me, so I'm doing my best to understand and review properly below. Please excuse me if I make an ignorant comment. The review is so long that bugzilla won't let me paste it all, so I will split it across multiple comments. Package Review ============== Legend: [x] = Pass, [!] = Fail, [-] = Not applicable, [?] = Not evaluated Issues: ======= - There is an awful lot of bundling going on. Is that typical for the golang ecosystem? - I am attempting to see if the License field in the spec file matches the actual licenses in play. It's a bit of a challenge. There is no comment in the spec file nor any kind of README describing the license breakdown. That would help a lot. See the following questions. - Many files under vendor/modernc.org/libc contain one or both of LGPL-2.1-or-later and GPL-3.0-or-later declarations, but I don't see either license in the License field. Should they appear there? - vendor/github.com/rcrowley/go-metrics/LICENSE is BSD-2-Clause-Views, not BSD-2-Clause, but I don't see that in License. - Some files additionally have lines that read: // SPDX-License-Identifier: GPL-2.0 WITH Linux-syscall-note I don't know if we are obligated to list notes, or if we only worry about exceptions in Fedora. The files: - vendor/modernc.org/libc/sys/socket/socket_linux_arm.go - vendor/modernc.org/libc/sys/socket/socket_linux_arm64.go - vendor/modernc.org/libc/sys/socket/socket_linux_riscv64.go - What do you make of the license declaration at the top of vendor/golang.org/x/crypto/chacha20/chacha_ppc64le.s? Is that file included in the build on ppc64le? - vendor/github.com/alecthomas/chroma/formatters/svg/font_liberation_mono.go contains an encoding of a font under the OFL-1.1-RFN license, which does not appear in License. - See the complaint below about unowned directories. This is not an error. The directory /usr/share/licenses/trivy/vendor/github.com/kylelemons, for example, is not owned by this package, but contains another directory that is. - See the non-executable-script rpmlint warnings below. Please either remove the shebangs from those files or make them executable. - Notice the invalid-url rpmlint warning for Source0. The URL is missing "https:" at the beginning. Is this a weakness of %gourl? Is something missing from the spec file that would cause that to appear? - Note that unused-direct-shlib-dependency warning for /usr/bin/trivy. It depends, uselessly, on libresolv.so.2. Does that mean /usr/bin/trivy was linked without --as-needed? - Version 0.50.1 has been released, FYI. ===== MUST items ===== C/C++: [x]: Provides: bundled(gnulib) in place as required. Note: Sources not installed [x]: Package does not contain kernel modules. [x]: Package does not contain any libtool archives (.la) [x]: Package contains no static executables. [x]: Rpath absent or only used for internal libs. Generic: [x]: Package is licensed with an open-source compatible license and meets other legal requirements as defined in the legal section of Packaging Guidelines. [!]: License field in the package spec file matches the actual license. Note: There is no build directory. Running licensecheck on vanilla upstream sources. Licenses found: "Unknown or generated", "*No copyright* Apache License 2.0", "Apache License 2.0", "BSD 3-Clause License", "MIT License", "*No copyright* MIT License", "BSD 2-Clause License", "Apache License 2.0 and/or MIT License", "BSD 3-Clause License and/or MIT License", "*No copyright* GNU Lesser General Public License", "*No copyright* The Unlicense", "*No copyright* Apache License 2.0 and/or Creative Commons Attribution 4.0", "ISC License", "Apache License 2.0 and/or Creative Commons Attribution 4.0", "BSD 2-Clause License and/or ISC License", "*No copyright* Mozilla Public License 2.0", "Mozilla Public License 2.0", "Apache License 2.0 and/or BSD 3-Clause License", "BSD 2-Clause with views sentence", "*No copyright* Creative Commons Attribution 4.0", "Apple Public Source License 2.0", "*No copyright* Public domain", "*No copyright* Apache License 2.0 and/or Public domain", "GNU Lesser General Public License v2.1 or later", "BSD 2-Clause License and/or BSD 2-clause FreeBSD License and/or BSD 3-Clause License", "BSD 3-Clause License and/or GNU Lesser General Public License v2.1 or later", "*No copyright* BSD 2-Clause License", "BSD 2-Clause License and/or BSD 2-clause FreeBSD License", "BSD 2-clause NetBSD License", "BSD-4-Clause (University of California-Specific) and/or GNU General Public License v3.0 or later", "BSD 3-Clause License and/or Public domain", "GNU General Public License v3.0 or later and/or GNU General Public License, Version 2 and/or GNU Lesser General Public License v2.1 or later", "GNU General Public License v3.0 or later and/or GNU Lesser General Public License v2.1 or later", "GNU General Public License v3.0 or later and/or Public domain", "BSD 2-Clause License and/or BSD 2-clause NetBSD License", "Apple Public Source License 2.0 and/or BSD 3-Clause License", "*No copyright* BSD 3-Clause License", "GNU Lesser General Public License v2.1 or later [generated file]", "BSD 2-Clause License and/or BSD 2-clause NetBSD License and/or BSD 3-Clause License", "MIT License and/or Public domain", "Apache License 2.0 and/or MIT License and/or Public domain", "BSD 2-Clause License and/or BSD 3-Clause License", "OpenSSL License", "Apache License 2.0 [generated file]", "*No copyright* GNU General Public License, Version 2", "GNU General Public License, Version 2", "SIL Open Font License 1.1", "*No copyright* Boost Software License 1.0", "Mozilla Public License 2.0 [generated file]", "*No copyright* Academic Free License v1.1", "*No copyright* Academic Free License v1.2", "*No copyright* Academic Free License v2.0", "*No copyright* Academic Free License v2.1", "*No copyright* Academic Free License v3.0", "*No copyright* GNU Affero General Public License v3.0 or later", "Apple Public Source License 1.0", "Apple Public Source License 1.1", "Apple Public Source License 1.2", "*No copyright* Apple Public Source License 2.0", "*No copyright* BitTorrent Open Source License v1.1", "*No copyright* Common Development and Distribution License", "*No copyright* Common Public Attribution License 1.0", "*No copyright* GNU General Public License v1.0 or later", "*No copyright* GNU General Public License v2.0 or later", "*No copyright* GNU General Public License", "GNU General Public License v2.0 only", "*No copyright* GNU General Public License v3.0 or later", "*No copyright* GNU General Public License, Version 3", "*No copyright* GNU Library General Public License v2 or later", "*No copyright* GNU Library General Public License, Version 2.0", "*No copyright* GNU Lesser General Public License v2.1 or later", "*No copyright* GNU Lesser General Public License, Version 2.1", "GNU General Public License, Version 3 and/or GNU Lesser General Public License, Version 2.1", "GNU Lesser General Public License, Version 2.1", "*No copyright* GNU Lesser General Public License v3.0 or later", "*No copyright* GNU Lesser General Public License, Version 3", "*No copyright* Mozilla Public License 1.0", "*No copyright* Mozilla Public License 1.1", "*No copyright* Open Software License 3.0", "*No copyright* OpenSSL License", "Sun Industry Standards Source License v1.2", "*No copyright* W3C License", "Academic Free License v3.0", "Affero General Public License v1.0", "GNU Affero General Public License v3.0", "Apple MIT License", "Academy of Motion Picture Arts and Sciences BSD", "*No copyright* ANTLR Software Rights Notice", "*No copyright* Apple Public Source License 1.0", "*No copyright* Apple Public Source License 1.1", "*No copyright* Apple Public Source License 1.2", "Apache License 1.0 and/or BSD 4-Clause License", "Apache License 1.1", "*No copyright* Artistic License 1.0", "*No copyright* Artistic License 1.0 (Perl)", "*No copyright* Artistic-1.0-cl8", "*No copyright* BSD 0-Clause License", "*No copyright* BSD 2-Clause License and/or BSD 2-clause FreeBSD License", "*No copyright* BSD 2-Clause License and/or BSD 2-clause NetBSD License", "*No copyright* BSD 2-Clause Plus Patent License", "*No copyright* Apache License 1.0 and/or BSD 3-Clause License", "BSD 3-Clause License and/or Lawrence Berkeley National Labs BSD variant license", "*No copyright* BSD 4-Clause License", "Apache License 1.1 and/or BSD 3-Clause License and/or Vovida Software License v1.0", "*No copyright* BSD-4-Clause (University of California-Specific)", "*No copyright* Beerware License", "*No copyright* NTP License", "*No copyright* Cryptographic Autonomy License 1.0", "*No copyright* Creative Commons Attribution 1.0 Generic", "*No copyright* Creative Commons Attribution 2.0", "*No copyright* Creative Commons Attribution 2.5", "Creative Commons Attribution 4.0", "Creative Commons Attribution-NonCommercial 1.0", "*No copyright* Creative Commons Attribution-NonCommercial 2.0", "*No copyright* Creative Commons Attribution-NonCommercial 2.5", "Creative Commons Attribution- NonCommercial 4.0", "Creative Commons Attribution-NoDerivs- NonCommercial 1.0", "*No copyright* Creative Commons Attribution- NonCommercial-NoDerivs 2.0", "*No copyright* Creative Commons Attribution-NonCommercial-NoDerivs 2.5", "Creative Commons Attribution-NonCommercial-NoDerivatives 4.0", "Creative Commons Attribution-NonCommercial-ShareAlike 1.0", "*No copyright* Creative Commons Attribution-NonCommercial-ShareAlike 2.0", "*No copyright* Creative Commons Attribution-NonCommercial-ShareAlike 2.5", "Creative Commons Attribution-NonCommercial-ShareAlike 4.0", "*No copyright* Creative Commons Attribution-NoDerivs 1.0", "*No copyright* Creative Commons Attribution-NoDerivs 2.0", "*No copyright* Creative Commons Attribution-NoDerivs 2.5", "Creative Commons Attribution-NoDerivatives 4.0", "*No copyright* Creative Commons Attribution-ShareAlike 1.0", "*No copyright* Creative Commons Attribution-ShareAlike 2.0", "*No copyright* Creative Commons Attribution-ShareAlike 2.5", "Creative Commons Attribution-ShareAlike 4.0", "*No copyright* Creative Commons CC0 1.0", "*No copyright* CeCILL Free Software License Agreement v2.1", "*No copyright* MIT No Attribution", "CNRI Python Open Source GPL Compatible License Agreement", "*No copyright* Common Public License 1.0", "DBAD Public License v1.1", "*No copyright* Eclipse Public License 1.0", "*No copyright* Eclipse Public License 2.0", "European Union Public License, Version 1.0", "European Union Public License, Version 1.1", "*No copyright* Apache License 1.1", "Freetype Project License", "*No copyright* FSF All Permissive License", "GNU General Public License, Version 3", "*No copyright* LaTeX Project Public License 1.3c", "Lawrence Berkeley National Labs BSD variant license", "*No copyright* Historical Permission Notice and Disclaimer - sell variant and/or NTP License (legal disclaimer)", "ICU License", "*No copyright* IBM Public License v1.0", "*No copyright* ISC License", "JSON License and/or MIT License", "*No copyright* libpng License", "Khronos License", "GNU Library General Public License, Version 2.0", "GNU Lesser General Public License, Version 3", "LaTeX Project Public License 1.3c", "libpng License", "*No copyright* Standard ML of New Jersey License", "*No copyright* BSD 1-Clause License", "*No copyright* MIT (old)", "Microsoft Public License", "Microsoft Reciprocal License", "*No copyright* University of Illinois/NCSA Open Source License", "Nethack General Public License", "Netscape Public License v1.0", "Netscape Public License v1.1", "*No copyright* SIL Open Font License 1.1", "*No copyright* Open Software License 1.0", "*No copyright* Open Software License 1.1", "*No copyright* Open Software License 2.0", "*No copyright* Open Software License 2.1", "Open Software License 3.0", "*No copyright* Apache License 1.0 and/or OpenSSL License", "OpenSSL License and/or SSLeay", "mit_openvision", "PHP License v3.0", "PHP License v3.01", "NTP License", "*No copyright* PostgreSQL License", "Python Software Foundation License 2.0", "Q Public License 1.0", "*No copyright* Ruby License", "*No copyright* SGI Free Software License B v1.0", "*No copyright* SGI Free Software License B v1.1", "SGI Free Software License B v2.0", "*No copyright* Sun Industry Standards Source License v1.1", "*No copyright* Sun Industry Standards Source License v1.2", "BSD 3-Clause License and/or Sleepycat License", "Universal Permissive License v1.0", "*No copyright* Unicode License Agreement - Data Files and Software (2015)", "Unicode License Agreement - Data Files and Software (2015)", "*No copyright* Unicode License Agreement - Data Files and Software (2016)", "Unicode License Agreement - Data Files and Software (2016)", "Unicode Terms of Use", "*No copyright* W3C Software Notice and License (2002-12-31)", "W3C Software Notice and License (1998-07-20)", "W3C Software and Document Notice and License (2015-05-13)", "Do What The Fuck You Want To Public License, Version 2", "WordNet License", "X11 License", "*No copyright* MIT License and/or X.Net License", "Zope Public License 2.0", "*No copyright* Zope Public License 2.1", "Zend License v2.0", "*No copyright* zlib License", "curl License", "Public domain", "*No copyright* libtiff License", "Unicode strict", "GNU General Public License and/or GNU Library General Public License v2 or later", "zlib/libpng License with Acknowledgement", "Artistic License". 12710 files have unknown license. Detailed output of licensecheck in /home/jamesjer/2272258-trivy/licensecheck.txt I am not confident that the License field is accurate. See the questions above. [x]: License file installed when any subpackage combination is installed. [!]: If the package is under multiple licenses, the licensing breakdown must be documented in the spec. It is not documented. [!]: Package requires other packages for directories it uses. Note: No known owner of /usr/share/licenses/trivy/vendor/github.com/kylelemons, /usr/share/licenses/trivy/vendor/sigs.k8s.io/kustomize/kyaml/internal/forked/github.com/go- yaml, /usr/share/licenses/trivy/vendor/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp, /usr/share/licenses/trivy/vendor/github.com/docker/go-units, /usr/share/licenses/trivy/vendor/github.com/moby/spdystream, /usr/share/licenses/trivy/vendor/github.com/hashicorp/hcl/v2, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/service/sso, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/service/accessanalyzer, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/service/rds, /usr/share/licenses/trivy/vendor/github.com/beorn7, /usr/share/licenses/trivy/vendor/github.com/beorn7/perks, /usr/share/licenses/trivy/vendor/github.com/AzureAD, /usr/share/licenses/trivy/vendor/github.com/mxk, /usr/share/licenses/trivy/pkg/iac, /usr/share/licenses/trivy/vendor/go.opentelemetry.io/contrib, /usr/share/licenses/trivy/vendor/github.com/jbenet/go-context, /usr/share/licenses/trivy/vendor/github.com/go-git/go-billy/v5, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-go-v2/feature, /usr/share/licenses/trivy/vendor/github.com/dlclark, /usr/share/licenses/trivy/vendor/github.com/spdx, /usr/share/licenses/trivy/vendor/github.com/modern-go, /usr/share/licenses/trivy/vendor/github.com/subosito/gotenv, /usr/share/licenses/trivy/vendor/github.com/spf13/afero, /usr/share/licenses/trivy/vendor/github.com/vbatts/tar-split, /usr/share/licenses/trivy/vendor/github.com/cenkalti/backoff, /usr/share/licenses/trivy/vendor/gopkg.in/yaml.v3, /usr/share/licenses/trivy/vendor/github.com/cespare, /usr/share/licenses/trivy/vendor/github.com/golang-jwt/jwt/v5, /usr/share/licenses/trivy/vendor/google.golang.org/grpc, /usr/share/licenses/trivy/vendor/github.com/quasilyte/go-ruleguard, /usr/share/licenses/trivy/vendor/github.com/moby/buildkit, /usr/share/licenses/trivy/vendor/github.com/quasilyte/go- ruleguard/dsl, /usr/share/licenses/trivy/vendor/github.com/subosito, /usr/share/licenses/trivy/vendor/github.com/golang-jwt/jwt, /usr/share/licenses/trivy/vendor/github.com/owenrumney/go-sarif, /usr/share/licenses/trivy/vendor/github.com/tchap, /usr/share/licenses/trivy/vendor/github.com/sergi/go-diff, /usr/share/licenses/trivy/vendor/github.com/aws/smithy-go, /usr/share/licenses/trivy/vendor/google.golang.org, /usr/share/licenses/trivy/vendor/github.com/exponent-io, /usr/share/licenses/trivy/vendor/github.com/go- openapi/runtime/middleware/denco, /usr/share/licenses/trivy/vendor/github.com/shopspring/decimal, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/service/eks, /usr/share/licenses/trivy/vendor/github.com/Azure/go-autorest/logger, /usr/share/licenses/trivy/vendor/github.com/microsoft, /usr/share/licenses/trivy/vendor/k8s.io/kube- openapi/pkg/internal/third_party/go-json-experiment, /usr/share/licenses/trivy/vendor/github.com/alecthomas/chroma, /usr/share/licenses/trivy/vendor/github.com/remyoudompheng/bigfft, /usr/share/licenses/trivy/vendor/github.com/mitchellh/mapstructure, /usr/share/licenses/trivy/vendor/github.com/docker/distribution, /usr/share/licenses/trivy/vendor/github.com/antchfx/htmlquery, /usr/share/licenses/trivy/vendor/github.com/spf13/cobra, /usr/share/licenses/trivy/vendor/github.com/klauspost/compress/zstd/internal/xxhash, /usr/share/licenses/trivy/vendor/github.com/Azure/azure-sdk-for- go/sdk/azcore, /usr/share/licenses/trivy/vendor/k8s.io/apimachinery, /usr/share/licenses/trivy/vendor/sigs.k8s.io/json, /usr/share/licenses/trivy/vendor/github.com/hashicorp/golang-lru/v2, /usr/share/licenses/trivy/vendor/github.com/imdario/mergo, /usr/share/licenses/trivy/vendor/github.com/cenkalti, /usr/share/licenses/trivy/vendor/github.com/containerd, /usr/share/licenses/trivy/vendor/k8s.io/client- go/third_party/forked/golang, /usr/share/licenses/trivy/vendor/github.com/agnivade/levenshtein, /usr/share/licenses/trivy/vendor/github.com/aquasecurity, /usr/share/licenses/trivy/vendor/github.com/klauspost/compress/zstd, /usr/share/licenses/trivy/vendor/github.com/felixge/httpsnoop, /usr/share/licenses/trivy/vendor/github.com/chai2010/gettext-go, /usr/share/licenses/trivy/vendor/github.com/tchap/go-patricia/v2, /usr/share/licenses/trivy/vendor/github.com/aquasecurity/bolt- fixtures, /usr/share/licenses/trivy/vendor/github.com/xeipuuv, /usr/share/licenses/trivy/vendor/github.com/open-policy-agent, /usr/share/licenses/trivy/vendor/github.com/golang-jwt/jwt/v4, /usr/share/licenses/trivy/vendor/github.com/cpuguy83/go-md2man, /usr/share/licenses/trivy/vendor/github.com/distribution, /usr/share/licenses/trivy/vendor/github.com/emirpasic, /usr/share/licenses/trivy/vendor/github.com/pkg/errors, /usr/share/licenses/trivy/vendor/oras.land, /usr/share/licenses/trivy/vendor/github.com/go-openapi/loads, /usr/share/licenses/trivy/vendor/go.opentelemetry.io, /usr/share/licenses/trivy/vendor/github.com/knqyf263/go-deb-version, /usr/share/licenses/trivy/vendor/github.com/masahiro331/go-disk, /usr/share/licenses/trivy/vendor/github.com/cpuguy83/go-md2man/v2, /usr/share/licenses/trivy/vendor/github.com/openvex, /usr/share/licenses/trivy/vendor/github.com/rivo/uniseg, /usr/share/licenses/trivy/vendor/github.com/open-policy- agent/opa/internal/providers/aws, /usr/share/licenses/trivy/vendor/sigs.k8s.io/yaml/goyaml.v2, /usr/share/licenses/trivy/vendor/github.com/magiconair/properties, /usr/share/licenses/trivy/vendor/github.com/magefile/mage, /usr/share/licenses/trivy/vendor/github.com/aquasecurity/tml, /usr/share/licenses/trivy/vendor/github.com/evanphx, /usr/share/licenses/trivy/vendor/github.com/go-git/go-billy, /usr/share/licenses/trivy/vendor/github.com/davecgh/go-spew, /usr/share/licenses/trivy/vendor/cloud.google.com/go/internal/version, /usr/share/licenses/trivy/vendor/github.com/mitchellh/go-wordwrap, /usr/share/licenses/trivy/vendor/github.com/stretchr/objx, /usr/share/licenses/trivy/vendor/github.com/hashicorp/terraform-json, /usr/share/licenses/trivy/vendor/github.com/apparentlymart/go- textseg/v15, /usr/share/licenses/trivy/vendor/github.com/containerd/fifo, /usr/share/licenses/trivy/vendor/github.com/masahiro331/go-xfs- filesystem, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/internal/sync/singleflight, /usr/share/licenses/trivy/vendor/github.com/sosedoff, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/service/internal/presigned-url, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-go/internal, /usr/share/licenses/trivy/vendor/k8s.io/kubectl/pkg/util, /usr/share/licenses/trivy/vendor/github.com/pkg, /usr/share/licenses/trivy/vendor/github.com/rcrowley, /usr/share/licenses/trivy/vendor/modernc.org/strutil, /usr/share/licenses/trivy/vendor/github.com/fsnotify, /usr/share/licenses/trivy/vendor/github.com/google/gnostic-models, /usr/share/licenses/trivy/vendor/github.com/aquasecurity/trivy-db, /usr/share/licenses/trivy/vendor/github.com/spf13/viper, /usr/share/licenses/trivy/vendor/google.golang.org/genproto/googleapis/rpc, /usr/share/licenses/trivy/vendor/k8s.io/cli-runtime, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/feature/ec2, /usr/share/licenses/trivy/vendor/github.com/Azure/go-autorest/tracing, /usr/share/licenses/trivy/vendor/github.com/hashicorp/go-version, /usr/share/licenses/trivy/vendor/github.com/Azure/go- autorest/autorest/date, /usr/share/licenses/trivy/vendor/github.com/bgentry/go-netrc, /usr/share/licenses/trivy/vendor/github.com/kevinburke/ssh_config, /usr/share/licenses/trivy/vendor/github.com/AdaLogics, /usr/share/licenses/trivy/vendor/github.com/lib, /usr/share/licenses/trivy/vendor/github.com/apparentlymart, /usr/share/licenses/trivy/vendor/github.com/asaskevich, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/service/internal/checksum, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go/internal/sync/singleflight, /usr/share/licenses/trivy/vendor/github.com/go-git/gcfg, /usr/share/licenses/trivy/vendor/k8s.io/component-base, /usr/share/licenses/trivy/vendor/github.com/go-redis, /usr/share/licenses/trivy/vendor/github.com/aws/smithy- go/internal/sync, /usr/share/licenses/trivy/vendor/k8s.io/utils, /usr/share/licenses/trivy/vendor/github.com/alicebob, /usr/share/licenses/trivy/vendor/github.com/cpuguy83, /usr/share/licenses/trivy/vendor/k8s.io/klog, /usr/share/licenses/trivy/vendor/github.com/goccy, /usr/share/licenses/trivy/vendor/github.com/Masterminds/semver/v3, /usr/share/licenses/trivy/vendor/github.com/sirupsen/logrus, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/service/ssooidc, /usr/share/licenses/trivy/vendor/k8s.io/apimachinery/third_party/forked/golang, /usr/share/licenses/trivy/vendor/github.com/remyoudompheng, /usr/share/licenses/trivy/vendor/golang.org/x/mod, /usr/share/licenses/trivy/vendor/lukechampine.com/uint128, /usr/share/licenses/trivy/vendor/github.com/go- openapi/runtime/middleware, /usr/share/licenses/trivy/vendor/github.com/apparentlymart/go-cidr, /usr/share/licenses/trivy/vendor/github.com/liggitt, /usr/share/licenses/trivy/vendor/github.com/tetratelabs, /usr/share/licenses/trivy/vendor/github.com/hashicorp/go-cleanhttp, /usr/share/licenses/trivy/vendor/golang.org/x/exp, /usr/share/licenses/trivy/pkg/iac/scanners, /usr/share/licenses/trivy/vendor/github.com/open-policy- agent/opa/internal, /usr/share/licenses/trivy/vendor/github.com/hashicorp/terraform-exec, /usr/share/licenses/trivy/vendor/github.com/gorilla/mux, /usr/share/licenses/trivy/vendor/github.com/sosedoff/gitkit, /usr/share/licenses/trivy/vendor/github.com/Masterminds/sprig, /usr/share/licenses/trivy/vendor/github.com/prometheus/client_golang, /usr/share/licenses/trivy/vendor/github.com/moby/sys/signal, /usr/share/licenses/trivy/vendor/sigs.k8s.io/kustomize/kyaml/internal/forked/github.com/go- yaml/yaml, /usr/share/licenses/trivy/vendor/github.com/gosuri/uitable/util/wordwrap, /usr/share/licenses/trivy/vendor/github.com/kylelemons/godebug, /usr/share/licenses/trivy/vendor/k8s.io/kube-openapi/pkg, /usr/share/licenses/trivy/vendor/golang.org/x/term, /usr/share/licenses/trivy/vendor/github.com/googleapis/gax-go/v2, /usr/share/licenses/trivy/vendor/github.com/mitchellh, /usr/share/licenses/trivy/vendor/golang.org/x/xerrors, /usr/share/licenses/trivy/vendor/github.com/dlclark/regexp2, /usr/share/licenses/trivy/vendor/github.com/hashicorp/go- retryablehttp, /usr/share/licenses/trivy/vendor/github.com/klauspost, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/service/s3, /usr/share/licenses/trivy/vendor/github.com/Microsoft/hcsshim, /usr/share/licenses/trivy/vendor/github.com/mitchellh/copystructure, /usr/share/licenses/trivy/vendor/go.opencensus.io, /usr/share/licenses/trivy/vendor/sigs.k8s.io/yaml, /usr/share/licenses/trivy/vendor/github.com/go-openapi/jsonreference, /usr/share/licenses/trivy/vendor/github.com/exponent-io/jsonpath, /usr/share/licenses/trivy/vendor/github.com/mattn/go-shellwords, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-go-v2/aws, /usr/share/licenses/trivy/vendor/golang.org/x/crypto, /usr/share/licenses/trivy/vendor/github.com/prometheus/client_model, /usr/share/licenses/trivy/vendor/github.com/gorilla, /usr/share/licenses/trivy/vendor/github.com/ProtonMail/go-crypto, /usr/share/licenses/trivy/vendor/go.opentelemetry.io/contrib/instrumentation/net/http, /usr/share/licenses/trivy/vendor/golang.org/x/sync, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/aws/protocol, /usr/share/licenses/trivy/vendor/github.com/hashicorp/golang-lru, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/service/kinesis, /usr/share/licenses/trivy/vendor/sigs.k8s.io/kustomize/kyaml/internal, /usr/share/licenses/trivy/vendor/github.com/Masterminds, /usr/share/licenses/trivy/vendor/github.com/aquasecurity/table, /usr/share/licenses/trivy/vendor/github.com/dustin, /usr/share/licenses/trivy/vendor/github.com/mattn/go-colorable, /usr/share/licenses/trivy/vendor/github.com/gogo, /usr/share/licenses/trivy/vendor/github.com/AdamKorcz, /usr/share/licenses/trivy/vendor/github.com/jbenet, /usr/share/licenses/trivy/vendor/github.com/containerd/stargz- snapshotter, /usr/share/licenses/trivy/vendor/github.com/skeema, /usr/share/licenses/trivy/vendor/modernc.org/cc, /usr/share/licenses/trivy/vendor/github.com/golang/protobuf, /usr/share/licenses/trivy/vendor/github.com/prometheus/procfs, /usr/share/licenses/trivy/vendor/github.com/hashicorp/go-multierror, /usr/share/licenses/trivy/vendor/github.com/bitnami/go-version, /usr/share/licenses/trivy/vendor/sigs.k8s.io, /usr/share/licenses/trivy/vendor/github.com/in-toto, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/service/sqs, /usr/share/licenses/trivy/vendor/github.com/xanzy, /usr/share/licenses/trivy/vendor/github.com/google/shlex, /usr/share/licenses/trivy/vendor/github.com/google/wire, /usr/share/licenses/trivy/vendor/github.com/asaskevich/govalidator, /usr/share/licenses/trivy/vendor/github.com/AdaLogics/go-fuzz-headers, /usr/share/licenses/trivy/vendor/gopkg.in/inf.v0, /usr/share/licenses/trivy/vendor/github.com/masahiro331, /usr/share/licenses/trivy/vendor/github.com/emicklei/go-restful, /usr/share/licenses/trivy/vendor/github.com/santhosh-tekuri, /usr/share/licenses/trivy/vendor/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go/internal/sync, /usr/share/licenses/trivy/vendor/github.com/containerd/continuity, /usr/share/licenses/trivy/vendor/github.com/Microsoft, /usr/share/licenses/trivy/vendor/github.com/sourcegraph/conc, /usr/share/licenses/trivy/vendor/github.com/open-policy- agent/opa/internal/edittree/bitvector, /usr/share/licenses/trivy/vendor/go.mongodb.org, /usr/share/licenses/trivy/vendor/google.golang.org/appengine, /usr/share/licenses/trivy/vendor/github.com/bitnami, /usr/share/licenses/trivy/vendor/cloud.google.com/go/internal, /usr/share/licenses/trivy/vendor/modernc.org/libc/honnef.co/go, /usr/share/licenses/trivy/vendor/k8s.io/apimachinery/third_party/forked, /usr/share/licenses/trivy/vendor/github.com/spdx/tools-golang, /usr/share/licenses/trivy/vendor/go.etcd.io/bbolt, /usr/share/licenses/trivy/vendor/github.com/hashicorp/go-safetemp, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-go-v2/service, /usr/share/licenses/trivy/vendor, /usr/share/licenses/trivy/vendor/github.com/containerd/containerd, /usr/share/licenses/trivy/vendor/dario.cat, /usr/share/licenses/trivy/vendor/github.com/mailru/easyjson, /usr/share/licenses/trivy/vendor/github.com/emirpasic/gods, /usr/share/licenses/trivy/vendor/helm.sh/helm, /usr/share/licenses/trivy/vendor/github.com/magefile, /usr/share/licenses/trivy/vendor/go.opentelemetry.io/otel/trace, /usr/share/licenses/trivy/vendor/github.com/Azure/go-ansiterm, /usr/share/licenses/trivy/vendor/k8s.io/api, /usr/share/licenses/trivy/vendor/modernc.org/ccgo, /usr/share/licenses/trivy/vendor/sigs.k8s.io/kustomize/kyaml, /usr/share/licenses/trivy/vendor/github.com/santhosh- tekuri/jsonschema, /usr/share/licenses/trivy/vendor/github.com/Azure/azure-sdk-for-go, /usr/share/licenses/trivy/vendor/k8s.io/utils/internal, /usr/share/licenses/trivy/vendor/github.com/google/btree, /usr/share/licenses/trivy/vendor/github.com/aquasecurity/trivy-aws, /usr/share/licenses/trivy/vendor/k8s.io/utils/internal/third_party/forked/golang, /usr/share/licenses/trivy/vendor/github.com/sirupsen, /usr/share/licenses/trivy/vendor/github.com/sagikazarmark, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/service/cloudwatch, /usr/share/licenses/trivy/vendor/github.com/go-openapi/errors, /usr/share/licenses/trivy/vendor/github.com/cheggaaa, /usr/share/licenses/trivy/vendor/github.com/bmatcuk/doublestar, /usr/share/licenses/trivy/vendor/github.com/tchap/go-patricia, /usr/share/licenses/trivy/vendor/github.com/google/licenseclassifier/v2, /usr/share/licenses/trivy/vendor/github.com/jmespath, /usr/share/licenses/trivy/vendor/k8s.io/apiextensions-apiserver, /usr/share/licenses/trivy/vendor/github.com/open-policy- agent/opa/internal/providers, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/service/ecr, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/service/internal/endpoint-discovery, /usr/share/licenses/trivy/vendor/go.mongodb.org/mongo-driver, /usr/share/licenses/trivy/vendor/github.com/pelletier/go-toml, /usr/share/licenses/trivy/vendor/go.uber.org/multierr, /usr/share/licenses/trivy/vendor/github.com/owenrumney/squealer, /usr/share/licenses/trivy/vendor/github.com/CycloneDX, /usr/share/licenses/trivy/vendor/github.com/Intevation/gval, /usr/share/licenses/trivy/vendor/github.com/davecgh, /usr/share/licenses/trivy/vendor/github.com/kballard/go-shellquote, /usr/share/licenses/trivy/vendor/github.com/fatih/color, /usr/share/licenses/trivy/vendor/github.com/open-policy- agent/opa/internal/gqlparser, /usr/share/licenses/trivy/vendor/github.com/moby/patternmatcher, /usr/share/licenses/trivy/vendor/sigs.k8s.io/kustomize/kyaml/internal/forked/github.com/qri- io/starlib/util, /usr/share/licenses/trivy/vendor/github.com/moby/term, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/service/mq, /usr/share/licenses/trivy/vendor/github.com/Azure/go- autorest/autorest/adal, /usr/share/licenses/trivy/vendor/github.com/rivo, /usr/share/licenses/trivy/vendor/github.com/zclconf/go-cty-yaml, /usr/share/licenses/trivy/vendor/github.com/dgryski/go-rendezvous, /usr/share/licenses/trivy/vendor/github.com/liamg/memoryfs, /usr/share/licenses/trivy/vendor/github.com/go-errors/errors, /usr/share/licenses/trivy/vendor/github.com/containerd/cgroups, /usr/share/licenses/trivy/vendor/github.com/csaf- poc/csaf_distribution/v3, /usr/share/licenses/trivy/vendor/github.com/mitchellh/hashstructure/v2, /usr/share/licenses/trivy/vendor/github.com/bmatcuk/doublestar/v4, /usr/share/licenses/trivy/vendor/k8s.io/kubectl, /usr/share/licenses/trivy/vendor/github.com/xeipuuv/gojsonpointer, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/internal/v4a, /usr/share/licenses/trivy/vendor/lukechampine.com, /usr/share/licenses/trivy/vendor/k8s.io/kube-openapi, /usr/share/licenses/trivy/vendor/github.com/GoogleCloudPlatform, /usr/share/licenses/trivy/vendor/github.com/microsoft/go-rustaudit, /usr/share/licenses/trivy/vendor/github.com/mattn/go-runewidth, /usr/share/licenses/trivy/vendor/github.com, /usr/share/licenses/trivy/vendor/github.com/Masterminds/sprig/v3, /usr/share/licenses/trivy/vendor/github.com/agnivade, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/service/secretsmanager, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/service/elasticache, /usr/share/licenses/trivy/vendor/k8s.io/kube- openapi/pkg/internal/third_party, /usr/share/licenses/trivy/vendor/github.com/ulikunitz, /usr/share/licenses/trivy/vendor/github.com/emicklei/go-restful/v3, /usr/share/licenses/trivy/vendor/cloud.google.com/go, /usr/share/licenses/trivy/vendor/github.com/aquasecurity/loading, /usr/share/licenses/trivy/vendor/github.com/gosuri, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/credentials, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/aws/protocol/eventstream, /usr/share/licenses/trivy/vendor/github.com/go-git, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/service/iam, /usr/share/licenses/trivy/vendor/modernc.org/opt, /usr/share/licenses/trivy/vendor/sigs.k8s.io/kustomize/kyaml/internal/forked/github.com/qri- io/starlib, /usr/share/licenses/trivy/vendor/go.opentelemetry.io/otel, /usr/share/licenses/trivy/vendor/github.com/gorilla/websocket, /usr/share/licenses/trivy/vendor/github.com/inconshreveable, /usr/share/licenses/trivy/vendor/github.com/morikuni, /usr/share/licenses/trivy/vendor/github.com/alicebob/miniredis/v2, /usr/share/licenses/trivy/vendor/github.com/csaf- poc/csaf_distribution, /usr/share/licenses/trivy/vendor/github.com/Azure/go-autorest, /usr/share/licenses/trivy/vendor/github.com/Masterminds/squirrel, /usr/share/licenses/trivy/vendor/github.com/AdamKorcz/go-118-fuzz- build, /usr/share/licenses/trivy/vendor/github.com/containerd/stargz- snapshotter/estargz, /usr/share/licenses/trivy/vendor/github.com/cheggaaa/pb/v3, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/service/ebs, /usr/share/licenses/trivy/vendor/github.com/knqyf263/nested, /usr/share/licenses/trivy/vendor/github.com/go-redis/redis, /usr/share/licenses/trivy/vendor/github.com/liamg/iamgo, /usr/share/licenses/trivy/vendor/github.com/open-policy-agent/opa, /usr/share/licenses/trivy/vendor/github.com/aquasecurity/go-npm- version, /usr/share/licenses/trivy/vendor/github.com/sagikazarmark/locafero, /usr/share/licenses/trivy/vendor/github.com/aws, /usr/share/licenses/trivy/vendor/github.com/jmoiron, /usr/share/licenses/trivy/vendor/github.com/moby/sys, /usr/share/licenses/trivy/vendor/github.com/go-gorp/gorp, /usr/share/licenses/trivy/vendor/github.com/liggitt/tabwriter, /usr/share/licenses/trivy/vendor/sigs.k8s.io/kustomize/kyaml/internal/forked/github.com, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/service/efs, /usr/share/licenses/trivy/vendor/k8s.io/kube- openapi/pkg/validation, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/feature/s3, /usr/share/licenses/trivy/vendor/github.com/klauspost/compress, /usr/share/licenses/trivy/vendor/github.com/csaf- poc/csaf_distribution/v3/LICENSES, /usr/share/licenses/trivy/vendor/k8s.io/kube-openapi/pkg/internal, /usr/share/licenses/trivy/vendor/github.com/sergi, /usr/share/licenses/trivy/vendor/github.com/open-policy- agent/opa/internal/semver, /usr/share/licenses/trivy/vendor/google.golang.org/api/internal/third_party, /usr/share/licenses/trivy/vendor/github.com/cloudflare, /usr/share/licenses/trivy/vendor/google.golang.org/api/internal, /usr/share/licenses/trivy/vendor/github.com/moby/sys/user, /usr/share/licenses/trivy/vendor/github.com/cpuguy83/dockercfg, /usr/share/licenses/trivy/vendor/github.com/russross/blackfriday/v2, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/service/ecs, /usr/share/licenses/trivy/vendor/sigs.k8s.io/kustomize, /usr/share/licenses/trivy/vendor/github.com/prometheus/common/internal/bitbucket.org/ww/goautoneg, /usr/share/licenses/trivy/vendor/github.com/moby/sys/mountinfo, /usr/share/licenses/trivy/vendor/github.com/vbatts, /usr/share/licenses/trivy/vendor/github.com/cenkalti/backoff/v4, /usr/share/licenses/trivy/vendor/github.com/alicebob/miniredis/v2/geohash, /usr/share/licenses/trivy/vendor/github.com/antchfx, /usr/share/licenses/trivy/vendor/k8s.io/client-go/third_party, /usr/share/licenses/trivy/vendor/modernc.org/sqlite, /usr/share/licenses/trivy/vendor/github.com/go-logr/logr, /usr/share/licenses/trivy/vendor/github.com/golang, /usr/share/licenses/trivy/vendor/dario.cat/mergo, /usr/share/licenses/trivy/vendor/github.com/Intevation, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/service/lambda, /usr/share/licenses/trivy/vendor/k8s.io, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/service/cloudfront, /usr/share/licenses/trivy/vendor/github.com/oklog, /usr/share/licenses/trivy/vendor/cloud.google.com/go/compute, /usr/share/licenses/trivy/vendor/github.com/opencontainers, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/service/elasticsearchservice, /usr/share/licenses/trivy/vendor/github.com/googleapis/enterprise- certificate-proxy, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/service/kms, /usr/share/licenses/trivy/vendor/golang.org/x, /usr/share/licenses/trivy/vendor/github.com/docker/cli, /usr/share/licenses/trivy/vendor/github.com/alicebob/miniredis/v2/hyperloglog, /usr/share/licenses/trivy/vendor/github.com/mitchellh/go-homedir, /usr/share/licenses/trivy/vendor/github.com/containerd/log, /usr/share/licenses/trivy/vendor/github.com/knqyf263/go-rpmdb, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/internal/configsources, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/internal/ini, /usr/share/licenses/trivy/vendor/github.com/moby, /usr/share/licenses/trivy/vendor/github.com/olekukonko, /usr/share/licenses/trivy/vendor/github.com/evanphx/json-patch, /usr/share/licenses/trivy/vendor/github.com/klauspost/compress/internal, /usr/share/licenses/trivy/vendor/github.com/gobwas, /usr/share/licenses/trivy/vendor/github.com/CycloneDX/cyclonedx-go, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/service/sns, /usr/share/licenses/trivy/vendor/github.com/aws/smithy-go/internal, /usr/share/licenses/trivy/vendor/github.com/prometheus/common/internal, /usr/share/licenses/trivy/vendor/github.com/lunixbochs/struc, /usr/share/licenses/trivy/vendor/github.com/gosuri/uitable, /usr/share/licenses/trivy/vendor/github.com/mailru, /usr/share/licenses/trivy/vendor/github.com/pelletier, /usr/share/licenses/trivy/vendor/github.com/alicebob/miniredis, /usr/share/licenses/trivy/vendor/github.com/ProtonMail, /usr/share/licenses/trivy/vendor/github.com/samber/lo, /usr/share/licenses/trivy/vendor/github.com/go-redis/redis/v8, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/service/cloudtrail, /usr/share/licenses/trivy/vendor/github.com/sourcegraph, /usr/share/licenses/trivy/vendor/modernc.org/token, /usr/share/licenses/trivy/vendor/google.golang.org/genproto/googleapis, /usr/share/licenses/trivy/vendor/github.com/go-openapi/spec, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/service/apigateway, /usr/share/licenses/trivy/pkg, /usr/share/licenses/trivy/vendor/github.com/aws/smithy- go/internal/sync/singleflight, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/service/codebuild, /usr/share/licenses/trivy/vendor/k8s.io/apimachinery/third_party, /usr/share/licenses/trivy/pkg/iac/scanners/helm, /usr/share/licenses/trivy/vendor/github.com/prometheus/common, /usr/share/licenses/trivy/vendor/github.com/briandowns, /usr/share/licenses/trivy/vendor/github.com/opencontainers/go-digest, /usr/share/licenses/trivy/vendor/github.com/cyphar/filepath- securejoin, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/service/redshift, /usr/share/licenses/trivy/vendor/github.com/pelletier/go-toml/v2, /usr/share/licenses/trivy/vendor/k8s.io/client-go, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/feature/s3/manager, /usr/share/licenses/trivy/vendor/github.com/docker/docker-credential- helpers, /usr/share/licenses/trivy/vendor/github.com/rcrowley/go- metrics, /usr/share/licenses/trivy/vendor/modernc.org/libc/honnef.co, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/service/cloudwatchlogs, /usr/share/licenses/trivy/vendor/github.com/lann/ps, /usr/share/licenses/trivy/vendor/github.com/kballard, /usr/share/licenses/trivy/vendor/github.com/munnerz/goautoneg, /usr/share/licenses/trivy/vendor/github.com/pmezard, /usr/share/licenses/trivy/vendor/github.com/russross, /usr/share/licenses/trivy/vendor/k8s.io/kube- openapi/pkg/validation/spec, /usr/share/licenses/trivy/vendor/helm.sh/helm/v3, /usr/share/licenses/trivy/vendor/github.com/shopspring, /usr/share/licenses/trivy/vendor/github.com/anchore, /usr/share/licenses/trivy/vendor/github.com/Masterminds/goutils, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/service/internal/accept-encoding, /usr/share/licenses/trivy/vendor/k8s.io/kubectl/pkg/util/i18n/translations, /usr/share/licenses/trivy/vendor/github.com/docker/go-metrics, /usr/share/licenses/trivy/vendor/github.com/in-toto/in-toto-golang, /usr/share/licenses/trivy/vendor/k8s.io/client-go/third_party/forked, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/service/kafka, /usr/share/licenses/trivy/vendor/github.com/Azure/azure-sdk-for- go/sdk, /usr/share/licenses/trivy/vendor/github.com/hashicorp/hc- install, /usr/share/licenses/trivy/vendor/github.com/sigstore/rekor, /usr/share/licenses/trivy/vendor/github.com/morikuni/aec, /usr/share/licenses/trivy/vendor/github.com/Masterminds/semver, /usr/share/licenses/trivy/vendor/gopkg.in/ini.v1, /usr/share/licenses/trivy/vendor/google.golang.org/genproto/googleapis/api, /usr/share/licenses/trivy/vendor/github.com/mitchellh/hashstructure, /usr/share/licenses/trivy/vendor/github.com/GoogleCloudPlatform/docker- credential-gcr, /usr/share/licenses/trivy/vendor/github.com/antchfx/xpath, /usr/share/licenses/trivy/vendor/github.com/gosuri/uitable/util, /usr/share/licenses/trivy/vendor/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc, /usr/share/licenses/trivy/vendor/github.com/dgryski, /usr/share/licenses/trivy/vendor/github.com/OneOfOne/xxhash, /usr/share/licenses/trivy/vendor/github.com/jmoiron/sqlx, /usr/share/licenses/trivy/vendor/github.com/saracen/walker, /usr/share/licenses/trivy/vendor/github.com/bmatcuk, /usr/share/licenses/trivy/vendor/github.com/testcontainers, /usr/share/licenses/trivy/vendor/github.com/zclconf, /usr/share/licenses/trivy/vendor/github.com/twitchtv/twirp, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/feature/ec2/imds, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/service/internal, /usr/share/licenses/trivy/vendor/github.com/Azure, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/internal/endpoints/v2, /usr/share/licenses/trivy/vendor/github.com/json-iterator, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/internal, /usr/share/licenses/trivy/vendor/github.com/hashicorp/errwrap, /usr/share/licenses/trivy/vendor/github.com/OneOfOne, /usr/share/licenses/trivy/vendor/github.com/gogo/protobuf, /usr/share/licenses/trivy/vendor/github.com/containerd/typeurl, /usr/share/licenses/trivy/vendor/github.com/kevinburke, /usr/share/licenses/trivy/vendor/google.golang.org/genproto, /usr/share/licenses/trivy/vendor/github.com/saracen, /usr/share/licenses/trivy/vendor/github.com/shibumi/go-pathspec, /usr/share/licenses/trivy/vendor/sigs.k8s.io/kustomize/api, /usr/share/licenses/trivy/vendor/github.com/distribution/reference, /usr/share/licenses/trivy/vendor/github.com/ulikunitz/xz, /usr/share/licenses/trivy/vendor/github.com/sagikazarmark/slog-shim, /usr/share/licenses/trivy/vendor/cloud.google.com, /usr/share/licenses/trivy/vendor/github.com/alicebob/miniredis/v2/metro, /usr/share/licenses/trivy/vendor/github.com/hashicorp/go-uuid, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/service/emr, /usr/share/licenses/trivy/vendor/go.uber.org, /usr/share/licenses/trivy/vendor/github.com/golang-jwt, /usr/share/licenses/trivy/vendor/github.com/cyphar, /usr/share/licenses/trivy/vendor/go.etcd.io, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/service/apigatewayv2, /usr/share/licenses/trivy/vendor/github.com/klauspost/compress/internal/snapref, /usr/share/licenses/trivy/vendor/github.com/liamg/jfather, /usr/share/licenses/trivy/vendor/modernc.org/ccgo/v3, /usr/share/licenses/trivy/vendor/sigs.k8s.io/kustomize/kyaml/internal/forked, /usr/share/licenses/trivy/vendor/github.com/golang/groupcache, /usr/share/licenses/trivy/vendor/golang.org/x/oauth2, /usr/share/licenses/trivy/vendor/github.com/stretchr, /usr/share/licenses/trivy/vendor/modernc.org/memory, /usr/share/licenses/trivy/vendor/github.com/russross/blackfriday, /usr/share/licenses/trivy/vendor/github.com/xeipuuv/gojsonreference, /usr/share/licenses/trivy/vendor/github.com/go-openapi/analysis, /usr/share/licenses/trivy/vendor/github.com/go-openapi/jsonpointer, /usr/share/licenses/trivy/vendor/github.com/MakeNowJust/heredoc, /usr/share/licenses/trivy/vendor/github.com/yuin, /usr/share/licenses/trivy/vendor/github.com/prometheus/common/internal/bitbucket.org, /usr/share/licenses/trivy/vendor/sigs.k8s.io/structured-merge-diff/v4, /usr/share/licenses/trivy/vendor/github.com/santhosh- tekuri/jsonschema/v5, /usr/share/licenses/trivy/vendor/github.com/openvex/go-vex, /usr/share/licenses/trivy/vendor/github.com/agext, /usr/share/licenses/trivy/vendor/github.com/emicklei, /usr/share/licenses/trivy/vendor/github.com/google/licenseclassifier, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/service/dynamodb, /usr/share/licenses/trivy/vendor/github.com/prometheus/common/internal/bitbucket.org/ww, /usr/share/licenses/trivy/vendor/github.com/masahiro331/go- ext4-filesystem, /usr/share/licenses/trivy/vendor/github.com/go- openapi/validate, /usr/share/licenses/trivy/vendor/github.com/hashicorp/go-getter, /usr/share/licenses/trivy/vendor/github.com/secure-systems-lab, /usr/share/licenses/trivy/pkg/iac/scanners/helm/test/mysql/charts, /usr/share/licenses/trivy/vendor/gopkg.in/yaml.v2, /usr/share/licenses/trivy/vendor/github.com/hashicorp/hcl, /usr/share/licenses/trivy/vendor/github.com/go-git/go-git/v5, /usr/share/licenses/trivy/vendor/github.com/josharian/intern, /usr/share/licenses/trivy/vendor/github.com/anchore/go-struct- converter, /usr/share/licenses/trivy/vendor/k8s.io/utils/internal/third_party/forked, /usr/share/licenses/trivy/vendor/modernc.org/mathutil, /usr/share/licenses/trivy/vendor/github.com/xanzy/ssh-agent, /usr/share/licenses/trivy/vendor/github.com/imdario, /usr/share/licenses/trivy/vendor/github.com/skeema/knownhosts, /usr/share/licenses/trivy/vendor/github.com/apparentlymart/go-textseg, /usr/share/licenses/trivy/vendor/google.golang.org/protobuf, /usr/share/licenses/trivy/vendor/github.com/gregjones, /usr/share/licenses/trivy/vendor/github.com/cespare/xxhash/v2, /usr/share/licenses/trivy/vendor/github.com/go-openapi/strfmt, /usr/share/licenses/trivy/vendor/github.com/VividCortex, /usr/share/licenses/trivy/vendor/github.com/mitchellh/reflectwalk, /usr/share/licenses/trivy/vendor/oras.land/oras-go, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/service/neptune, /usr/share/licenses/trivy/vendor/github.com/aquasecurity/go-gem- version, /usr/share/licenses/trivy/vendor/github.com/shibumi, /usr/share/licenses/trivy/vendor/github.com/cheggaaa/pb, /usr/share/licenses/trivy/vendor/github.com/aquasecurity/trivy-java- db, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/service/elasticloadbalancingv2, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/service/workspaces, /usr/share/licenses/trivy/vendor/github.com/xlab, /usr/share/licenses/trivy/vendor/k8s.io/kubectl/pkg/util/i18n, /usr/share/licenses/trivy/vendor/github.com/go-openapi, /usr/share/licenses/trivy/vendor/golang.org/x/text, /usr/share/licenses/trivy/vendor/modernc.org/libc/honnef.co/go/netdb, /usr/share/licenses/trivy/vendor/github.com/peterbourgon/diskv, /usr/share/licenses/trivy/vendor/modernc.org/cc/v3, /usr/share/licenses/trivy/vendor/gopkg.in/cheggaaa, /usr/share/licenses/trivy/vendor/github.com/owenrumney, /usr/share/licenses/trivy/vendor/gopkg.in/cheggaaa/pb.v1, /usr/share/licenses/trivy/vendor/github.com/hashicorp, /usr/share/licenses/trivy/vendor/github.com/huandu, /usr/share/licenses/trivy/vendor/github.com/secure-systems-lab/go- securesystemslib, /usr/share/licenses/trivy/vendor/github.com/mattn, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-go, /usr/share/licenses/trivy/vendor/github.com/stretchr/testify, /usr/share/licenses/trivy/vendor/github.com/knqyf263, /usr/share/licenses/trivy/vendor/github.com/Azure/azure-sdk-for- go/sdk/internal, /usr/share/licenses/trivy/vendor/github.com/moby/sys/sequential, /usr/share/licenses/trivy/vendor/github.com/prometheus, /usr/share/licenses/trivy/vendor/github.com/bgentry, /usr/share/licenses/trivy/vendor/github.com/xlab/treeprint, /usr/share/licenses/trivy/vendor/github.com/masahiro331/go-mvn- version, /usr/share/licenses/trivy/vendor/cloud.google.com/go/compute/metadata, /usr/share/licenses/trivy/vendor/helm.sh, /usr/share/licenses/trivy/vendor/github.com/inconshreveable/mousetrap, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/service/internal/s3shared, /usr/share/licenses/trivy/vendor/k8s.io/klog/v2, /usr/share/licenses/trivy/vendor/github.com/docker/docker, /usr/share/licenses/trivy/vendor/github.com/AzureAD/microsoft- authentication-library-for-go, /usr/share/licenses/trivy/vendor/github.com/pjbgf/sha1cd, /usr/share/licenses/trivy/vendor/github.com/open-policy- agent/opa/internal/edittree, /usr/share/licenses/trivy/vendor/golang.org, /usr/share/licenses/trivy/vendor/github.com/Microsoft/go-winio, /usr/share/licenses/trivy/vendor/github.com/spf13/pflag, /usr/share/licenses/trivy/vendor/cloud.google.com/go/storage, /usr/share/licenses/trivy/vendor/github.com/gregjones/httpcache, /usr/share/licenses/trivy/vendor/github.com/googleapis/gax-go, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/internal/sync, /usr/share/licenses/trivy/vendor/github.com/aquasecurity/trivy- kubernetes, /usr/share/licenses/trivy/vendor/github.com/google/go- containerregistry, /usr/share/licenses/trivy/vendor/github.com/aquasecurity/go-version, /usr/share/licenses/trivy/vendor/github.com/opentracing/opentracing- go, /usr/share/licenses/trivy/vendor/github.com/google/gofuzz, /usr/share/licenses/trivy/vendor/github.com/Intevation/jsonpath, /usr/share/licenses/trivy/vendor/github.com/MakeNowJust, /usr/share/licenses/trivy/vendor/github.com/spf13/cast, /usr/share/licenses/trivy/vendor/k8s.io/kube- openapi/pkg/internal/third_party/go-json-experiment/json, /usr/share/licenses/trivy/vendor/sigs.k8s.io/kustomize/kyaml/internal/forked/github.com/qri- io, /usr/share/licenses/trivy/vendor/github.com/mattn/go-isatty, /usr/share/licenses/trivy/vendor/github.com/munnerz, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/internal/endpoints, /usr/share/licenses/trivy/vendor/github.com/peterbourgon, /usr/share/licenses/trivy/vendor/github.com/rubenv/sql- migrate/sqlparse, /usr/share/licenses/trivy/vendor/github.com/package- url/packageurl-go, /usr/share/licenses/trivy/vendor/github.com/yashtewari/glob- intersection, /usr/share/licenses/trivy/vendor/go.opentelemetry.io/otel/sdk, /usr/share/licenses/trivy/vendor/github.com/goccy/go-yaml, /usr/share/licenses/trivy/vendor/github.com/briandowns/spinner, /usr/share/licenses/trivy/vendor/github.com/lann/builder, /usr/share/licenses/trivy/vendor/cloud.google.com/go/iam, /usr/share/licenses/trivy/vendor/github.com/aquasecurity/testdocker, /usr/share/licenses/trivy/vendor/github.com/BurntSushi, /usr/share/licenses/trivy/vendor/github.com/mxk/go-flowrate, /usr/share/licenses/trivy/vendor/github.com/open-policy- agent/opa/internal/gojsonschema, /usr/share/licenses/trivy/vendor/github.com/fatih, /usr/share/licenses/trivy/vendor/github.com/chai2010, /usr/share/licenses/trivy/vendor/github.com/pmezard/go-difflib, /usr/share/licenses/trivy/vendor/github.com/lann, /usr/share/licenses/trivy/pkg/iac/scanners/helm/test, /usr/share/licenses/trivy/vendor/github.com/jmespath/go-jmespath, /usr/share/licenses/trivy/vendor/github.com/google/go-cmp, /usr/share/licenses/trivy/vendor/github.com/opencontainers/image-spec, /usr/share/licenses/trivy/vendor/golang.org/x/tools, /usr/share/licenses/trivy/vendor/github.com/cespare/xxhash, /usr/share/licenses/trivy/vendor/github.com/monochromegane, /usr/share/licenses/trivy/pkg/iac/scanners/helm/test/mysql/charts/common, /usr/share/licenses/trivy/vendor/github.com/google, /usr/share/licenses/trivy/vendor/github.com/moby/locker, /usr/share/licenses/trivy/vendor/github.com/liamg, /usr/share/licenses/trivy/vendor/github.com/google/uuid, /usr/share/licenses/trivy/vendor/github.com/magiconair, /usr/share/licenses/trivy/vendor/github.com/dustin/go-humanize, /usr/share/licenses/trivy/vendor/github.com/knqyf263/go-apk-version, /usr/share/licenses/trivy/vendor/github.com/yashtewari, /usr/share/licenses/trivy/vendor/modernc.org, /usr/share/licenses/trivy/vendor/google.golang.org/api, /usr/share/licenses/trivy/vendor/github.com/pkg/browser, /usr/share/licenses/trivy/vendor/google.golang.org/api/internal/third_party/uritemplates, /usr/share/licenses/trivy/vendor/go.opentelemetry.io/contrib/instrumentation/google.golang.org, /usr/share/licenses/trivy/vendor/go.opentelemetry.io/otel/metric, /usr/share/licenses/trivy/vendor/github.com/zclconf/go-cty, /usr/share/licenses/trivy/vendor/github.com/cloudflare/circl, /usr/share/licenses/trivy/vendor/github.com/olekukonko/tablewriter, /usr/share/licenses/trivy/vendor/modernc.org/libc, /usr/share/licenses/trivy/vendor/github.com/open-policy- agent/opa/internal/jwx, /usr/share/licenses/trivy/vendor/github.com/rubenv, /usr/share/licenses/trivy/vendor/github.com/spf13, /usr/share/licenses/trivy/vendor/github.com/go-errors, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-go-v2, /usr/share/licenses/trivy/vendor/github.com/aquasecurity/go- pep440-version, /usr/share/licenses/trivy/vendor/github.com/aws/aws- sdk-go-v2/service/athena, /usr/share/licenses/trivy/vendor/github.com/modern-go/reflect2, /usr/share/licenses/trivy/vendor/github.com/docker/go-connections, /usr/share/licenses/trivy/vendor/github.com/go-gorp, /usr/share/licenses/trivy/vendor/github.com/NYTimes/gziphandler, /usr/share/licenses/trivy/pkg/iac/scanners/helm/test/mysql, /usr/share/licenses/trivy/vendor/k8s.io/utils/internal/third_party, /usr/share/licenses/trivy/vendor/sigs.k8s.io/structured-merge-diff, /usr/share/licenses/trivy/vendor/github.com/go-gorp/gorp/v3, /usr/share/licenses/trivy/vendor/github.com/samber, /usr/share/licenses/trivy/vendor/github.com/aquasecurity/trivy- policies, /usr/share/licenses/trivy/vendor/github.com/Azure/azure-sdk- for-go/sdk/azidentity, /usr/share/licenses/trivy/vendor/github.com/xeipuuv/gojsonschema, /usr/share/licenses/trivy/vendor/github.com/json-iterator/go, /usr/share/licenses/trivy/vendor/k8s.io/kubectl/pkg, /usr/share/licenses/trivy/vendor/k8s.io/apiserver, /usr/share/licenses/trivy/vendor/github.com/masahiro331/go-vmdk- parser, /usr/share/licenses/trivy/vendor/github.com/josharian, /usr/share/licenses/trivy/vendor/github.com/owenrumney/go-sarif/v2, /usr/share/licenses/trivy/vendor/github.com/modern-go/concurrent, /usr/share/licenses/trivy/vendor/github.com/opentracing, /usr/share/licenses/trivy/vendor/github.com/testcontainers/testcontainers- go/modules/localstack, /usr/share/licenses/trivy/vendor/github.com/BurntSushi/toml, /usr/share/licenses/trivy/vendor/github.com/alicebob/miniredis/v2/fpconv, /usr/share/licenses/trivy/vendor/github.com/gofrs/uuid, /usr/share/licenses/trivy/vendor/github.com/googleapis, /usr/share/licenses/trivy/vendor/go.starlark.net, /usr/share/licenses/trivy/vendor/gopkg.in, /usr/share/licenses/trivy/vendor/github.com/docker/go-events, /usr/share/licenses/trivy/vendor/github.com/gobwas/glob, /usr/share/licenses/trivy/vendor/github.com/go-ini, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/service/docdb, /usr/share/licenses/trivy/vendor/github.com/csaf- poc, /usr/share/licenses/trivy/vendor/github.com/docker, /usr/share/licenses/trivy/vendor/github.com/opencontainers/runtime- spec, /usr/share/licenses/trivy/vendor/go.uber.org/zap, /usr/share/licenses/trivy/vendor/github.com/yuin/gopher-lua, /usr/share/licenses/trivy/vendor/github.com/go-openapi/swag, /usr/share/licenses/trivy/vendor/github.com/tetratelabs/wazero, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/service/ec2, /usr/share/licenses/trivy/vendor/github.com/google/s2a-go, /usr/share/licenses/trivy/vendor/github.com/pjbgf, /usr/share/licenses/trivy/vendor/github.com/monochromegane/go- gitignore, /usr/share/licenses/trivy/vendor/github.com/VividCortex/ewma, /usr/share/licenses/trivy/vendor/github.com/oklog/ulid, /usr/share/licenses/trivy/vendor/github.com/felixge, /usr/share/licenses/trivy/vendor/github.com/Azure/go- autorest/autorest, /usr/share/licenses/trivy/vendor/github.com/lib/pq, /usr/share/licenses/trivy/vendor/github.com/testcontainers/testcontainers- go, /usr/share/licenses/trivy/vendor/github.com/alecthomas, /usr/share/licenses/trivy/vendor/github.com/testcontainers/testcontainers- go/modules, /usr/share/licenses/trivy/vendor/github.com/klauspost/compress/zstd/internal, /usr/share/licenses/trivy/vendor/github.com/gofrs, /usr/share/licenses/trivy/vendor/github.com/twitchtv, /usr/share/licenses/trivy/vendor/go.opentelemetry.io/contrib/instrumentation/net, /usr/share/licenses/trivy/vendor/github.com/go-openapi/runtime, /usr/share/licenses/trivy/vendor/golang.org/x/sys, /usr/share/licenses/trivy/vendor/github.com/go-logr/stdr, /usr/share/licenses/trivy/vendor/github.com/rubenv/sql-migrate, /usr/share/licenses/trivy/vendor/github.com/agext/levenshtein, /usr/share/licenses/trivy/vendor/github.com/opencontainers/selinux, /usr/share/licenses/trivy/vendor/github.com/lunixbochs, /usr/share/licenses/trivy/vendor/github.com/alicebob/gopher-json, /usr/share/licenses/trivy/vendor/golang.org/x/net, /usr/share/licenses/trivy/vendor/github.com/go-logr, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk- go-v2/service/sts, /usr/share/licenses/trivy/vendor/github.com/go- git/go-git, /usr/share/licenses/trivy/vendor/github.com/NYTimes, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-go-v2/config, /usr/share/licenses/trivy/vendor/github.com/sigstore, /usr/share/licenses/trivy/vendor/github.com/go-ini/ini, /usr/share/licenses/trivy/vendor/go.opentelemetry.io/contrib/instrumentation, /usr/share/licenses/trivy/vendor/github.com/package-url, /usr/share/licenses/trivy/vendor/github.com/masahiro331/go-ebs-file, /usr/share/licenses/trivy/vendor/github.com/quasilyte, /usr/share/licenses/trivy/vendor/github.com/containerd/typeurl/v2, /usr/share/licenses/trivy/vendor/github.com/knqyf263/go-rpm-version, /usr/share/licenses/trivy/vendor/gopkg.in/warnings.v0, /usr/share/licenses/trivy/vendor/github.com/fsnotify/fsnotify, /usr/share/licenses/trivy/vendor/github.com/mitchellh/go-testing- interface, /usr/share/licenses/trivy/vendor/github.com/containerd/ttrpc, /usr/share/licenses/trivy/vendor/github.com/huandu/xstrings, /usr/share/licenses/trivy/vendor/golang.org/x/time -- You are receiving this mail because: You are always notified about changes to this product and component You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2272258 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-spam&short_desc=Report%20of%20Bug%202272258%23c2 -- _______________________________________________ package-review mailing list -- package-review@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to package-review-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/package-review@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
