https://bugzilla.redhat.com/show_bug.cgi?id=2272258
--- Comment #2 from Jerry James <loganjerry(a)gmail.com> ---
There don't seem to be any golang packaging guidelines, which surprises me, so
I'm doing my best to understand and review properly below. Please excuse me
if I make an ignorant comment. The review is so long that bugzilla won't let
me paste it all, so I will split it across multiple comments.
Package Review
==============
Legend:
[x] = Pass, [!] = Fail, [-] = Not applicable, [?] = Not evaluated
Issues:
=======
- There is an awful lot of bundling going on. Is that typical for the golang
ecosystem?
- I am attempting to see if the License field in the spec file matches the
actual licenses in play. It's a bit of a challenge. There is no comment in
the spec file nor any kind of README describing the license breakdown. That
would help a lot. See the following questions.
- Many files under
vendor/modernc.org/libc contain one or both of
LGPL-2.1-or-later and GPL-3.0-or-later declarations, but I don't see either
license in the License field. Should they appear there?
-
vendor/github.com/rcrowley/go-metrics/LICENSE is BSD-2-Clause-Views, not
BSD-2-Clause, but I don't see that in License.
- Some files additionally have lines that read:
// SPDX-License-Identifier: GPL-2.0 WITH Linux-syscall-note
I don't know if we are obligated to list notes, or if we only worry about
exceptions in Fedora. The files:
-
vendor/modernc.org/libc/sys/socket/socket_linux_arm.go
-
vendor/modernc.org/libc/sys/socket/socket_linux_arm64.go
-
vendor/modernc.org/libc/sys/socket/socket_linux_riscv64.go
- What do you make of the license declaration at the top of
vendor/golang.org/x/crypto/chacha20/chacha_ppc64le.s? Is that file included
in the build on ppc64le?
-
vendor/github.com/alecthomas/chroma/formatters/svg/font_liberation_mono.go
contains an encoding of a font under the OFL-1.1-RFN license, which does not
appear in License.
- See the complaint below about unowned directories. This is not an error.
The directory /usr/share/licenses/trivy/vendor/github.com/kylelemons, for
example, is not owned by this package, but contains another directory that
is.
- See the non-executable-script rpmlint warnings below. Please either remove
the shebangs from those files or make them executable.
- Notice the invalid-url rpmlint warning for Source0. The URL is missing
"https:" at the beginning. Is this a weakness of %gourl? Is something
missing from the spec file that would cause that to appear?
- Note that unused-direct-shlib-dependency warning for /usr/bin/trivy. It
depends, uselessly, on libresolv.so.2. Does that mean /usr/bin/trivy was
linked without --as-needed?
- Version 0.50.1 has been released, FYI.
===== MUST items =====
C/C++:
[x]: Provides: bundled(gnulib) in place as required.
Note: Sources not installed
[x]: Package does not contain kernel modules.
[x]: Package does not contain any libtool archives (.la)
[x]: Package contains no static executables.
[x]: Rpath absent or only used for internal libs.
Generic:
[x]: Package is licensed with an open-source compatible license and meets
other legal requirements as defined in the legal section of Packaging
Guidelines.
[!]: License field in the package spec file matches the actual license.
Note: There is no build directory. Running licensecheck on vanilla
upstream sources. Licenses found: "Unknown or generated", "*No
copyright* Apache License 2.0", "Apache License 2.0", "BSD
3-Clause
License", "MIT License", "*No copyright* MIT License",
"BSD 2-Clause
License", "Apache License 2.0 and/or MIT License", "BSD 3-Clause
License and/or MIT License", "*No copyright* GNU Lesser General Public
License", "*No copyright* The Unlicense", "*No copyright* Apache
License 2.0 and/or Creative Commons Attribution 4.0", "ISC License",
"Apache License 2.0 and/or Creative Commons Attribution 4.0", "BSD
2-Clause License and/or ISC License", "*No copyright* Mozilla Public
License 2.0", "Mozilla Public License 2.0", "Apache License 2.0
and/or
BSD 3-Clause License", "BSD 2-Clause with views sentence", "*No
copyright* Creative Commons Attribution 4.0", "Apple Public Source
License 2.0", "*No copyright* Public domain", "*No copyright*
Apache
License 2.0 and/or Public domain", "GNU Lesser General Public License
v2.1 or later", "BSD 2-Clause License and/or BSD 2-clause FreeBSD
License and/or BSD 3-Clause License", "BSD 3-Clause License and/or GNU
Lesser General Public License v2.1 or later", "*No copyright* BSD
2-Clause License", "BSD 2-Clause License and/or BSD 2-clause FreeBSD
License", "BSD 2-clause NetBSD License", "BSD-4-Clause
(University of
California-Specific) and/or GNU General Public License v3.0 or later",
"BSD 3-Clause License and/or Public domain", "GNU General Public
License v3.0 or later and/or GNU General Public License, Version 2
and/or GNU Lesser General Public License v2.1 or later", "GNU General
Public License v3.0 or later and/or GNU Lesser General Public License
v2.1 or later", "GNU General Public License v3.0 or later and/or
Public domain", "BSD 2-Clause License and/or BSD 2-clause NetBSD
License", "Apple Public Source License 2.0 and/or BSD 3-Clause
License", "*No copyright* BSD 3-Clause License", "GNU Lesser
General
Public License v2.1 or later [generated file]", "BSD 2-Clause License
and/or BSD 2-clause NetBSD License and/or BSD 3-Clause License", "MIT
License and/or Public domain", "Apache License 2.0 and/or MIT License
and/or Public domain", "BSD 2-Clause License and/or BSD 3-Clause
License", "OpenSSL License", "Apache License 2.0 [generated
file]",
"*No copyright* GNU General Public License, Version 2", "GNU General
Public License, Version 2", "SIL Open Font License 1.1", "*No
copyright* Boost Software License 1.0", "Mozilla Public License 2.0
[generated file]", "*No copyright* Academic Free License v1.1",
"*No
copyright* Academic Free License v1.2", "*No copyright* Academic Free
License v2.0", "*No copyright* Academic Free License v2.1", "*No
copyright* Academic Free License v3.0", "*No copyright* GNU Affero
General Public License v3.0 or later", "Apple Public Source License
1.0", "Apple Public Source License 1.1", "Apple Public Source
License
1.2", "*No copyright* Apple Public Source License 2.0", "*No
copyright* BitTorrent Open Source License v1.1", "*No copyright*
Common Development and Distribution License", "*No copyright* Common
Public Attribution License 1.0", "*No copyright* GNU General Public
License v1.0 or later", "*No copyright* GNU General Public License
v2.0 or later", "*No copyright* GNU General Public License",
"GNU
General Public License v2.0 only", "*No copyright* GNU General Public
License v3.0 or later", "*No copyright* GNU General Public License,
Version 3", "*No copyright* GNU Library General Public License v2 or
later", "*No copyright* GNU Library General Public License, Version
2.0", "*No copyright* GNU Lesser General Public License v2.1 or
later", "*No copyright* GNU Lesser General Public License, Version
2.1", "GNU General Public License, Version 3 and/or GNU Lesser General
Public License, Version 2.1", "GNU Lesser General Public License,
Version 2.1", "*No copyright* GNU Lesser General Public License v3.0
or later", "*No copyright* GNU Lesser General Public License, Version
3", "*No copyright* Mozilla Public License 1.0", "*No copyright*
Mozilla Public License 1.1", "*No copyright* Open Software License
3.0", "*No copyright* OpenSSL License", "Sun Industry Standards
Source
License v1.2", "*No copyright* W3C License", "Academic Free
License
v3.0", "Affero General Public License v1.0", "GNU Affero General
Public License v3.0", "Apple MIT License", "Academy of Motion
Picture
Arts and Sciences BSD", "*No copyright* ANTLR Software Rights
Notice",
"*No copyright* Apple Public Source License 1.0", "*No copyright*
Apple Public Source License 1.1", "*No copyright* Apple Public Source
License 1.2", "Apache License 1.0 and/or BSD 4-Clause License",
"Apache License 1.1", "*No copyright* Artistic License 1.0",
"*No
copyright* Artistic License 1.0 (Perl)", "*No copyright*
Artistic-1.0-cl8", "*No copyright* BSD 0-Clause License", "*No
copyright* BSD 2-Clause License and/or BSD 2-clause FreeBSD License",
"*No copyright* BSD 2-Clause License and/or BSD 2-clause NetBSD
License", "*No copyright* BSD 2-Clause Plus Patent License",
"*No
copyright* Apache License 1.0 and/or BSD 3-Clause License", "BSD
3-Clause License and/or Lawrence Berkeley National Labs BSD variant
license", "*No copyright* BSD 4-Clause License", "Apache License
1.1
and/or BSD 3-Clause License and/or Vovida Software License v1.0", "*No
copyright* BSD-4-Clause (University of California-Specific)", "*No
copyright* Beerware License", "*No copyright* NTP License", "*No
copyright* Cryptographic Autonomy License 1.0", "*No copyright*
Creative Commons Attribution 1.0 Generic", "*No copyright* Creative
Commons Attribution 2.0", "*No copyright* Creative Commons Attribution
2.5", "Creative Commons Attribution 4.0", "Creative Commons
Attribution-NonCommercial 1.0", "*No copyright* Creative Commons
Attribution-NonCommercial 2.0", "*No copyright* Creative Commons
Attribution-NonCommercial 2.5", "Creative Commons Attribution-
NonCommercial 4.0", "Creative Commons Attribution-NoDerivs-
NonCommercial 1.0", "*No copyright* Creative Commons Attribution-
NonCommercial-NoDerivs 2.0", "*No copyright* Creative Commons
Attribution-NonCommercial-NoDerivs 2.5", "Creative Commons
Attribution-NonCommercial-NoDerivatives 4.0", "Creative Commons
Attribution-NonCommercial-ShareAlike 1.0", "*No copyright* Creative
Commons Attribution-NonCommercial-ShareAlike 2.0", "*No copyright*
Creative Commons Attribution-NonCommercial-ShareAlike 2.5", "Creative
Commons Attribution-NonCommercial-ShareAlike 4.0", "*No copyright*
Creative Commons Attribution-NoDerivs 1.0", "*No copyright* Creative
Commons Attribution-NoDerivs 2.0", "*No copyright* Creative Commons
Attribution-NoDerivs 2.5", "Creative Commons Attribution-NoDerivatives
4.0", "*No copyright* Creative Commons Attribution-ShareAlike 1.0",
"*No copyright* Creative Commons Attribution-ShareAlike 2.0", "*No
copyright* Creative Commons Attribution-ShareAlike 2.5", "Creative
Commons Attribution-ShareAlike 4.0", "*No copyright* Creative Commons
CC0 1.0", "*No copyright* CeCILL Free Software License Agreement
v2.1", "*No copyright* MIT No Attribution", "CNRI Python Open
Source
GPL Compatible License Agreement", "*No copyright* Common Public
License 1.0", "DBAD Public License v1.1", "*No copyright*
Eclipse
Public License 1.0", "*No copyright* Eclipse Public License 2.0",
"European Union Public License, Version 1.0", "European Union Public
License, Version 1.1", "*No copyright* Apache License 1.1",
"Freetype
Project License", "*No copyright* FSF All Permissive License",
"GNU
General Public License, Version 3", "*No copyright* LaTeX Project
Public License 1.3c", "Lawrence Berkeley National Labs BSD variant
license", "*No copyright* Historical Permission Notice and Disclaimer
- sell variant and/or NTP License (legal disclaimer)", "ICU License",
"*No copyright* IBM Public License v1.0", "*No copyright* ISC
License", "JSON License and/or MIT License", "*No copyright*
libpng
License", "Khronos License", "GNU Library General Public
License,
Version 2.0", "GNU Lesser General Public License, Version 3",
"LaTeX
Project Public License 1.3c", "libpng License", "*No copyright*
Standard ML of New Jersey License", "*No copyright* BSD 1-Clause
License", "*No copyright* MIT (old)", "Microsoft Public
License",
"Microsoft Reciprocal License", "*No copyright* University of
Illinois/NCSA Open Source License", "Nethack General Public License",
"Netscape Public License v1.0", "Netscape Public License v1.1",
"*No
copyright* SIL Open Font License 1.1", "*No copyright* Open Software
License 1.0", "*No copyright* Open Software License 1.1", "*No
copyright* Open Software License 2.0", "*No copyright* Open Software
License 2.1", "Open Software License 3.0", "*No copyright*
Apache
License 1.0 and/or OpenSSL License", "OpenSSL License and/or SSLeay",
"mit_openvision", "PHP License v3.0", "PHP License
v3.01", "NTP
License", "*No copyright* PostgreSQL License", "Python Software
Foundation License 2.0", "Q Public License 1.0", "*No copyright*
Ruby
License", "*No copyright* SGI Free Software License B v1.0",
"*No
copyright* SGI Free Software License B v1.1", "SGI Free Software
License B v2.0", "*No copyright* Sun Industry Standards Source License
v1.1", "*No copyright* Sun Industry Standards Source License v1.2",
"BSD 3-Clause License and/or Sleepycat License", "Universal
Permissive
License v1.0", "*No copyright* Unicode License Agreement - Data Files
and Software (2015)", "Unicode License Agreement - Data Files and
Software (2015)", "*No copyright* Unicode License Agreement - Data
Files and Software (2016)", "Unicode License Agreement - Data Files
and Software (2016)", "Unicode Terms of Use", "*No copyright*
W3C
Software Notice and License (2002-12-31)", "W3C Software Notice and
License (1998-07-20)", "W3C Software and Document Notice and License
(2015-05-13)", "Do What The Fuck You Want To Public License, Version
2", "WordNet License", "X11 License", "*No copyright*
MIT License
and/or X.Net License", "Zope Public License 2.0", "*No copyright*
Zope
Public License 2.1", "Zend License v2.0", "*No copyright* zlib
License", "curl License", "Public domain", "*No
copyright* libtiff
License", "Unicode strict", "GNU General Public License and/or
GNU
Library General Public License v2 or later", "zlib/libpng License with
Acknowledgement", "Artistic License". 12710 files have unknown
license. Detailed output of licensecheck in
/home/jamesjer/2272258-trivy/licensecheck.txt
I am not confident that the License field is accurate. See the questions
above.
[x]: License file installed when any subpackage combination is installed.
[!]: If the package is under multiple licenses, the licensing breakdown
must be documented in the spec.
It is not documented.
[!]: Package requires other packages for directories it uses.
Note: No known owner of
/usr/share/licenses/trivy/vendor/github.com/kylelemons,
/usr/share/licenses/trivy/vendor/sigs.k8s.io/kustomize/kyaml/internal/forked/github.com/go-
yaml,
/usr/share/licenses/trivy/vendor/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp,
/usr/share/licenses/trivy/vendor/github.com/docker/go-units,
/usr/share/licenses/trivy/vendor/github.com/moby/spdystream,
/usr/share/licenses/trivy/vendor/github.com/hashicorp/hcl/v2,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/service/sso,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/service/accessanalyzer,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/service/rds, /usr/share/licenses/trivy/vendor/github.com/beorn7,
/usr/share/licenses/trivy/vendor/github.com/beorn7/perks,
/usr/share/licenses/trivy/vendor/github.com/AzureAD,
/usr/share/licenses/trivy/vendor/github.com/mxk,
/usr/share/licenses/trivy/pkg/iac,
/usr/share/licenses/trivy/vendor/go.opentelemetry.io/contrib,
/usr/share/licenses/trivy/vendor/github.com/jbenet/go-context,
/usr/share/licenses/trivy/vendor/github.com/go-git/go-billy/v5,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-go-v2/feature,
/usr/share/licenses/trivy/vendor/github.com/dlclark,
/usr/share/licenses/trivy/vendor/github.com/spdx,
/usr/share/licenses/trivy/vendor/github.com/modern-go,
/usr/share/licenses/trivy/vendor/github.com/subosito/gotenv,
/usr/share/licenses/trivy/vendor/github.com/spf13/afero,
/usr/share/licenses/trivy/vendor/github.com/vbatts/tar-split,
/usr/share/licenses/trivy/vendor/github.com/cenkalti/backoff,
/usr/share/licenses/trivy/vendor/gopkg.in/yaml.v3,
/usr/share/licenses/trivy/vendor/github.com/cespare,
/usr/share/licenses/trivy/vendor/github.com/golang-jwt/jwt/v5,
/usr/share/licenses/trivy/vendor/google.golang.org/grpc,
/usr/share/licenses/trivy/vendor/github.com/quasilyte/go-ruleguard,
/usr/share/licenses/trivy/vendor/github.com/moby/buildkit,
/usr/share/licenses/trivy/vendor/github.com/quasilyte/go-
ruleguard/dsl, /usr/share/licenses/trivy/vendor/github.com/subosito,
/usr/share/licenses/trivy/vendor/github.com/golang-jwt/jwt,
/usr/share/licenses/trivy/vendor/github.com/owenrumney/go-sarif,
/usr/share/licenses/trivy/vendor/github.com/tchap,
/usr/share/licenses/trivy/vendor/github.com/sergi/go-diff,
/usr/share/licenses/trivy/vendor/github.com/aws/smithy-go,
/usr/share/licenses/trivy/vendor/google.golang.org,
/usr/share/licenses/trivy/vendor/github.com/exponent-io,
/usr/share/licenses/trivy/vendor/github.com/go-
openapi/runtime/middleware/denco,
/usr/share/licenses/trivy/vendor/github.com/shopspring/decimal,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/service/eks,
/usr/share/licenses/trivy/vendor/github.com/Azure/go-autorest/logger,
/usr/share/licenses/trivy/vendor/github.com/microsoft,
/usr/share/licenses/trivy/vendor/k8s.io/kube-
openapi/pkg/internal/third_party/go-json-experiment,
/usr/share/licenses/trivy/vendor/github.com/alecthomas/chroma,
/usr/share/licenses/trivy/vendor/github.com/remyoudompheng/bigfft,
/usr/share/licenses/trivy/vendor/github.com/mitchellh/mapstructure,
/usr/share/licenses/trivy/vendor/github.com/docker/distribution,
/usr/share/licenses/trivy/vendor/github.com/antchfx/htmlquery,
/usr/share/licenses/trivy/vendor/github.com/spf13/cobra,
/usr/share/licenses/trivy/vendor/github.com/klauspost/compress/zstd/internal/xxhash,
/usr/share/licenses/trivy/vendor/github.com/Azure/azure-sdk-for-
go/sdk/azcore, /usr/share/licenses/trivy/vendor/k8s.io/apimachinery,
/usr/share/licenses/trivy/vendor/sigs.k8s.io/json,
/usr/share/licenses/trivy/vendor/github.com/hashicorp/golang-lru/v2,
/usr/share/licenses/trivy/vendor/github.com/imdario/mergo,
/usr/share/licenses/trivy/vendor/github.com/cenkalti,
/usr/share/licenses/trivy/vendor/github.com/containerd,
/usr/share/licenses/trivy/vendor/k8s.io/client-
go/third_party/forked/golang,
/usr/share/licenses/trivy/vendor/github.com/agnivade/levenshtein,
/usr/share/licenses/trivy/vendor/github.com/aquasecurity,
/usr/share/licenses/trivy/vendor/github.com/klauspost/compress/zstd,
/usr/share/licenses/trivy/vendor/github.com/felixge/httpsnoop,
/usr/share/licenses/trivy/vendor/github.com/chai2010/gettext-go,
/usr/share/licenses/trivy/vendor/github.com/tchap/go-patricia/v2,
/usr/share/licenses/trivy/vendor/github.com/aquasecurity/bolt-
fixtures, /usr/share/licenses/trivy/vendor/github.com/xeipuuv,
/usr/share/licenses/trivy/vendor/github.com/open-policy-agent,
/usr/share/licenses/trivy/vendor/github.com/golang-jwt/jwt/v4,
/usr/share/licenses/trivy/vendor/github.com/cpuguy83/go-md2man,
/usr/share/licenses/trivy/vendor/github.com/distribution,
/usr/share/licenses/trivy/vendor/github.com/emirpasic,
/usr/share/licenses/trivy/vendor/github.com/pkg/errors,
/usr/share/licenses/trivy/vendor/oras.land,
/usr/share/licenses/trivy/vendor/github.com/go-openapi/loads,
/usr/share/licenses/trivy/vendor/go.opentelemetry.io,
/usr/share/licenses/trivy/vendor/github.com/knqyf263/go-deb-version,
/usr/share/licenses/trivy/vendor/github.com/masahiro331/go-disk,
/usr/share/licenses/trivy/vendor/github.com/cpuguy83/go-md2man/v2,
/usr/share/licenses/trivy/vendor/github.com/openvex,
/usr/share/licenses/trivy/vendor/github.com/rivo/uniseg,
/usr/share/licenses/trivy/vendor/github.com/open-policy-
agent/opa/internal/providers/aws,
/usr/share/licenses/trivy/vendor/sigs.k8s.io/yaml/goyaml.v2,
/usr/share/licenses/trivy/vendor/github.com/magiconair/properties,
/usr/share/licenses/trivy/vendor/github.com/magefile/mage,
/usr/share/licenses/trivy/vendor/github.com/aquasecurity/tml,
/usr/share/licenses/trivy/vendor/github.com/evanphx,
/usr/share/licenses/trivy/vendor/github.com/go-git/go-billy,
/usr/share/licenses/trivy/vendor/github.com/davecgh/go-spew,
/usr/share/licenses/trivy/vendor/cloud.google.com/go/internal/version,
/usr/share/licenses/trivy/vendor/github.com/mitchellh/go-wordwrap,
/usr/share/licenses/trivy/vendor/github.com/stretchr/objx,
/usr/share/licenses/trivy/vendor/github.com/hashicorp/terraform-json,
/usr/share/licenses/trivy/vendor/github.com/apparentlymart/go-
textseg/v15,
/usr/share/licenses/trivy/vendor/github.com/containerd/fifo,
/usr/share/licenses/trivy/vendor/github.com/masahiro331/go-xfs-
filesystem, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/internal/sync/singleflight,
/usr/share/licenses/trivy/vendor/github.com/sosedoff,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/service/internal/presigned-url,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-go/internal,
/usr/share/licenses/trivy/vendor/k8s.io/kubectl/pkg/util,
/usr/share/licenses/trivy/vendor/github.com/pkg,
/usr/share/licenses/trivy/vendor/github.com/rcrowley,
/usr/share/licenses/trivy/vendor/modernc.org/strutil,
/usr/share/licenses/trivy/vendor/github.com/fsnotify,
/usr/share/licenses/trivy/vendor/github.com/google/gnostic-models,
/usr/share/licenses/trivy/vendor/github.com/aquasecurity/trivy-db,
/usr/share/licenses/trivy/vendor/github.com/spf13/viper,
/usr/share/licenses/trivy/vendor/google.golang.org/genproto/googleapis/rpc,
/usr/share/licenses/trivy/vendor/k8s.io/cli-runtime,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/feature/ec2,
/usr/share/licenses/trivy/vendor/github.com/Azure/go-autorest/tracing,
/usr/share/licenses/trivy/vendor/github.com/hashicorp/go-version,
/usr/share/licenses/trivy/vendor/github.com/Azure/go-
autorest/autorest/date,
/usr/share/licenses/trivy/vendor/github.com/bgentry/go-netrc,
/usr/share/licenses/trivy/vendor/github.com/kevinburke/ssh_config,
/usr/share/licenses/trivy/vendor/github.com/AdaLogics,
/usr/share/licenses/trivy/vendor/github.com/lib,
/usr/share/licenses/trivy/vendor/github.com/apparentlymart,
/usr/share/licenses/trivy/vendor/github.com/asaskevich,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/service/internal/checksum,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go/internal/sync/singleflight,
/usr/share/licenses/trivy/vendor/github.com/go-git/gcfg,
/usr/share/licenses/trivy/vendor/k8s.io/component-base,
/usr/share/licenses/trivy/vendor/github.com/go-redis,
/usr/share/licenses/trivy/vendor/github.com/aws/smithy-
go/internal/sync, /usr/share/licenses/trivy/vendor/k8s.io/utils,
/usr/share/licenses/trivy/vendor/github.com/alicebob,
/usr/share/licenses/trivy/vendor/github.com/cpuguy83,
/usr/share/licenses/trivy/vendor/k8s.io/klog,
/usr/share/licenses/trivy/vendor/github.com/goccy,
/usr/share/licenses/trivy/vendor/github.com/Masterminds/semver/v3,
/usr/share/licenses/trivy/vendor/github.com/sirupsen/logrus,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/service/ssooidc,
/usr/share/licenses/trivy/vendor/k8s.io/apimachinery/third_party/forked/golang,
/usr/share/licenses/trivy/vendor/github.com/remyoudompheng,
/usr/share/licenses/trivy/vendor/golang.org/x/mod,
/usr/share/licenses/trivy/vendor/lukechampine.com/uint128,
/usr/share/licenses/trivy/vendor/github.com/go-
openapi/runtime/middleware,
/usr/share/licenses/trivy/vendor/github.com/apparentlymart/go-cidr,
/usr/share/licenses/trivy/vendor/github.com/liggitt,
/usr/share/licenses/trivy/vendor/github.com/tetratelabs,
/usr/share/licenses/trivy/vendor/github.com/hashicorp/go-cleanhttp,
/usr/share/licenses/trivy/vendor/golang.org/x/exp,
/usr/share/licenses/trivy/pkg/iac/scanners,
/usr/share/licenses/trivy/vendor/github.com/open-policy-
agent/opa/internal,
/usr/share/licenses/trivy/vendor/github.com/hashicorp/terraform-exec,
/usr/share/licenses/trivy/vendor/github.com/gorilla/mux,
/usr/share/licenses/trivy/vendor/github.com/sosedoff/gitkit,
/usr/share/licenses/trivy/vendor/github.com/Masterminds/sprig,
/usr/share/licenses/trivy/vendor/github.com/prometheus/client_golang,
/usr/share/licenses/trivy/vendor/github.com/moby/sys/signal,
/usr/share/licenses/trivy/vendor/sigs.k8s.io/kustomize/kyaml/internal/forked/github.com/go-
yaml/yaml,
/usr/share/licenses/trivy/vendor/github.com/gosuri/uitable/util/wordwrap,
/usr/share/licenses/trivy/vendor/github.com/kylelemons/godebug,
/usr/share/licenses/trivy/vendor/k8s.io/kube-openapi/pkg,
/usr/share/licenses/trivy/vendor/golang.org/x/term,
/usr/share/licenses/trivy/vendor/github.com/googleapis/gax-go/v2,
/usr/share/licenses/trivy/vendor/github.com/mitchellh,
/usr/share/licenses/trivy/vendor/golang.org/x/xerrors,
/usr/share/licenses/trivy/vendor/github.com/dlclark/regexp2,
/usr/share/licenses/trivy/vendor/github.com/hashicorp/go-
retryablehttp, /usr/share/licenses/trivy/vendor/github.com/klauspost,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/service/s3,
/usr/share/licenses/trivy/vendor/github.com/Microsoft/hcsshim,
/usr/share/licenses/trivy/vendor/github.com/mitchellh/copystructure,
/usr/share/licenses/trivy/vendor/go.opencensus.io,
/usr/share/licenses/trivy/vendor/sigs.k8s.io/yaml,
/usr/share/licenses/trivy/vendor/github.com/go-openapi/jsonreference,
/usr/share/licenses/trivy/vendor/github.com/exponent-io/jsonpath,
/usr/share/licenses/trivy/vendor/github.com/mattn/go-shellwords,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-go-v2/aws,
/usr/share/licenses/trivy/vendor/golang.org/x/crypto,
/usr/share/licenses/trivy/vendor/github.com/prometheus/client_model,
/usr/share/licenses/trivy/vendor/github.com/gorilla,
/usr/share/licenses/trivy/vendor/github.com/ProtonMail/go-crypto,
/usr/share/licenses/trivy/vendor/go.opentelemetry.io/contrib/instrumentation/net/http,
/usr/share/licenses/trivy/vendor/golang.org/x/sync,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/aws/protocol,
/usr/share/licenses/trivy/vendor/github.com/hashicorp/golang-lru,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/service/kinesis,
/usr/share/licenses/trivy/vendor/sigs.k8s.io/kustomize/kyaml/internal,
/usr/share/licenses/trivy/vendor/github.com/Masterminds,
/usr/share/licenses/trivy/vendor/github.com/aquasecurity/table,
/usr/share/licenses/trivy/vendor/github.com/dustin,
/usr/share/licenses/trivy/vendor/github.com/mattn/go-colorable,
/usr/share/licenses/trivy/vendor/github.com/gogo,
/usr/share/licenses/trivy/vendor/github.com/AdamKorcz,
/usr/share/licenses/trivy/vendor/github.com/jbenet,
/usr/share/licenses/trivy/vendor/github.com/containerd/stargz-
snapshotter, /usr/share/licenses/trivy/vendor/github.com/skeema,
/usr/share/licenses/trivy/vendor/modernc.org/cc,
/usr/share/licenses/trivy/vendor/github.com/golang/protobuf,
/usr/share/licenses/trivy/vendor/github.com/prometheus/procfs,
/usr/share/licenses/trivy/vendor/github.com/hashicorp/go-multierror,
/usr/share/licenses/trivy/vendor/github.com/bitnami/go-version,
/usr/share/licenses/trivy/vendor/sigs.k8s.io,
/usr/share/licenses/trivy/vendor/github.com/in-toto,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/service/sqs, /usr/share/licenses/trivy/vendor/github.com/xanzy,
/usr/share/licenses/trivy/vendor/github.com/google/shlex,
/usr/share/licenses/trivy/vendor/github.com/google/wire,
/usr/share/licenses/trivy/vendor/github.com/asaskevich/govalidator,
/usr/share/licenses/trivy/vendor/github.com/AdaLogics/go-fuzz-headers,
/usr/share/licenses/trivy/vendor/gopkg.in/inf.v0,
/usr/share/licenses/trivy/vendor/github.com/masahiro331,
/usr/share/licenses/trivy/vendor/github.com/emicklei/go-restful,
/usr/share/licenses/trivy/vendor/github.com/santhosh-tekuri,
/usr/share/licenses/trivy/vendor/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go/internal/sync,
/usr/share/licenses/trivy/vendor/github.com/containerd/continuity,
/usr/share/licenses/trivy/vendor/github.com/Microsoft,
/usr/share/licenses/trivy/vendor/github.com/sourcegraph/conc,
/usr/share/licenses/trivy/vendor/github.com/open-policy-
agent/opa/internal/edittree/bitvector,
/usr/share/licenses/trivy/vendor/go.mongodb.org,
/usr/share/licenses/trivy/vendor/google.golang.org/appengine,
/usr/share/licenses/trivy/vendor/github.com/bitnami,
/usr/share/licenses/trivy/vendor/cloud.google.com/go/internal,
/usr/share/licenses/trivy/vendor/modernc.org/libc/honnef.co/go,
/usr/share/licenses/trivy/vendor/k8s.io/apimachinery/third_party/forked,
/usr/share/licenses/trivy/vendor/github.com/spdx/tools-golang,
/usr/share/licenses/trivy/vendor/go.etcd.io/bbolt,
/usr/share/licenses/trivy/vendor/github.com/hashicorp/go-safetemp,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-go-v2/service,
/usr/share/licenses/trivy/vendor,
/usr/share/licenses/trivy/vendor/github.com/containerd/containerd,
/usr/share/licenses/trivy/vendor/dario.cat,
/usr/share/licenses/trivy/vendor/github.com/mailru/easyjson,
/usr/share/licenses/trivy/vendor/github.com/emirpasic/gods,
/usr/share/licenses/trivy/vendor/helm.sh/helm,
/usr/share/licenses/trivy/vendor/github.com/magefile,
/usr/share/licenses/trivy/vendor/go.opentelemetry.io/otel/trace,
/usr/share/licenses/trivy/vendor/github.com/Azure/go-ansiterm,
/usr/share/licenses/trivy/vendor/k8s.io/api,
/usr/share/licenses/trivy/vendor/modernc.org/ccgo,
/usr/share/licenses/trivy/vendor/sigs.k8s.io/kustomize/kyaml,
/usr/share/licenses/trivy/vendor/github.com/santhosh-
tekuri/jsonschema,
/usr/share/licenses/trivy/vendor/github.com/Azure/azure-sdk-for-go,
/usr/share/licenses/trivy/vendor/k8s.io/utils/internal,
/usr/share/licenses/trivy/vendor/github.com/google/btree,
/usr/share/licenses/trivy/vendor/github.com/aquasecurity/trivy-aws,
/usr/share/licenses/trivy/vendor/k8s.io/utils/internal/third_party/forked/golang,
/usr/share/licenses/trivy/vendor/github.com/sirupsen,
/usr/share/licenses/trivy/vendor/github.com/sagikazarmark,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/service/cloudwatch,
/usr/share/licenses/trivy/vendor/github.com/go-openapi/errors,
/usr/share/licenses/trivy/vendor/github.com/cheggaaa,
/usr/share/licenses/trivy/vendor/github.com/bmatcuk/doublestar,
/usr/share/licenses/trivy/vendor/github.com/tchap/go-patricia,
/usr/share/licenses/trivy/vendor/github.com/google/licenseclassifier/v2,
/usr/share/licenses/trivy/vendor/github.com/jmespath,
/usr/share/licenses/trivy/vendor/k8s.io/apiextensions-apiserver,
/usr/share/licenses/trivy/vendor/github.com/open-policy-
agent/opa/internal/providers,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/service/ecr,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/service/internal/endpoint-discovery,
/usr/share/licenses/trivy/vendor/go.mongodb.org/mongo-driver,
/usr/share/licenses/trivy/vendor/github.com/pelletier/go-toml,
/usr/share/licenses/trivy/vendor/go.uber.org/multierr,
/usr/share/licenses/trivy/vendor/github.com/owenrumney/squealer,
/usr/share/licenses/trivy/vendor/github.com/CycloneDX,
/usr/share/licenses/trivy/vendor/github.com/Intevation/gval,
/usr/share/licenses/trivy/vendor/github.com/davecgh,
/usr/share/licenses/trivy/vendor/github.com/kballard/go-shellquote,
/usr/share/licenses/trivy/vendor/github.com/fatih/color,
/usr/share/licenses/trivy/vendor/github.com/open-policy-
agent/opa/internal/gqlparser,
/usr/share/licenses/trivy/vendor/github.com/moby/patternmatcher,
/usr/share/licenses/trivy/vendor/sigs.k8s.io/kustomize/kyaml/internal/forked/github.com/qri-
io/starlib/util,
/usr/share/licenses/trivy/vendor/github.com/moby/term,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/service/mq,
/usr/share/licenses/trivy/vendor/github.com/Azure/go-
autorest/autorest/adal,
/usr/share/licenses/trivy/vendor/github.com/rivo,
/usr/share/licenses/trivy/vendor/github.com/zclconf/go-cty-yaml,
/usr/share/licenses/trivy/vendor/github.com/dgryski/go-rendezvous,
/usr/share/licenses/trivy/vendor/github.com/liamg/memoryfs,
/usr/share/licenses/trivy/vendor/github.com/go-errors/errors,
/usr/share/licenses/trivy/vendor/github.com/containerd/cgroups,
/usr/share/licenses/trivy/vendor/github.com/csaf-
poc/csaf_distribution/v3,
/usr/share/licenses/trivy/vendor/github.com/mitchellh/hashstructure/v2,
/usr/share/licenses/trivy/vendor/github.com/bmatcuk/doublestar/v4,
/usr/share/licenses/trivy/vendor/k8s.io/kubectl,
/usr/share/licenses/trivy/vendor/github.com/xeipuuv/gojsonpointer,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/internal/v4a, /usr/share/licenses/trivy/vendor/lukechampine.com,
/usr/share/licenses/trivy/vendor/k8s.io/kube-openapi,
/usr/share/licenses/trivy/vendor/github.com/GoogleCloudPlatform,
/usr/share/licenses/trivy/vendor/github.com/microsoft/go-rustaudit,
/usr/share/licenses/trivy/vendor/github.com/mattn/go-runewidth,
/usr/share/licenses/trivy/vendor/github.com,
/usr/share/licenses/trivy/vendor/github.com/Masterminds/sprig/v3,
/usr/share/licenses/trivy/vendor/github.com/agnivade,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/service/secretsmanager,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/service/elasticache,
/usr/share/licenses/trivy/vendor/k8s.io/kube-
openapi/pkg/internal/third_party,
/usr/share/licenses/trivy/vendor/github.com/ulikunitz,
/usr/share/licenses/trivy/vendor/github.com/emicklei/go-restful/v3,
/usr/share/licenses/trivy/vendor/cloud.google.com/go,
/usr/share/licenses/trivy/vendor/github.com/aquasecurity/loading,
/usr/share/licenses/trivy/vendor/github.com/gosuri,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/credentials,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/aws/protocol/eventstream,
/usr/share/licenses/trivy/vendor/github.com/go-git,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/service/iam, /usr/share/licenses/trivy/vendor/modernc.org/opt,
/usr/share/licenses/trivy/vendor/sigs.k8s.io/kustomize/kyaml/internal/forked/github.com/qri-
io/starlib, /usr/share/licenses/trivy/vendor/go.opentelemetry.io/otel,
/usr/share/licenses/trivy/vendor/github.com/gorilla/websocket,
/usr/share/licenses/trivy/vendor/github.com/inconshreveable,
/usr/share/licenses/trivy/vendor/github.com/morikuni,
/usr/share/licenses/trivy/vendor/github.com/alicebob/miniredis/v2,
/usr/share/licenses/trivy/vendor/github.com/csaf-
poc/csaf_distribution,
/usr/share/licenses/trivy/vendor/github.com/Azure/go-autorest,
/usr/share/licenses/trivy/vendor/github.com/Masterminds/squirrel,
/usr/share/licenses/trivy/vendor/github.com/AdamKorcz/go-118-fuzz-
build, /usr/share/licenses/trivy/vendor/github.com/containerd/stargz-
snapshotter/estargz,
/usr/share/licenses/trivy/vendor/github.com/cheggaaa/pb/v3,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/service/ebs,
/usr/share/licenses/trivy/vendor/github.com/knqyf263/nested,
/usr/share/licenses/trivy/vendor/github.com/go-redis/redis,
/usr/share/licenses/trivy/vendor/github.com/liamg/iamgo,
/usr/share/licenses/trivy/vendor/github.com/open-policy-agent/opa,
/usr/share/licenses/trivy/vendor/github.com/aquasecurity/go-npm-
version,
/usr/share/licenses/trivy/vendor/github.com/sagikazarmark/locafero,
/usr/share/licenses/trivy/vendor/github.com/aws,
/usr/share/licenses/trivy/vendor/github.com/jmoiron,
/usr/share/licenses/trivy/vendor/github.com/moby/sys,
/usr/share/licenses/trivy/vendor/github.com/go-gorp/gorp,
/usr/share/licenses/trivy/vendor/github.com/liggitt/tabwriter,
/usr/share/licenses/trivy/vendor/sigs.k8s.io/kustomize/kyaml/internal/forked/github.com,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/service/efs, /usr/share/licenses/trivy/vendor/k8s.io/kube-
openapi/pkg/validation,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/feature/s3,
/usr/share/licenses/trivy/vendor/github.com/klauspost/compress,
/usr/share/licenses/trivy/vendor/github.com/csaf-
poc/csaf_distribution/v3/LICENSES,
/usr/share/licenses/trivy/vendor/k8s.io/kube-openapi/pkg/internal,
/usr/share/licenses/trivy/vendor/github.com/sergi,
/usr/share/licenses/trivy/vendor/github.com/open-policy-
agent/opa/internal/semver,
/usr/share/licenses/trivy/vendor/google.golang.org/api/internal/third_party,
/usr/share/licenses/trivy/vendor/github.com/cloudflare,
/usr/share/licenses/trivy/vendor/google.golang.org/api/internal,
/usr/share/licenses/trivy/vendor/github.com/moby/sys/user,
/usr/share/licenses/trivy/vendor/github.com/cpuguy83/dockercfg,
/usr/share/licenses/trivy/vendor/github.com/russross/blackfriday/v2,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/service/ecs,
/usr/share/licenses/trivy/vendor/sigs.k8s.io/kustomize,
/usr/share/licenses/trivy/vendor/github.com/prometheus/common/internal/bitbucket.org/ww/goautoneg,
/usr/share/licenses/trivy/vendor/github.com/moby/sys/mountinfo,
/usr/share/licenses/trivy/vendor/github.com/vbatts,
/usr/share/licenses/trivy/vendor/github.com/cenkalti/backoff/v4,
/usr/share/licenses/trivy/vendor/github.com/alicebob/miniredis/v2/geohash,
/usr/share/licenses/trivy/vendor/github.com/antchfx,
/usr/share/licenses/trivy/vendor/k8s.io/client-go/third_party,
/usr/share/licenses/trivy/vendor/modernc.org/sqlite,
/usr/share/licenses/trivy/vendor/github.com/go-logr/logr,
/usr/share/licenses/trivy/vendor/github.com/golang,
/usr/share/licenses/trivy/vendor/dario.cat/mergo,
/usr/share/licenses/trivy/vendor/github.com/Intevation,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/service/lambda, /usr/share/licenses/trivy/vendor/k8s.io,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/service/cloudfront,
/usr/share/licenses/trivy/vendor/github.com/oklog,
/usr/share/licenses/trivy/vendor/cloud.google.com/go/compute,
/usr/share/licenses/trivy/vendor/github.com/opencontainers,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/service/elasticsearchservice,
/usr/share/licenses/trivy/vendor/github.com/googleapis/enterprise-
certificate-proxy,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/service/kms, /usr/share/licenses/trivy/vendor/golang.org/x,
/usr/share/licenses/trivy/vendor/github.com/docker/cli,
/usr/share/licenses/trivy/vendor/github.com/alicebob/miniredis/v2/hyperloglog,
/usr/share/licenses/trivy/vendor/github.com/mitchellh/go-homedir,
/usr/share/licenses/trivy/vendor/github.com/containerd/log,
/usr/share/licenses/trivy/vendor/github.com/knqyf263/go-rpmdb,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/internal/configsources,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/internal/ini, /usr/share/licenses/trivy/vendor/github.com/moby,
/usr/share/licenses/trivy/vendor/github.com/olekukonko,
/usr/share/licenses/trivy/vendor/github.com/evanphx/json-patch,
/usr/share/licenses/trivy/vendor/github.com/klauspost/compress/internal,
/usr/share/licenses/trivy/vendor/github.com/gobwas,
/usr/share/licenses/trivy/vendor/github.com/CycloneDX/cyclonedx-go,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/service/sns,
/usr/share/licenses/trivy/vendor/github.com/aws/smithy-go/internal,
/usr/share/licenses/trivy/vendor/github.com/prometheus/common/internal,
/usr/share/licenses/trivy/vendor/github.com/lunixbochs/struc,
/usr/share/licenses/trivy/vendor/github.com/gosuri/uitable,
/usr/share/licenses/trivy/vendor/github.com/mailru,
/usr/share/licenses/trivy/vendor/github.com/pelletier,
/usr/share/licenses/trivy/vendor/github.com/alicebob/miniredis,
/usr/share/licenses/trivy/vendor/github.com/ProtonMail,
/usr/share/licenses/trivy/vendor/github.com/samber/lo,
/usr/share/licenses/trivy/vendor/github.com/go-redis/redis/v8,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/service/cloudtrail,
/usr/share/licenses/trivy/vendor/github.com/sourcegraph,
/usr/share/licenses/trivy/vendor/modernc.org/token,
/usr/share/licenses/trivy/vendor/google.golang.org/genproto/googleapis,
/usr/share/licenses/trivy/vendor/github.com/go-openapi/spec,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/service/apigateway, /usr/share/licenses/trivy/pkg,
/usr/share/licenses/trivy/vendor/github.com/aws/smithy-
go/internal/sync/singleflight,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/service/codebuild,
/usr/share/licenses/trivy/vendor/k8s.io/apimachinery/third_party,
/usr/share/licenses/trivy/pkg/iac/scanners/helm,
/usr/share/licenses/trivy/vendor/github.com/prometheus/common,
/usr/share/licenses/trivy/vendor/github.com/briandowns,
/usr/share/licenses/trivy/vendor/github.com/opencontainers/go-digest,
/usr/share/licenses/trivy/vendor/github.com/cyphar/filepath-
securejoin, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/service/redshift,
/usr/share/licenses/trivy/vendor/github.com/pelletier/go-toml/v2,
/usr/share/licenses/trivy/vendor/k8s.io/client-go,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/feature/s3/manager,
/usr/share/licenses/trivy/vendor/github.com/docker/docker-credential-
helpers, /usr/share/licenses/trivy/vendor/github.com/rcrowley/go-
metrics, /usr/share/licenses/trivy/vendor/modernc.org/libc/honnef.co,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/service/cloudwatchlogs,
/usr/share/licenses/trivy/vendor/github.com/lann/ps,
/usr/share/licenses/trivy/vendor/github.com/kballard,
/usr/share/licenses/trivy/vendor/github.com/munnerz/goautoneg,
/usr/share/licenses/trivy/vendor/github.com/pmezard,
/usr/share/licenses/trivy/vendor/github.com/russross,
/usr/share/licenses/trivy/vendor/k8s.io/kube-
openapi/pkg/validation/spec,
/usr/share/licenses/trivy/vendor/helm.sh/helm/v3,
/usr/share/licenses/trivy/vendor/github.com/shopspring,
/usr/share/licenses/trivy/vendor/github.com/anchore,
/usr/share/licenses/trivy/vendor/github.com/Masterminds/goutils,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/service/internal/accept-encoding,
/usr/share/licenses/trivy/vendor/k8s.io/kubectl/pkg/util/i18n/translations,
/usr/share/licenses/trivy/vendor/github.com/docker/go-metrics,
/usr/share/licenses/trivy/vendor/github.com/in-toto/in-toto-golang,
/usr/share/licenses/trivy/vendor/k8s.io/client-go/third_party/forked,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/service/kafka,
/usr/share/licenses/trivy/vendor/github.com/Azure/azure-sdk-for-
go/sdk, /usr/share/licenses/trivy/vendor/github.com/hashicorp/hc-
install, /usr/share/licenses/trivy/vendor/github.com/sigstore/rekor,
/usr/share/licenses/trivy/vendor/github.com/morikuni/aec,
/usr/share/licenses/trivy/vendor/github.com/Masterminds/semver,
/usr/share/licenses/trivy/vendor/gopkg.in/ini.v1,
/usr/share/licenses/trivy/vendor/google.golang.org/genproto/googleapis/api,
/usr/share/licenses/trivy/vendor/github.com/mitchellh/hashstructure,
/usr/share/licenses/trivy/vendor/github.com/GoogleCloudPlatform/docker-
credential-gcr,
/usr/share/licenses/trivy/vendor/github.com/antchfx/xpath,
/usr/share/licenses/trivy/vendor/github.com/gosuri/uitable/util,
/usr/share/licenses/trivy/vendor/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc,
/usr/share/licenses/trivy/vendor/github.com/dgryski,
/usr/share/licenses/trivy/vendor/github.com/OneOfOne/xxhash,
/usr/share/licenses/trivy/vendor/github.com/jmoiron/sqlx,
/usr/share/licenses/trivy/vendor/github.com/saracen/walker,
/usr/share/licenses/trivy/vendor/github.com/bmatcuk,
/usr/share/licenses/trivy/vendor/github.com/testcontainers,
/usr/share/licenses/trivy/vendor/github.com/zclconf,
/usr/share/licenses/trivy/vendor/github.com/twitchtv/twirp,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/feature/ec2/imds,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/service/internal,
/usr/share/licenses/trivy/vendor/github.com/Azure,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/internal/endpoints/v2,
/usr/share/licenses/trivy/vendor/github.com/json-iterator,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/internal,
/usr/share/licenses/trivy/vendor/github.com/hashicorp/errwrap,
/usr/share/licenses/trivy/vendor/github.com/OneOfOne,
/usr/share/licenses/trivy/vendor/github.com/gogo/protobuf,
/usr/share/licenses/trivy/vendor/github.com/containerd/typeurl,
/usr/share/licenses/trivy/vendor/github.com/kevinburke,
/usr/share/licenses/trivy/vendor/google.golang.org/genproto,
/usr/share/licenses/trivy/vendor/github.com/saracen,
/usr/share/licenses/trivy/vendor/github.com/shibumi/go-pathspec,
/usr/share/licenses/trivy/vendor/sigs.k8s.io/kustomize/api,
/usr/share/licenses/trivy/vendor/github.com/distribution/reference,
/usr/share/licenses/trivy/vendor/github.com/ulikunitz/xz,
/usr/share/licenses/trivy/vendor/github.com/sagikazarmark/slog-shim,
/usr/share/licenses/trivy/vendor/cloud.google.com,
/usr/share/licenses/trivy/vendor/github.com/alicebob/miniredis/v2/metro,
/usr/share/licenses/trivy/vendor/github.com/hashicorp/go-uuid,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/service/emr, /usr/share/licenses/trivy/vendor/go.uber.org,
/usr/share/licenses/trivy/vendor/github.com/golang-jwt,
/usr/share/licenses/trivy/vendor/github.com/cyphar,
/usr/share/licenses/trivy/vendor/go.etcd.io,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/service/apigatewayv2,
/usr/share/licenses/trivy/vendor/github.com/klauspost/compress/internal/snapref,
/usr/share/licenses/trivy/vendor/github.com/liamg/jfather,
/usr/share/licenses/trivy/vendor/modernc.org/ccgo/v3,
/usr/share/licenses/trivy/vendor/sigs.k8s.io/kustomize/kyaml/internal/forked,
/usr/share/licenses/trivy/vendor/github.com/golang/groupcache,
/usr/share/licenses/trivy/vendor/golang.org/x/oauth2,
/usr/share/licenses/trivy/vendor/github.com/stretchr,
/usr/share/licenses/trivy/vendor/modernc.org/memory,
/usr/share/licenses/trivy/vendor/github.com/russross/blackfriday,
/usr/share/licenses/trivy/vendor/github.com/xeipuuv/gojsonreference,
/usr/share/licenses/trivy/vendor/github.com/go-openapi/analysis,
/usr/share/licenses/trivy/vendor/github.com/go-openapi/jsonpointer,
/usr/share/licenses/trivy/vendor/github.com/MakeNowJust/heredoc,
/usr/share/licenses/trivy/vendor/github.com/yuin,
/usr/share/licenses/trivy/vendor/github.com/prometheus/common/internal/bitbucket.org,
/usr/share/licenses/trivy/vendor/sigs.k8s.io/structured-merge-diff/v4,
/usr/share/licenses/trivy/vendor/github.com/santhosh-
tekuri/jsonschema/v5,
/usr/share/licenses/trivy/vendor/github.com/openvex/go-vex,
/usr/share/licenses/trivy/vendor/github.com/agext,
/usr/share/licenses/trivy/vendor/github.com/emicklei,
/usr/share/licenses/trivy/vendor/github.com/google/licenseclassifier,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/service/dynamodb,
/usr/share/licenses/trivy/vendor/github.com/prometheus/common/internal/bitbucket.org/ww,
/usr/share/licenses/trivy/vendor/github.com/masahiro331/go-
ext4-filesystem, /usr/share/licenses/trivy/vendor/github.com/go-
openapi/validate,
/usr/share/licenses/trivy/vendor/github.com/hashicorp/go-getter,
/usr/share/licenses/trivy/vendor/github.com/secure-systems-lab,
/usr/share/licenses/trivy/pkg/iac/scanners/helm/test/mysql/charts,
/usr/share/licenses/trivy/vendor/gopkg.in/yaml.v2,
/usr/share/licenses/trivy/vendor/github.com/hashicorp/hcl,
/usr/share/licenses/trivy/vendor/github.com/go-git/go-git/v5,
/usr/share/licenses/trivy/vendor/github.com/josharian/intern,
/usr/share/licenses/trivy/vendor/github.com/anchore/go-struct-
converter,
/usr/share/licenses/trivy/vendor/k8s.io/utils/internal/third_party/forked,
/usr/share/licenses/trivy/vendor/modernc.org/mathutil,
/usr/share/licenses/trivy/vendor/github.com/xanzy/ssh-agent,
/usr/share/licenses/trivy/vendor/github.com/imdario,
/usr/share/licenses/trivy/vendor/github.com/skeema/knownhosts,
/usr/share/licenses/trivy/vendor/github.com/apparentlymart/go-textseg,
/usr/share/licenses/trivy/vendor/google.golang.org/protobuf,
/usr/share/licenses/trivy/vendor/github.com/gregjones,
/usr/share/licenses/trivy/vendor/github.com/cespare/xxhash/v2,
/usr/share/licenses/trivy/vendor/github.com/go-openapi/strfmt,
/usr/share/licenses/trivy/vendor/github.com/VividCortex,
/usr/share/licenses/trivy/vendor/github.com/mitchellh/reflectwalk,
/usr/share/licenses/trivy/vendor/oras.land/oras-go,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/service/neptune,
/usr/share/licenses/trivy/vendor/github.com/aquasecurity/go-gem-
version, /usr/share/licenses/trivy/vendor/github.com/shibumi,
/usr/share/licenses/trivy/vendor/github.com/cheggaaa/pb,
/usr/share/licenses/trivy/vendor/github.com/aquasecurity/trivy-java-
db, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/service/elasticloadbalancingv2,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/service/workspaces,
/usr/share/licenses/trivy/vendor/github.com/xlab,
/usr/share/licenses/trivy/vendor/k8s.io/kubectl/pkg/util/i18n,
/usr/share/licenses/trivy/vendor/github.com/go-openapi,
/usr/share/licenses/trivy/vendor/golang.org/x/text,
/usr/share/licenses/trivy/vendor/modernc.org/libc/honnef.co/go/netdb,
/usr/share/licenses/trivy/vendor/github.com/peterbourgon/diskv,
/usr/share/licenses/trivy/vendor/modernc.org/cc/v3,
/usr/share/licenses/trivy/vendor/gopkg.in/cheggaaa,
/usr/share/licenses/trivy/vendor/github.com/owenrumney,
/usr/share/licenses/trivy/vendor/gopkg.in/cheggaaa/pb.v1,
/usr/share/licenses/trivy/vendor/github.com/hashicorp,
/usr/share/licenses/trivy/vendor/github.com/huandu,
/usr/share/licenses/trivy/vendor/github.com/secure-systems-lab/go-
securesystemslib, /usr/share/licenses/trivy/vendor/github.com/mattn,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-go,
/usr/share/licenses/trivy/vendor/github.com/stretchr/testify,
/usr/share/licenses/trivy/vendor/github.com/knqyf263,
/usr/share/licenses/trivy/vendor/github.com/Azure/azure-sdk-for-
go/sdk/internal,
/usr/share/licenses/trivy/vendor/github.com/moby/sys/sequential,
/usr/share/licenses/trivy/vendor/github.com/prometheus,
/usr/share/licenses/trivy/vendor/github.com/bgentry,
/usr/share/licenses/trivy/vendor/github.com/xlab/treeprint,
/usr/share/licenses/trivy/vendor/github.com/masahiro331/go-mvn-
version,
/usr/share/licenses/trivy/vendor/cloud.google.com/go/compute/metadata,
/usr/share/licenses/trivy/vendor/helm.sh,
/usr/share/licenses/trivy/vendor/github.com/inconshreveable/mousetrap,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/service/internal/s3shared,
/usr/share/licenses/trivy/vendor/k8s.io/klog/v2,
/usr/share/licenses/trivy/vendor/github.com/docker/docker,
/usr/share/licenses/trivy/vendor/github.com/AzureAD/microsoft-
authentication-library-for-go,
/usr/share/licenses/trivy/vendor/github.com/pjbgf/sha1cd,
/usr/share/licenses/trivy/vendor/github.com/open-policy-
agent/opa/internal/edittree,
/usr/share/licenses/trivy/vendor/golang.org,
/usr/share/licenses/trivy/vendor/github.com/Microsoft/go-winio,
/usr/share/licenses/trivy/vendor/github.com/spf13/pflag,
/usr/share/licenses/trivy/vendor/cloud.google.com/go/storage,
/usr/share/licenses/trivy/vendor/github.com/gregjones/httpcache,
/usr/share/licenses/trivy/vendor/github.com/googleapis/gax-go,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/internal/sync,
/usr/share/licenses/trivy/vendor/github.com/aquasecurity/trivy-
kubernetes, /usr/share/licenses/trivy/vendor/github.com/google/go-
containerregistry,
/usr/share/licenses/trivy/vendor/github.com/aquasecurity/go-version,
/usr/share/licenses/trivy/vendor/github.com/opentracing/opentracing-
go, /usr/share/licenses/trivy/vendor/github.com/google/gofuzz,
/usr/share/licenses/trivy/vendor/github.com/Intevation/jsonpath,
/usr/share/licenses/trivy/vendor/github.com/MakeNowJust,
/usr/share/licenses/trivy/vendor/github.com/spf13/cast,
/usr/share/licenses/trivy/vendor/k8s.io/kube-
openapi/pkg/internal/third_party/go-json-experiment/json,
/usr/share/licenses/trivy/vendor/sigs.k8s.io/kustomize/kyaml/internal/forked/github.com/qri-
io, /usr/share/licenses/trivy/vendor/github.com/mattn/go-isatty,
/usr/share/licenses/trivy/vendor/github.com/munnerz,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/internal/endpoints,
/usr/share/licenses/trivy/vendor/github.com/peterbourgon,
/usr/share/licenses/trivy/vendor/github.com/rubenv/sql-
migrate/sqlparse, /usr/share/licenses/trivy/vendor/github.com/package-
url/packageurl-go,
/usr/share/licenses/trivy/vendor/github.com/yashtewari/glob-
intersection,
/usr/share/licenses/trivy/vendor/go.opentelemetry.io/otel/sdk,
/usr/share/licenses/trivy/vendor/github.com/goccy/go-yaml,
/usr/share/licenses/trivy/vendor/github.com/briandowns/spinner,
/usr/share/licenses/trivy/vendor/github.com/lann/builder,
/usr/share/licenses/trivy/vendor/cloud.google.com/go/iam,
/usr/share/licenses/trivy/vendor/github.com/aquasecurity/testdocker,
/usr/share/licenses/trivy/vendor/github.com/BurntSushi,
/usr/share/licenses/trivy/vendor/github.com/mxk/go-flowrate,
/usr/share/licenses/trivy/vendor/github.com/open-policy-
agent/opa/internal/gojsonschema,
/usr/share/licenses/trivy/vendor/github.com/fatih,
/usr/share/licenses/trivy/vendor/github.com/chai2010,
/usr/share/licenses/trivy/vendor/github.com/pmezard/go-difflib,
/usr/share/licenses/trivy/vendor/github.com/lann,
/usr/share/licenses/trivy/pkg/iac/scanners/helm/test,
/usr/share/licenses/trivy/vendor/github.com/jmespath/go-jmespath,
/usr/share/licenses/trivy/vendor/github.com/google/go-cmp,
/usr/share/licenses/trivy/vendor/github.com/opencontainers/image-spec,
/usr/share/licenses/trivy/vendor/golang.org/x/tools,
/usr/share/licenses/trivy/vendor/github.com/cespare/xxhash,
/usr/share/licenses/trivy/vendor/github.com/monochromegane,
/usr/share/licenses/trivy/pkg/iac/scanners/helm/test/mysql/charts/common,
/usr/share/licenses/trivy/vendor/github.com/google,
/usr/share/licenses/trivy/vendor/github.com/moby/locker,
/usr/share/licenses/trivy/vendor/github.com/liamg,
/usr/share/licenses/trivy/vendor/github.com/google/uuid,
/usr/share/licenses/trivy/vendor/github.com/magiconair,
/usr/share/licenses/trivy/vendor/github.com/dustin/go-humanize,
/usr/share/licenses/trivy/vendor/github.com/knqyf263/go-apk-version,
/usr/share/licenses/trivy/vendor/github.com/yashtewari,
/usr/share/licenses/trivy/vendor/modernc.org,
/usr/share/licenses/trivy/vendor/google.golang.org/api,
/usr/share/licenses/trivy/vendor/github.com/pkg/browser,
/usr/share/licenses/trivy/vendor/google.golang.org/api/internal/third_party/uritemplates,
/usr/share/licenses/trivy/vendor/go.opentelemetry.io/contrib/instrumentation/google.golang.org,
/usr/share/licenses/trivy/vendor/go.opentelemetry.io/otel/metric,
/usr/share/licenses/trivy/vendor/github.com/zclconf/go-cty,
/usr/share/licenses/trivy/vendor/github.com/cloudflare/circl,
/usr/share/licenses/trivy/vendor/github.com/olekukonko/tablewriter,
/usr/share/licenses/trivy/vendor/modernc.org/libc,
/usr/share/licenses/trivy/vendor/github.com/open-policy-
agent/opa/internal/jwx,
/usr/share/licenses/trivy/vendor/github.com/rubenv,
/usr/share/licenses/trivy/vendor/github.com/spf13,
/usr/share/licenses/trivy/vendor/github.com/go-errors,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-go-v2,
/usr/share/licenses/trivy/vendor/github.com/aquasecurity/go-
pep440-version, /usr/share/licenses/trivy/vendor/github.com/aws/aws-
sdk-go-v2/service/athena,
/usr/share/licenses/trivy/vendor/github.com/modern-go/reflect2,
/usr/share/licenses/trivy/vendor/github.com/docker/go-connections,
/usr/share/licenses/trivy/vendor/github.com/go-gorp,
/usr/share/licenses/trivy/vendor/github.com/NYTimes/gziphandler,
/usr/share/licenses/trivy/pkg/iac/scanners/helm/test/mysql,
/usr/share/licenses/trivy/vendor/k8s.io/utils/internal/third_party,
/usr/share/licenses/trivy/vendor/sigs.k8s.io/structured-merge-diff,
/usr/share/licenses/trivy/vendor/github.com/go-gorp/gorp/v3,
/usr/share/licenses/trivy/vendor/github.com/samber,
/usr/share/licenses/trivy/vendor/github.com/aquasecurity/trivy-
policies, /usr/share/licenses/trivy/vendor/github.com/Azure/azure-sdk-
for-go/sdk/azidentity,
/usr/share/licenses/trivy/vendor/github.com/xeipuuv/gojsonschema,
/usr/share/licenses/trivy/vendor/github.com/json-iterator/go,
/usr/share/licenses/trivy/vendor/k8s.io/kubectl/pkg,
/usr/share/licenses/trivy/vendor/k8s.io/apiserver,
/usr/share/licenses/trivy/vendor/github.com/masahiro331/go-vmdk-
parser, /usr/share/licenses/trivy/vendor/github.com/josharian,
/usr/share/licenses/trivy/vendor/github.com/owenrumney/go-sarif/v2,
/usr/share/licenses/trivy/vendor/github.com/modern-go/concurrent,
/usr/share/licenses/trivy/vendor/github.com/opentracing,
/usr/share/licenses/trivy/vendor/github.com/testcontainers/testcontainers-
go/modules/localstack,
/usr/share/licenses/trivy/vendor/github.com/BurntSushi/toml,
/usr/share/licenses/trivy/vendor/github.com/alicebob/miniredis/v2/fpconv,
/usr/share/licenses/trivy/vendor/github.com/gofrs/uuid,
/usr/share/licenses/trivy/vendor/github.com/googleapis,
/usr/share/licenses/trivy/vendor/go.starlark.net,
/usr/share/licenses/trivy/vendor/gopkg.in,
/usr/share/licenses/trivy/vendor/github.com/docker/go-events,
/usr/share/licenses/trivy/vendor/github.com/gobwas/glob,
/usr/share/licenses/trivy/vendor/github.com/go-ini,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/service/docdb, /usr/share/licenses/trivy/vendor/github.com/csaf-
poc, /usr/share/licenses/trivy/vendor/github.com/docker,
/usr/share/licenses/trivy/vendor/github.com/opencontainers/runtime-
spec, /usr/share/licenses/trivy/vendor/go.uber.org/zap,
/usr/share/licenses/trivy/vendor/github.com/yuin/gopher-lua,
/usr/share/licenses/trivy/vendor/github.com/go-openapi/swag,
/usr/share/licenses/trivy/vendor/github.com/tetratelabs/wazero,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/service/ec2,
/usr/share/licenses/trivy/vendor/github.com/google/s2a-go,
/usr/share/licenses/trivy/vendor/github.com/pjbgf,
/usr/share/licenses/trivy/vendor/github.com/monochromegane/go-
gitignore,
/usr/share/licenses/trivy/vendor/github.com/VividCortex/ewma,
/usr/share/licenses/trivy/vendor/github.com/oklog/ulid,
/usr/share/licenses/trivy/vendor/github.com/felixge,
/usr/share/licenses/trivy/vendor/github.com/Azure/go-
autorest/autorest, /usr/share/licenses/trivy/vendor/github.com/lib/pq,
/usr/share/licenses/trivy/vendor/github.com/testcontainers/testcontainers-
go, /usr/share/licenses/trivy/vendor/github.com/alecthomas,
/usr/share/licenses/trivy/vendor/github.com/testcontainers/testcontainers-
go/modules,
/usr/share/licenses/trivy/vendor/github.com/klauspost/compress/zstd/internal,
/usr/share/licenses/trivy/vendor/github.com/gofrs,
/usr/share/licenses/trivy/vendor/github.com/twitchtv,
/usr/share/licenses/trivy/vendor/go.opentelemetry.io/contrib/instrumentation/net,
/usr/share/licenses/trivy/vendor/github.com/go-openapi/runtime,
/usr/share/licenses/trivy/vendor/golang.org/x/sys,
/usr/share/licenses/trivy/vendor/github.com/go-logr/stdr,
/usr/share/licenses/trivy/vendor/github.com/rubenv/sql-migrate,
/usr/share/licenses/trivy/vendor/github.com/agext/levenshtein,
/usr/share/licenses/trivy/vendor/github.com/opencontainers/selinux,
/usr/share/licenses/trivy/vendor/github.com/lunixbochs,
/usr/share/licenses/trivy/vendor/github.com/alicebob/gopher-json,
/usr/share/licenses/trivy/vendor/golang.org/x/net,
/usr/share/licenses/trivy/vendor/github.com/go-logr,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
go-v2/service/sts, /usr/share/licenses/trivy/vendor/github.com/go-
git/go-git, /usr/share/licenses/trivy/vendor/github.com/NYTimes,
/usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-go-v2/config,
/usr/share/licenses/trivy/vendor/github.com/sigstore,
/usr/share/licenses/trivy/vendor/github.com/go-ini/ini,
/usr/share/licenses/trivy/vendor/go.opentelemetry.io/contrib/instrumentation,
/usr/share/licenses/trivy/vendor/github.com/package-url,
/usr/share/licenses/trivy/vendor/github.com/masahiro331/go-ebs-file,
/usr/share/licenses/trivy/vendor/github.com/quasilyte,
/usr/share/licenses/trivy/vendor/github.com/containerd/typeurl/v2,
/usr/share/licenses/trivy/vendor/github.com/knqyf263/go-rpm-version,
/usr/share/licenses/trivy/vendor/gopkg.in/warnings.v0,
/usr/share/licenses/trivy/vendor/github.com/fsnotify/fsnotify,
/usr/share/licenses/trivy/vendor/github.com/mitchellh/go-testing-
interface,
/usr/share/licenses/trivy/vendor/github.com/containerd/ttrpc,
/usr/share/licenses/trivy/vendor/github.com/huandu/xstrings,
/usr/share/licenses/trivy/vendor/golang.org/x/time
--
You are receiving this mail because:
You are always notified about changes to this product and component
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2272258
Report this comment as SPAM:
https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=rep...