{ "report_schema": 13, "job_id": "520d2155-f6c4-43c6-953c-1829b6dd5cc3", "verdict": "InsufficientEvidence", "source_sha256": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "contract_sha256": "e5994e7c7513719eb7bbc8e71819af12bee6973055b2cb3c5f458f5e4b1f12b7", "criteria_sha256": "d34458a3179d885efdb609b2971179f2f58aabd17860731a25031594a5d329cb", "contract": null, "plan": { "schema_version": 1, "objective": "Re-smoke FalseGreen 0.10.0 end-to-end on the ledger demo: the falsegreen.toml invariant set captures every implemented behavior claim (DESIGN.md sections 1-10 + README exit-code contract + threat-model scope), the baseline run is accepted with all five security witnesses carrying real evidence, and three dedicated break workspaces prove the SCA (#10), SAST (#14), and secret (#12) classes now actually gate the verdict; the HTML/PDF report parity (#13) and the invariant carry (#7) are re-observed on the signed artifacts.", "constraints": [ "payloads must pass the local D0 secret gate so publish proceeds (the secret payload is below the D0 threshold by construction — the whole point of #12)", "at most one heavy job in flight; queue is single-slot" ], "assumptions": [ "the server's OSV snapshot is fresh within 24h (freshness_hours bound in the frozen policy)", "each break run uses a dedicated workspace copy with its payload committed (smallvec 1.6.0 pin; a Python allow_pickle payload hitting an error-default SARIF rule; a planted below-D0-threshold secret token)", "no contract criteria change — only the invariant sections are new" ], "work_items": [ { "id": "contract-invariants", "outcome": "falsegreen.toml carries ten [[invariant]] sections mapping 1:1 to the implemented behavior: canonical form, validation, hash chain, append-only store, Merkle/Ed25519 seals, compaction, policy evaluation, exit-code precedence, export/import round-trips, and the threat-model scope", "dependencies": [], "acceptance": [ { "id": "a-invariant-complete", "description": "every DESIGN.md section and the README exit-code contract is claimed by exactly one invariant; the signed report's contract section echoes all ten verbatim (fixes #7)", "evidence": [ { "id": null, "kind": "inspection", "description": "human comparison of the invariant set against DESIGN.md sections 1-10 and the README exit-code table", "criterion": null } ], "failure_conditions": [ "invariants dropped from the report", "invariant sections fail to parse" ] }, { "id": "a-scope-stated", "description": "the threat-model invariant states both halves: what verify proves and what it explicitly does not prove", "evidence": [ { "id": null, "kind": "inspection", "description": "the invariant text enumerates the five proved properties and the five unproved limitations of DESIGN.md section 10", "criterion": null } ], "failure_conditions": [] } ], "omission_risks": [] }, { "id": "behavior-tests", "outcome": "the workspace test suite (run by the frozen contract criteria) pins each behavior the invariants claim", "dependencies": [], "acceptance": [ { "id": "a-canonical", "description": "canonical serialization is deterministic; key-order edits do not change the canonical form; hashing/signing run over canonical bytes", "evidence": [ { "id": null, "kind": "behavioral_test", "description": "the test suite's canonical-form tests pass under the frozen tests criterion", "criterion": "tests" } ], "failure_conditions": [] }, { "id": "a-validate", "description": "unknown fields, empty required fields, non-object context, and out-of-range timestamps are rejected as corrupt-class, never normalized", "evidence": [ { "id": null, "kind": "behavioral_test", "description": "the validation/rejection tests pass under the frozen tests criterion", "criterion": "tests" } ], "failure_conditions": [] }, { "id": "a-chain", "description": "record hash commits to canonical event + prev_hash; the link rule and its named failures (bad_record_hash, broken_link, sequence_gap) hold", "evidence": [ { "id": null, "kind": "behavioral_test", "description": "the hash-chain and tamper tests pass under the frozen tests criterion", "criterion": "tests" } ], "failure_conditions": [] }, { "id": "a-append", "description": "append continues the verified head and never rewrites shard content; parse errors report shard and line", "evidence": [ { "id": null, "kind": "behavioral_test", "description": "the store/append tests pass under the frozen tests criterion", "criterion": "tests" } ], "failure_conditions": [] }, { "id": "a-seal", "description": "Merkle construction (odd-leaf duplication), seal message fields, signature coverage, and count-mismatch detection hold", "evidence": [ { "id": null, "kind": "behavioral_test", "description": "the Merkle/seal/signature tests pass under the frozen tests criterion", "criterion": "tests" } ], "failure_conditions": [] }, { "id": "a-compact", "description": "compaction keeps the genesis prev_hash and root link unchanged, embeds the source seal verbatim, and breaks on rewrite", "evidence": [ { "id": null, "kind": "behavioral_test", "description": "the compaction tests pass under the frozen tests criterion", "criterion": "tests" } ], "failure_conditions": [] }, { "id": "a-policy", "description": "deny and require_outcome rules flag exactly the matching events at verify time, with rule_id in the report", "evidence": [ { "id": null, "kind": "behavioral_test", "description": "the policy-engine tests pass under the frozen tests criterion", "criterion": "tests" } ], "failure_conditions": [] }, { "id": "a-exit", "description": "exit codes 0/1/2/3/4/5/255 and the corrupt>gap>signature>tampered>policy precedence hold", "evidence": [ { "id": null, "kind": "behavioral_test", "description": "the CLI exit-code tests pass under the frozen tests criterion", "criterion": "tests" } ], "failure_conditions": [] }, { "id": "a-roundtrip", "description": "export/import reproduces identical record hashes into a fresh ledger", "evidence": [ { "id": null, "kind": "behavioral_test", "description": "the export/import round-trip tests pass under the frozen tests criterion", "criterion": "tests" } ], "failure_conditions": [] } ], "omission_risks": [] }, { "id": "green-baseline", "outcome": "one accepted Job over the clean tree with real (never-empty) evidence from all five witnesses", "dependencies": [ "contract-invariants", "behavior-tests" ], "acceptance": [ { "id": "a-verdict-accepted", "description": "the clean workspace passes every required criterion and the verdict is accepted", "evidence": [ { "id": null, "kind": "build", "description": "the job's frozen build criterion passes and the signed verdict is accepted", "criterion": "build" } ], "failure_conditions": [] }, { "id": "a-witnesses-real", "description": "the signed report shows non-empty raw_output_digest (not e3b0c442...) for gitleaks and both syft witnesses, and echoes all ten contract invariants (fixes #7 #11 #12 vacuity)", "evidence": [ { "id": null, "kind": "artifact", "description": "the signed JSON report's witness rows and contract.invariants section, checked with falsegreen verify-report", "criterion": null } ], "failure_conditions": [ "any required witness carries the empty-output digest", "the report's contract.invariants is empty" ] } ], "omission_risks": [] }, { "id": "sca-break", "outcome": "a pinned CRITICAL advisory (smallvec 1.6.0) yields a signed critical finding and a failed verdict", "dependencies": [ "green-baseline" ], "acceptance": [ { "id": "a-sca-critical", "description": "the signed report carries a dependency_vulnerability finding at severity critical, class posture fail, verdict failed — the advisory is never silently dropped (#10 fixed)", "evidence": [ { "id": null, "kind": "artifact", "description": "the signed JSON report's security.findings + classes + verdict for the pinned workspace", "criterion": null } ], "failure_conditions": [ "accepted verdict with the advisory pinned", "findings empty while the osv-scanner raw digest is non-empty" ] } ], "omission_risks": [] }, { "id": "sast-break", "outcome": "a payload matching a SARIF rule whose defaultConfiguration.level is error yields a high finding and a failed verdict", "dependencies": [ "green-baseline" ], "acceptance": [ { "id": "a-sast-high", "description": "the signed report carries a static_analysis finding at severity high (rule-level SARIF default honored), class posture fail, verdict failed (#14 fixed)", "evidence": [ { "id": null, "kind": "artifact", "description": "the signed JSON report's security.findings + classes + verdict for the payload workspace", "criterion": null } ], "failure_conditions": [ "the finding recorded at medium despite the rule defaulting to error", "accepted verdict with a detected high-default payload" ] } ], "omission_risks": [] }, { "id": "secret-break", "outcome": "a planted below-D0-threshold secret token in-tree is found by the file-scanning gitleaks witness and fails the secret class", "dependencies": [ "green-baseline" ], "acceptance": [ { "id": "a-secret-fail", "description": "the signed report carries a secret-class finding (no raw secret value), class posture fail, verdict failed (#12 fixed)", "evidence": [ { "id": null, "kind": "artifact", "description": "the signed JSON report's security findings + secret class posture + verdict for the token workspace", "criterion": null } ], "failure_conditions": [ "gitleaks raw_output_digest equal to the empty-output digest", "accepted verdict with the token in-tree" ] } ], "omission_risks": [] }, { "id": "inventory-evidence", "outcome": "supply_chain and license classes carry real SBOM facts (component rows + license facts) and are recorded severity-less — they inform, never severity-gate", "dependencies": [ "green-baseline" ], "acceptance": [ { "id": "a-inventory-real", "description": "the signed report shows the syft SBOM projection (components as pkg:cargo purls) and license facts from the dependency manifest; both classes pass on the clean tree without severity rows (#11 fixed, DP-10.3)", "evidence": [ { "id": null, "kind": "artifact", "description": "the signed JSON report's supply_chain/license class rows and the embedded SBOM export", "criterion": null } ], "failure_conditions": [ "syft raw digest empty on a workspace with 70+ dependencies", "license class with no facts despite a populated lockfile" ] } ], "omission_risks": [] } ], "overall_acceptance": [ { "id": "o-smoke-complete", "description": "all legs observed live: baseline accepted with five real witnesses and ten echoed invariants; SCA, SAST, and secret break runs each end in a signed failed verdict with the finding present; inventory facts real; HTML and PDF VEX sections both carry the JSON-report URL (#13)", "evidence": [ { "id": null, "kind": "artifact", "description": "the four signed reports (verified locally) plus the HTML and PDF renderings of the baseline Job", "criterion": null } ], "failure_conditions": [] }, { "id": "o-one-spend", "description": "each Job's entitlement is consumed exactly once at its terminal verdict, with the account posture readable per Job", "evidence": [ { "id": null, "kind": "artifact", "description": "falsegreen_account_status per Job after the terminal verdict", "criterion": null } ], "failure_conditions": [] } ], "security": { "id": "falsegreen-ledger-security-policy", "version": "1", "digest": "14a6293ff7708374d607e07d1fd9badb993667a27cbbc3276936fac3fb63753f", "required": [ "dependency_vulnerability", "static_analysis", "secret", "supply_chain", "license" ], "minimum_witnesses": 1, "fail_on_severities": [ "critical", "high" ], "unknown_severity": "insufficient", "secrets_fail_on_any_unexcepted": true, "freshness_hours": 24, "required_standards": [ "soc-2-tsc", "iso-27001", "cis-controls", "nist-csf-2.0", "cra" ], "unavailable_behavior": "insufficient" } }, "attempts": [ { "index": 1, "outcome": "Insufficient", "at": "2026-10-21T17:51:56.433642Z", "duration_ms": 42218, "source_sha256": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "security": { "policy": { "id": "falsegreen-platform", "version": "1", "digest": "372d3c74758acb113c1bef14b20b08b326a7703dd57d943247de6541743c0fad", "required": [ "dependency_vulnerability", "static_analysis", "secret", "supply_chain", "license" ], "minimum_witnesses": 1, "fail_on_severities": [ "critical", "high" ], "unknown_severity": "insufficient", "secrets_fail_on_any_unexcepted": true, "required_standards": [], "unavailable_behavior": "insufficient" }, "language": "", "classes": [ { "class": "dependency_vulnerability", "required": true, "status": "fail", "witness_refs": [ "a01c9fbe2e0f89ba51e98a9f9adb3e2221181b02f05426888a8e8e1d4c6f99a0" ], "reasons": [ "vulnerability snapshot is stale (observed 2026-10-21T17:30:12Z, freshness bound 24h)", "finding 5046f75b49bcc91e972fe6e37dff89bd730acac66b5c0835cdfea59610c6a9a5 severity `high` is frozen-fail (osv/RUSTSEC-2021-0003)", "finding 538efbca6ab37d1de7206475fd690628e0d69cbb5b3b1d27719f69b6caaf43f7 severity `high` is frozen-fail (osv/GHSA-43w2-9j62-hq99)" ] }, { "class": "static_analysis", "required": true, "status": "pass", "witness_refs": [ "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945" ], "reasons": [] }, { "class": "secret", "required": true, "status": "pass", "witness_refs": [ "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945" ], "reasons": [] }, { "class": "supply_chain", "required": true, "status": "pass", "witness_refs": [ "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db" ], "reasons": [] }, { "class": "license", "required": true, "status": "not_assessed", "witness_refs": [ "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a" ], "reasons": [ "no licence policy frozen — the licence facts are inventory, nothing was asserted" ] } ], "findings": [ { "id": "5046f75b49bcc91e972fe6e37dff89bd730acac66b5c0835cdfea59610c6a9a5", "class": "dependency_vulnerability", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:crates.io/smallvec@1.6.0" }, "rule": { "namespace": "osv", "id": "RUSTSEC-2021-0003" }, "severity": { "value": "high" }, "state": "open", "evidence_refs": [ "bc3a9475f41113399b37bbb06fa93ad463c0c15a2a842fcc5ec6a352dbcead48" ], "witness_tool_ref": "a01c9fbe2e0f89ba51e98a9f9adb3e2221181b02f05426888a8e8e1d4c6f99a0", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "538efbca6ab37d1de7206475fd690628e0d69cbb5b3b1d27719f69b6caaf43f7", "class": "dependency_vulnerability", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:crates.io/smallvec@1.6.0" }, "rule": { "namespace": "osv", "id": "GHSA-43w2-9j62-hq99" }, "severity": { "value": "high" }, "state": "open", "evidence_refs": [ "bc3a9475f41113399b37bbb06fa93ad463c0c15a2a842fcc5ec6a352dbcead48" ], "witness_tool_ref": "a01c9fbe2e0f89ba51e98a9f9adb3e2221181b02f05426888a8e8e1d4c6f99a0", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "585dc8dd419afdf4e9bf3c874f2701e31d5f3338bc9b4203dc562020a35876ec", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/anstream@1.0.0" }, "rule": { "namespace": "syft", "id": "anstream@1.0.0" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "5812a90517ca8a7be4835875c4821ace43a4835c915372e2902c66fdb38fdc43", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/anstyle@1.0.14" }, "rule": { "namespace": "syft", "id": "anstyle@1.0.14" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "0c2acffbd95840f484ecf5ead5dbf02d3043c8cd99e95cffcecb6dd06aad1689", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/anstyle-parse@1.0.0" }, "rule": { "namespace": "syft", "id": "anstyle-parse@1.0.0" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "38e530b1f35c1f97754741dcb41c150fc5f37b19537d0a862f1cf412d5d5eb77", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/anstyle-query@1.1.5" }, "rule": { "namespace": "syft", "id": "anstyle-query@1.1.5" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "43a7bbf00d060e71d216d2dba5a8507586b4879c8c606cb5701f4721a1340984", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/anstyle-wincon@3.0.11" }, "rule": { "namespace": "syft", "id": "anstyle-wincon@3.0.11" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "b53200027bb397c19303a57035a312ff9896f23494778cfe8417bf3b566802b7", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/base64ct@1.8.3" }, "rule": { "namespace": "syft", "id": "base64ct@1.8.3" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "a27f471935b3ca54a96a87c1168029f17d49df469b5d7fb9768f5be6a479cb5a", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/bitflags@2.13.2" }, "rule": { "namespace": "syft", "id": "bitflags@2.13.2" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "d954449ff474a768cbba77304caa220f9361597bbb1fdcfa4f395dc2ff3ab6a3", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/block-buffer@0.10.4" }, "rule": { "namespace": "syft", "id": "block-buffer@0.10.4" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "298a3dc87ed455182e39269edd7bcb85eb69d2fdfaed33bb248b55ce4ef400bf", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/cfg-if@1.0.5" }, "rule": { "namespace": "syft", "id": "cfg-if@1.0.5" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "c945fdb692b50e54a5707923beed9b74cc8840b872dda759232c54f54faf3e13", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/clap@4.6.7" }, "rule": { "namespace": "syft", "id": "clap@4.6.7" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "4c660220014879503df0995f4e53893f079ed601c9ca4351754a91d944cd5747", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/clap_builder@4.6.7" }, "rule": { "namespace": "syft", "id": "clap_builder@4.6.7" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "8bb04af9d989b5eb357e0b7a5a47760babc2e2e30e6622131f0b704e82099de2", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/clap_derive@4.6.7" }, "rule": { "namespace": "syft", "id": "clap_derive@4.6.7" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "0806d9370588be53df7d7e7b13b4cd97fe96353945c1a2e612f0cb42e6b0a9fa", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/clap_lex@1.1.1" }, "rule": { "namespace": "syft", "id": "clap_lex@1.1.1" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "564bee5e0ca4f5b0b9d5c7f3c80949c2379225cc93896b64d7cf40572e67f707", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/colorchoice@1.0.5" }, "rule": { "namespace": "syft", "id": "colorchoice@1.0.5" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "e67b364fc025909689d2318cd8edbb4eff67f8550970a92413e57be11015fa73", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/const-oid@0.9.6" }, "rule": { "namespace": "syft", "id": "const-oid@0.9.6" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "6d706f34a5c990989290bf9a40545e25199499f4d7896fb17db92c9f5704d9dd", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/cpufeatures@0.2.17" }, "rule": { "namespace": "syft", "id": "cpufeatures@0.2.17" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "145a268fb83cc9efa6d7dbc1f2c7a5bb878887bd309a7a13c70db7c26a3dd4a6", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/crypto-common@0.1.7" }, "rule": { "namespace": "syft", "id": "crypto-common@0.1.7" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "787a89ac66a8ee454e76700ba05fd7449ee2e0a02adba4d5703b4e43a3ad63ee", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/curve25519-dalek@4.1.3" }, "rule": { "namespace": "syft", "id": "curve25519-dalek@4.1.3" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "e363a3158ed291249701f7a913b490cfd8e21da33cc9bf6cadf72aebdb110e38", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/curve25519-dalek-derive@0.1.1" }, "rule": { "namespace": "syft", "id": "curve25519-dalek-derive@0.1.1" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "5751ef29264c20e19c6275a8edbcb5fe4e9fd09f069d6478509958c3c665a5e5", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/der@0.7.10" }, "rule": { "namespace": "syft", "id": "der@0.7.10" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "abddfb4ca732e056419f5daea9c997464fb39a808c74315e77618f63aad577b5", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/digest@0.10.7" }, "rule": { "namespace": "syft", "id": "digest@0.10.7" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "09b4b23b72b30909f311f514c3047c3b683412752ce0f30b550c35f69175ccb1", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/ed25519@2.2.3" }, "rule": { "namespace": "syft", "id": "ed25519@2.2.3" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "5e9cb7bd671ff507af20938bceec17825515186a8d16aaaebdc53f2962c62f4d", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/ed25519-dalek@2.2.0" }, "rule": { "namespace": "syft", "id": "ed25519-dalek@2.2.0" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "ebfe761a2619776f2942064a3f4868f3e0008f237546af684b50af44dfc3b099", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/errno@0.3.14" }, "rule": { "namespace": "syft", "id": "errno@0.3.14" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "305b6e419555a415bf2c3931f34c2f2a305b322905e7d62a155a394c36a7f9ee", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "" }, "rule": { "namespace": "syft", "id": "falsegreen-ledger@0.1.0" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "037fe54909861dd855fbdb0b49d679ac7e8db1fef9f31cee62b92f74ea406033", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "" }, "rule": { "namespace": "syft", "id": "falsegreen-ledger-core@0.1.0" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "6114365595d08a3bfc7e5d101289c1511fd658287c777c4ec53b73a764a8419f", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/fastrand@2.5.0" }, "rule": { "namespace": "syft", "id": "fastrand@2.5.0" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "8c813dcb9098a7c8941eb1aaffa3513c58020c83e085b04e6767488e300c6c97", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/fiat-crypto@0.2.9" }, "rule": { "namespace": "syft", "id": "fiat-crypto@0.2.9" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "5e9894b399a2c47a307185031536daaee5ded5c707a623024827a381aad89903", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/generic-array@0.14.7" }, "rule": { "namespace": "syft", "id": "generic-array@0.14.7" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "992e1c30dd219f9cf75f520e5d8dbf0588faae5d1a6bc9f2607da898d9f5c847", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/getrandom@0.2.17" }, "rule": { "namespace": "syft", "id": "getrandom@0.2.17" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "11a15cd49953aaee1017644804d1c3f9e5c0f2dece9366168276bff362fc0d24", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/getrandom@0.4.3" }, "rule": { "namespace": "syft", "id": "getrandom@0.4.3" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "c2a49ee05fb8e39068222324fb06d7af16937aff1e9a9ea99a8e17acc514f457", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/heck@0.5.0" }, "rule": { "namespace": "syft", "id": "heck@0.5.0" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "e29ecb67830b5145d857685e3f25db579bbcf432c785c6d223baf8bea97d1a9d", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/hex@0.4.3" }, "rule": { "namespace": "syft", "id": "hex@0.4.3" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "b3d93215b7294d3158ac885a5f44df493b9205f88c1d1b8730891332fd3b7030", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/is_terminal_polyfill@1.70.2" }, "rule": { "namespace": "syft", "id": "is_terminal_polyfill@1.70.2" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "2198026ba7738261a15516b44aed3a688f8b546c317b64b35c08cd6141612cd3", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/itoa@1.0.18" }, "rule": { "namespace": "syft", "id": "itoa@1.0.18" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "61aaeff62260c1d967d95422d89a28bc19dd0e5a930b6c9dfd3f031a4999dd7f", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/libc@0.2.191" }, "rule": { "namespace": "syft", "id": "libc@0.2.191" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "9638a8b320f9ef1e348eb212d7b9b5aff9cff37075971380c717f44f8c144d91", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/linux-raw-sys@0.12.1" }, "rule": { "namespace": "syft", "id": "linux-raw-sys@0.12.1" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "e2d6e087930e3834218a876fdb280683d5efcdaf50ae2eab592e1e22f97d815d", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/memchr@2.8.3" }, "rule": { "namespace": "syft", "id": "memchr@2.8.3" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "06cfdd42abb0c9e4d1075d601a05b33ad12f4e0770c117f758e768a380957b48", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/once_cell@1.21.4" }, "rule": { "namespace": "syft", "id": "once_cell@1.21.4" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "25d8ffe4413b6cf3ccf7a0646d5136789bd33d4b513d6ef17a7f8549d27ff3c4", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/once_cell_polyfill@1.70.2" }, "rule": { "namespace": "syft", "id": "once_cell_polyfill@1.70.2" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "426f5a3c744e86d89a996166238d634b5159d615a2642460863a26de9ebe1afe", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/pkcs8@0.10.2" }, "rule": { "namespace": "syft", "id": "pkcs8@0.10.2" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "c694e303f6d517d79b9440f754fd2092277919227356a55095046c9b6938a128", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/ppv-lite86@0.2.21" }, "rule": { "namespace": "syft", "id": "ppv-lite86@0.2.21" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "83840aaef8208540db5387d039d782fb6638ce97e06bd3f18ce20661ab601f55", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/proc-macro2@1.0.107" }, "rule": { "namespace": "syft", "id": "proc-macro2@1.0.107" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "7ec44be48b990fd8c38cb446e9e2cde3c7a02c7b35c9e4514bf7974c9def81eb", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/quote@1.0.47" }, "rule": { "namespace": "syft", "id": "quote@1.0.47" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "e5bc87872cb19c9a211895bbde8092b0512f0338b0bde534dade96b289166a5b", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/r-efi@6.0.0" }, "rule": { "namespace": "syft", "id": "r-efi@6.0.0" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "f119984d74172df79e8ed614888308c422e4e3e76e09acdd7c7df03156c6ebab", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/rand@0.8.8" }, "rule": { "namespace": "syft", "id": "rand@0.8.8" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "da733f873e8e22258550231003a3cc91d78301c5807ea9c5c6c953bdfc93a386", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/rand_chacha@0.3.1" }, "rule": { "namespace": "syft", "id": "rand_chacha@0.3.1" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "303db3e1caa7ec327fb3d438d968f3ece32234dbb594a8d0ef3addca9bcb61de", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/rand_core@0.6.4" }, "rule": { "namespace": "syft", "id": "rand_core@0.6.4" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "8c2b4d1a270f8c039f231929858e0a81f04e4168eaa9e3884e96d2cf67fa0b9f", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/rustc_version@0.4.1" }, "rule": { "namespace": "syft", "id": "rustc_version@0.4.1" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "94f78cc0a41219cf8bd76e72370c1e3f7a25a1c5d3682c962ebcac51f96e6107", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/rustix@1.1.5" }, "rule": { "namespace": "syft", "id": "rustix@1.1.5" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "9e26a95ae3dfd058f160efaaad125c58e9e4df33de1cd9e89f238a5af96e1d8d", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/semver@1.0.28" }, "rule": { "namespace": "syft", "id": "semver@1.0.28" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "6b250dfbe70ae2dd0686b791c854ea29d60fcced5847ef1097b33776640b726b", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/serde@1.0.229" }, "rule": { "namespace": "syft", "id": "serde@1.0.229" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "0907c849ff021995b320333d903013c3e35609e44fdd439d0185cdd6b2b42b33", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/serde_core@1.0.229" }, "rule": { "namespace": "syft", "id": "serde_core@1.0.229" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "eea06b68ab5dfabe29545176a15ca67d241e54bcf1a54c735e99406c378c3b0d", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/serde_derive@1.0.229" }, "rule": { "namespace": "syft", "id": "serde_derive@1.0.229" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "567f9a6ec6dd74ea27cceeecd20cc8f83ec2bad60cb4992da15e71fa478e3c8b", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/serde_json@1.0.154" }, "rule": { "namespace": "syft", "id": "serde_json@1.0.154" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "1dc35a3d9010bd6a84e1fe0d75e39d2f1507e7d761fba360a6a011b297aff75b", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/sha2@0.10.9" }, "rule": { "namespace": "syft", "id": "sha2@0.10.9" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "039783866d8dc87a18a205702b098ce8341f6e3032a121b65f5888dbc79dbf86", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/signature@2.2.0" }, "rule": { "namespace": "syft", "id": "signature@2.2.0" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "64738dd926f6eb4044f0de2fde1b326703bbc228579b56e08373f9fb8b6936c3", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/smallvec@1.6.0" }, "rule": { "namespace": "syft", "id": "smallvec@1.6.0" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "b1b266ef80a1dcba71b6ea153bd32e5b3d9e89c33461e3638c6b56ecea92fde9", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/spki@0.7.3" }, "rule": { "namespace": "syft", "id": "spki@0.7.3" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "a2d0f5f6f8ebcca0da8bbf2c323fb2013afa905a47a570b6c73442bc9a5b8620", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/strsim@0.11.1" }, "rule": { "namespace": "syft", "id": "strsim@0.11.1" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "6ef75c868a28b31d2d9bdd28764b8c3e232fbcdb70190659f0ecebb57c8e2a3e", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/subtle@2.6.1" }, "rule": { "namespace": "syft", "id": "subtle@2.6.1" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "172012ad51c91dc3a2e8a3a4c30026893420917739d047e5dc8918d5af26e93e", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/syn@2.0.119" }, "rule": { "namespace": "syft", "id": "syn@2.0.119" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "4cf5b83b5e47207b200be1c28233d037d4896752b572d0edb52975dc429e0b1c", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/syn@3.0.9" }, "rule": { "namespace": "syft", "id": "syn@3.0.9" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "96826fe9035d6551629c4e2a5e7d6f2df945796fac5128adf613901f231612ce", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/tempfile@3.27.0" }, "rule": { "namespace": "syft", "id": "tempfile@3.27.0" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "4cabb90893a6e49358a09f507c1134173b15a041a74b54cf9d4c1d93ce6d2e82", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/typenum@1.20.1" }, "rule": { "namespace": "syft", "id": "typenum@1.20.1" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "cdf512d7b7b4b6aad7b87252ee1d8aa13deced196dc20e86af4c693914775db0", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/unicode-ident@1.0.27" }, "rule": { "namespace": "syft", "id": "unicode-ident@1.0.27" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "493be846b106eef3741941ff4fbf118d156cd42bcbf90ef0820faff50ed6aeb4", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/utf8parse@0.2.2" }, "rule": { "namespace": "syft", "id": "utf8parse@0.2.2" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "4113c0d164e406e3897d48a025ec03de3591018065c023d609aa9a1a24a8535e", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/version_check@0.9.5" }, "rule": { "namespace": "syft", "id": "version_check@0.9.5" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "2908eeb04b59a653d934e0cdb89832021bfaa96dec7ff3dafcffbf192d06ba0b", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/wasi@0.11.1%2Bwasi-snapshot-preview1" }, "rule": { "namespace": "syft", "id": "wasi@0.11.1+wasi-snapshot-preview1" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "6e216a5e2b506734f75006b2f0a084aa655272534631ff3e365dae942872f46e", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/windows-link@0.2.1" }, "rule": { "namespace": "syft", "id": "windows-link@0.2.1" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "9077dd0b2b86b914f0b095c8d6bcc189167ee95b7021993b57088bd5e25c724f", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/windows-sys@0.61.2" }, "rule": { "namespace": "syft", "id": "windows-sys@0.61.2" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "e88bf689d1aa0a4bcdfaefe867dd26346df4be90d067004b93b7d73fb75cfe38", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/zerocopy@0.8.63" }, "rule": { "namespace": "syft", "id": "zerocopy@0.8.63" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "2f618422a7648ae74d807312d3a397d16eef2a47e85b7a412fe58ff50268a109", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/zerocopy-derive@0.8.63" }, "rule": { "namespace": "syft", "id": "zerocopy-derive@0.8.63" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "3cfb926e0c9258ea27f8d32a2de899d498b245fbd099dff9cbf872a3d9832914", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/zeroize@1.9.1" }, "rule": { "namespace": "syft", "id": "zeroize@1.9.1" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "57cc8ce7a77d7b267625f03e149331e422afd6e028ace34137fe11514f19b0e4", "class": "supply_chain", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/zmij@1.0.23" }, "rule": { "namespace": "syft", "id": "zmij@1.0.23" }, "state": "open", "evidence_refs": [ "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "3cb3f72855ec8da34228f8a8b8b49d110c5f6296126a0396e384b78dff93858b", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/anstream@1.0.0" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "105d7e1b0ce045f5eaecf4886b2a3a53f11740059022390aeed0641349be6370", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/anstyle@1.0.14" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "6a1bdd16582f18fdb1fa91303573db6370cbc6c6791e13662c519f3bf67e2b58", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/anstyle-parse@1.0.0" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "c32d140352b51004cc522860ec69e78b1648a34309a6a9be6f3bcdf6b34c3ea8", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/anstyle-query@1.1.5" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "4e5f3b8af12d986d540eb760ff9cd8b6855eaad28f2aad327cfb27528eddab32", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/anstyle-wincon@3.0.11" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "d87de0e2410e4ce9c1b03a1c509b3ddf5960b0936f81d4647ba1c5d6d89fc86b", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/base64ct@1.8.3" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "0ae447b9c774db7ecc15622af01746eae86cf6f47a4192ff75afdbb184bd4f0d", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/bitflags@2.13.2" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "88f6dcc043cb942462a57d4e8de3f5e67de6a2bcfe84ec10f2977e7df83f3f70", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/block-buffer@0.10.4" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "6dc467fded10560a16e1a85aae690fdd4d560ab3a7854ff858b0790cbced7ab2", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/cfg-if@1.0.5" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "d62527e65bfebf56c615db5a8b57a52ebb14d9d01d5737b36026ffcd385e020f", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/clap@4.6.7" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "5022223658ce227834152beda2f8039c2f620048d573cdfafca1df7435cd10a4", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/clap_builder@4.6.7" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "b4acb80d59203342fec461529a44fbdf49e70bc6ca659f541896faa542ea43c5", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/clap_derive@4.6.7" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "f18f5e7c89578e9678c5c7348530bcd16566d209feb0453558bd4177a56e4519", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/clap_lex@1.1.1" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "3aa7445371bcced37f805b8b93e9c78dc9638f3ebccedb2087fd6a4bf369b408", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/colorchoice@1.0.5" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "e23a545bde38131ecd1958e9a627d1c94d4e1e13ac04f45d6d19ea0ba3ffa3d6", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/const-oid@0.9.6" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "524744fd861891b779e920a35054e452215c00ca7ad2ecd0c314ce8176be8972", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/cpufeatures@0.2.17" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "7f21367b3adac10c420edf92206d55530b768dbb37f26d97ab71624f4897a4ef", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/crypto-common@0.1.7" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "fe2c38830f0c36aa5c2b7e92c8ce6e5f5ffce3359ea8c601e5c38043e1bdf8a2", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/curve25519-dalek@4.1.3" }, "rule": { "namespace": "license", "id": "BSD-3-Clause" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "22e858ebe1e0cd3085665c0b1ddb0258c163e74d25bd86359b4b5f2a6c9ac9a4", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/curve25519-dalek-derive@0.1.1" }, "rule": { "namespace": "license", "id": "MIT/Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "1d544f0845dcc666855e99dd2b294924d14fc9a59ee95d04ab545ef5a456563a", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/der@0.7.10" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "52412f24e374c82ecd63af7620df4b525ebf66faccde3420a82407886bd0c284", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/digest@0.10.7" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "ae41ba9e474899a525f07dedebf70d5b4d90f42b867dade39a918ff0dc56cdbd", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/ed25519@2.2.3" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "bfba5b2b48789d0999e04341c49eb12720a3312e6c03ae463dc733e6fbb7f47a", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/ed25519-dalek@2.2.0" }, "rule": { "namespace": "license", "id": "BSD-3-Clause" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "3e1257c111ee0929dbe8413202dd62d02da5e23805b3c7b82ee7db2e60e2e5bf", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/errno@0.3.14" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "413b301a14873d3fa09cfbeb904a1753aff90083f7faf45c9fa10ae41e514c95", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/fastrand@2.5.0" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "ca89f09616c15bc6e6aac2d3d9a826d665ed042c69fe8093e11ca0e11215fa88", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/fiat-crypto@0.2.9" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0 OR BSD-1-Clause" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "b56a6ad063aa5b2a36eb7f5ca9f3d6a67d4edee01d6b1bf01994bd1049382aa1", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/generic-array@0.14.7" }, "rule": { "namespace": "license", "id": "MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "a2e087ff1e664313a70e2e8ce7eed24cea66820e3750c483ddf3f4d1e254d8bf", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/getrandom@0.2.17" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "e8a05789f8c7ca2d56115d6721959efab7dee18603092589b99cc0603b4e4931", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/getrandom@0.4.3" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "a045045ab5f79bbc6d89c842641627a66ef7838cf2c4a6956b7cdb1c8adcce1f", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/heck@0.5.0" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "2bfc1148428c407eb319a7e6c10fde0605121ffa1716eaa1db0ddd9d8aad5e7b", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/hex@0.4.3" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "1607bce4d21887f6c3c6cd523cd4781bb966af2914910df1bf0813f5ca357718", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/is_terminal_polyfill@1.70.2" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "44e4a8a96ba5fffac1618980329c98bbaae8b6acc5365659a688553c4c36f5cd", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/itoa@1.0.18" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "90ce55778cfac3e0f098de0b24f5e2e035d65d0b28f7c09647bf2a433f0ced65", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/libc@0.2.191" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "92fa2f521dd2cabdf45f3ba7d0efa52f4d91674015be492d2f7fd994d1843c9b", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/linux-raw-sys@0.12.1" }, "rule": { "namespace": "license", "id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "71154f949e7c2014f20dbe7d654741451e3def11140bc8612e413c799d1d8c28", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/memchr@2.8.3" }, "rule": { "namespace": "license", "id": "Unlicense OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "72d443496cd2f5431e7f4347680d3790fed414966236ac9d635539cddfc310d7", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/once_cell@1.21.4" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "d0ca8c614318f904a95eef3273640692f921fbea88f4681b46a944098a7f4767", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/once_cell_polyfill@1.70.2" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "33502fd83559ad67d44c080bde985d7528478ab1397cfd11a8218d36537c4e31", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/pkcs8@0.10.2" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "f36a59e9dbd1511f0ef2b47db501e35a66e0dd081a18f992255f811a35b17415", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/ppv-lite86@0.2.21" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "875825c505903cfb9b602a23e74f0edf7eb1621583ed9e583c410103af3d402d", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/proc-macro2@1.0.107" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "d94338e54aeaf7fdb9048fc5ec3defa5504f99aab2210cec5156b23ac309f0fd", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/quote@1.0.47" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "73c9c8606efa4200ec16f7e1121489b31dba86fe5c2093dd9907af8d742ee0d3", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/r-efi@6.0.0" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0 OR LGPL-2.1-or-later" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "583bffa666173cd89ec5435a820a182f195e80ec3430f14ae356e22996f0c604", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/rand@0.8.8" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "c25b8b5f19fbb27189204b7c69f7d0bb55b519b678667bf698371f8884cc9037", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/rand_chacha@0.3.1" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "9b2b8375abad347b471c42d1cf7a4c0535119bbe425e5485aad498ec17f767c4", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/rand_core@0.6.4" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "175e264aed60c77f52af0e9e671e8ac55bec5e6e45abdc84a5ebcb3ec8228a32", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/rustc_version@0.4.1" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "0af9738feb17c972c978f5fb2a9d015e97b728ba66aa088f9c16113be8df3a91", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/rustix@1.1.5" }, "rule": { "namespace": "license", "id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "2dba13d7eff3023b8735741b2cebfcf48401ab80634cc83fa074d62e0029c6e5", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/semver@1.0.28" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "b7f56764e7744f74cad3387a716a5246077d8c6e9f0089883df0dbb8288aeb5d", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/serde@1.0.229" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "881652ce03c9fbb009ba2d5e92cacd9454e5366d43e3712ab99c1a0bb52cb0c8", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/serde_core@1.0.229" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "7d3cf8ea302039c6b559c6537f587340c694b5e20193dbc5bcb157a006d26b8a", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/serde_derive@1.0.229" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "da48400504894d432651db8f2dc88973bc202459db2f7d825ad79be718e1475d", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/serde_json@1.0.154" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "4e1769b1e32b9db38c1c88b395bbb79d75dbc84ccebcd482bc8e372323612ea5", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/sha2@0.10.9" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "7d786c3589077e405f9f6eefb654a291c2151ab077bdf2fd98c88ca1872cb009", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/signature@2.2.0" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "137f488cae7954a76b606a56914e8a17efe4b31f2b08ac1e0f518150c86ca603", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/smallvec@1.6.0" }, "rule": { "namespace": "license", "id": "MIT/Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "2da68b323dc569bcbc497ed8b2cfb0120654e76776cf3c35f8d3e950f5747bc0", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/spki@0.7.3" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "190387b967c5696b7e77e95e77baff38bd4c4cf266e724c09cc8cc70dc665da5", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/strsim@0.11.1" }, "rule": { "namespace": "license", "id": "MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "f09ee24c509b49380459f50c80591806cd7c73ad6c6c2dc99229670041fee674", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/subtle@2.6.1" }, "rule": { "namespace": "license", "id": "BSD-3-Clause" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "88cca70db371b2eb5db003aa26dca694e18d04d14f10fea6bb7b77c9d8a5915c", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/syn@2.0.119" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "15bedfcd4863b93f38b7d0bc2bd56e41531843d5c2953974ebb947a686aebc48", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/syn@3.0.9" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "1c2df16adcb1e41856c04a70f745f44ed8efe15e1f2423e4d6a024902014f96c", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/tempfile@3.27.0" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "7ce501395a51a046ddd2de234813e8610fecb37a279dd7581b6a230876216f09", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/typenum@1.20.1" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "10ebd1e19e81d1b55e547bcf583a4da0d086d5d47b86817360bc2d6fa1daecc8", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/unicode-ident@1.0.27" }, "rule": { "namespace": "license", "id": "(MIT OR Apache-2.0) AND Unicode-3.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "2a48ac251537ab5616cb3a1c8b7c09ed5253e442bcb585a6a812cc2e12df9a99", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/utf8parse@0.2.2" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "a178fed10f746a25a38e1a123cff01f7148bdfc82f2d75d55aa653a382c86dcb", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/version_check@0.9.5" }, "rule": { "namespace": "license", "id": "MIT/Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "b505efbcbc2188a627d169bdbdc34901dec4f22b50255975c9c07961ddf3391d", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/wasi@0.11.1+wasi-snapshot-preview1" }, "rule": { "namespace": "license", "id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "7cc0ff2a3a61ff414a371dabeaef2dfd080dc6981383f0d056f5807f9f7f7716", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/windows-link@0.2.1" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "88f3e265d85daf89a5f53123d8cb24aa877f866f5a9e0798e3fcbfba44e07401", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/windows-sys@0.61.2" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "ccde7aa1c7e4a197172dbdd8d438652d4e46433fa65f363abd51fd3f4d5e042a", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/zerocopy@0.8.63" }, "rule": { "namespace": "license", "id": "BSD-2-Clause OR Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "155008951dcca3c42ca968720dec1ba279f3836ef1c6921e7384a41ced42b7fb", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/zerocopy-derive@0.8.63" }, "rule": { "namespace": "license", "id": "BSD-2-Clause OR Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "44f17f90be8e27066147ced08a81acf0709bf297e99ffb794be4f91f07a37819", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/zeroize@1.9.1" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" }, { "id": "9c06bc92074e46c9fad575585278ef5b558d6f9e86471f5f1afb991819aab2c7", "class": "license", "subject": { "specimen_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "component_id": "pkg:cargo/zmij@1.0.23" }, "rule": { "namespace": "license", "id": "MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:51:44.362638861Z" } ], "witnesses": [ { "tool": "osv-scanner", "version": "2.7.0", "binary_digest": "160c6253e2922e9e0a6a9771c5c4c40a4b3c6090b34a3cdd5e80c96cc2e4218b", "config_digest": "0c3d6fef8ea59e1de5610e13ccb1035a7232318288aaed517ee2feec9402455a", "invocation_digest": "ac16580f3759d425c22f939caf047faa04f51428b6faec95432fb11d9f6bac0c", "input_subject_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "bc3a9475f41113399b37bbb06fa93ad463c0c15a2a842fcc5ec6a352dbcead48", "normalized_evidence_digest": "a01c9fbe2e0f89ba51e98a9f9adb3e2221181b02f05426888a8e8e1d4c6f99a0", "limitations": [ "osv-scanner checks registry-based ecosystems (crates.io in 0.6.0); git-sourced dependencies (lean [[require]], gpr) have no advisory database — Insufficient Evidence for them, never a silent pass" ], "evidence_class": "dependency_vulnerability", "observed_at": "2026-10-21T17:51:44.362638861Z" }, { "tool": "semgrep", "version": "1.181.0", "binary_digest": "c29de7c43986faa3c3ca5a8acf1d115811e15ab305ba7657b79e775d40e16391", "config_digest": "206116bd213f0786f8378755ad48adbccfe30376afe8fe2ecdd24eb44161d009", "invocation_digest": "1e54512445675df2d7018f991bdf25c566833d99eeae47599057456c5cf30c7f", "input_subject_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "80c185ac8e17503197e8195c202d98db3f0cd3865a37ba7065f37bdbf2a58d54", "normalized_evidence_digest": "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "limitations": [], "evidence_class": "static_analysis", "observed_at": "2026-10-21T17:51:44.362638861Z" }, { "tool": "gitleaks", "version": "8.30.1", "binary_digest": "88f91962aa2f93ac6ab281d553b9e125f5197bbbce38f9f2437f7299c32e5509", "config_digest": "e1f77c307b36a43d3707ab5fed4a4007f6d63d9302bcf0d5509cd3e52e32ed6f", "invocation_digest": "aa4b8fd36f7f5b2301b5594c131f3e6cb4d9402214729243829876ac807d5d6b", "input_subject_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "37517e5f3dc66819f61f5a7bb8ace1921282415f10551d2defa5c3eb0985b570", "normalized_evidence_digest": "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "limitations": [], "evidence_class": "secret", "observed_at": "2026-10-21T17:51:44.362638861Z" }, { "tool": "syft", "version": "1.54.1", "binary_digest": "dbf75864e7a7ff9e1fbf00552c31483f693188632a9f68f343cd7653dac513d6", "config_digest": "b6f045a568b2dd1dcd1a1723f4eb0b8f5863215301ced35067a5f7a53c07c7e6", "invocation_digest": "e359dbe5b043da4c0faa86a7829cf344befe92895850aa43295fb3a04f1097e8", "input_subject_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5", "normalized_evidence_digest": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "limitations": [], "evidence_class": "supply_chain", "observed_at": "2026-10-21T17:51:44.362638861Z" }, { "tool": "dependency-manifest", "version": "1", "binary_digest": "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4", "config_digest": "2402cf6f9fd45d6c6d7b9bc10abdba72e36d61e88515a01d2cda19ee8d375b3b", "invocation_digest": "967c9f01ac4955d8e0637edaf1fae1171a965f2f40111bdbcd053a12c7f2137a", "input_subject_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4", "normalized_evidence_digest": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "limitations": [ "license facts are the job dependency manifest's registry SPDX ids; the workspace's own code and git-sourced dependencies carry no registry license facts" ], "evidence_class": "license", "observed_at": "2026-10-21T17:51:44.362638861Z" } ], "vulnerability_snapshot": { "source_identity": "osv.dev", "snapshot_identity": "osv-dev-20261021-457e10c8", "observed_at": "2026-10-21T17:30:12Z", "freshness_hours": 24 }, "exceptions": [], "open_findings": 2, "satisfied": false, "evaluated_at": "2026-10-26T05:58:17.902953173Z" } }, { "index": 2, "outcome": "Insufficient", "at": "2026-10-21T17:54:42.890788Z", "duration_ms": 29184, "source_sha256": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "security": { "policy": { "id": "falsegreen-platform", "version": "1", "digest": "372d3c74758acb113c1bef14b20b08b326a7703dd57d943247de6541743c0fad", "required": [ "dependency_vulnerability", "static_analysis", "secret", "supply_chain", "license" ], "minimum_witnesses": 1, "fail_on_severities": [ "critical", "high" ], "unknown_severity": "insufficient", "secrets_fail_on_any_unexcepted": true, "required_standards": [], "unavailable_behavior": "insufficient" }, "language": "", "classes": [ { "class": "dependency_vulnerability", "required": true, "status": "fail", "witness_refs": [ "a01c9fbe2e0f89ba51e98a9f9adb3e2221181b02f05426888a8e8e1d4c6f99a0" ], "reasons": [ "vulnerability snapshot is stale (observed 2026-10-21T17:30:12Z, freshness bound 24h)", "finding 5046f75b49bcc91e972fe6e37dff89bd730acac66b5c0835cdfea59610c6a9a5 severity `high` is frozen-fail (osv/RUSTSEC-2021-0003)", "finding 538efbca6ab37d1de7206475fd690628e0d69cbb5b3b1d27719f69b6caaf43f7 severity `high` is frozen-fail (osv/GHSA-43w2-9j62-hq99)" ] }, { "class": "static_analysis", "required": true, "status": "pass", "witness_refs": [ "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945" ], "reasons": [] }, { "class": "secret", "required": true, "status": "pass", "witness_refs": [ "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945" ], "reasons": [] }, { "class": "supply_chain", "required": true, "status": "pass", "witness_refs": [ "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db" ], "reasons": [] }, { "class": "license", "required": true, "status": "not_assessed", "witness_refs": [ "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a" ], "reasons": [ "no licence policy frozen — the licence facts are inventory, nothing was asserted" ] } ], "findings": [ { "id": "5046f75b49bcc91e972fe6e37dff89bd730acac66b5c0835cdfea59610c6a9a5", "class": "dependency_vulnerability", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:crates.io/smallvec@1.6.0" }, "rule": { "namespace": "osv", "id": "RUSTSEC-2021-0003" }, "severity": { "value": "high" }, "state": "open", "evidence_refs": [ "81c474ee9e32281e85a443e152eed7008437c0b75bd32bf7837120d228cb99b8" ], "witness_tool_ref": "a01c9fbe2e0f89ba51e98a9f9adb3e2221181b02f05426888a8e8e1d4c6f99a0", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "538efbca6ab37d1de7206475fd690628e0d69cbb5b3b1d27719f69b6caaf43f7", "class": "dependency_vulnerability", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:crates.io/smallvec@1.6.0" }, "rule": { "namespace": "osv", "id": "GHSA-43w2-9j62-hq99" }, "severity": { "value": "high" }, "state": "open", "evidence_refs": [ "81c474ee9e32281e85a443e152eed7008437c0b75bd32bf7837120d228cb99b8" ], "witness_tool_ref": "a01c9fbe2e0f89ba51e98a9f9adb3e2221181b02f05426888a8e8e1d4c6f99a0", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "585dc8dd419afdf4e9bf3c874f2701e31d5f3338bc9b4203dc562020a35876ec", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/anstream@1.0.0" }, "rule": { "namespace": "syft", "id": "anstream@1.0.0" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "5812a90517ca8a7be4835875c4821ace43a4835c915372e2902c66fdb38fdc43", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/anstyle@1.0.14" }, "rule": { "namespace": "syft", "id": "anstyle@1.0.14" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "0c2acffbd95840f484ecf5ead5dbf02d3043c8cd99e95cffcecb6dd06aad1689", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/anstyle-parse@1.0.0" }, "rule": { "namespace": "syft", "id": "anstyle-parse@1.0.0" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "38e530b1f35c1f97754741dcb41c150fc5f37b19537d0a862f1cf412d5d5eb77", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/anstyle-query@1.1.5" }, "rule": { "namespace": "syft", "id": "anstyle-query@1.1.5" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "43a7bbf00d060e71d216d2dba5a8507586b4879c8c606cb5701f4721a1340984", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/anstyle-wincon@3.0.11" }, "rule": { "namespace": "syft", "id": "anstyle-wincon@3.0.11" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "b53200027bb397c19303a57035a312ff9896f23494778cfe8417bf3b566802b7", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/base64ct@1.8.3" }, "rule": { "namespace": "syft", "id": "base64ct@1.8.3" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "a27f471935b3ca54a96a87c1168029f17d49df469b5d7fb9768f5be6a479cb5a", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/bitflags@2.13.2" }, "rule": { "namespace": "syft", "id": "bitflags@2.13.2" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "d954449ff474a768cbba77304caa220f9361597bbb1fdcfa4f395dc2ff3ab6a3", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/block-buffer@0.10.4" }, "rule": { "namespace": "syft", "id": "block-buffer@0.10.4" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "298a3dc87ed455182e39269edd7bcb85eb69d2fdfaed33bb248b55ce4ef400bf", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/cfg-if@1.0.5" }, "rule": { "namespace": "syft", "id": "cfg-if@1.0.5" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "c945fdb692b50e54a5707923beed9b74cc8840b872dda759232c54f54faf3e13", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/clap@4.6.7" }, "rule": { "namespace": "syft", "id": "clap@4.6.7" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "4c660220014879503df0995f4e53893f079ed601c9ca4351754a91d944cd5747", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/clap_builder@4.6.7" }, "rule": { "namespace": "syft", "id": "clap_builder@4.6.7" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "8bb04af9d989b5eb357e0b7a5a47760babc2e2e30e6622131f0b704e82099de2", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/clap_derive@4.6.7" }, "rule": { "namespace": "syft", "id": "clap_derive@4.6.7" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "0806d9370588be53df7d7e7b13b4cd97fe96353945c1a2e612f0cb42e6b0a9fa", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/clap_lex@1.1.1" }, "rule": { "namespace": "syft", "id": "clap_lex@1.1.1" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "564bee5e0ca4f5b0b9d5c7f3c80949c2379225cc93896b64d7cf40572e67f707", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/colorchoice@1.0.5" }, "rule": { "namespace": "syft", "id": "colorchoice@1.0.5" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "e67b364fc025909689d2318cd8edbb4eff67f8550970a92413e57be11015fa73", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/const-oid@0.9.6" }, "rule": { "namespace": "syft", "id": "const-oid@0.9.6" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "6d706f34a5c990989290bf9a40545e25199499f4d7896fb17db92c9f5704d9dd", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/cpufeatures@0.2.17" }, "rule": { "namespace": "syft", "id": "cpufeatures@0.2.17" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "145a268fb83cc9efa6d7dbc1f2c7a5bb878887bd309a7a13c70db7c26a3dd4a6", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/crypto-common@0.1.7" }, "rule": { "namespace": "syft", "id": "crypto-common@0.1.7" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "787a89ac66a8ee454e76700ba05fd7449ee2e0a02adba4d5703b4e43a3ad63ee", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/curve25519-dalek@4.1.3" }, "rule": { "namespace": "syft", "id": "curve25519-dalek@4.1.3" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "e363a3158ed291249701f7a913b490cfd8e21da33cc9bf6cadf72aebdb110e38", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/curve25519-dalek-derive@0.1.1" }, "rule": { "namespace": "syft", "id": "curve25519-dalek-derive@0.1.1" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "5751ef29264c20e19c6275a8edbcb5fe4e9fd09f069d6478509958c3c665a5e5", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/der@0.7.10" }, "rule": { "namespace": "syft", "id": "der@0.7.10" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "abddfb4ca732e056419f5daea9c997464fb39a808c74315e77618f63aad577b5", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/digest@0.10.7" }, "rule": { "namespace": "syft", "id": "digest@0.10.7" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "09b4b23b72b30909f311f514c3047c3b683412752ce0f30b550c35f69175ccb1", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/ed25519@2.2.3" }, "rule": { "namespace": "syft", "id": "ed25519@2.2.3" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "5e9cb7bd671ff507af20938bceec17825515186a8d16aaaebdc53f2962c62f4d", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/ed25519-dalek@2.2.0" }, "rule": { "namespace": "syft", "id": "ed25519-dalek@2.2.0" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "ebfe761a2619776f2942064a3f4868f3e0008f237546af684b50af44dfc3b099", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/errno@0.3.14" }, "rule": { "namespace": "syft", "id": "errno@0.3.14" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "305b6e419555a415bf2c3931f34c2f2a305b322905e7d62a155a394c36a7f9ee", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "" }, "rule": { "namespace": "syft", "id": "falsegreen-ledger@0.1.0" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "037fe54909861dd855fbdb0b49d679ac7e8db1fef9f31cee62b92f74ea406033", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "" }, "rule": { "namespace": "syft", "id": "falsegreen-ledger-core@0.1.0" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "6114365595d08a3bfc7e5d101289c1511fd658287c777c4ec53b73a764a8419f", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/fastrand@2.5.0" }, "rule": { "namespace": "syft", "id": "fastrand@2.5.0" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "8c813dcb9098a7c8941eb1aaffa3513c58020c83e085b04e6767488e300c6c97", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/fiat-crypto@0.2.9" }, "rule": { "namespace": "syft", "id": "fiat-crypto@0.2.9" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "5e9894b399a2c47a307185031536daaee5ded5c707a623024827a381aad89903", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/generic-array@0.14.7" }, "rule": { "namespace": "syft", "id": "generic-array@0.14.7" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "992e1c30dd219f9cf75f520e5d8dbf0588faae5d1a6bc9f2607da898d9f5c847", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/getrandom@0.2.17" }, "rule": { "namespace": "syft", "id": "getrandom@0.2.17" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "11a15cd49953aaee1017644804d1c3f9e5c0f2dece9366168276bff362fc0d24", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/getrandom@0.4.3" }, "rule": { "namespace": "syft", "id": "getrandom@0.4.3" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "c2a49ee05fb8e39068222324fb06d7af16937aff1e9a9ea99a8e17acc514f457", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/heck@0.5.0" }, "rule": { "namespace": "syft", "id": "heck@0.5.0" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "e29ecb67830b5145d857685e3f25db579bbcf432c785c6d223baf8bea97d1a9d", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/hex@0.4.3" }, "rule": { "namespace": "syft", "id": "hex@0.4.3" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "b3d93215b7294d3158ac885a5f44df493b9205f88c1d1b8730891332fd3b7030", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/is_terminal_polyfill@1.70.2" }, "rule": { "namespace": "syft", "id": "is_terminal_polyfill@1.70.2" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "2198026ba7738261a15516b44aed3a688f8b546c317b64b35c08cd6141612cd3", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/itoa@1.0.18" }, "rule": { "namespace": "syft", "id": "itoa@1.0.18" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "61aaeff62260c1d967d95422d89a28bc19dd0e5a930b6c9dfd3f031a4999dd7f", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/libc@0.2.191" }, "rule": { "namespace": "syft", "id": "libc@0.2.191" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "9638a8b320f9ef1e348eb212d7b9b5aff9cff37075971380c717f44f8c144d91", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/linux-raw-sys@0.12.1" }, "rule": { "namespace": "syft", "id": "linux-raw-sys@0.12.1" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "e2d6e087930e3834218a876fdb280683d5efcdaf50ae2eab592e1e22f97d815d", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/memchr@2.8.3" }, "rule": { "namespace": "syft", "id": "memchr@2.8.3" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "06cfdd42abb0c9e4d1075d601a05b33ad12f4e0770c117f758e768a380957b48", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/once_cell@1.21.4" }, "rule": { "namespace": "syft", "id": "once_cell@1.21.4" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "25d8ffe4413b6cf3ccf7a0646d5136789bd33d4b513d6ef17a7f8549d27ff3c4", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/once_cell_polyfill@1.70.2" }, "rule": { "namespace": "syft", "id": "once_cell_polyfill@1.70.2" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "426f5a3c744e86d89a996166238d634b5159d615a2642460863a26de9ebe1afe", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/pkcs8@0.10.2" }, "rule": { "namespace": "syft", "id": "pkcs8@0.10.2" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "c694e303f6d517d79b9440f754fd2092277919227356a55095046c9b6938a128", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/ppv-lite86@0.2.21" }, "rule": { "namespace": "syft", "id": "ppv-lite86@0.2.21" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "83840aaef8208540db5387d039d782fb6638ce97e06bd3f18ce20661ab601f55", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/proc-macro2@1.0.107" }, "rule": { "namespace": "syft", "id": "proc-macro2@1.0.107" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "7ec44be48b990fd8c38cb446e9e2cde3c7a02c7b35c9e4514bf7974c9def81eb", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/quote@1.0.47" }, "rule": { "namespace": "syft", "id": "quote@1.0.47" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "e5bc87872cb19c9a211895bbde8092b0512f0338b0bde534dade96b289166a5b", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/r-efi@6.0.0" }, "rule": { "namespace": "syft", "id": "r-efi@6.0.0" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "f119984d74172df79e8ed614888308c422e4e3e76e09acdd7c7df03156c6ebab", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/rand@0.8.8" }, "rule": { "namespace": "syft", "id": "rand@0.8.8" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "da733f873e8e22258550231003a3cc91d78301c5807ea9c5c6c953bdfc93a386", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/rand_chacha@0.3.1" }, "rule": { "namespace": "syft", "id": "rand_chacha@0.3.1" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "303db3e1caa7ec327fb3d438d968f3ece32234dbb594a8d0ef3addca9bcb61de", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/rand_core@0.6.4" }, "rule": { "namespace": "syft", "id": "rand_core@0.6.4" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "8c2b4d1a270f8c039f231929858e0a81f04e4168eaa9e3884e96d2cf67fa0b9f", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/rustc_version@0.4.1" }, "rule": { "namespace": "syft", "id": "rustc_version@0.4.1" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "94f78cc0a41219cf8bd76e72370c1e3f7a25a1c5d3682c962ebcac51f96e6107", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/rustix@1.1.5" }, "rule": { "namespace": "syft", "id": "rustix@1.1.5" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "9e26a95ae3dfd058f160efaaad125c58e9e4df33de1cd9e89f238a5af96e1d8d", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/semver@1.0.28" }, "rule": { "namespace": "syft", "id": "semver@1.0.28" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "6b250dfbe70ae2dd0686b791c854ea29d60fcced5847ef1097b33776640b726b", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/serde@1.0.229" }, "rule": { "namespace": "syft", "id": "serde@1.0.229" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "0907c849ff021995b320333d903013c3e35609e44fdd439d0185cdd6b2b42b33", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/serde_core@1.0.229" }, "rule": { "namespace": "syft", "id": "serde_core@1.0.229" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "eea06b68ab5dfabe29545176a15ca67d241e54bcf1a54c735e99406c378c3b0d", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/serde_derive@1.0.229" }, "rule": { "namespace": "syft", "id": "serde_derive@1.0.229" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "567f9a6ec6dd74ea27cceeecd20cc8f83ec2bad60cb4992da15e71fa478e3c8b", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/serde_json@1.0.154" }, "rule": { "namespace": "syft", "id": "serde_json@1.0.154" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "1dc35a3d9010bd6a84e1fe0d75e39d2f1507e7d761fba360a6a011b297aff75b", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/sha2@0.10.9" }, "rule": { "namespace": "syft", "id": "sha2@0.10.9" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "039783866d8dc87a18a205702b098ce8341f6e3032a121b65f5888dbc79dbf86", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/signature@2.2.0" }, "rule": { "namespace": "syft", "id": "signature@2.2.0" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "64738dd926f6eb4044f0de2fde1b326703bbc228579b56e08373f9fb8b6936c3", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/smallvec@1.6.0" }, "rule": { "namespace": "syft", "id": "smallvec@1.6.0" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "b1b266ef80a1dcba71b6ea153bd32e5b3d9e89c33461e3638c6b56ecea92fde9", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/spki@0.7.3" }, "rule": { "namespace": "syft", "id": "spki@0.7.3" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "a2d0f5f6f8ebcca0da8bbf2c323fb2013afa905a47a570b6c73442bc9a5b8620", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/strsim@0.11.1" }, "rule": { "namespace": "syft", "id": "strsim@0.11.1" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "6ef75c868a28b31d2d9bdd28764b8c3e232fbcdb70190659f0ecebb57c8e2a3e", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/subtle@2.6.1" }, "rule": { "namespace": "syft", "id": "subtle@2.6.1" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "172012ad51c91dc3a2e8a3a4c30026893420917739d047e5dc8918d5af26e93e", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/syn@2.0.119" }, "rule": { "namespace": "syft", "id": "syn@2.0.119" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "4cf5b83b5e47207b200be1c28233d037d4896752b572d0edb52975dc429e0b1c", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/syn@3.0.9" }, "rule": { "namespace": "syft", "id": "syn@3.0.9" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "96826fe9035d6551629c4e2a5e7d6f2df945796fac5128adf613901f231612ce", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/tempfile@3.27.0" }, "rule": { "namespace": "syft", "id": "tempfile@3.27.0" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "4cabb90893a6e49358a09f507c1134173b15a041a74b54cf9d4c1d93ce6d2e82", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/typenum@1.20.1" }, "rule": { "namespace": "syft", "id": "typenum@1.20.1" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "cdf512d7b7b4b6aad7b87252ee1d8aa13deced196dc20e86af4c693914775db0", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/unicode-ident@1.0.27" }, "rule": { "namespace": "syft", "id": "unicode-ident@1.0.27" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "493be846b106eef3741941ff4fbf118d156cd42bcbf90ef0820faff50ed6aeb4", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/utf8parse@0.2.2" }, "rule": { "namespace": "syft", "id": "utf8parse@0.2.2" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "4113c0d164e406e3897d48a025ec03de3591018065c023d609aa9a1a24a8535e", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/version_check@0.9.5" }, "rule": { "namespace": "syft", "id": "version_check@0.9.5" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "2908eeb04b59a653d934e0cdb89832021bfaa96dec7ff3dafcffbf192d06ba0b", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/wasi@0.11.1%2Bwasi-snapshot-preview1" }, "rule": { "namespace": "syft", "id": "wasi@0.11.1+wasi-snapshot-preview1" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "6e216a5e2b506734f75006b2f0a084aa655272534631ff3e365dae942872f46e", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/windows-link@0.2.1" }, "rule": { "namespace": "syft", "id": "windows-link@0.2.1" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "9077dd0b2b86b914f0b095c8d6bcc189167ee95b7021993b57088bd5e25c724f", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/windows-sys@0.61.2" }, "rule": { "namespace": "syft", "id": "windows-sys@0.61.2" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "e88bf689d1aa0a4bcdfaefe867dd26346df4be90d067004b93b7d73fb75cfe38", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/zerocopy@0.8.63" }, "rule": { "namespace": "syft", "id": "zerocopy@0.8.63" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "2f618422a7648ae74d807312d3a397d16eef2a47e85b7a412fe58ff50268a109", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/zerocopy-derive@0.8.63" }, "rule": { "namespace": "syft", "id": "zerocopy-derive@0.8.63" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "3cfb926e0c9258ea27f8d32a2de899d498b245fbd099dff9cbf872a3d9832914", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/zeroize@1.9.1" }, "rule": { "namespace": "syft", "id": "zeroize@1.9.1" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "57cc8ce7a77d7b267625f03e149331e422afd6e028ace34137fe11514f19b0e4", "class": "supply_chain", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/zmij@1.0.23" }, "rule": { "namespace": "syft", "id": "zmij@1.0.23" }, "state": "open", "evidence_refs": [ "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "3cb3f72855ec8da34228f8a8b8b49d110c5f6296126a0396e384b78dff93858b", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/anstream@1.0.0" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "105d7e1b0ce045f5eaecf4886b2a3a53f11740059022390aeed0641349be6370", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/anstyle@1.0.14" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "6a1bdd16582f18fdb1fa91303573db6370cbc6c6791e13662c519f3bf67e2b58", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/anstyle-parse@1.0.0" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "c32d140352b51004cc522860ec69e78b1648a34309a6a9be6f3bcdf6b34c3ea8", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/anstyle-query@1.1.5" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "4e5f3b8af12d986d540eb760ff9cd8b6855eaad28f2aad327cfb27528eddab32", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/anstyle-wincon@3.0.11" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "d87de0e2410e4ce9c1b03a1c509b3ddf5960b0936f81d4647ba1c5d6d89fc86b", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/base64ct@1.8.3" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "0ae447b9c774db7ecc15622af01746eae86cf6f47a4192ff75afdbb184bd4f0d", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/bitflags@2.13.2" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "88f6dcc043cb942462a57d4e8de3f5e67de6a2bcfe84ec10f2977e7df83f3f70", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/block-buffer@0.10.4" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "6dc467fded10560a16e1a85aae690fdd4d560ab3a7854ff858b0790cbced7ab2", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/cfg-if@1.0.5" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "d62527e65bfebf56c615db5a8b57a52ebb14d9d01d5737b36026ffcd385e020f", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/clap@4.6.7" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "5022223658ce227834152beda2f8039c2f620048d573cdfafca1df7435cd10a4", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/clap_builder@4.6.7" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "b4acb80d59203342fec461529a44fbdf49e70bc6ca659f541896faa542ea43c5", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/clap_derive@4.6.7" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "f18f5e7c89578e9678c5c7348530bcd16566d209feb0453558bd4177a56e4519", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/clap_lex@1.1.1" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "3aa7445371bcced37f805b8b93e9c78dc9638f3ebccedb2087fd6a4bf369b408", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/colorchoice@1.0.5" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "e23a545bde38131ecd1958e9a627d1c94d4e1e13ac04f45d6d19ea0ba3ffa3d6", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/const-oid@0.9.6" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "524744fd861891b779e920a35054e452215c00ca7ad2ecd0c314ce8176be8972", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/cpufeatures@0.2.17" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "7f21367b3adac10c420edf92206d55530b768dbb37f26d97ab71624f4897a4ef", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/crypto-common@0.1.7" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "fe2c38830f0c36aa5c2b7e92c8ce6e5f5ffce3359ea8c601e5c38043e1bdf8a2", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/curve25519-dalek@4.1.3" }, "rule": { "namespace": "license", "id": "BSD-3-Clause" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "22e858ebe1e0cd3085665c0b1ddb0258c163e74d25bd86359b4b5f2a6c9ac9a4", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/curve25519-dalek-derive@0.1.1" }, "rule": { "namespace": "license", "id": "MIT/Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "1d544f0845dcc666855e99dd2b294924d14fc9a59ee95d04ab545ef5a456563a", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/der@0.7.10" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "52412f24e374c82ecd63af7620df4b525ebf66faccde3420a82407886bd0c284", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/digest@0.10.7" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "ae41ba9e474899a525f07dedebf70d5b4d90f42b867dade39a918ff0dc56cdbd", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/ed25519@2.2.3" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "bfba5b2b48789d0999e04341c49eb12720a3312e6c03ae463dc733e6fbb7f47a", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/ed25519-dalek@2.2.0" }, "rule": { "namespace": "license", "id": "BSD-3-Clause" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "3e1257c111ee0929dbe8413202dd62d02da5e23805b3c7b82ee7db2e60e2e5bf", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/errno@0.3.14" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "413b301a14873d3fa09cfbeb904a1753aff90083f7faf45c9fa10ae41e514c95", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/fastrand@2.5.0" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "ca89f09616c15bc6e6aac2d3d9a826d665ed042c69fe8093e11ca0e11215fa88", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/fiat-crypto@0.2.9" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0 OR BSD-1-Clause" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "b56a6ad063aa5b2a36eb7f5ca9f3d6a67d4edee01d6b1bf01994bd1049382aa1", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/generic-array@0.14.7" }, "rule": { "namespace": "license", "id": "MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "a2e087ff1e664313a70e2e8ce7eed24cea66820e3750c483ddf3f4d1e254d8bf", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/getrandom@0.2.17" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "e8a05789f8c7ca2d56115d6721959efab7dee18603092589b99cc0603b4e4931", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/getrandom@0.4.3" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "a045045ab5f79bbc6d89c842641627a66ef7838cf2c4a6956b7cdb1c8adcce1f", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/heck@0.5.0" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "2bfc1148428c407eb319a7e6c10fde0605121ffa1716eaa1db0ddd9d8aad5e7b", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/hex@0.4.3" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "1607bce4d21887f6c3c6cd523cd4781bb966af2914910df1bf0813f5ca357718", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/is_terminal_polyfill@1.70.2" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "44e4a8a96ba5fffac1618980329c98bbaae8b6acc5365659a688553c4c36f5cd", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/itoa@1.0.18" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "90ce55778cfac3e0f098de0b24f5e2e035d65d0b28f7c09647bf2a433f0ced65", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/libc@0.2.191" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "92fa2f521dd2cabdf45f3ba7d0efa52f4d91674015be492d2f7fd994d1843c9b", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/linux-raw-sys@0.12.1" }, "rule": { "namespace": "license", "id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "71154f949e7c2014f20dbe7d654741451e3def11140bc8612e413c799d1d8c28", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/memchr@2.8.3" }, "rule": { "namespace": "license", "id": "Unlicense OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "72d443496cd2f5431e7f4347680d3790fed414966236ac9d635539cddfc310d7", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/once_cell@1.21.4" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "d0ca8c614318f904a95eef3273640692f921fbea88f4681b46a944098a7f4767", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/once_cell_polyfill@1.70.2" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "33502fd83559ad67d44c080bde985d7528478ab1397cfd11a8218d36537c4e31", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/pkcs8@0.10.2" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "f36a59e9dbd1511f0ef2b47db501e35a66e0dd081a18f992255f811a35b17415", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/ppv-lite86@0.2.21" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "875825c505903cfb9b602a23e74f0edf7eb1621583ed9e583c410103af3d402d", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/proc-macro2@1.0.107" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "d94338e54aeaf7fdb9048fc5ec3defa5504f99aab2210cec5156b23ac309f0fd", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/quote@1.0.47" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "73c9c8606efa4200ec16f7e1121489b31dba86fe5c2093dd9907af8d742ee0d3", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/r-efi@6.0.0" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0 OR LGPL-2.1-or-later" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "583bffa666173cd89ec5435a820a182f195e80ec3430f14ae356e22996f0c604", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/rand@0.8.8" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "c25b8b5f19fbb27189204b7c69f7d0bb55b519b678667bf698371f8884cc9037", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/rand_chacha@0.3.1" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "9b2b8375abad347b471c42d1cf7a4c0535119bbe425e5485aad498ec17f767c4", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/rand_core@0.6.4" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "175e264aed60c77f52af0e9e671e8ac55bec5e6e45abdc84a5ebcb3ec8228a32", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/rustc_version@0.4.1" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "0af9738feb17c972c978f5fb2a9d015e97b728ba66aa088f9c16113be8df3a91", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/rustix@1.1.5" }, "rule": { "namespace": "license", "id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "2dba13d7eff3023b8735741b2cebfcf48401ab80634cc83fa074d62e0029c6e5", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/semver@1.0.28" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "b7f56764e7744f74cad3387a716a5246077d8c6e9f0089883df0dbb8288aeb5d", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/serde@1.0.229" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "881652ce03c9fbb009ba2d5e92cacd9454e5366d43e3712ab99c1a0bb52cb0c8", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/serde_core@1.0.229" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "7d3cf8ea302039c6b559c6537f587340c694b5e20193dbc5bcb157a006d26b8a", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/serde_derive@1.0.229" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "da48400504894d432651db8f2dc88973bc202459db2f7d825ad79be718e1475d", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/serde_json@1.0.154" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "4e1769b1e32b9db38c1c88b395bbb79d75dbc84ccebcd482bc8e372323612ea5", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/sha2@0.10.9" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "7d786c3589077e405f9f6eefb654a291c2151ab077bdf2fd98c88ca1872cb009", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/signature@2.2.0" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "137f488cae7954a76b606a56914e8a17efe4b31f2b08ac1e0f518150c86ca603", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/smallvec@1.6.0" }, "rule": { "namespace": "license", "id": "MIT/Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "2da68b323dc569bcbc497ed8b2cfb0120654e76776cf3c35f8d3e950f5747bc0", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/spki@0.7.3" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "190387b967c5696b7e77e95e77baff38bd4c4cf266e724c09cc8cc70dc665da5", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/strsim@0.11.1" }, "rule": { "namespace": "license", "id": "MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "f09ee24c509b49380459f50c80591806cd7c73ad6c6c2dc99229670041fee674", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/subtle@2.6.1" }, "rule": { "namespace": "license", "id": "BSD-3-Clause" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "88cca70db371b2eb5db003aa26dca694e18d04d14f10fea6bb7b77c9d8a5915c", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/syn@2.0.119" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "15bedfcd4863b93f38b7d0bc2bd56e41531843d5c2953974ebb947a686aebc48", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/syn@3.0.9" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "1c2df16adcb1e41856c04a70f745f44ed8efe15e1f2423e4d6a024902014f96c", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/tempfile@3.27.0" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "7ce501395a51a046ddd2de234813e8610fecb37a279dd7581b6a230876216f09", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/typenum@1.20.1" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "10ebd1e19e81d1b55e547bcf583a4da0d086d5d47b86817360bc2d6fa1daecc8", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/unicode-ident@1.0.27" }, "rule": { "namespace": "license", "id": "(MIT OR Apache-2.0) AND Unicode-3.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "2a48ac251537ab5616cb3a1c8b7c09ed5253e442bcb585a6a812cc2e12df9a99", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/utf8parse@0.2.2" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "a178fed10f746a25a38e1a123cff01f7148bdfc82f2d75d55aa653a382c86dcb", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/version_check@0.9.5" }, "rule": { "namespace": "license", "id": "MIT/Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "b505efbcbc2188a627d169bdbdc34901dec4f22b50255975c9c07961ddf3391d", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/wasi@0.11.1+wasi-snapshot-preview1" }, "rule": { "namespace": "license", "id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "7cc0ff2a3a61ff414a371dabeaef2dfd080dc6981383f0d056f5807f9f7f7716", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/windows-link@0.2.1" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "88f3e265d85daf89a5f53123d8cb24aa877f866f5a9e0798e3fcbfba44e07401", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/windows-sys@0.61.2" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "ccde7aa1c7e4a197172dbdd8d438652d4e46433fa65f363abd51fd3f4d5e042a", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/zerocopy@0.8.63" }, "rule": { "namespace": "license", "id": "BSD-2-Clause OR Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "155008951dcca3c42ca968720dec1ba279f3836ef1c6921e7384a41ced42b7fb", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/zerocopy-derive@0.8.63" }, "rule": { "namespace": "license", "id": "BSD-2-Clause OR Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "44f17f90be8e27066147ced08a81acf0709bf297e99ffb794be4f91f07a37819", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/zeroize@1.9.1" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" }, { "id": "9c06bc92074e46c9fad575585278ef5b558d6f9e86471f5f1afb991819aab2c7", "class": "license", "subject": { "specimen_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "component_id": "pkg:cargo/zmij@1.0.23" }, "rule": { "namespace": "license", "id": "MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:54:35.532304241Z" } ], "witnesses": [ { "tool": "osv-scanner", "version": "2.7.0", "binary_digest": "160c6253e2922e9e0a6a9771c5c4c40a4b3c6090b34a3cdd5e80c96cc2e4218b", "config_digest": "0c3d6fef8ea59e1de5610e13ccb1035a7232318288aaed517ee2feec9402455a", "invocation_digest": "24f80c6175448be9efb1f53a223fcafbf51407586dfe0ddec0fbb02d75de75cb", "input_subject_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "81c474ee9e32281e85a443e152eed7008437c0b75bd32bf7837120d228cb99b8", "normalized_evidence_digest": "a01c9fbe2e0f89ba51e98a9f9adb3e2221181b02f05426888a8e8e1d4c6f99a0", "limitations": [ "osv-scanner checks registry-based ecosystems (crates.io in 0.6.0); git-sourced dependencies (lean [[require]], gpr) have no advisory database — Insufficient Evidence for them, never a silent pass" ], "evidence_class": "dependency_vulnerability", "observed_at": "2026-10-21T17:54:35.532304241Z" }, { "tool": "semgrep", "version": "1.181.0", "binary_digest": "c29de7c43986faa3c3ca5a8acf1d115811e15ab305ba7657b79e775d40e16391", "config_digest": "206116bd213f0786f8378755ad48adbccfe30376afe8fe2ecdd24eb44161d009", "invocation_digest": "e791b8ecfa486564d1e600616f91008306bb57bc036347793aadee8852357e10", "input_subject_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "80c185ac8e17503197e8195c202d98db3f0cd3865a37ba7065f37bdbf2a58d54", "normalized_evidence_digest": "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "limitations": [], "evidence_class": "static_analysis", "observed_at": "2026-10-21T17:54:35.532304241Z" }, { "tool": "gitleaks", "version": "8.30.1", "binary_digest": "88f91962aa2f93ac6ab281d553b9e125f5197bbbce38f9f2437f7299c32e5509", "config_digest": "e1f77c307b36a43d3707ab5fed4a4007f6d63d9302bcf0d5509cd3e52e32ed6f", "invocation_digest": "b53b0bc6ce0f03bd1cfce7e2acf7c81506b6aaa431b4f2ff0b2aeae98e43416a", "input_subject_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "37517e5f3dc66819f61f5a7bb8ace1921282415f10551d2defa5c3eb0985b570", "normalized_evidence_digest": "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "limitations": [], "evidence_class": "secret", "observed_at": "2026-10-21T17:54:35.532304241Z" }, { "tool": "syft", "version": "1.54.1", "binary_digest": "dbf75864e7a7ff9e1fbf00552c31483f693188632a9f68f343cd7653dac513d6", "config_digest": "b6f045a568b2dd1dcd1a1723f4eb0b8f5863215301ced35067a5f7a53c07c7e6", "invocation_digest": "2db9cdab6760622ad4d95a31d89276e61f32a147ecb27ed2130b05b416039607", "input_subject_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81", "normalized_evidence_digest": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "limitations": [], "evidence_class": "supply_chain", "observed_at": "2026-10-21T17:54:35.532304241Z" }, { "tool": "dependency-manifest", "version": "1", "binary_digest": "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4", "config_digest": "2402cf6f9fd45d6c6d7b9bc10abdba72e36d61e88515a01d2cda19ee8d375b3b", "invocation_digest": "884328726010e6c1b20c59cdf5c2762817fee5f9c109ccf19622c720dc634efd", "input_subject_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4", "normalized_evidence_digest": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "limitations": [ "license facts are the job dependency manifest's registry SPDX ids; the workspace's own code and git-sourced dependencies carry no registry license facts" ], "evidence_class": "license", "observed_at": "2026-10-21T17:54:35.532304241Z" } ], "vulnerability_snapshot": { "source_identity": "osv.dev", "snapshot_identity": "osv-dev-20261021-457e10c8", "observed_at": "2026-10-21T17:30:12Z", "freshness_hours": 24 }, "exceptions": [], "open_findings": 2, "satisfied": false, "evaluated_at": "2026-10-26T05:58:17.902953173Z" } }, { "index": 3, "outcome": "Insufficient", "at": "2026-10-21T17:55:50.063242Z", "duration_ms": 29166, "source_sha256": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "security": { "policy": { "id": "falsegreen-platform", "version": "1", "digest": "372d3c74758acb113c1bef14b20b08b326a7703dd57d943247de6541743c0fad", "required": [ "dependency_vulnerability", "static_analysis", "secret", "supply_chain", "license" ], "minimum_witnesses": 1, "fail_on_severities": [ "critical", "high" ], "unknown_severity": "insufficient", "secrets_fail_on_any_unexcepted": true, "required_standards": [], "unavailable_behavior": "insufficient" }, "language": "", "classes": [ { "class": "dependency_vulnerability", "required": true, "status": "fail", "witness_refs": [ "a01c9fbe2e0f89ba51e98a9f9adb3e2221181b02f05426888a8e8e1d4c6f99a0" ], "reasons": [ "vulnerability snapshot is stale (observed 2026-10-21T17:30:12Z, freshness bound 24h)", "finding 5046f75b49bcc91e972fe6e37dff89bd730acac66b5c0835cdfea59610c6a9a5 severity `high` is frozen-fail (osv/RUSTSEC-2021-0003)", "finding 538efbca6ab37d1de7206475fd690628e0d69cbb5b3b1d27719f69b6caaf43f7 severity `high` is frozen-fail (osv/GHSA-43w2-9j62-hq99)" ] }, { "class": "static_analysis", "required": true, "status": "pass", "witness_refs": [ "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945" ], "reasons": [] }, { "class": "secret", "required": true, "status": "pass", "witness_refs": [ "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945" ], "reasons": [] }, { "class": "supply_chain", "required": true, "status": "pass", "witness_refs": [ "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db" ], "reasons": [] }, { "class": "license", "required": true, "status": "not_assessed", "witness_refs": [ "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a" ], "reasons": [ "no licence policy frozen — the licence facts are inventory, nothing was asserted" ] } ], "findings": [ { "id": "5046f75b49bcc91e972fe6e37dff89bd730acac66b5c0835cdfea59610c6a9a5", "class": "dependency_vulnerability", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:crates.io/smallvec@1.6.0" }, "rule": { "namespace": "osv", "id": "RUSTSEC-2021-0003" }, "severity": { "value": "high" }, "state": "open", "evidence_refs": [ "504f53629d55e16689863e5f5be007f8569c05eb846a54fb0a6d3c3adb4dca39" ], "witness_tool_ref": "a01c9fbe2e0f89ba51e98a9f9adb3e2221181b02f05426888a8e8e1d4c6f99a0", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "538efbca6ab37d1de7206475fd690628e0d69cbb5b3b1d27719f69b6caaf43f7", "class": "dependency_vulnerability", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:crates.io/smallvec@1.6.0" }, "rule": { "namespace": "osv", "id": "GHSA-43w2-9j62-hq99" }, "severity": { "value": "high" }, "state": "open", "evidence_refs": [ "504f53629d55e16689863e5f5be007f8569c05eb846a54fb0a6d3c3adb4dca39" ], "witness_tool_ref": "a01c9fbe2e0f89ba51e98a9f9adb3e2221181b02f05426888a8e8e1d4c6f99a0", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "585dc8dd419afdf4e9bf3c874f2701e31d5f3338bc9b4203dc562020a35876ec", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/anstream@1.0.0" }, "rule": { "namespace": "syft", "id": "anstream@1.0.0" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "5812a90517ca8a7be4835875c4821ace43a4835c915372e2902c66fdb38fdc43", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/anstyle@1.0.14" }, "rule": { "namespace": "syft", "id": "anstyle@1.0.14" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "0c2acffbd95840f484ecf5ead5dbf02d3043c8cd99e95cffcecb6dd06aad1689", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/anstyle-parse@1.0.0" }, "rule": { "namespace": "syft", "id": "anstyle-parse@1.0.0" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "38e530b1f35c1f97754741dcb41c150fc5f37b19537d0a862f1cf412d5d5eb77", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/anstyle-query@1.1.5" }, "rule": { "namespace": "syft", "id": "anstyle-query@1.1.5" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "43a7bbf00d060e71d216d2dba5a8507586b4879c8c606cb5701f4721a1340984", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/anstyle-wincon@3.0.11" }, "rule": { "namespace": "syft", "id": "anstyle-wincon@3.0.11" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "b53200027bb397c19303a57035a312ff9896f23494778cfe8417bf3b566802b7", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/base64ct@1.8.3" }, "rule": { "namespace": "syft", "id": "base64ct@1.8.3" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "a27f471935b3ca54a96a87c1168029f17d49df469b5d7fb9768f5be6a479cb5a", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/bitflags@2.13.2" }, "rule": { "namespace": "syft", "id": "bitflags@2.13.2" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "d954449ff474a768cbba77304caa220f9361597bbb1fdcfa4f395dc2ff3ab6a3", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/block-buffer@0.10.4" }, "rule": { "namespace": "syft", "id": "block-buffer@0.10.4" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "298a3dc87ed455182e39269edd7bcb85eb69d2fdfaed33bb248b55ce4ef400bf", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/cfg-if@1.0.5" }, "rule": { "namespace": "syft", "id": "cfg-if@1.0.5" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "c945fdb692b50e54a5707923beed9b74cc8840b872dda759232c54f54faf3e13", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/clap@4.6.7" }, "rule": { "namespace": "syft", "id": "clap@4.6.7" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "4c660220014879503df0995f4e53893f079ed601c9ca4351754a91d944cd5747", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/clap_builder@4.6.7" }, "rule": { "namespace": "syft", "id": "clap_builder@4.6.7" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "8bb04af9d989b5eb357e0b7a5a47760babc2e2e30e6622131f0b704e82099de2", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/clap_derive@4.6.7" }, "rule": { "namespace": "syft", "id": "clap_derive@4.6.7" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "0806d9370588be53df7d7e7b13b4cd97fe96353945c1a2e612f0cb42e6b0a9fa", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/clap_lex@1.1.1" }, "rule": { "namespace": "syft", "id": "clap_lex@1.1.1" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "564bee5e0ca4f5b0b9d5c7f3c80949c2379225cc93896b64d7cf40572e67f707", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/colorchoice@1.0.5" }, "rule": { "namespace": "syft", "id": "colorchoice@1.0.5" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "e67b364fc025909689d2318cd8edbb4eff67f8550970a92413e57be11015fa73", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/const-oid@0.9.6" }, "rule": { "namespace": "syft", "id": "const-oid@0.9.6" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "6d706f34a5c990989290bf9a40545e25199499f4d7896fb17db92c9f5704d9dd", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/cpufeatures@0.2.17" }, "rule": { "namespace": "syft", "id": "cpufeatures@0.2.17" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "145a268fb83cc9efa6d7dbc1f2c7a5bb878887bd309a7a13c70db7c26a3dd4a6", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/crypto-common@0.1.7" }, "rule": { "namespace": "syft", "id": "crypto-common@0.1.7" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "787a89ac66a8ee454e76700ba05fd7449ee2e0a02adba4d5703b4e43a3ad63ee", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/curve25519-dalek@4.1.3" }, "rule": { "namespace": "syft", "id": "curve25519-dalek@4.1.3" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "e363a3158ed291249701f7a913b490cfd8e21da33cc9bf6cadf72aebdb110e38", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/curve25519-dalek-derive@0.1.1" }, "rule": { "namespace": "syft", "id": "curve25519-dalek-derive@0.1.1" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "5751ef29264c20e19c6275a8edbcb5fe4e9fd09f069d6478509958c3c665a5e5", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/der@0.7.10" }, "rule": { "namespace": "syft", "id": "der@0.7.10" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "abddfb4ca732e056419f5daea9c997464fb39a808c74315e77618f63aad577b5", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/digest@0.10.7" }, "rule": { "namespace": "syft", "id": "digest@0.10.7" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "09b4b23b72b30909f311f514c3047c3b683412752ce0f30b550c35f69175ccb1", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/ed25519@2.2.3" }, "rule": { "namespace": "syft", "id": "ed25519@2.2.3" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "5e9cb7bd671ff507af20938bceec17825515186a8d16aaaebdc53f2962c62f4d", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/ed25519-dalek@2.2.0" }, "rule": { "namespace": "syft", "id": "ed25519-dalek@2.2.0" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "ebfe761a2619776f2942064a3f4868f3e0008f237546af684b50af44dfc3b099", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/errno@0.3.14" }, "rule": { "namespace": "syft", "id": "errno@0.3.14" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "305b6e419555a415bf2c3931f34c2f2a305b322905e7d62a155a394c36a7f9ee", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "" }, "rule": { "namespace": "syft", "id": "falsegreen-ledger@0.1.0" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "037fe54909861dd855fbdb0b49d679ac7e8db1fef9f31cee62b92f74ea406033", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "" }, "rule": { "namespace": "syft", "id": "falsegreen-ledger-core@0.1.0" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "6114365595d08a3bfc7e5d101289c1511fd658287c777c4ec53b73a764a8419f", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/fastrand@2.5.0" }, "rule": { "namespace": "syft", "id": "fastrand@2.5.0" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "8c813dcb9098a7c8941eb1aaffa3513c58020c83e085b04e6767488e300c6c97", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/fiat-crypto@0.2.9" }, "rule": { "namespace": "syft", "id": "fiat-crypto@0.2.9" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "5e9894b399a2c47a307185031536daaee5ded5c707a623024827a381aad89903", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/generic-array@0.14.7" }, "rule": { "namespace": "syft", "id": "generic-array@0.14.7" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "992e1c30dd219f9cf75f520e5d8dbf0588faae5d1a6bc9f2607da898d9f5c847", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/getrandom@0.2.17" }, "rule": { "namespace": "syft", "id": "getrandom@0.2.17" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "11a15cd49953aaee1017644804d1c3f9e5c0f2dece9366168276bff362fc0d24", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/getrandom@0.4.3" }, "rule": { "namespace": "syft", "id": "getrandom@0.4.3" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "c2a49ee05fb8e39068222324fb06d7af16937aff1e9a9ea99a8e17acc514f457", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/heck@0.5.0" }, "rule": { "namespace": "syft", "id": "heck@0.5.0" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "e29ecb67830b5145d857685e3f25db579bbcf432c785c6d223baf8bea97d1a9d", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/hex@0.4.3" }, "rule": { "namespace": "syft", "id": "hex@0.4.3" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "b3d93215b7294d3158ac885a5f44df493b9205f88c1d1b8730891332fd3b7030", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/is_terminal_polyfill@1.70.2" }, "rule": { "namespace": "syft", "id": "is_terminal_polyfill@1.70.2" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "2198026ba7738261a15516b44aed3a688f8b546c317b64b35c08cd6141612cd3", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/itoa@1.0.18" }, "rule": { "namespace": "syft", "id": "itoa@1.0.18" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "61aaeff62260c1d967d95422d89a28bc19dd0e5a930b6c9dfd3f031a4999dd7f", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/libc@0.2.191" }, "rule": { "namespace": "syft", "id": "libc@0.2.191" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "9638a8b320f9ef1e348eb212d7b9b5aff9cff37075971380c717f44f8c144d91", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/linux-raw-sys@0.12.1" }, "rule": { "namespace": "syft", "id": "linux-raw-sys@0.12.1" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "e2d6e087930e3834218a876fdb280683d5efcdaf50ae2eab592e1e22f97d815d", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/memchr@2.8.3" }, "rule": { "namespace": "syft", "id": "memchr@2.8.3" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "06cfdd42abb0c9e4d1075d601a05b33ad12f4e0770c117f758e768a380957b48", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/once_cell@1.21.4" }, "rule": { "namespace": "syft", "id": "once_cell@1.21.4" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "25d8ffe4413b6cf3ccf7a0646d5136789bd33d4b513d6ef17a7f8549d27ff3c4", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/once_cell_polyfill@1.70.2" }, "rule": { "namespace": "syft", "id": "once_cell_polyfill@1.70.2" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "426f5a3c744e86d89a996166238d634b5159d615a2642460863a26de9ebe1afe", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/pkcs8@0.10.2" }, "rule": { "namespace": "syft", "id": "pkcs8@0.10.2" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "c694e303f6d517d79b9440f754fd2092277919227356a55095046c9b6938a128", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/ppv-lite86@0.2.21" }, "rule": { "namespace": "syft", "id": "ppv-lite86@0.2.21" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "83840aaef8208540db5387d039d782fb6638ce97e06bd3f18ce20661ab601f55", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/proc-macro2@1.0.107" }, "rule": { "namespace": "syft", "id": "proc-macro2@1.0.107" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "7ec44be48b990fd8c38cb446e9e2cde3c7a02c7b35c9e4514bf7974c9def81eb", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/quote@1.0.47" }, "rule": { "namespace": "syft", "id": "quote@1.0.47" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "e5bc87872cb19c9a211895bbde8092b0512f0338b0bde534dade96b289166a5b", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/r-efi@6.0.0" }, "rule": { "namespace": "syft", "id": "r-efi@6.0.0" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "f119984d74172df79e8ed614888308c422e4e3e76e09acdd7c7df03156c6ebab", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/rand@0.8.8" }, "rule": { "namespace": "syft", "id": "rand@0.8.8" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "da733f873e8e22258550231003a3cc91d78301c5807ea9c5c6c953bdfc93a386", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/rand_chacha@0.3.1" }, "rule": { "namespace": "syft", "id": "rand_chacha@0.3.1" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "303db3e1caa7ec327fb3d438d968f3ece32234dbb594a8d0ef3addca9bcb61de", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/rand_core@0.6.4" }, "rule": { "namespace": "syft", "id": "rand_core@0.6.4" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "8c2b4d1a270f8c039f231929858e0a81f04e4168eaa9e3884e96d2cf67fa0b9f", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/rustc_version@0.4.1" }, "rule": { "namespace": "syft", "id": "rustc_version@0.4.1" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "94f78cc0a41219cf8bd76e72370c1e3f7a25a1c5d3682c962ebcac51f96e6107", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/rustix@1.1.5" }, "rule": { "namespace": "syft", "id": "rustix@1.1.5" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "9e26a95ae3dfd058f160efaaad125c58e9e4df33de1cd9e89f238a5af96e1d8d", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/semver@1.0.28" }, "rule": { "namespace": "syft", "id": "semver@1.0.28" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "6b250dfbe70ae2dd0686b791c854ea29d60fcced5847ef1097b33776640b726b", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/serde@1.0.229" }, "rule": { "namespace": "syft", "id": "serde@1.0.229" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "0907c849ff021995b320333d903013c3e35609e44fdd439d0185cdd6b2b42b33", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/serde_core@1.0.229" }, "rule": { "namespace": "syft", "id": "serde_core@1.0.229" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "eea06b68ab5dfabe29545176a15ca67d241e54bcf1a54c735e99406c378c3b0d", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/serde_derive@1.0.229" }, "rule": { "namespace": "syft", "id": "serde_derive@1.0.229" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "567f9a6ec6dd74ea27cceeecd20cc8f83ec2bad60cb4992da15e71fa478e3c8b", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/serde_json@1.0.154" }, "rule": { "namespace": "syft", "id": "serde_json@1.0.154" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "1dc35a3d9010bd6a84e1fe0d75e39d2f1507e7d761fba360a6a011b297aff75b", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/sha2@0.10.9" }, "rule": { "namespace": "syft", "id": "sha2@0.10.9" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "039783866d8dc87a18a205702b098ce8341f6e3032a121b65f5888dbc79dbf86", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/signature@2.2.0" }, "rule": { "namespace": "syft", "id": "signature@2.2.0" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "64738dd926f6eb4044f0de2fde1b326703bbc228579b56e08373f9fb8b6936c3", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/smallvec@1.6.0" }, "rule": { "namespace": "syft", "id": "smallvec@1.6.0" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "b1b266ef80a1dcba71b6ea153bd32e5b3d9e89c33461e3638c6b56ecea92fde9", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/spki@0.7.3" }, "rule": { "namespace": "syft", "id": "spki@0.7.3" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "a2d0f5f6f8ebcca0da8bbf2c323fb2013afa905a47a570b6c73442bc9a5b8620", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/strsim@0.11.1" }, "rule": { "namespace": "syft", "id": "strsim@0.11.1" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "6ef75c868a28b31d2d9bdd28764b8c3e232fbcdb70190659f0ecebb57c8e2a3e", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/subtle@2.6.1" }, "rule": { "namespace": "syft", "id": "subtle@2.6.1" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "172012ad51c91dc3a2e8a3a4c30026893420917739d047e5dc8918d5af26e93e", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/syn@2.0.119" }, "rule": { "namespace": "syft", "id": "syn@2.0.119" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "4cf5b83b5e47207b200be1c28233d037d4896752b572d0edb52975dc429e0b1c", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/syn@3.0.9" }, "rule": { "namespace": "syft", "id": "syn@3.0.9" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "96826fe9035d6551629c4e2a5e7d6f2df945796fac5128adf613901f231612ce", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/tempfile@3.27.0" }, "rule": { "namespace": "syft", "id": "tempfile@3.27.0" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "4cabb90893a6e49358a09f507c1134173b15a041a74b54cf9d4c1d93ce6d2e82", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/typenum@1.20.1" }, "rule": { "namespace": "syft", "id": "typenum@1.20.1" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "cdf512d7b7b4b6aad7b87252ee1d8aa13deced196dc20e86af4c693914775db0", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/unicode-ident@1.0.27" }, "rule": { "namespace": "syft", "id": "unicode-ident@1.0.27" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "493be846b106eef3741941ff4fbf118d156cd42bcbf90ef0820faff50ed6aeb4", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/utf8parse@0.2.2" }, "rule": { "namespace": "syft", "id": "utf8parse@0.2.2" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "4113c0d164e406e3897d48a025ec03de3591018065c023d609aa9a1a24a8535e", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/version_check@0.9.5" }, "rule": { "namespace": "syft", "id": "version_check@0.9.5" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "2908eeb04b59a653d934e0cdb89832021bfaa96dec7ff3dafcffbf192d06ba0b", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/wasi@0.11.1%2Bwasi-snapshot-preview1" }, "rule": { "namespace": "syft", "id": "wasi@0.11.1+wasi-snapshot-preview1" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "6e216a5e2b506734f75006b2f0a084aa655272534631ff3e365dae942872f46e", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/windows-link@0.2.1" }, "rule": { "namespace": "syft", "id": "windows-link@0.2.1" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "9077dd0b2b86b914f0b095c8d6bcc189167ee95b7021993b57088bd5e25c724f", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/windows-sys@0.61.2" }, "rule": { "namespace": "syft", "id": "windows-sys@0.61.2" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "e88bf689d1aa0a4bcdfaefe867dd26346df4be90d067004b93b7d73fb75cfe38", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/zerocopy@0.8.63" }, "rule": { "namespace": "syft", "id": "zerocopy@0.8.63" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "2f618422a7648ae74d807312d3a397d16eef2a47e85b7a412fe58ff50268a109", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/zerocopy-derive@0.8.63" }, "rule": { "namespace": "syft", "id": "zerocopy-derive@0.8.63" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "3cfb926e0c9258ea27f8d32a2de899d498b245fbd099dff9cbf872a3d9832914", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/zeroize@1.9.1" }, "rule": { "namespace": "syft", "id": "zeroize@1.9.1" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "57cc8ce7a77d7b267625f03e149331e422afd6e028ace34137fe11514f19b0e4", "class": "supply_chain", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/zmij@1.0.23" }, "rule": { "namespace": "syft", "id": "zmij@1.0.23" }, "state": "open", "evidence_refs": [ "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "3cb3f72855ec8da34228f8a8b8b49d110c5f6296126a0396e384b78dff93858b", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/anstream@1.0.0" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "105d7e1b0ce045f5eaecf4886b2a3a53f11740059022390aeed0641349be6370", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/anstyle@1.0.14" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "6a1bdd16582f18fdb1fa91303573db6370cbc6c6791e13662c519f3bf67e2b58", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/anstyle-parse@1.0.0" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "c32d140352b51004cc522860ec69e78b1648a34309a6a9be6f3bcdf6b34c3ea8", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/anstyle-query@1.1.5" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "4e5f3b8af12d986d540eb760ff9cd8b6855eaad28f2aad327cfb27528eddab32", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/anstyle-wincon@3.0.11" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "d87de0e2410e4ce9c1b03a1c509b3ddf5960b0936f81d4647ba1c5d6d89fc86b", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/base64ct@1.8.3" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "0ae447b9c774db7ecc15622af01746eae86cf6f47a4192ff75afdbb184bd4f0d", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/bitflags@2.13.2" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "88f6dcc043cb942462a57d4e8de3f5e67de6a2bcfe84ec10f2977e7df83f3f70", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/block-buffer@0.10.4" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "6dc467fded10560a16e1a85aae690fdd4d560ab3a7854ff858b0790cbced7ab2", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/cfg-if@1.0.5" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "d62527e65bfebf56c615db5a8b57a52ebb14d9d01d5737b36026ffcd385e020f", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/clap@4.6.7" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "5022223658ce227834152beda2f8039c2f620048d573cdfafca1df7435cd10a4", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/clap_builder@4.6.7" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "b4acb80d59203342fec461529a44fbdf49e70bc6ca659f541896faa542ea43c5", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/clap_derive@4.6.7" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "f18f5e7c89578e9678c5c7348530bcd16566d209feb0453558bd4177a56e4519", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/clap_lex@1.1.1" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "3aa7445371bcced37f805b8b93e9c78dc9638f3ebccedb2087fd6a4bf369b408", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/colorchoice@1.0.5" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "e23a545bde38131ecd1958e9a627d1c94d4e1e13ac04f45d6d19ea0ba3ffa3d6", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/const-oid@0.9.6" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "524744fd861891b779e920a35054e452215c00ca7ad2ecd0c314ce8176be8972", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/cpufeatures@0.2.17" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "7f21367b3adac10c420edf92206d55530b768dbb37f26d97ab71624f4897a4ef", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/crypto-common@0.1.7" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "fe2c38830f0c36aa5c2b7e92c8ce6e5f5ffce3359ea8c601e5c38043e1bdf8a2", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/curve25519-dalek@4.1.3" }, "rule": { "namespace": "license", "id": "BSD-3-Clause" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "22e858ebe1e0cd3085665c0b1ddb0258c163e74d25bd86359b4b5f2a6c9ac9a4", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/curve25519-dalek-derive@0.1.1" }, "rule": { "namespace": "license", "id": "MIT/Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "1d544f0845dcc666855e99dd2b294924d14fc9a59ee95d04ab545ef5a456563a", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/der@0.7.10" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "52412f24e374c82ecd63af7620df4b525ebf66faccde3420a82407886bd0c284", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/digest@0.10.7" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "ae41ba9e474899a525f07dedebf70d5b4d90f42b867dade39a918ff0dc56cdbd", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/ed25519@2.2.3" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "bfba5b2b48789d0999e04341c49eb12720a3312e6c03ae463dc733e6fbb7f47a", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/ed25519-dalek@2.2.0" }, "rule": { "namespace": "license", "id": "BSD-3-Clause" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "3e1257c111ee0929dbe8413202dd62d02da5e23805b3c7b82ee7db2e60e2e5bf", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/errno@0.3.14" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "413b301a14873d3fa09cfbeb904a1753aff90083f7faf45c9fa10ae41e514c95", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/fastrand@2.5.0" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "ca89f09616c15bc6e6aac2d3d9a826d665ed042c69fe8093e11ca0e11215fa88", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/fiat-crypto@0.2.9" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0 OR BSD-1-Clause" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "b56a6ad063aa5b2a36eb7f5ca9f3d6a67d4edee01d6b1bf01994bd1049382aa1", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/generic-array@0.14.7" }, "rule": { "namespace": "license", "id": "MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "a2e087ff1e664313a70e2e8ce7eed24cea66820e3750c483ddf3f4d1e254d8bf", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/getrandom@0.2.17" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "e8a05789f8c7ca2d56115d6721959efab7dee18603092589b99cc0603b4e4931", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/getrandom@0.4.3" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "a045045ab5f79bbc6d89c842641627a66ef7838cf2c4a6956b7cdb1c8adcce1f", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/heck@0.5.0" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "2bfc1148428c407eb319a7e6c10fde0605121ffa1716eaa1db0ddd9d8aad5e7b", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/hex@0.4.3" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "1607bce4d21887f6c3c6cd523cd4781bb966af2914910df1bf0813f5ca357718", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/is_terminal_polyfill@1.70.2" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "44e4a8a96ba5fffac1618980329c98bbaae8b6acc5365659a688553c4c36f5cd", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/itoa@1.0.18" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "90ce55778cfac3e0f098de0b24f5e2e035d65d0b28f7c09647bf2a433f0ced65", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/libc@0.2.191" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "92fa2f521dd2cabdf45f3ba7d0efa52f4d91674015be492d2f7fd994d1843c9b", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/linux-raw-sys@0.12.1" }, "rule": { "namespace": "license", "id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "71154f949e7c2014f20dbe7d654741451e3def11140bc8612e413c799d1d8c28", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/memchr@2.8.3" }, "rule": { "namespace": "license", "id": "Unlicense OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "72d443496cd2f5431e7f4347680d3790fed414966236ac9d635539cddfc310d7", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/once_cell@1.21.4" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "d0ca8c614318f904a95eef3273640692f921fbea88f4681b46a944098a7f4767", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/once_cell_polyfill@1.70.2" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "33502fd83559ad67d44c080bde985d7528478ab1397cfd11a8218d36537c4e31", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/pkcs8@0.10.2" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "f36a59e9dbd1511f0ef2b47db501e35a66e0dd081a18f992255f811a35b17415", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/ppv-lite86@0.2.21" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "875825c505903cfb9b602a23e74f0edf7eb1621583ed9e583c410103af3d402d", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/proc-macro2@1.0.107" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "d94338e54aeaf7fdb9048fc5ec3defa5504f99aab2210cec5156b23ac309f0fd", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/quote@1.0.47" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "73c9c8606efa4200ec16f7e1121489b31dba86fe5c2093dd9907af8d742ee0d3", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/r-efi@6.0.0" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0 OR LGPL-2.1-or-later" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "583bffa666173cd89ec5435a820a182f195e80ec3430f14ae356e22996f0c604", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/rand@0.8.8" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "c25b8b5f19fbb27189204b7c69f7d0bb55b519b678667bf698371f8884cc9037", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/rand_chacha@0.3.1" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "9b2b8375abad347b471c42d1cf7a4c0535119bbe425e5485aad498ec17f767c4", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/rand_core@0.6.4" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "175e264aed60c77f52af0e9e671e8ac55bec5e6e45abdc84a5ebcb3ec8228a32", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/rustc_version@0.4.1" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "0af9738feb17c972c978f5fb2a9d015e97b728ba66aa088f9c16113be8df3a91", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/rustix@1.1.5" }, "rule": { "namespace": "license", "id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "2dba13d7eff3023b8735741b2cebfcf48401ab80634cc83fa074d62e0029c6e5", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/semver@1.0.28" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "b7f56764e7744f74cad3387a716a5246077d8c6e9f0089883df0dbb8288aeb5d", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/serde@1.0.229" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "881652ce03c9fbb009ba2d5e92cacd9454e5366d43e3712ab99c1a0bb52cb0c8", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/serde_core@1.0.229" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "7d3cf8ea302039c6b559c6537f587340c694b5e20193dbc5bcb157a006d26b8a", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/serde_derive@1.0.229" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "da48400504894d432651db8f2dc88973bc202459db2f7d825ad79be718e1475d", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/serde_json@1.0.154" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "4e1769b1e32b9db38c1c88b395bbb79d75dbc84ccebcd482bc8e372323612ea5", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/sha2@0.10.9" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "7d786c3589077e405f9f6eefb654a291c2151ab077bdf2fd98c88ca1872cb009", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/signature@2.2.0" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "137f488cae7954a76b606a56914e8a17efe4b31f2b08ac1e0f518150c86ca603", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/smallvec@1.6.0" }, "rule": { "namespace": "license", "id": "MIT/Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "2da68b323dc569bcbc497ed8b2cfb0120654e76776cf3c35f8d3e950f5747bc0", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/spki@0.7.3" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "190387b967c5696b7e77e95e77baff38bd4c4cf266e724c09cc8cc70dc665da5", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/strsim@0.11.1" }, "rule": { "namespace": "license", "id": "MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "f09ee24c509b49380459f50c80591806cd7c73ad6c6c2dc99229670041fee674", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/subtle@2.6.1" }, "rule": { "namespace": "license", "id": "BSD-3-Clause" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "88cca70db371b2eb5db003aa26dca694e18d04d14f10fea6bb7b77c9d8a5915c", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/syn@2.0.119" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "15bedfcd4863b93f38b7d0bc2bd56e41531843d5c2953974ebb947a686aebc48", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/syn@3.0.9" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "1c2df16adcb1e41856c04a70f745f44ed8efe15e1f2423e4d6a024902014f96c", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/tempfile@3.27.0" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "7ce501395a51a046ddd2de234813e8610fecb37a279dd7581b6a230876216f09", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/typenum@1.20.1" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "10ebd1e19e81d1b55e547bcf583a4da0d086d5d47b86817360bc2d6fa1daecc8", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/unicode-ident@1.0.27" }, "rule": { "namespace": "license", "id": "(MIT OR Apache-2.0) AND Unicode-3.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "2a48ac251537ab5616cb3a1c8b7c09ed5253e442bcb585a6a812cc2e12df9a99", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/utf8parse@0.2.2" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "a178fed10f746a25a38e1a123cff01f7148bdfc82f2d75d55aa653a382c86dcb", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/version_check@0.9.5" }, "rule": { "namespace": "license", "id": "MIT/Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "b505efbcbc2188a627d169bdbdc34901dec4f22b50255975c9c07961ddf3391d", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/wasi@0.11.1+wasi-snapshot-preview1" }, "rule": { "namespace": "license", "id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "7cc0ff2a3a61ff414a371dabeaef2dfd080dc6981383f0d056f5807f9f7f7716", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/windows-link@0.2.1" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "88f3e265d85daf89a5f53123d8cb24aa877f866f5a9e0798e3fcbfba44e07401", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/windows-sys@0.61.2" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "ccde7aa1c7e4a197172dbdd8d438652d4e46433fa65f363abd51fd3f4d5e042a", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/zerocopy@0.8.63" }, "rule": { "namespace": "license", "id": "BSD-2-Clause OR Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "155008951dcca3c42ca968720dec1ba279f3836ef1c6921e7384a41ced42b7fb", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/zerocopy-derive@0.8.63" }, "rule": { "namespace": "license", "id": "BSD-2-Clause OR Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "44f17f90be8e27066147ced08a81acf0709bf297e99ffb794be4f91f07a37819", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/zeroize@1.9.1" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" }, { "id": "9c06bc92074e46c9fad575585278ef5b558d6f9e86471f5f1afb991819aab2c7", "class": "license", "subject": { "specimen_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "component_id": "pkg:cargo/zmij@1.0.23" }, "rule": { "namespace": "license", "id": "MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:55:42.395700205Z" } ], "witnesses": [ { "tool": "osv-scanner", "version": "2.7.0", "binary_digest": "160c6253e2922e9e0a6a9771c5c4c40a4b3c6090b34a3cdd5e80c96cc2e4218b", "config_digest": "0c3d6fef8ea59e1de5610e13ccb1035a7232318288aaed517ee2feec9402455a", "invocation_digest": "15a5265bc4667e071e501c5a47363b48c6fcceeb9d6576979fb954be9065d729", "input_subject_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "504f53629d55e16689863e5f5be007f8569c05eb846a54fb0a6d3c3adb4dca39", "normalized_evidence_digest": "a01c9fbe2e0f89ba51e98a9f9adb3e2221181b02f05426888a8e8e1d4c6f99a0", "limitations": [ "osv-scanner checks registry-based ecosystems (crates.io in 0.6.0); git-sourced dependencies (lean [[require]], gpr) have no advisory database — Insufficient Evidence for them, never a silent pass" ], "evidence_class": "dependency_vulnerability", "observed_at": "2026-10-21T17:55:42.395700205Z" }, { "tool": "semgrep", "version": "1.181.0", "binary_digest": "c29de7c43986faa3c3ca5a8acf1d115811e15ab305ba7657b79e775d40e16391", "config_digest": "206116bd213f0786f8378755ad48adbccfe30376afe8fe2ecdd24eb44161d009", "invocation_digest": "f1f5bcbd6c30b2a3103b2d7b406b6b47621af05e894478878f75a703a1bea1a8", "input_subject_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "80c185ac8e17503197e8195c202d98db3f0cd3865a37ba7065f37bdbf2a58d54", "normalized_evidence_digest": "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "limitations": [], "evidence_class": "static_analysis", "observed_at": "2026-10-21T17:55:42.395700205Z" }, { "tool": "gitleaks", "version": "8.30.1", "binary_digest": "88f91962aa2f93ac6ab281d553b9e125f5197bbbce38f9f2437f7299c32e5509", "config_digest": "e1f77c307b36a43d3707ab5fed4a4007f6d63d9302bcf0d5509cd3e52e32ed6f", "invocation_digest": "42666d05fda40180a6e02009efbf2804e8943b00bdfe111385984d6de0574164", "input_subject_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "37517e5f3dc66819f61f5a7bb8ace1921282415f10551d2defa5c3eb0985b570", "normalized_evidence_digest": "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "limitations": [], "evidence_class": "secret", "observed_at": "2026-10-21T17:55:42.395700205Z" }, { "tool": "syft", "version": "1.54.1", "binary_digest": "dbf75864e7a7ff9e1fbf00552c31483f693188632a9f68f343cd7653dac513d6", "config_digest": "b6f045a568b2dd1dcd1a1723f4eb0b8f5863215301ced35067a5f7a53c07c7e6", "invocation_digest": "a95ce6f3f2d3bbc188fbc95c27a2fcebeace6084d0f572bd53ee496b88fc9204", "input_subject_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01", "normalized_evidence_digest": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "limitations": [], "evidence_class": "supply_chain", "observed_at": "2026-10-21T17:55:42.395700205Z" }, { "tool": "dependency-manifest", "version": "1", "binary_digest": "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4", "config_digest": "2402cf6f9fd45d6c6d7b9bc10abdba72e36d61e88515a01d2cda19ee8d375b3b", "invocation_digest": "ea3bcb0676655d57ddbde14979bc7caa0358a6b87a32fe47ad6fc28ecfe3e0d0", "input_subject_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4", "normalized_evidence_digest": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "limitations": [ "license facts are the job dependency manifest's registry SPDX ids; the workspace's own code and git-sourced dependencies carry no registry license facts" ], "evidence_class": "license", "observed_at": "2026-10-21T17:55:42.395700205Z" } ], "vulnerability_snapshot": { "source_identity": "osv.dev", "snapshot_identity": "osv-dev-20261021-457e10c8", "observed_at": "2026-10-21T17:30:12Z", "freshness_hours": 24 }, "exceptions": [], "open_findings": 2, "satisfied": false, "evaluated_at": "2026-10-26T05:58:17.902953173Z" } }, { "index": 4, "outcome": "Insufficient", "at": "2026-10-21T17:57:04.863250Z", "duration_ms": 34757, "source_sha256": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "security": { "policy": { "id": "falsegreen-platform", "version": "1", "digest": "372d3c74758acb113c1bef14b20b08b326a7703dd57d943247de6541743c0fad", "required": [ "dependency_vulnerability", "static_analysis", "secret", "supply_chain", "license" ], "minimum_witnesses": 1, "fail_on_severities": [ "critical", "high" ], "unknown_severity": "insufficient", "secrets_fail_on_any_unexcepted": true, "required_standards": [], "unavailable_behavior": "insufficient" }, "language": "", "classes": [ { "class": "dependency_vulnerability", "required": true, "status": "fail", "witness_refs": [ "a01c9fbe2e0f89ba51e98a9f9adb3e2221181b02f05426888a8e8e1d4c6f99a0" ], "reasons": [ "vulnerability snapshot is stale (observed 2026-10-21T17:30:12Z, freshness bound 24h)", "finding 5046f75b49bcc91e972fe6e37dff89bd730acac66b5c0835cdfea59610c6a9a5 severity `high` is frozen-fail (osv/RUSTSEC-2021-0003)", "finding 538efbca6ab37d1de7206475fd690628e0d69cbb5b3b1d27719f69b6caaf43f7 severity `high` is frozen-fail (osv/GHSA-43w2-9j62-hq99)" ] }, { "class": "static_analysis", "required": true, "status": "pass", "witness_refs": [ "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945" ], "reasons": [] }, { "class": "secret", "required": true, "status": "pass", "witness_refs": [ "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945" ], "reasons": [] }, { "class": "supply_chain", "required": true, "status": "pass", "witness_refs": [ "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db" ], "reasons": [] }, { "class": "license", "required": true, "status": "not_assessed", "witness_refs": [ "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a" ], "reasons": [ "no licence policy frozen — the licence facts are inventory, nothing was asserted" ] } ], "findings": [ { "id": "5046f75b49bcc91e972fe6e37dff89bd730acac66b5c0835cdfea59610c6a9a5", "class": "dependency_vulnerability", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:crates.io/smallvec@1.6.0" }, "rule": { "namespace": "osv", "id": "RUSTSEC-2021-0003" }, "severity": { "value": "high" }, "state": "open", "evidence_refs": [ "b7402118126ef7264d194c32cbe0f57e5f5d0c6621769ece44810d6870f161a5" ], "witness_tool_ref": "a01c9fbe2e0f89ba51e98a9f9adb3e2221181b02f05426888a8e8e1d4c6f99a0", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "538efbca6ab37d1de7206475fd690628e0d69cbb5b3b1d27719f69b6caaf43f7", "class": "dependency_vulnerability", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:crates.io/smallvec@1.6.0" }, "rule": { "namespace": "osv", "id": "GHSA-43w2-9j62-hq99" }, "severity": { "value": "high" }, "state": "open", "evidence_refs": [ "b7402118126ef7264d194c32cbe0f57e5f5d0c6621769ece44810d6870f161a5" ], "witness_tool_ref": "a01c9fbe2e0f89ba51e98a9f9adb3e2221181b02f05426888a8e8e1d4c6f99a0", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "585dc8dd419afdf4e9bf3c874f2701e31d5f3338bc9b4203dc562020a35876ec", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/anstream@1.0.0" }, "rule": { "namespace": "syft", "id": "anstream@1.0.0" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "5812a90517ca8a7be4835875c4821ace43a4835c915372e2902c66fdb38fdc43", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/anstyle@1.0.14" }, "rule": { "namespace": "syft", "id": "anstyle@1.0.14" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "0c2acffbd95840f484ecf5ead5dbf02d3043c8cd99e95cffcecb6dd06aad1689", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/anstyle-parse@1.0.0" }, "rule": { "namespace": "syft", "id": "anstyle-parse@1.0.0" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "38e530b1f35c1f97754741dcb41c150fc5f37b19537d0a862f1cf412d5d5eb77", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/anstyle-query@1.1.5" }, "rule": { "namespace": "syft", "id": "anstyle-query@1.1.5" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "43a7bbf00d060e71d216d2dba5a8507586b4879c8c606cb5701f4721a1340984", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/anstyle-wincon@3.0.11" }, "rule": { "namespace": "syft", "id": "anstyle-wincon@3.0.11" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "b53200027bb397c19303a57035a312ff9896f23494778cfe8417bf3b566802b7", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/base64ct@1.8.3" }, "rule": { "namespace": "syft", "id": "base64ct@1.8.3" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "a27f471935b3ca54a96a87c1168029f17d49df469b5d7fb9768f5be6a479cb5a", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/bitflags@2.13.2" }, "rule": { "namespace": "syft", "id": "bitflags@2.13.2" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "d954449ff474a768cbba77304caa220f9361597bbb1fdcfa4f395dc2ff3ab6a3", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/block-buffer@0.10.4" }, "rule": { "namespace": "syft", "id": "block-buffer@0.10.4" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "298a3dc87ed455182e39269edd7bcb85eb69d2fdfaed33bb248b55ce4ef400bf", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/cfg-if@1.0.5" }, "rule": { "namespace": "syft", "id": "cfg-if@1.0.5" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "c945fdb692b50e54a5707923beed9b74cc8840b872dda759232c54f54faf3e13", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/clap@4.6.7" }, "rule": { "namespace": "syft", "id": "clap@4.6.7" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "4c660220014879503df0995f4e53893f079ed601c9ca4351754a91d944cd5747", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/clap_builder@4.6.7" }, "rule": { "namespace": "syft", "id": "clap_builder@4.6.7" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "8bb04af9d989b5eb357e0b7a5a47760babc2e2e30e6622131f0b704e82099de2", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/clap_derive@4.6.7" }, "rule": { "namespace": "syft", "id": "clap_derive@4.6.7" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "0806d9370588be53df7d7e7b13b4cd97fe96353945c1a2e612f0cb42e6b0a9fa", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/clap_lex@1.1.1" }, "rule": { "namespace": "syft", "id": "clap_lex@1.1.1" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "564bee5e0ca4f5b0b9d5c7f3c80949c2379225cc93896b64d7cf40572e67f707", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/colorchoice@1.0.5" }, "rule": { "namespace": "syft", "id": "colorchoice@1.0.5" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "e67b364fc025909689d2318cd8edbb4eff67f8550970a92413e57be11015fa73", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/const-oid@0.9.6" }, "rule": { "namespace": "syft", "id": "const-oid@0.9.6" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "6d706f34a5c990989290bf9a40545e25199499f4d7896fb17db92c9f5704d9dd", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/cpufeatures@0.2.17" }, "rule": { "namespace": "syft", "id": "cpufeatures@0.2.17" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "145a268fb83cc9efa6d7dbc1f2c7a5bb878887bd309a7a13c70db7c26a3dd4a6", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/crypto-common@0.1.7" }, "rule": { "namespace": "syft", "id": "crypto-common@0.1.7" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "787a89ac66a8ee454e76700ba05fd7449ee2e0a02adba4d5703b4e43a3ad63ee", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/curve25519-dalek@4.1.3" }, "rule": { "namespace": "syft", "id": "curve25519-dalek@4.1.3" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "e363a3158ed291249701f7a913b490cfd8e21da33cc9bf6cadf72aebdb110e38", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/curve25519-dalek-derive@0.1.1" }, "rule": { "namespace": "syft", "id": "curve25519-dalek-derive@0.1.1" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "5751ef29264c20e19c6275a8edbcb5fe4e9fd09f069d6478509958c3c665a5e5", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/der@0.7.10" }, "rule": { "namespace": "syft", "id": "der@0.7.10" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "abddfb4ca732e056419f5daea9c997464fb39a808c74315e77618f63aad577b5", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/digest@0.10.7" }, "rule": { "namespace": "syft", "id": "digest@0.10.7" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "09b4b23b72b30909f311f514c3047c3b683412752ce0f30b550c35f69175ccb1", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/ed25519@2.2.3" }, "rule": { "namespace": "syft", "id": "ed25519@2.2.3" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "5e9cb7bd671ff507af20938bceec17825515186a8d16aaaebdc53f2962c62f4d", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/ed25519-dalek@2.2.0" }, "rule": { "namespace": "syft", "id": "ed25519-dalek@2.2.0" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "ebfe761a2619776f2942064a3f4868f3e0008f237546af684b50af44dfc3b099", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/errno@0.3.14" }, "rule": { "namespace": "syft", "id": "errno@0.3.14" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "305b6e419555a415bf2c3931f34c2f2a305b322905e7d62a155a394c36a7f9ee", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "" }, "rule": { "namespace": "syft", "id": "falsegreen-ledger@0.1.0" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "037fe54909861dd855fbdb0b49d679ac7e8db1fef9f31cee62b92f74ea406033", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "" }, "rule": { "namespace": "syft", "id": "falsegreen-ledger-core@0.1.0" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "6114365595d08a3bfc7e5d101289c1511fd658287c777c4ec53b73a764a8419f", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/fastrand@2.5.0" }, "rule": { "namespace": "syft", "id": "fastrand@2.5.0" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "8c813dcb9098a7c8941eb1aaffa3513c58020c83e085b04e6767488e300c6c97", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/fiat-crypto@0.2.9" }, "rule": { "namespace": "syft", "id": "fiat-crypto@0.2.9" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "5e9894b399a2c47a307185031536daaee5ded5c707a623024827a381aad89903", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/generic-array@0.14.7" }, "rule": { "namespace": "syft", "id": "generic-array@0.14.7" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "992e1c30dd219f9cf75f520e5d8dbf0588faae5d1a6bc9f2607da898d9f5c847", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/getrandom@0.2.17" }, "rule": { "namespace": "syft", "id": "getrandom@0.2.17" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "11a15cd49953aaee1017644804d1c3f9e5c0f2dece9366168276bff362fc0d24", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/getrandom@0.4.3" }, "rule": { "namespace": "syft", "id": "getrandom@0.4.3" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "c2a49ee05fb8e39068222324fb06d7af16937aff1e9a9ea99a8e17acc514f457", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/heck@0.5.0" }, "rule": { "namespace": "syft", "id": "heck@0.5.0" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "e29ecb67830b5145d857685e3f25db579bbcf432c785c6d223baf8bea97d1a9d", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/hex@0.4.3" }, "rule": { "namespace": "syft", "id": "hex@0.4.3" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "b3d93215b7294d3158ac885a5f44df493b9205f88c1d1b8730891332fd3b7030", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/is_terminal_polyfill@1.70.2" }, "rule": { "namespace": "syft", "id": "is_terminal_polyfill@1.70.2" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "2198026ba7738261a15516b44aed3a688f8b546c317b64b35c08cd6141612cd3", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/itoa@1.0.18" }, "rule": { "namespace": "syft", "id": "itoa@1.0.18" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "61aaeff62260c1d967d95422d89a28bc19dd0e5a930b6c9dfd3f031a4999dd7f", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/libc@0.2.191" }, "rule": { "namespace": "syft", "id": "libc@0.2.191" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "9638a8b320f9ef1e348eb212d7b9b5aff9cff37075971380c717f44f8c144d91", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/linux-raw-sys@0.12.1" }, "rule": { "namespace": "syft", "id": "linux-raw-sys@0.12.1" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "e2d6e087930e3834218a876fdb280683d5efcdaf50ae2eab592e1e22f97d815d", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/memchr@2.8.3" }, "rule": { "namespace": "syft", "id": "memchr@2.8.3" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "06cfdd42abb0c9e4d1075d601a05b33ad12f4e0770c117f758e768a380957b48", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/once_cell@1.21.4" }, "rule": { "namespace": "syft", "id": "once_cell@1.21.4" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "25d8ffe4413b6cf3ccf7a0646d5136789bd33d4b513d6ef17a7f8549d27ff3c4", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/once_cell_polyfill@1.70.2" }, "rule": { "namespace": "syft", "id": "once_cell_polyfill@1.70.2" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "426f5a3c744e86d89a996166238d634b5159d615a2642460863a26de9ebe1afe", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/pkcs8@0.10.2" }, "rule": { "namespace": "syft", "id": "pkcs8@0.10.2" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "c694e303f6d517d79b9440f754fd2092277919227356a55095046c9b6938a128", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/ppv-lite86@0.2.21" }, "rule": { "namespace": "syft", "id": "ppv-lite86@0.2.21" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "83840aaef8208540db5387d039d782fb6638ce97e06bd3f18ce20661ab601f55", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/proc-macro2@1.0.107" }, "rule": { "namespace": "syft", "id": "proc-macro2@1.0.107" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "7ec44be48b990fd8c38cb446e9e2cde3c7a02c7b35c9e4514bf7974c9def81eb", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/quote@1.0.47" }, "rule": { "namespace": "syft", "id": "quote@1.0.47" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "e5bc87872cb19c9a211895bbde8092b0512f0338b0bde534dade96b289166a5b", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/r-efi@6.0.0" }, "rule": { "namespace": "syft", "id": "r-efi@6.0.0" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "f119984d74172df79e8ed614888308c422e4e3e76e09acdd7c7df03156c6ebab", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/rand@0.8.8" }, "rule": { "namespace": "syft", "id": "rand@0.8.8" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "da733f873e8e22258550231003a3cc91d78301c5807ea9c5c6c953bdfc93a386", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/rand_chacha@0.3.1" }, "rule": { "namespace": "syft", "id": "rand_chacha@0.3.1" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "303db3e1caa7ec327fb3d438d968f3ece32234dbb594a8d0ef3addca9bcb61de", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/rand_core@0.6.4" }, "rule": { "namespace": "syft", "id": "rand_core@0.6.4" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "8c2b4d1a270f8c039f231929858e0a81f04e4168eaa9e3884e96d2cf67fa0b9f", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/rustc_version@0.4.1" }, "rule": { "namespace": "syft", "id": "rustc_version@0.4.1" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "94f78cc0a41219cf8bd76e72370c1e3f7a25a1c5d3682c962ebcac51f96e6107", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/rustix@1.1.5" }, "rule": { "namespace": "syft", "id": "rustix@1.1.5" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "9e26a95ae3dfd058f160efaaad125c58e9e4df33de1cd9e89f238a5af96e1d8d", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/semver@1.0.28" }, "rule": { "namespace": "syft", "id": "semver@1.0.28" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "6b250dfbe70ae2dd0686b791c854ea29d60fcced5847ef1097b33776640b726b", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/serde@1.0.229" }, "rule": { "namespace": "syft", "id": "serde@1.0.229" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "0907c849ff021995b320333d903013c3e35609e44fdd439d0185cdd6b2b42b33", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/serde_core@1.0.229" }, "rule": { "namespace": "syft", "id": "serde_core@1.0.229" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "eea06b68ab5dfabe29545176a15ca67d241e54bcf1a54c735e99406c378c3b0d", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/serde_derive@1.0.229" }, "rule": { "namespace": "syft", "id": "serde_derive@1.0.229" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "567f9a6ec6dd74ea27cceeecd20cc8f83ec2bad60cb4992da15e71fa478e3c8b", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/serde_json@1.0.154" }, "rule": { "namespace": "syft", "id": "serde_json@1.0.154" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "1dc35a3d9010bd6a84e1fe0d75e39d2f1507e7d761fba360a6a011b297aff75b", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/sha2@0.10.9" }, "rule": { "namespace": "syft", "id": "sha2@0.10.9" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "039783866d8dc87a18a205702b098ce8341f6e3032a121b65f5888dbc79dbf86", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/signature@2.2.0" }, "rule": { "namespace": "syft", "id": "signature@2.2.0" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "64738dd926f6eb4044f0de2fde1b326703bbc228579b56e08373f9fb8b6936c3", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/smallvec@1.6.0" }, "rule": { "namespace": "syft", "id": "smallvec@1.6.0" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "b1b266ef80a1dcba71b6ea153bd32e5b3d9e89c33461e3638c6b56ecea92fde9", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/spki@0.7.3" }, "rule": { "namespace": "syft", "id": "spki@0.7.3" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "a2d0f5f6f8ebcca0da8bbf2c323fb2013afa905a47a570b6c73442bc9a5b8620", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/strsim@0.11.1" }, "rule": { "namespace": "syft", "id": "strsim@0.11.1" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "6ef75c868a28b31d2d9bdd28764b8c3e232fbcdb70190659f0ecebb57c8e2a3e", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/subtle@2.6.1" }, "rule": { "namespace": "syft", "id": "subtle@2.6.1" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "172012ad51c91dc3a2e8a3a4c30026893420917739d047e5dc8918d5af26e93e", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/syn@2.0.119" }, "rule": { "namespace": "syft", "id": "syn@2.0.119" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "4cf5b83b5e47207b200be1c28233d037d4896752b572d0edb52975dc429e0b1c", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/syn@3.0.9" }, "rule": { "namespace": "syft", "id": "syn@3.0.9" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "96826fe9035d6551629c4e2a5e7d6f2df945796fac5128adf613901f231612ce", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/tempfile@3.27.0" }, "rule": { "namespace": "syft", "id": "tempfile@3.27.0" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "4cabb90893a6e49358a09f507c1134173b15a041a74b54cf9d4c1d93ce6d2e82", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/typenum@1.20.1" }, "rule": { "namespace": "syft", "id": "typenum@1.20.1" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "cdf512d7b7b4b6aad7b87252ee1d8aa13deced196dc20e86af4c693914775db0", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/unicode-ident@1.0.27" }, "rule": { "namespace": "syft", "id": "unicode-ident@1.0.27" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "493be846b106eef3741941ff4fbf118d156cd42bcbf90ef0820faff50ed6aeb4", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/utf8parse@0.2.2" }, "rule": { "namespace": "syft", "id": "utf8parse@0.2.2" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "4113c0d164e406e3897d48a025ec03de3591018065c023d609aa9a1a24a8535e", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/version_check@0.9.5" }, "rule": { "namespace": "syft", "id": "version_check@0.9.5" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "2908eeb04b59a653d934e0cdb89832021bfaa96dec7ff3dafcffbf192d06ba0b", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/wasi@0.11.1%2Bwasi-snapshot-preview1" }, "rule": { "namespace": "syft", "id": "wasi@0.11.1+wasi-snapshot-preview1" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "6e216a5e2b506734f75006b2f0a084aa655272534631ff3e365dae942872f46e", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/windows-link@0.2.1" }, "rule": { "namespace": "syft", "id": "windows-link@0.2.1" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "9077dd0b2b86b914f0b095c8d6bcc189167ee95b7021993b57088bd5e25c724f", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/windows-sys@0.61.2" }, "rule": { "namespace": "syft", "id": "windows-sys@0.61.2" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "e88bf689d1aa0a4bcdfaefe867dd26346df4be90d067004b93b7d73fb75cfe38", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/zerocopy@0.8.63" }, "rule": { "namespace": "syft", "id": "zerocopy@0.8.63" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "2f618422a7648ae74d807312d3a397d16eef2a47e85b7a412fe58ff50268a109", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/zerocopy-derive@0.8.63" }, "rule": { "namespace": "syft", "id": "zerocopy-derive@0.8.63" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "3cfb926e0c9258ea27f8d32a2de899d498b245fbd099dff9cbf872a3d9832914", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/zeroize@1.9.1" }, "rule": { "namespace": "syft", "id": "zeroize@1.9.1" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "57cc8ce7a77d7b267625f03e149331e422afd6e028ace34137fe11514f19b0e4", "class": "supply_chain", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/zmij@1.0.23" }, "rule": { "namespace": "syft", "id": "zmij@1.0.23" }, "state": "open", "evidence_refs": [ "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "3cb3f72855ec8da34228f8a8b8b49d110c5f6296126a0396e384b78dff93858b", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/anstream@1.0.0" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "105d7e1b0ce045f5eaecf4886b2a3a53f11740059022390aeed0641349be6370", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/anstyle@1.0.14" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "6a1bdd16582f18fdb1fa91303573db6370cbc6c6791e13662c519f3bf67e2b58", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/anstyle-parse@1.0.0" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "c32d140352b51004cc522860ec69e78b1648a34309a6a9be6f3bcdf6b34c3ea8", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/anstyle-query@1.1.5" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "4e5f3b8af12d986d540eb760ff9cd8b6855eaad28f2aad327cfb27528eddab32", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/anstyle-wincon@3.0.11" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "d87de0e2410e4ce9c1b03a1c509b3ddf5960b0936f81d4647ba1c5d6d89fc86b", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/base64ct@1.8.3" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "0ae447b9c774db7ecc15622af01746eae86cf6f47a4192ff75afdbb184bd4f0d", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/bitflags@2.13.2" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "88f6dcc043cb942462a57d4e8de3f5e67de6a2bcfe84ec10f2977e7df83f3f70", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/block-buffer@0.10.4" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "6dc467fded10560a16e1a85aae690fdd4d560ab3a7854ff858b0790cbced7ab2", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/cfg-if@1.0.5" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "d62527e65bfebf56c615db5a8b57a52ebb14d9d01d5737b36026ffcd385e020f", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/clap@4.6.7" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "5022223658ce227834152beda2f8039c2f620048d573cdfafca1df7435cd10a4", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/clap_builder@4.6.7" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "b4acb80d59203342fec461529a44fbdf49e70bc6ca659f541896faa542ea43c5", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/clap_derive@4.6.7" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "f18f5e7c89578e9678c5c7348530bcd16566d209feb0453558bd4177a56e4519", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/clap_lex@1.1.1" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "3aa7445371bcced37f805b8b93e9c78dc9638f3ebccedb2087fd6a4bf369b408", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/colorchoice@1.0.5" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "e23a545bde38131ecd1958e9a627d1c94d4e1e13ac04f45d6d19ea0ba3ffa3d6", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/const-oid@0.9.6" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "524744fd861891b779e920a35054e452215c00ca7ad2ecd0c314ce8176be8972", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/cpufeatures@0.2.17" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "7f21367b3adac10c420edf92206d55530b768dbb37f26d97ab71624f4897a4ef", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/crypto-common@0.1.7" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "fe2c38830f0c36aa5c2b7e92c8ce6e5f5ffce3359ea8c601e5c38043e1bdf8a2", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/curve25519-dalek@4.1.3" }, "rule": { "namespace": "license", "id": "BSD-3-Clause" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "22e858ebe1e0cd3085665c0b1ddb0258c163e74d25bd86359b4b5f2a6c9ac9a4", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/curve25519-dalek-derive@0.1.1" }, "rule": { "namespace": "license", "id": "MIT/Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "1d544f0845dcc666855e99dd2b294924d14fc9a59ee95d04ab545ef5a456563a", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/der@0.7.10" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "52412f24e374c82ecd63af7620df4b525ebf66faccde3420a82407886bd0c284", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/digest@0.10.7" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "ae41ba9e474899a525f07dedebf70d5b4d90f42b867dade39a918ff0dc56cdbd", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/ed25519@2.2.3" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "bfba5b2b48789d0999e04341c49eb12720a3312e6c03ae463dc733e6fbb7f47a", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/ed25519-dalek@2.2.0" }, "rule": { "namespace": "license", "id": "BSD-3-Clause" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "3e1257c111ee0929dbe8413202dd62d02da5e23805b3c7b82ee7db2e60e2e5bf", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/errno@0.3.14" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "413b301a14873d3fa09cfbeb904a1753aff90083f7faf45c9fa10ae41e514c95", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/fastrand@2.5.0" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "ca89f09616c15bc6e6aac2d3d9a826d665ed042c69fe8093e11ca0e11215fa88", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/fiat-crypto@0.2.9" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0 OR BSD-1-Clause" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "b56a6ad063aa5b2a36eb7f5ca9f3d6a67d4edee01d6b1bf01994bd1049382aa1", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/generic-array@0.14.7" }, "rule": { "namespace": "license", "id": "MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "a2e087ff1e664313a70e2e8ce7eed24cea66820e3750c483ddf3f4d1e254d8bf", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/getrandom@0.2.17" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "e8a05789f8c7ca2d56115d6721959efab7dee18603092589b99cc0603b4e4931", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/getrandom@0.4.3" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "a045045ab5f79bbc6d89c842641627a66ef7838cf2c4a6956b7cdb1c8adcce1f", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/heck@0.5.0" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "2bfc1148428c407eb319a7e6c10fde0605121ffa1716eaa1db0ddd9d8aad5e7b", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/hex@0.4.3" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "1607bce4d21887f6c3c6cd523cd4781bb966af2914910df1bf0813f5ca357718", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/is_terminal_polyfill@1.70.2" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "44e4a8a96ba5fffac1618980329c98bbaae8b6acc5365659a688553c4c36f5cd", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/itoa@1.0.18" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "90ce55778cfac3e0f098de0b24f5e2e035d65d0b28f7c09647bf2a433f0ced65", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/libc@0.2.191" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "92fa2f521dd2cabdf45f3ba7d0efa52f4d91674015be492d2f7fd994d1843c9b", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/linux-raw-sys@0.12.1" }, "rule": { "namespace": "license", "id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "71154f949e7c2014f20dbe7d654741451e3def11140bc8612e413c799d1d8c28", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/memchr@2.8.3" }, "rule": { "namespace": "license", "id": "Unlicense OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "72d443496cd2f5431e7f4347680d3790fed414966236ac9d635539cddfc310d7", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/once_cell@1.21.4" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "d0ca8c614318f904a95eef3273640692f921fbea88f4681b46a944098a7f4767", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/once_cell_polyfill@1.70.2" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "33502fd83559ad67d44c080bde985d7528478ab1397cfd11a8218d36537c4e31", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/pkcs8@0.10.2" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "f36a59e9dbd1511f0ef2b47db501e35a66e0dd081a18f992255f811a35b17415", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/ppv-lite86@0.2.21" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "875825c505903cfb9b602a23e74f0edf7eb1621583ed9e583c410103af3d402d", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/proc-macro2@1.0.107" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "d94338e54aeaf7fdb9048fc5ec3defa5504f99aab2210cec5156b23ac309f0fd", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/quote@1.0.47" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "73c9c8606efa4200ec16f7e1121489b31dba86fe5c2093dd9907af8d742ee0d3", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/r-efi@6.0.0" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0 OR LGPL-2.1-or-later" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "583bffa666173cd89ec5435a820a182f195e80ec3430f14ae356e22996f0c604", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/rand@0.8.8" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "c25b8b5f19fbb27189204b7c69f7d0bb55b519b678667bf698371f8884cc9037", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/rand_chacha@0.3.1" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "9b2b8375abad347b471c42d1cf7a4c0535119bbe425e5485aad498ec17f767c4", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/rand_core@0.6.4" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "175e264aed60c77f52af0e9e671e8ac55bec5e6e45abdc84a5ebcb3ec8228a32", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/rustc_version@0.4.1" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "0af9738feb17c972c978f5fb2a9d015e97b728ba66aa088f9c16113be8df3a91", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/rustix@1.1.5" }, "rule": { "namespace": "license", "id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "2dba13d7eff3023b8735741b2cebfcf48401ab80634cc83fa074d62e0029c6e5", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/semver@1.0.28" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "b7f56764e7744f74cad3387a716a5246077d8c6e9f0089883df0dbb8288aeb5d", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/serde@1.0.229" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "881652ce03c9fbb009ba2d5e92cacd9454e5366d43e3712ab99c1a0bb52cb0c8", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/serde_core@1.0.229" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "7d3cf8ea302039c6b559c6537f587340c694b5e20193dbc5bcb157a006d26b8a", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/serde_derive@1.0.229" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "da48400504894d432651db8f2dc88973bc202459db2f7d825ad79be718e1475d", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/serde_json@1.0.154" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "4e1769b1e32b9db38c1c88b395bbb79d75dbc84ccebcd482bc8e372323612ea5", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/sha2@0.10.9" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "7d786c3589077e405f9f6eefb654a291c2151ab077bdf2fd98c88ca1872cb009", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/signature@2.2.0" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "137f488cae7954a76b606a56914e8a17efe4b31f2b08ac1e0f518150c86ca603", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/smallvec@1.6.0" }, "rule": { "namespace": "license", "id": "MIT/Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "2da68b323dc569bcbc497ed8b2cfb0120654e76776cf3c35f8d3e950f5747bc0", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/spki@0.7.3" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "190387b967c5696b7e77e95e77baff38bd4c4cf266e724c09cc8cc70dc665da5", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/strsim@0.11.1" }, "rule": { "namespace": "license", "id": "MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "f09ee24c509b49380459f50c80591806cd7c73ad6c6c2dc99229670041fee674", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/subtle@2.6.1" }, "rule": { "namespace": "license", "id": "BSD-3-Clause" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "88cca70db371b2eb5db003aa26dca694e18d04d14f10fea6bb7b77c9d8a5915c", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/syn@2.0.119" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "15bedfcd4863b93f38b7d0bc2bd56e41531843d5c2953974ebb947a686aebc48", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/syn@3.0.9" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "1c2df16adcb1e41856c04a70f745f44ed8efe15e1f2423e4d6a024902014f96c", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/tempfile@3.27.0" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "7ce501395a51a046ddd2de234813e8610fecb37a279dd7581b6a230876216f09", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/typenum@1.20.1" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "10ebd1e19e81d1b55e547bcf583a4da0d086d5d47b86817360bc2d6fa1daecc8", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/unicode-ident@1.0.27" }, "rule": { "namespace": "license", "id": "(MIT OR Apache-2.0) AND Unicode-3.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "2a48ac251537ab5616cb3a1c8b7c09ed5253e442bcb585a6a812cc2e12df9a99", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/utf8parse@0.2.2" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "a178fed10f746a25a38e1a123cff01f7148bdfc82f2d75d55aa653a382c86dcb", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/version_check@0.9.5" }, "rule": { "namespace": "license", "id": "MIT/Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "b505efbcbc2188a627d169bdbdc34901dec4f22b50255975c9c07961ddf3391d", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/wasi@0.11.1+wasi-snapshot-preview1" }, "rule": { "namespace": "license", "id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "7cc0ff2a3a61ff414a371dabeaef2dfd080dc6981383f0d056f5807f9f7f7716", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/windows-link@0.2.1" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "88f3e265d85daf89a5f53123d8cb24aa877f866f5a9e0798e3fcbfba44e07401", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/windows-sys@0.61.2" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "ccde7aa1c7e4a197172dbdd8d438652d4e46433fa65f363abd51fd3f4d5e042a", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/zerocopy@0.8.63" }, "rule": { "namespace": "license", "id": "BSD-2-Clause OR Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "155008951dcca3c42ca968720dec1ba279f3836ef1c6921e7384a41ced42b7fb", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/zerocopy-derive@0.8.63" }, "rule": { "namespace": "license", "id": "BSD-2-Clause OR Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "44f17f90be8e27066147ced08a81acf0709bf297e99ffb794be4f91f07a37819", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/zeroize@1.9.1" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" }, { "id": "9c06bc92074e46c9fad575585278ef5b558d6f9e86471f5f1afb991819aab2c7", "class": "license", "subject": { "specimen_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "component_id": "pkg:cargo/zmij@1.0.23" }, "rule": { "namespace": "license", "id": "MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:56:54.662892596Z" } ], "witnesses": [ { "tool": "osv-scanner", "version": "2.7.0", "binary_digest": "160c6253e2922e9e0a6a9771c5c4c40a4b3c6090b34a3cdd5e80c96cc2e4218b", "config_digest": "0c3d6fef8ea59e1de5610e13ccb1035a7232318288aaed517ee2feec9402455a", "invocation_digest": "00b7f999fcca5bc8cd11bee6a25c30ddd87eec20902820825f3f20306e0ff252", "input_subject_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "b7402118126ef7264d194c32cbe0f57e5f5d0c6621769ece44810d6870f161a5", "normalized_evidence_digest": "a01c9fbe2e0f89ba51e98a9f9adb3e2221181b02f05426888a8e8e1d4c6f99a0", "limitations": [ "osv-scanner checks registry-based ecosystems (crates.io in 0.6.0); git-sourced dependencies (lean [[require]], gpr) have no advisory database — Insufficient Evidence for them, never a silent pass" ], "evidence_class": "dependency_vulnerability", "observed_at": "2026-10-21T17:56:54.662892596Z" }, { "tool": "semgrep", "version": "1.181.0", "binary_digest": "c29de7c43986faa3c3ca5a8acf1d115811e15ab305ba7657b79e775d40e16391", "config_digest": "206116bd213f0786f8378755ad48adbccfe30376afe8fe2ecdd24eb44161d009", "invocation_digest": "9c1cf3fe8e6eb2fbc05a7e9a6469768fbb0e8cfdacac91c815ad493700c68995", "input_subject_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "80c185ac8e17503197e8195c202d98db3f0cd3865a37ba7065f37bdbf2a58d54", "normalized_evidence_digest": "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "limitations": [], "evidence_class": "static_analysis", "observed_at": "2026-10-21T17:56:54.662892596Z" }, { "tool": "gitleaks", "version": "8.30.1", "binary_digest": "88f91962aa2f93ac6ab281d553b9e125f5197bbbce38f9f2437f7299c32e5509", "config_digest": "e1f77c307b36a43d3707ab5fed4a4007f6d63d9302bcf0d5509cd3e52e32ed6f", "invocation_digest": "d884972141fefe01c4d1d88d98af43892d8a92723340968dacb42eb93c6e83fc", "input_subject_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "37517e5f3dc66819f61f5a7bb8ace1921282415f10551d2defa5c3eb0985b570", "normalized_evidence_digest": "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "limitations": [], "evidence_class": "secret", "observed_at": "2026-10-21T17:56:54.662892596Z" }, { "tool": "syft", "version": "1.54.1", "binary_digest": "dbf75864e7a7ff9e1fbf00552c31483f693188632a9f68f343cd7653dac513d6", "config_digest": "b6f045a568b2dd1dcd1a1723f4eb0b8f5863215301ced35067a5f7a53c07c7e6", "invocation_digest": "bd85bfc2c9923c1727e25c2cd680e17a7a50e3113c5b6bf2889c93960b07c23d", "input_subject_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc", "normalized_evidence_digest": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "limitations": [], "evidence_class": "supply_chain", "observed_at": "2026-10-21T17:56:54.662892596Z" }, { "tool": "dependency-manifest", "version": "1", "binary_digest": "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4", "config_digest": "2402cf6f9fd45d6c6d7b9bc10abdba72e36d61e88515a01d2cda19ee8d375b3b", "invocation_digest": "765e420e2272afaa1a9fa2d294e6a6fb04be80c019dab73cd0965bf2ffcaae6a", "input_subject_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4", "normalized_evidence_digest": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "limitations": [ "license facts are the job dependency manifest's registry SPDX ids; the workspace's own code and git-sourced dependencies carry no registry license facts" ], "evidence_class": "license", "observed_at": "2026-10-21T17:56:54.662892596Z" } ], "vulnerability_snapshot": { "source_identity": "osv.dev", "snapshot_identity": "osv-dev-20261021-457e10c8", "observed_at": "2026-10-21T17:30:12Z", "freshness_hours": 24 }, "exceptions": [], "open_findings": 2, "satisfied": false, "evaluated_at": "2026-10-26T05:58:17.902953173Z" } }, { "index": 5, "outcome": "Insufficient", "at": "2026-10-21T17:59:09.606621Z", "duration_ms": 28503, "source_sha256": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "security": { "policy": { "id": "falsegreen-platform", "version": "1", "digest": "372d3c74758acb113c1bef14b20b08b326a7703dd57d943247de6541743c0fad", "required": [ "dependency_vulnerability", "static_analysis", "secret", "supply_chain", "license" ], "minimum_witnesses": 1, "fail_on_severities": [ "critical", "high" ], "unknown_severity": "insufficient", "secrets_fail_on_any_unexcepted": true, "required_standards": [], "unavailable_behavior": "insufficient" }, "language": "", "classes": [ { "class": "dependency_vulnerability", "required": true, "status": "fail", "witness_refs": [ "a01c9fbe2e0f89ba51e98a9f9adb3e2221181b02f05426888a8e8e1d4c6f99a0" ], "reasons": [ "vulnerability snapshot is stale (observed 2026-10-21T17:30:12Z, freshness bound 24h)", "finding 5046f75b49bcc91e972fe6e37dff89bd730acac66b5c0835cdfea59610c6a9a5 severity `high` is frozen-fail (osv/RUSTSEC-2021-0003)", "finding 538efbca6ab37d1de7206475fd690628e0d69cbb5b3b1d27719f69b6caaf43f7 severity `high` is frozen-fail (osv/GHSA-43w2-9j62-hq99)" ] }, { "class": "static_analysis", "required": true, "status": "pass", "witness_refs": [ "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945" ], "reasons": [] }, { "class": "secret", "required": true, "status": "pass", "witness_refs": [ "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945" ], "reasons": [] }, { "class": "supply_chain", "required": true, "status": "pass", "witness_refs": [ "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db" ], "reasons": [] }, { "class": "license", "required": true, "status": "not_assessed", "witness_refs": [ "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a" ], "reasons": [ "no licence policy frozen — the licence facts are inventory, nothing was asserted" ] } ], "findings": [ { "id": "5046f75b49bcc91e972fe6e37dff89bd730acac66b5c0835cdfea59610c6a9a5", "class": "dependency_vulnerability", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:crates.io/smallvec@1.6.0" }, "rule": { "namespace": "osv", "id": "RUSTSEC-2021-0003" }, "severity": { "value": "high" }, "state": "open", "evidence_refs": [ "b177b795ea0b89bb9386474c102b3c09f16e21789bff61e488b3cd6f19aba3dd" ], "witness_tool_ref": "a01c9fbe2e0f89ba51e98a9f9adb3e2221181b02f05426888a8e8e1d4c6f99a0", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "538efbca6ab37d1de7206475fd690628e0d69cbb5b3b1d27719f69b6caaf43f7", "class": "dependency_vulnerability", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:crates.io/smallvec@1.6.0" }, "rule": { "namespace": "osv", "id": "GHSA-43w2-9j62-hq99" }, "severity": { "value": "high" }, "state": "open", "evidence_refs": [ "b177b795ea0b89bb9386474c102b3c09f16e21789bff61e488b3cd6f19aba3dd" ], "witness_tool_ref": "a01c9fbe2e0f89ba51e98a9f9adb3e2221181b02f05426888a8e8e1d4c6f99a0", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "585dc8dd419afdf4e9bf3c874f2701e31d5f3338bc9b4203dc562020a35876ec", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/anstream@1.0.0" }, "rule": { "namespace": "syft", "id": "anstream@1.0.0" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "5812a90517ca8a7be4835875c4821ace43a4835c915372e2902c66fdb38fdc43", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/anstyle@1.0.14" }, "rule": { "namespace": "syft", "id": "anstyle@1.0.14" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "0c2acffbd95840f484ecf5ead5dbf02d3043c8cd99e95cffcecb6dd06aad1689", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/anstyle-parse@1.0.0" }, "rule": { "namespace": "syft", "id": "anstyle-parse@1.0.0" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "38e530b1f35c1f97754741dcb41c150fc5f37b19537d0a862f1cf412d5d5eb77", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/anstyle-query@1.1.5" }, "rule": { "namespace": "syft", "id": "anstyle-query@1.1.5" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "43a7bbf00d060e71d216d2dba5a8507586b4879c8c606cb5701f4721a1340984", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/anstyle-wincon@3.0.11" }, "rule": { "namespace": "syft", "id": "anstyle-wincon@3.0.11" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "b53200027bb397c19303a57035a312ff9896f23494778cfe8417bf3b566802b7", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/base64ct@1.8.3" }, "rule": { "namespace": "syft", "id": "base64ct@1.8.3" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "a27f471935b3ca54a96a87c1168029f17d49df469b5d7fb9768f5be6a479cb5a", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/bitflags@2.13.2" }, "rule": { "namespace": "syft", "id": "bitflags@2.13.2" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "d954449ff474a768cbba77304caa220f9361597bbb1fdcfa4f395dc2ff3ab6a3", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/block-buffer@0.10.4" }, "rule": { "namespace": "syft", "id": "block-buffer@0.10.4" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "298a3dc87ed455182e39269edd7bcb85eb69d2fdfaed33bb248b55ce4ef400bf", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/cfg-if@1.0.5" }, "rule": { "namespace": "syft", "id": "cfg-if@1.0.5" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "c945fdb692b50e54a5707923beed9b74cc8840b872dda759232c54f54faf3e13", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/clap@4.6.7" }, "rule": { "namespace": "syft", "id": "clap@4.6.7" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "4c660220014879503df0995f4e53893f079ed601c9ca4351754a91d944cd5747", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/clap_builder@4.6.7" }, "rule": { "namespace": "syft", "id": "clap_builder@4.6.7" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "8bb04af9d989b5eb357e0b7a5a47760babc2e2e30e6622131f0b704e82099de2", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/clap_derive@4.6.7" }, "rule": { "namespace": "syft", "id": "clap_derive@4.6.7" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "0806d9370588be53df7d7e7b13b4cd97fe96353945c1a2e612f0cb42e6b0a9fa", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/clap_lex@1.1.1" }, "rule": { "namespace": "syft", "id": "clap_lex@1.1.1" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "564bee5e0ca4f5b0b9d5c7f3c80949c2379225cc93896b64d7cf40572e67f707", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/colorchoice@1.0.5" }, "rule": { "namespace": "syft", "id": "colorchoice@1.0.5" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "e67b364fc025909689d2318cd8edbb4eff67f8550970a92413e57be11015fa73", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/const-oid@0.9.6" }, "rule": { "namespace": "syft", "id": "const-oid@0.9.6" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "6d706f34a5c990989290bf9a40545e25199499f4d7896fb17db92c9f5704d9dd", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/cpufeatures@0.2.17" }, "rule": { "namespace": "syft", "id": "cpufeatures@0.2.17" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "145a268fb83cc9efa6d7dbc1f2c7a5bb878887bd309a7a13c70db7c26a3dd4a6", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/crypto-common@0.1.7" }, "rule": { "namespace": "syft", "id": "crypto-common@0.1.7" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "787a89ac66a8ee454e76700ba05fd7449ee2e0a02adba4d5703b4e43a3ad63ee", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/curve25519-dalek@4.1.3" }, "rule": { "namespace": "syft", "id": "curve25519-dalek@4.1.3" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "e363a3158ed291249701f7a913b490cfd8e21da33cc9bf6cadf72aebdb110e38", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/curve25519-dalek-derive@0.1.1" }, "rule": { "namespace": "syft", "id": "curve25519-dalek-derive@0.1.1" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "5751ef29264c20e19c6275a8edbcb5fe4e9fd09f069d6478509958c3c665a5e5", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/der@0.7.10" }, "rule": { "namespace": "syft", "id": "der@0.7.10" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "abddfb4ca732e056419f5daea9c997464fb39a808c74315e77618f63aad577b5", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/digest@0.10.7" }, "rule": { "namespace": "syft", "id": "digest@0.10.7" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "09b4b23b72b30909f311f514c3047c3b683412752ce0f30b550c35f69175ccb1", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/ed25519@2.2.3" }, "rule": { "namespace": "syft", "id": "ed25519@2.2.3" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "5e9cb7bd671ff507af20938bceec17825515186a8d16aaaebdc53f2962c62f4d", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/ed25519-dalek@2.2.0" }, "rule": { "namespace": "syft", "id": "ed25519-dalek@2.2.0" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "ebfe761a2619776f2942064a3f4868f3e0008f237546af684b50af44dfc3b099", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/errno@0.3.14" }, "rule": { "namespace": "syft", "id": "errno@0.3.14" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "305b6e419555a415bf2c3931f34c2f2a305b322905e7d62a155a394c36a7f9ee", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "" }, "rule": { "namespace": "syft", "id": "falsegreen-ledger@0.1.0" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "037fe54909861dd855fbdb0b49d679ac7e8db1fef9f31cee62b92f74ea406033", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "" }, "rule": { "namespace": "syft", "id": "falsegreen-ledger-core@0.1.0" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "6114365595d08a3bfc7e5d101289c1511fd658287c777c4ec53b73a764a8419f", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/fastrand@2.5.0" }, "rule": { "namespace": "syft", "id": "fastrand@2.5.0" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "8c813dcb9098a7c8941eb1aaffa3513c58020c83e085b04e6767488e300c6c97", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/fiat-crypto@0.2.9" }, "rule": { "namespace": "syft", "id": "fiat-crypto@0.2.9" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "5e9894b399a2c47a307185031536daaee5ded5c707a623024827a381aad89903", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/generic-array@0.14.7" }, "rule": { "namespace": "syft", "id": "generic-array@0.14.7" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "992e1c30dd219f9cf75f520e5d8dbf0588faae5d1a6bc9f2607da898d9f5c847", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/getrandom@0.2.17" }, "rule": { "namespace": "syft", "id": "getrandom@0.2.17" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "11a15cd49953aaee1017644804d1c3f9e5c0f2dece9366168276bff362fc0d24", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/getrandom@0.4.3" }, "rule": { "namespace": "syft", "id": "getrandom@0.4.3" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "c2a49ee05fb8e39068222324fb06d7af16937aff1e9a9ea99a8e17acc514f457", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/heck@0.5.0" }, "rule": { "namespace": "syft", "id": "heck@0.5.0" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "e29ecb67830b5145d857685e3f25db579bbcf432c785c6d223baf8bea97d1a9d", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/hex@0.4.3" }, "rule": { "namespace": "syft", "id": "hex@0.4.3" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "b3d93215b7294d3158ac885a5f44df493b9205f88c1d1b8730891332fd3b7030", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/is_terminal_polyfill@1.70.2" }, "rule": { "namespace": "syft", "id": "is_terminal_polyfill@1.70.2" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "2198026ba7738261a15516b44aed3a688f8b546c317b64b35c08cd6141612cd3", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/itoa@1.0.18" }, "rule": { "namespace": "syft", "id": "itoa@1.0.18" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "61aaeff62260c1d967d95422d89a28bc19dd0e5a930b6c9dfd3f031a4999dd7f", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/libc@0.2.191" }, "rule": { "namespace": "syft", "id": "libc@0.2.191" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "9638a8b320f9ef1e348eb212d7b9b5aff9cff37075971380c717f44f8c144d91", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/linux-raw-sys@0.12.1" }, "rule": { "namespace": "syft", "id": "linux-raw-sys@0.12.1" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "e2d6e087930e3834218a876fdb280683d5efcdaf50ae2eab592e1e22f97d815d", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/memchr@2.8.3" }, "rule": { "namespace": "syft", "id": "memchr@2.8.3" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "06cfdd42abb0c9e4d1075d601a05b33ad12f4e0770c117f758e768a380957b48", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/once_cell@1.21.4" }, "rule": { "namespace": "syft", "id": "once_cell@1.21.4" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "25d8ffe4413b6cf3ccf7a0646d5136789bd33d4b513d6ef17a7f8549d27ff3c4", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/once_cell_polyfill@1.70.2" }, "rule": { "namespace": "syft", "id": "once_cell_polyfill@1.70.2" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "426f5a3c744e86d89a996166238d634b5159d615a2642460863a26de9ebe1afe", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/pkcs8@0.10.2" }, "rule": { "namespace": "syft", "id": "pkcs8@0.10.2" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "c694e303f6d517d79b9440f754fd2092277919227356a55095046c9b6938a128", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/ppv-lite86@0.2.21" }, "rule": { "namespace": "syft", "id": "ppv-lite86@0.2.21" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "83840aaef8208540db5387d039d782fb6638ce97e06bd3f18ce20661ab601f55", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/proc-macro2@1.0.107" }, "rule": { "namespace": "syft", "id": "proc-macro2@1.0.107" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "7ec44be48b990fd8c38cb446e9e2cde3c7a02c7b35c9e4514bf7974c9def81eb", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/quote@1.0.47" }, "rule": { "namespace": "syft", "id": "quote@1.0.47" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "e5bc87872cb19c9a211895bbde8092b0512f0338b0bde534dade96b289166a5b", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/r-efi@6.0.0" }, "rule": { "namespace": "syft", "id": "r-efi@6.0.0" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "f119984d74172df79e8ed614888308c422e4e3e76e09acdd7c7df03156c6ebab", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/rand@0.8.8" }, "rule": { "namespace": "syft", "id": "rand@0.8.8" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "da733f873e8e22258550231003a3cc91d78301c5807ea9c5c6c953bdfc93a386", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/rand_chacha@0.3.1" }, "rule": { "namespace": "syft", "id": "rand_chacha@0.3.1" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "303db3e1caa7ec327fb3d438d968f3ece32234dbb594a8d0ef3addca9bcb61de", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/rand_core@0.6.4" }, "rule": { "namespace": "syft", "id": "rand_core@0.6.4" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "8c2b4d1a270f8c039f231929858e0a81f04e4168eaa9e3884e96d2cf67fa0b9f", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/rustc_version@0.4.1" }, "rule": { "namespace": "syft", "id": "rustc_version@0.4.1" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "94f78cc0a41219cf8bd76e72370c1e3f7a25a1c5d3682c962ebcac51f96e6107", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/rustix@1.1.5" }, "rule": { "namespace": "syft", "id": "rustix@1.1.5" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "9e26a95ae3dfd058f160efaaad125c58e9e4df33de1cd9e89f238a5af96e1d8d", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/semver@1.0.28" }, "rule": { "namespace": "syft", "id": "semver@1.0.28" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "6b250dfbe70ae2dd0686b791c854ea29d60fcced5847ef1097b33776640b726b", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/serde@1.0.229" }, "rule": { "namespace": "syft", "id": "serde@1.0.229" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "0907c849ff021995b320333d903013c3e35609e44fdd439d0185cdd6b2b42b33", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/serde_core@1.0.229" }, "rule": { "namespace": "syft", "id": "serde_core@1.0.229" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "eea06b68ab5dfabe29545176a15ca67d241e54bcf1a54c735e99406c378c3b0d", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/serde_derive@1.0.229" }, "rule": { "namespace": "syft", "id": "serde_derive@1.0.229" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "567f9a6ec6dd74ea27cceeecd20cc8f83ec2bad60cb4992da15e71fa478e3c8b", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/serde_json@1.0.154" }, "rule": { "namespace": "syft", "id": "serde_json@1.0.154" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "1dc35a3d9010bd6a84e1fe0d75e39d2f1507e7d761fba360a6a011b297aff75b", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/sha2@0.10.9" }, "rule": { "namespace": "syft", "id": "sha2@0.10.9" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "039783866d8dc87a18a205702b098ce8341f6e3032a121b65f5888dbc79dbf86", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/signature@2.2.0" }, "rule": { "namespace": "syft", "id": "signature@2.2.0" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "64738dd926f6eb4044f0de2fde1b326703bbc228579b56e08373f9fb8b6936c3", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/smallvec@1.6.0" }, "rule": { "namespace": "syft", "id": "smallvec@1.6.0" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "b1b266ef80a1dcba71b6ea153bd32e5b3d9e89c33461e3638c6b56ecea92fde9", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/spki@0.7.3" }, "rule": { "namespace": "syft", "id": "spki@0.7.3" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "a2d0f5f6f8ebcca0da8bbf2c323fb2013afa905a47a570b6c73442bc9a5b8620", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/strsim@0.11.1" }, "rule": { "namespace": "syft", "id": "strsim@0.11.1" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "6ef75c868a28b31d2d9bdd28764b8c3e232fbcdb70190659f0ecebb57c8e2a3e", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/subtle@2.6.1" }, "rule": { "namespace": "syft", "id": "subtle@2.6.1" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "172012ad51c91dc3a2e8a3a4c30026893420917739d047e5dc8918d5af26e93e", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/syn@2.0.119" }, "rule": { "namespace": "syft", "id": "syn@2.0.119" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "4cf5b83b5e47207b200be1c28233d037d4896752b572d0edb52975dc429e0b1c", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/syn@3.0.9" }, "rule": { "namespace": "syft", "id": "syn@3.0.9" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "96826fe9035d6551629c4e2a5e7d6f2df945796fac5128adf613901f231612ce", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/tempfile@3.27.0" }, "rule": { "namespace": "syft", "id": "tempfile@3.27.0" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "4cabb90893a6e49358a09f507c1134173b15a041a74b54cf9d4c1d93ce6d2e82", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/typenum@1.20.1" }, "rule": { "namespace": "syft", "id": "typenum@1.20.1" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "cdf512d7b7b4b6aad7b87252ee1d8aa13deced196dc20e86af4c693914775db0", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/unicode-ident@1.0.27" }, "rule": { "namespace": "syft", "id": "unicode-ident@1.0.27" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "493be846b106eef3741941ff4fbf118d156cd42bcbf90ef0820faff50ed6aeb4", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/utf8parse@0.2.2" }, "rule": { "namespace": "syft", "id": "utf8parse@0.2.2" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "4113c0d164e406e3897d48a025ec03de3591018065c023d609aa9a1a24a8535e", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/version_check@0.9.5" }, "rule": { "namespace": "syft", "id": "version_check@0.9.5" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "2908eeb04b59a653d934e0cdb89832021bfaa96dec7ff3dafcffbf192d06ba0b", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/wasi@0.11.1%2Bwasi-snapshot-preview1" }, "rule": { "namespace": "syft", "id": "wasi@0.11.1+wasi-snapshot-preview1" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "6e216a5e2b506734f75006b2f0a084aa655272534631ff3e365dae942872f46e", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/windows-link@0.2.1" }, "rule": { "namespace": "syft", "id": "windows-link@0.2.1" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "9077dd0b2b86b914f0b095c8d6bcc189167ee95b7021993b57088bd5e25c724f", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/windows-sys@0.61.2" }, "rule": { "namespace": "syft", "id": "windows-sys@0.61.2" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "e88bf689d1aa0a4bcdfaefe867dd26346df4be90d067004b93b7d73fb75cfe38", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/zerocopy@0.8.63" }, "rule": { "namespace": "syft", "id": "zerocopy@0.8.63" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "2f618422a7648ae74d807312d3a397d16eef2a47e85b7a412fe58ff50268a109", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/zerocopy-derive@0.8.63" }, "rule": { "namespace": "syft", "id": "zerocopy-derive@0.8.63" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "3cfb926e0c9258ea27f8d32a2de899d498b245fbd099dff9cbf872a3d9832914", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/zeroize@1.9.1" }, "rule": { "namespace": "syft", "id": "zeroize@1.9.1" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "57cc8ce7a77d7b267625f03e149331e422afd6e028ace34137fe11514f19b0e4", "class": "supply_chain", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/zmij@1.0.23" }, "rule": { "namespace": "syft", "id": "zmij@1.0.23" }, "state": "open", "evidence_refs": [ "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "3cb3f72855ec8da34228f8a8b8b49d110c5f6296126a0396e384b78dff93858b", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/anstream@1.0.0" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "105d7e1b0ce045f5eaecf4886b2a3a53f11740059022390aeed0641349be6370", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/anstyle@1.0.14" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "6a1bdd16582f18fdb1fa91303573db6370cbc6c6791e13662c519f3bf67e2b58", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/anstyle-parse@1.0.0" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "c32d140352b51004cc522860ec69e78b1648a34309a6a9be6f3bcdf6b34c3ea8", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/anstyle-query@1.1.5" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "4e5f3b8af12d986d540eb760ff9cd8b6855eaad28f2aad327cfb27528eddab32", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/anstyle-wincon@3.0.11" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "d87de0e2410e4ce9c1b03a1c509b3ddf5960b0936f81d4647ba1c5d6d89fc86b", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/base64ct@1.8.3" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "0ae447b9c774db7ecc15622af01746eae86cf6f47a4192ff75afdbb184bd4f0d", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/bitflags@2.13.2" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "88f6dcc043cb942462a57d4e8de3f5e67de6a2bcfe84ec10f2977e7df83f3f70", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/block-buffer@0.10.4" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "6dc467fded10560a16e1a85aae690fdd4d560ab3a7854ff858b0790cbced7ab2", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/cfg-if@1.0.5" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "d62527e65bfebf56c615db5a8b57a52ebb14d9d01d5737b36026ffcd385e020f", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/clap@4.6.7" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "5022223658ce227834152beda2f8039c2f620048d573cdfafca1df7435cd10a4", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/clap_builder@4.6.7" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "b4acb80d59203342fec461529a44fbdf49e70bc6ca659f541896faa542ea43c5", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/clap_derive@4.6.7" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "f18f5e7c89578e9678c5c7348530bcd16566d209feb0453558bd4177a56e4519", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/clap_lex@1.1.1" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "3aa7445371bcced37f805b8b93e9c78dc9638f3ebccedb2087fd6a4bf369b408", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/colorchoice@1.0.5" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "e23a545bde38131ecd1958e9a627d1c94d4e1e13ac04f45d6d19ea0ba3ffa3d6", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/const-oid@0.9.6" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "524744fd861891b779e920a35054e452215c00ca7ad2ecd0c314ce8176be8972", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/cpufeatures@0.2.17" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "7f21367b3adac10c420edf92206d55530b768dbb37f26d97ab71624f4897a4ef", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/crypto-common@0.1.7" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "fe2c38830f0c36aa5c2b7e92c8ce6e5f5ffce3359ea8c601e5c38043e1bdf8a2", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/curve25519-dalek@4.1.3" }, "rule": { "namespace": "license", "id": "BSD-3-Clause" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "22e858ebe1e0cd3085665c0b1ddb0258c163e74d25bd86359b4b5f2a6c9ac9a4", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/curve25519-dalek-derive@0.1.1" }, "rule": { "namespace": "license", "id": "MIT/Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "1d544f0845dcc666855e99dd2b294924d14fc9a59ee95d04ab545ef5a456563a", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/der@0.7.10" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "52412f24e374c82ecd63af7620df4b525ebf66faccde3420a82407886bd0c284", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/digest@0.10.7" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "ae41ba9e474899a525f07dedebf70d5b4d90f42b867dade39a918ff0dc56cdbd", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/ed25519@2.2.3" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "bfba5b2b48789d0999e04341c49eb12720a3312e6c03ae463dc733e6fbb7f47a", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/ed25519-dalek@2.2.0" }, "rule": { "namespace": "license", "id": "BSD-3-Clause" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "3e1257c111ee0929dbe8413202dd62d02da5e23805b3c7b82ee7db2e60e2e5bf", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/errno@0.3.14" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "413b301a14873d3fa09cfbeb904a1753aff90083f7faf45c9fa10ae41e514c95", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/fastrand@2.5.0" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "ca89f09616c15bc6e6aac2d3d9a826d665ed042c69fe8093e11ca0e11215fa88", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/fiat-crypto@0.2.9" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0 OR BSD-1-Clause" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "b56a6ad063aa5b2a36eb7f5ca9f3d6a67d4edee01d6b1bf01994bd1049382aa1", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/generic-array@0.14.7" }, "rule": { "namespace": "license", "id": "MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "a2e087ff1e664313a70e2e8ce7eed24cea66820e3750c483ddf3f4d1e254d8bf", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/getrandom@0.2.17" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "e8a05789f8c7ca2d56115d6721959efab7dee18603092589b99cc0603b4e4931", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/getrandom@0.4.3" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "a045045ab5f79bbc6d89c842641627a66ef7838cf2c4a6956b7cdb1c8adcce1f", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/heck@0.5.0" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "2bfc1148428c407eb319a7e6c10fde0605121ffa1716eaa1db0ddd9d8aad5e7b", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/hex@0.4.3" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "1607bce4d21887f6c3c6cd523cd4781bb966af2914910df1bf0813f5ca357718", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/is_terminal_polyfill@1.70.2" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "44e4a8a96ba5fffac1618980329c98bbaae8b6acc5365659a688553c4c36f5cd", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/itoa@1.0.18" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "90ce55778cfac3e0f098de0b24f5e2e035d65d0b28f7c09647bf2a433f0ced65", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/libc@0.2.191" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "92fa2f521dd2cabdf45f3ba7d0efa52f4d91674015be492d2f7fd994d1843c9b", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/linux-raw-sys@0.12.1" }, "rule": { "namespace": "license", "id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "71154f949e7c2014f20dbe7d654741451e3def11140bc8612e413c799d1d8c28", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/memchr@2.8.3" }, "rule": { "namespace": "license", "id": "Unlicense OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "72d443496cd2f5431e7f4347680d3790fed414966236ac9d635539cddfc310d7", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/once_cell@1.21.4" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "d0ca8c614318f904a95eef3273640692f921fbea88f4681b46a944098a7f4767", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/once_cell_polyfill@1.70.2" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "33502fd83559ad67d44c080bde985d7528478ab1397cfd11a8218d36537c4e31", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/pkcs8@0.10.2" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "f36a59e9dbd1511f0ef2b47db501e35a66e0dd081a18f992255f811a35b17415", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/ppv-lite86@0.2.21" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "875825c505903cfb9b602a23e74f0edf7eb1621583ed9e583c410103af3d402d", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/proc-macro2@1.0.107" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "d94338e54aeaf7fdb9048fc5ec3defa5504f99aab2210cec5156b23ac309f0fd", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/quote@1.0.47" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "73c9c8606efa4200ec16f7e1121489b31dba86fe5c2093dd9907af8d742ee0d3", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/r-efi@6.0.0" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0 OR LGPL-2.1-or-later" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "583bffa666173cd89ec5435a820a182f195e80ec3430f14ae356e22996f0c604", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/rand@0.8.8" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "c25b8b5f19fbb27189204b7c69f7d0bb55b519b678667bf698371f8884cc9037", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/rand_chacha@0.3.1" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "9b2b8375abad347b471c42d1cf7a4c0535119bbe425e5485aad498ec17f767c4", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/rand_core@0.6.4" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "175e264aed60c77f52af0e9e671e8ac55bec5e6e45abdc84a5ebcb3ec8228a32", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/rustc_version@0.4.1" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "0af9738feb17c972c978f5fb2a9d015e97b728ba66aa088f9c16113be8df3a91", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/rustix@1.1.5" }, "rule": { "namespace": "license", "id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "2dba13d7eff3023b8735741b2cebfcf48401ab80634cc83fa074d62e0029c6e5", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/semver@1.0.28" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "b7f56764e7744f74cad3387a716a5246077d8c6e9f0089883df0dbb8288aeb5d", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/serde@1.0.229" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "881652ce03c9fbb009ba2d5e92cacd9454e5366d43e3712ab99c1a0bb52cb0c8", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/serde_core@1.0.229" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "7d3cf8ea302039c6b559c6537f587340c694b5e20193dbc5bcb157a006d26b8a", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/serde_derive@1.0.229" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "da48400504894d432651db8f2dc88973bc202459db2f7d825ad79be718e1475d", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/serde_json@1.0.154" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "4e1769b1e32b9db38c1c88b395bbb79d75dbc84ccebcd482bc8e372323612ea5", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/sha2@0.10.9" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "7d786c3589077e405f9f6eefb654a291c2151ab077bdf2fd98c88ca1872cb009", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/signature@2.2.0" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "137f488cae7954a76b606a56914e8a17efe4b31f2b08ac1e0f518150c86ca603", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/smallvec@1.6.0" }, "rule": { "namespace": "license", "id": "MIT/Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "2da68b323dc569bcbc497ed8b2cfb0120654e76776cf3c35f8d3e950f5747bc0", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/spki@0.7.3" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "190387b967c5696b7e77e95e77baff38bd4c4cf266e724c09cc8cc70dc665da5", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/strsim@0.11.1" }, "rule": { "namespace": "license", "id": "MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "f09ee24c509b49380459f50c80591806cd7c73ad6c6c2dc99229670041fee674", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/subtle@2.6.1" }, "rule": { "namespace": "license", "id": "BSD-3-Clause" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "88cca70db371b2eb5db003aa26dca694e18d04d14f10fea6bb7b77c9d8a5915c", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/syn@2.0.119" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "15bedfcd4863b93f38b7d0bc2bd56e41531843d5c2953974ebb947a686aebc48", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/syn@3.0.9" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "1c2df16adcb1e41856c04a70f745f44ed8efe15e1f2423e4d6a024902014f96c", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/tempfile@3.27.0" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "7ce501395a51a046ddd2de234813e8610fecb37a279dd7581b6a230876216f09", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/typenum@1.20.1" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "10ebd1e19e81d1b55e547bcf583a4da0d086d5d47b86817360bc2d6fa1daecc8", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/unicode-ident@1.0.27" }, "rule": { "namespace": "license", "id": "(MIT OR Apache-2.0) AND Unicode-3.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "2a48ac251537ab5616cb3a1c8b7c09ed5253e442bcb585a6a812cc2e12df9a99", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/utf8parse@0.2.2" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "a178fed10f746a25a38e1a123cff01f7148bdfc82f2d75d55aa653a382c86dcb", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/version_check@0.9.5" }, "rule": { "namespace": "license", "id": "MIT/Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "b505efbcbc2188a627d169bdbdc34901dec4f22b50255975c9c07961ddf3391d", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/wasi@0.11.1+wasi-snapshot-preview1" }, "rule": { "namespace": "license", "id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "7cc0ff2a3a61ff414a371dabeaef2dfd080dc6981383f0d056f5807f9f7f7716", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/windows-link@0.2.1" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "88f3e265d85daf89a5f53123d8cb24aa877f866f5a9e0798e3fcbfba44e07401", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/windows-sys@0.61.2" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "ccde7aa1c7e4a197172dbdd8d438652d4e46433fa65f363abd51fd3f4d5e042a", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/zerocopy@0.8.63" }, "rule": { "namespace": "license", "id": "BSD-2-Clause OR Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "155008951dcca3c42ca968720dec1ba279f3836ef1c6921e7384a41ced42b7fb", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/zerocopy-derive@0.8.63" }, "rule": { "namespace": "license", "id": "BSD-2-Clause OR Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "44f17f90be8e27066147ced08a81acf0709bf297e99ffb794be4f91f07a37819", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/zeroize@1.9.1" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" }, { "id": "9c06bc92074e46c9fad575585278ef5b558d6f9e86471f5f1afb991819aab2c7", "class": "license", "subject": { "specimen_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "component_id": "pkg:cargo/zmij@1.0.23" }, "rule": { "namespace": "license", "id": "MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T17:59:02.255671205Z" } ], "witnesses": [ { "tool": "osv-scanner", "version": "2.7.0", "binary_digest": "160c6253e2922e9e0a6a9771c5c4c40a4b3c6090b34a3cdd5e80c96cc2e4218b", "config_digest": "0c3d6fef8ea59e1de5610e13ccb1035a7232318288aaed517ee2feec9402455a", "invocation_digest": "6036f7d3e21918e45569b356ed470574ade4270c26180e109e0557600273242d", "input_subject_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "b177b795ea0b89bb9386474c102b3c09f16e21789bff61e488b3cd6f19aba3dd", "normalized_evidence_digest": "a01c9fbe2e0f89ba51e98a9f9adb3e2221181b02f05426888a8e8e1d4c6f99a0", "limitations": [ "osv-scanner checks registry-based ecosystems (crates.io in 0.6.0); git-sourced dependencies (lean [[require]], gpr) have no advisory database — Insufficient Evidence for them, never a silent pass" ], "evidence_class": "dependency_vulnerability", "observed_at": "2026-10-21T17:59:02.255671205Z" }, { "tool": "semgrep", "version": "1.181.0", "binary_digest": "c29de7c43986faa3c3ca5a8acf1d115811e15ab305ba7657b79e775d40e16391", "config_digest": "206116bd213f0786f8378755ad48adbccfe30376afe8fe2ecdd24eb44161d009", "invocation_digest": "a6448210b7d47dd8c0d358927ef83b1ff34c334a69e14fb11ceb0bceae7d207a", "input_subject_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "80c185ac8e17503197e8195c202d98db3f0cd3865a37ba7065f37bdbf2a58d54", "normalized_evidence_digest": "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "limitations": [], "evidence_class": "static_analysis", "observed_at": "2026-10-21T17:59:02.255671205Z" }, { "tool": "gitleaks", "version": "8.30.1", "binary_digest": "88f91962aa2f93ac6ab281d553b9e125f5197bbbce38f9f2437f7299c32e5509", "config_digest": "e1f77c307b36a43d3707ab5fed4a4007f6d63d9302bcf0d5509cd3e52e32ed6f", "invocation_digest": "7879f05af65200bb6ebf605490f8dd5b0a1d94c8061eeb80e763a424570137d3", "input_subject_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "37517e5f3dc66819f61f5a7bb8ace1921282415f10551d2defa5c3eb0985b570", "normalized_evidence_digest": "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "limitations": [], "evidence_class": "secret", "observed_at": "2026-10-21T17:59:02.255671205Z" }, { "tool": "syft", "version": "1.54.1", "binary_digest": "dbf75864e7a7ff9e1fbf00552c31483f693188632a9f68f343cd7653dac513d6", "config_digest": "b6f045a568b2dd1dcd1a1723f4eb0b8f5863215301ced35067a5f7a53c07c7e6", "invocation_digest": "640ae5b6cead3af9aa9215ea868dcdb9016b7811941691179472c59d1bc80b95", "input_subject_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf", "normalized_evidence_digest": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "limitations": [], "evidence_class": "supply_chain", "observed_at": "2026-10-21T17:59:02.255671205Z" }, { "tool": "dependency-manifest", "version": "1", "binary_digest": "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4", "config_digest": "2402cf6f9fd45d6c6d7b9bc10abdba72e36d61e88515a01d2cda19ee8d375b3b", "invocation_digest": "c06a9fb47f93566eaf8bf71937184db1c3907b74e56d044df829b0e80f701d59", "input_subject_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4", "normalized_evidence_digest": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "limitations": [ "license facts are the job dependency manifest's registry SPDX ids; the workspace's own code and git-sourced dependencies carry no registry license facts" ], "evidence_class": "license", "observed_at": "2026-10-21T17:59:02.255671205Z" } ], "vulnerability_snapshot": { "source_identity": "osv.dev", "snapshot_identity": "osv-dev-20261021-457e10c8", "observed_at": "2026-10-21T17:30:12Z", "freshness_hours": 24 }, "exceptions": [], "open_findings": 2, "satisfied": false, "evaluated_at": "2026-10-26T05:58:17.902953173Z" } }, { "index": 6, "outcome": "Insufficient", "at": "2026-10-21T18:00:14.270845Z", "duration_ms": 27989, "source_sha256": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "security": { "policy": { "id": "falsegreen-platform", "version": "1", "digest": "372d3c74758acb113c1bef14b20b08b326a7703dd57d943247de6541743c0fad", "required": [ "dependency_vulnerability", "static_analysis", "secret", "supply_chain", "license" ], "minimum_witnesses": 1, "fail_on_severities": [ "critical", "high" ], "unknown_severity": "insufficient", "secrets_fail_on_any_unexcepted": true, "required_standards": [], "unavailable_behavior": "insufficient" }, "language": "", "classes": [ { "class": "dependency_vulnerability", "required": true, "status": "fail", "witness_refs": [ "a01c9fbe2e0f89ba51e98a9f9adb3e2221181b02f05426888a8e8e1d4c6f99a0" ], "reasons": [ "vulnerability snapshot is stale (observed 2026-10-21T17:30:12Z, freshness bound 24h)", "finding 5046f75b49bcc91e972fe6e37dff89bd730acac66b5c0835cdfea59610c6a9a5 severity `high` is frozen-fail (osv/RUSTSEC-2021-0003)", "finding 538efbca6ab37d1de7206475fd690628e0d69cbb5b3b1d27719f69b6caaf43f7 severity `high` is frozen-fail (osv/GHSA-43w2-9j62-hq99)" ] }, { "class": "static_analysis", "required": true, "status": "pass", "witness_refs": [ "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945" ], "reasons": [] }, { "class": "secret", "required": true, "status": "pass", "witness_refs": [ "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945" ], "reasons": [] }, { "class": "supply_chain", "required": true, "status": "pass", "witness_refs": [ "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db" ], "reasons": [] }, { "class": "license", "required": true, "status": "not_assessed", "witness_refs": [ "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a" ], "reasons": [ "no licence policy frozen — the licence facts are inventory, nothing was asserted" ] } ], "findings": [ { "id": "5046f75b49bcc91e972fe6e37dff89bd730acac66b5c0835cdfea59610c6a9a5", "class": "dependency_vulnerability", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:crates.io/smallvec@1.6.0" }, "rule": { "namespace": "osv", "id": "RUSTSEC-2021-0003" }, "severity": { "value": "high" }, "state": "open", "evidence_refs": [ "c647ccd86a5128d8c20e2dc28642f4927e1f23aeac4c91b87d19d40bd3422c0c" ], "witness_tool_ref": "a01c9fbe2e0f89ba51e98a9f9adb3e2221181b02f05426888a8e8e1d4c6f99a0", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "538efbca6ab37d1de7206475fd690628e0d69cbb5b3b1d27719f69b6caaf43f7", "class": "dependency_vulnerability", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:crates.io/smallvec@1.6.0" }, "rule": { "namespace": "osv", "id": "GHSA-43w2-9j62-hq99" }, "severity": { "value": "high" }, "state": "open", "evidence_refs": [ "c647ccd86a5128d8c20e2dc28642f4927e1f23aeac4c91b87d19d40bd3422c0c" ], "witness_tool_ref": "a01c9fbe2e0f89ba51e98a9f9adb3e2221181b02f05426888a8e8e1d4c6f99a0", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "585dc8dd419afdf4e9bf3c874f2701e31d5f3338bc9b4203dc562020a35876ec", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/anstream@1.0.0" }, "rule": { "namespace": "syft", "id": "anstream@1.0.0" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "5812a90517ca8a7be4835875c4821ace43a4835c915372e2902c66fdb38fdc43", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/anstyle@1.0.14" }, "rule": { "namespace": "syft", "id": "anstyle@1.0.14" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "0c2acffbd95840f484ecf5ead5dbf02d3043c8cd99e95cffcecb6dd06aad1689", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/anstyle-parse@1.0.0" }, "rule": { "namespace": "syft", "id": "anstyle-parse@1.0.0" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "38e530b1f35c1f97754741dcb41c150fc5f37b19537d0a862f1cf412d5d5eb77", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/anstyle-query@1.1.5" }, "rule": { "namespace": "syft", "id": "anstyle-query@1.1.5" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "43a7bbf00d060e71d216d2dba5a8507586b4879c8c606cb5701f4721a1340984", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/anstyle-wincon@3.0.11" }, "rule": { "namespace": "syft", "id": "anstyle-wincon@3.0.11" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "b53200027bb397c19303a57035a312ff9896f23494778cfe8417bf3b566802b7", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/base64ct@1.8.3" }, "rule": { "namespace": "syft", "id": "base64ct@1.8.3" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "a27f471935b3ca54a96a87c1168029f17d49df469b5d7fb9768f5be6a479cb5a", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/bitflags@2.13.2" }, "rule": { "namespace": "syft", "id": "bitflags@2.13.2" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "d954449ff474a768cbba77304caa220f9361597bbb1fdcfa4f395dc2ff3ab6a3", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/block-buffer@0.10.4" }, "rule": { "namespace": "syft", "id": "block-buffer@0.10.4" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "298a3dc87ed455182e39269edd7bcb85eb69d2fdfaed33bb248b55ce4ef400bf", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/cfg-if@1.0.5" }, "rule": { "namespace": "syft", "id": "cfg-if@1.0.5" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "c945fdb692b50e54a5707923beed9b74cc8840b872dda759232c54f54faf3e13", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/clap@4.6.7" }, "rule": { "namespace": "syft", "id": "clap@4.6.7" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "4c660220014879503df0995f4e53893f079ed601c9ca4351754a91d944cd5747", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/clap_builder@4.6.7" }, "rule": { "namespace": "syft", "id": "clap_builder@4.6.7" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "8bb04af9d989b5eb357e0b7a5a47760babc2e2e30e6622131f0b704e82099de2", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/clap_derive@4.6.7" }, "rule": { "namespace": "syft", "id": "clap_derive@4.6.7" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "0806d9370588be53df7d7e7b13b4cd97fe96353945c1a2e612f0cb42e6b0a9fa", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/clap_lex@1.1.1" }, "rule": { "namespace": "syft", "id": "clap_lex@1.1.1" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "564bee5e0ca4f5b0b9d5c7f3c80949c2379225cc93896b64d7cf40572e67f707", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/colorchoice@1.0.5" }, "rule": { "namespace": "syft", "id": "colorchoice@1.0.5" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "e67b364fc025909689d2318cd8edbb4eff67f8550970a92413e57be11015fa73", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/const-oid@0.9.6" }, "rule": { "namespace": "syft", "id": "const-oid@0.9.6" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "6d706f34a5c990989290bf9a40545e25199499f4d7896fb17db92c9f5704d9dd", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/cpufeatures@0.2.17" }, "rule": { "namespace": "syft", "id": "cpufeatures@0.2.17" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "145a268fb83cc9efa6d7dbc1f2c7a5bb878887bd309a7a13c70db7c26a3dd4a6", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/crypto-common@0.1.7" }, "rule": { "namespace": "syft", "id": "crypto-common@0.1.7" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "787a89ac66a8ee454e76700ba05fd7449ee2e0a02adba4d5703b4e43a3ad63ee", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/curve25519-dalek@4.1.3" }, "rule": { "namespace": "syft", "id": "curve25519-dalek@4.1.3" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "e363a3158ed291249701f7a913b490cfd8e21da33cc9bf6cadf72aebdb110e38", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/curve25519-dalek-derive@0.1.1" }, "rule": { "namespace": "syft", "id": "curve25519-dalek-derive@0.1.1" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "5751ef29264c20e19c6275a8edbcb5fe4e9fd09f069d6478509958c3c665a5e5", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/der@0.7.10" }, "rule": { "namespace": "syft", "id": "der@0.7.10" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "abddfb4ca732e056419f5daea9c997464fb39a808c74315e77618f63aad577b5", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/digest@0.10.7" }, "rule": { "namespace": "syft", "id": "digest@0.10.7" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "09b4b23b72b30909f311f514c3047c3b683412752ce0f30b550c35f69175ccb1", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/ed25519@2.2.3" }, "rule": { "namespace": "syft", "id": "ed25519@2.2.3" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "5e9cb7bd671ff507af20938bceec17825515186a8d16aaaebdc53f2962c62f4d", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/ed25519-dalek@2.2.0" }, "rule": { "namespace": "syft", "id": "ed25519-dalek@2.2.0" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "ebfe761a2619776f2942064a3f4868f3e0008f237546af684b50af44dfc3b099", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/errno@0.3.14" }, "rule": { "namespace": "syft", "id": "errno@0.3.14" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "305b6e419555a415bf2c3931f34c2f2a305b322905e7d62a155a394c36a7f9ee", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "" }, "rule": { "namespace": "syft", "id": "falsegreen-ledger@0.1.0" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "037fe54909861dd855fbdb0b49d679ac7e8db1fef9f31cee62b92f74ea406033", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "" }, "rule": { "namespace": "syft", "id": "falsegreen-ledger-core@0.1.0" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "6114365595d08a3bfc7e5d101289c1511fd658287c777c4ec53b73a764a8419f", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/fastrand@2.5.0" }, "rule": { "namespace": "syft", "id": "fastrand@2.5.0" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "8c813dcb9098a7c8941eb1aaffa3513c58020c83e085b04e6767488e300c6c97", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/fiat-crypto@0.2.9" }, "rule": { "namespace": "syft", "id": "fiat-crypto@0.2.9" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "5e9894b399a2c47a307185031536daaee5ded5c707a623024827a381aad89903", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/generic-array@0.14.7" }, "rule": { "namespace": "syft", "id": "generic-array@0.14.7" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "992e1c30dd219f9cf75f520e5d8dbf0588faae5d1a6bc9f2607da898d9f5c847", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/getrandom@0.2.17" }, "rule": { "namespace": "syft", "id": "getrandom@0.2.17" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "11a15cd49953aaee1017644804d1c3f9e5c0f2dece9366168276bff362fc0d24", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/getrandom@0.4.3" }, "rule": { "namespace": "syft", "id": "getrandom@0.4.3" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "c2a49ee05fb8e39068222324fb06d7af16937aff1e9a9ea99a8e17acc514f457", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/heck@0.5.0" }, "rule": { "namespace": "syft", "id": "heck@0.5.0" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "e29ecb67830b5145d857685e3f25db579bbcf432c785c6d223baf8bea97d1a9d", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/hex@0.4.3" }, "rule": { "namespace": "syft", "id": "hex@0.4.3" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "b3d93215b7294d3158ac885a5f44df493b9205f88c1d1b8730891332fd3b7030", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/is_terminal_polyfill@1.70.2" }, "rule": { "namespace": "syft", "id": "is_terminal_polyfill@1.70.2" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "2198026ba7738261a15516b44aed3a688f8b546c317b64b35c08cd6141612cd3", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/itoa@1.0.18" }, "rule": { "namespace": "syft", "id": "itoa@1.0.18" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "61aaeff62260c1d967d95422d89a28bc19dd0e5a930b6c9dfd3f031a4999dd7f", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/libc@0.2.191" }, "rule": { "namespace": "syft", "id": "libc@0.2.191" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "9638a8b320f9ef1e348eb212d7b9b5aff9cff37075971380c717f44f8c144d91", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/linux-raw-sys@0.12.1" }, "rule": { "namespace": "syft", "id": "linux-raw-sys@0.12.1" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "e2d6e087930e3834218a876fdb280683d5efcdaf50ae2eab592e1e22f97d815d", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/memchr@2.8.3" }, "rule": { "namespace": "syft", "id": "memchr@2.8.3" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "06cfdd42abb0c9e4d1075d601a05b33ad12f4e0770c117f758e768a380957b48", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/once_cell@1.21.4" }, "rule": { "namespace": "syft", "id": "once_cell@1.21.4" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "25d8ffe4413b6cf3ccf7a0646d5136789bd33d4b513d6ef17a7f8549d27ff3c4", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/once_cell_polyfill@1.70.2" }, "rule": { "namespace": "syft", "id": "once_cell_polyfill@1.70.2" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "426f5a3c744e86d89a996166238d634b5159d615a2642460863a26de9ebe1afe", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/pkcs8@0.10.2" }, "rule": { "namespace": "syft", "id": "pkcs8@0.10.2" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "c694e303f6d517d79b9440f754fd2092277919227356a55095046c9b6938a128", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/ppv-lite86@0.2.21" }, "rule": { "namespace": "syft", "id": "ppv-lite86@0.2.21" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "83840aaef8208540db5387d039d782fb6638ce97e06bd3f18ce20661ab601f55", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/proc-macro2@1.0.107" }, "rule": { "namespace": "syft", "id": "proc-macro2@1.0.107" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "7ec44be48b990fd8c38cb446e9e2cde3c7a02c7b35c9e4514bf7974c9def81eb", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/quote@1.0.47" }, "rule": { "namespace": "syft", "id": "quote@1.0.47" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "e5bc87872cb19c9a211895bbde8092b0512f0338b0bde534dade96b289166a5b", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/r-efi@6.0.0" }, "rule": { "namespace": "syft", "id": "r-efi@6.0.0" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "f119984d74172df79e8ed614888308c422e4e3e76e09acdd7c7df03156c6ebab", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/rand@0.8.8" }, "rule": { "namespace": "syft", "id": "rand@0.8.8" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "da733f873e8e22258550231003a3cc91d78301c5807ea9c5c6c953bdfc93a386", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/rand_chacha@0.3.1" }, "rule": { "namespace": "syft", "id": "rand_chacha@0.3.1" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "303db3e1caa7ec327fb3d438d968f3ece32234dbb594a8d0ef3addca9bcb61de", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/rand_core@0.6.4" }, "rule": { "namespace": "syft", "id": "rand_core@0.6.4" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "8c2b4d1a270f8c039f231929858e0a81f04e4168eaa9e3884e96d2cf67fa0b9f", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/rustc_version@0.4.1" }, "rule": { "namespace": "syft", "id": "rustc_version@0.4.1" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "94f78cc0a41219cf8bd76e72370c1e3f7a25a1c5d3682c962ebcac51f96e6107", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/rustix@1.1.5" }, "rule": { "namespace": "syft", "id": "rustix@1.1.5" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "9e26a95ae3dfd058f160efaaad125c58e9e4df33de1cd9e89f238a5af96e1d8d", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/semver@1.0.28" }, "rule": { "namespace": "syft", "id": "semver@1.0.28" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "6b250dfbe70ae2dd0686b791c854ea29d60fcced5847ef1097b33776640b726b", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/serde@1.0.229" }, "rule": { "namespace": "syft", "id": "serde@1.0.229" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "0907c849ff021995b320333d903013c3e35609e44fdd439d0185cdd6b2b42b33", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/serde_core@1.0.229" }, "rule": { "namespace": "syft", "id": "serde_core@1.0.229" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "eea06b68ab5dfabe29545176a15ca67d241e54bcf1a54c735e99406c378c3b0d", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/serde_derive@1.0.229" }, "rule": { "namespace": "syft", "id": "serde_derive@1.0.229" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "567f9a6ec6dd74ea27cceeecd20cc8f83ec2bad60cb4992da15e71fa478e3c8b", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/serde_json@1.0.154" }, "rule": { "namespace": "syft", "id": "serde_json@1.0.154" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "1dc35a3d9010bd6a84e1fe0d75e39d2f1507e7d761fba360a6a011b297aff75b", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/sha2@0.10.9" }, "rule": { "namespace": "syft", "id": "sha2@0.10.9" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "039783866d8dc87a18a205702b098ce8341f6e3032a121b65f5888dbc79dbf86", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/signature@2.2.0" }, "rule": { "namespace": "syft", "id": "signature@2.2.0" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "64738dd926f6eb4044f0de2fde1b326703bbc228579b56e08373f9fb8b6936c3", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/smallvec@1.6.0" }, "rule": { "namespace": "syft", "id": "smallvec@1.6.0" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "b1b266ef80a1dcba71b6ea153bd32e5b3d9e89c33461e3638c6b56ecea92fde9", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/spki@0.7.3" }, "rule": { "namespace": "syft", "id": "spki@0.7.3" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "a2d0f5f6f8ebcca0da8bbf2c323fb2013afa905a47a570b6c73442bc9a5b8620", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/strsim@0.11.1" }, "rule": { "namespace": "syft", "id": "strsim@0.11.1" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "6ef75c868a28b31d2d9bdd28764b8c3e232fbcdb70190659f0ecebb57c8e2a3e", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/subtle@2.6.1" }, "rule": { "namespace": "syft", "id": "subtle@2.6.1" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "172012ad51c91dc3a2e8a3a4c30026893420917739d047e5dc8918d5af26e93e", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/syn@2.0.119" }, "rule": { "namespace": "syft", "id": "syn@2.0.119" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "4cf5b83b5e47207b200be1c28233d037d4896752b572d0edb52975dc429e0b1c", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/syn@3.0.9" }, "rule": { "namespace": "syft", "id": "syn@3.0.9" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "96826fe9035d6551629c4e2a5e7d6f2df945796fac5128adf613901f231612ce", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/tempfile@3.27.0" }, "rule": { "namespace": "syft", "id": "tempfile@3.27.0" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "4cabb90893a6e49358a09f507c1134173b15a041a74b54cf9d4c1d93ce6d2e82", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/typenum@1.20.1" }, "rule": { "namespace": "syft", "id": "typenum@1.20.1" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "cdf512d7b7b4b6aad7b87252ee1d8aa13deced196dc20e86af4c693914775db0", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/unicode-ident@1.0.27" }, "rule": { "namespace": "syft", "id": "unicode-ident@1.0.27" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "493be846b106eef3741941ff4fbf118d156cd42bcbf90ef0820faff50ed6aeb4", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/utf8parse@0.2.2" }, "rule": { "namespace": "syft", "id": "utf8parse@0.2.2" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "4113c0d164e406e3897d48a025ec03de3591018065c023d609aa9a1a24a8535e", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/version_check@0.9.5" }, "rule": { "namespace": "syft", "id": "version_check@0.9.5" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "2908eeb04b59a653d934e0cdb89832021bfaa96dec7ff3dafcffbf192d06ba0b", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/wasi@0.11.1%2Bwasi-snapshot-preview1" }, "rule": { "namespace": "syft", "id": "wasi@0.11.1+wasi-snapshot-preview1" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "6e216a5e2b506734f75006b2f0a084aa655272534631ff3e365dae942872f46e", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/windows-link@0.2.1" }, "rule": { "namespace": "syft", "id": "windows-link@0.2.1" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "9077dd0b2b86b914f0b095c8d6bcc189167ee95b7021993b57088bd5e25c724f", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/windows-sys@0.61.2" }, "rule": { "namespace": "syft", "id": "windows-sys@0.61.2" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "e88bf689d1aa0a4bcdfaefe867dd26346df4be90d067004b93b7d73fb75cfe38", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/zerocopy@0.8.63" }, "rule": { "namespace": "syft", "id": "zerocopy@0.8.63" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "2f618422a7648ae74d807312d3a397d16eef2a47e85b7a412fe58ff50268a109", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/zerocopy-derive@0.8.63" }, "rule": { "namespace": "syft", "id": "zerocopy-derive@0.8.63" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "3cfb926e0c9258ea27f8d32a2de899d498b245fbd099dff9cbf872a3d9832914", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/zeroize@1.9.1" }, "rule": { "namespace": "syft", "id": "zeroize@1.9.1" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "57cc8ce7a77d7b267625f03e149331e422afd6e028ace34137fe11514f19b0e4", "class": "supply_chain", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/zmij@1.0.23" }, "rule": { "namespace": "syft", "id": "zmij@1.0.23" }, "state": "open", "evidence_refs": [ "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "3cb3f72855ec8da34228f8a8b8b49d110c5f6296126a0396e384b78dff93858b", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/anstream@1.0.0" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "105d7e1b0ce045f5eaecf4886b2a3a53f11740059022390aeed0641349be6370", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/anstyle@1.0.14" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "6a1bdd16582f18fdb1fa91303573db6370cbc6c6791e13662c519f3bf67e2b58", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/anstyle-parse@1.0.0" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "c32d140352b51004cc522860ec69e78b1648a34309a6a9be6f3bcdf6b34c3ea8", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/anstyle-query@1.1.5" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "4e5f3b8af12d986d540eb760ff9cd8b6855eaad28f2aad327cfb27528eddab32", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/anstyle-wincon@3.0.11" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "d87de0e2410e4ce9c1b03a1c509b3ddf5960b0936f81d4647ba1c5d6d89fc86b", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/base64ct@1.8.3" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "0ae447b9c774db7ecc15622af01746eae86cf6f47a4192ff75afdbb184bd4f0d", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/bitflags@2.13.2" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "88f6dcc043cb942462a57d4e8de3f5e67de6a2bcfe84ec10f2977e7df83f3f70", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/block-buffer@0.10.4" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "6dc467fded10560a16e1a85aae690fdd4d560ab3a7854ff858b0790cbced7ab2", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/cfg-if@1.0.5" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "d62527e65bfebf56c615db5a8b57a52ebb14d9d01d5737b36026ffcd385e020f", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/clap@4.6.7" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "5022223658ce227834152beda2f8039c2f620048d573cdfafca1df7435cd10a4", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/clap_builder@4.6.7" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "b4acb80d59203342fec461529a44fbdf49e70bc6ca659f541896faa542ea43c5", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/clap_derive@4.6.7" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "f18f5e7c89578e9678c5c7348530bcd16566d209feb0453558bd4177a56e4519", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/clap_lex@1.1.1" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "3aa7445371bcced37f805b8b93e9c78dc9638f3ebccedb2087fd6a4bf369b408", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/colorchoice@1.0.5" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "e23a545bde38131ecd1958e9a627d1c94d4e1e13ac04f45d6d19ea0ba3ffa3d6", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/const-oid@0.9.6" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "524744fd861891b779e920a35054e452215c00ca7ad2ecd0c314ce8176be8972", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/cpufeatures@0.2.17" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "7f21367b3adac10c420edf92206d55530b768dbb37f26d97ab71624f4897a4ef", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/crypto-common@0.1.7" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "fe2c38830f0c36aa5c2b7e92c8ce6e5f5ffce3359ea8c601e5c38043e1bdf8a2", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/curve25519-dalek@4.1.3" }, "rule": { "namespace": "license", "id": "BSD-3-Clause" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "22e858ebe1e0cd3085665c0b1ddb0258c163e74d25bd86359b4b5f2a6c9ac9a4", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/curve25519-dalek-derive@0.1.1" }, "rule": { "namespace": "license", "id": "MIT/Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "1d544f0845dcc666855e99dd2b294924d14fc9a59ee95d04ab545ef5a456563a", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/der@0.7.10" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "52412f24e374c82ecd63af7620df4b525ebf66faccde3420a82407886bd0c284", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/digest@0.10.7" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "ae41ba9e474899a525f07dedebf70d5b4d90f42b867dade39a918ff0dc56cdbd", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/ed25519@2.2.3" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "bfba5b2b48789d0999e04341c49eb12720a3312e6c03ae463dc733e6fbb7f47a", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/ed25519-dalek@2.2.0" }, "rule": { "namespace": "license", "id": "BSD-3-Clause" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "3e1257c111ee0929dbe8413202dd62d02da5e23805b3c7b82ee7db2e60e2e5bf", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/errno@0.3.14" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "413b301a14873d3fa09cfbeb904a1753aff90083f7faf45c9fa10ae41e514c95", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/fastrand@2.5.0" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "ca89f09616c15bc6e6aac2d3d9a826d665ed042c69fe8093e11ca0e11215fa88", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/fiat-crypto@0.2.9" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0 OR BSD-1-Clause" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "b56a6ad063aa5b2a36eb7f5ca9f3d6a67d4edee01d6b1bf01994bd1049382aa1", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/generic-array@0.14.7" }, "rule": { "namespace": "license", "id": "MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "a2e087ff1e664313a70e2e8ce7eed24cea66820e3750c483ddf3f4d1e254d8bf", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/getrandom@0.2.17" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "e8a05789f8c7ca2d56115d6721959efab7dee18603092589b99cc0603b4e4931", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/getrandom@0.4.3" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "a045045ab5f79bbc6d89c842641627a66ef7838cf2c4a6956b7cdb1c8adcce1f", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/heck@0.5.0" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "2bfc1148428c407eb319a7e6c10fde0605121ffa1716eaa1db0ddd9d8aad5e7b", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/hex@0.4.3" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "1607bce4d21887f6c3c6cd523cd4781bb966af2914910df1bf0813f5ca357718", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/is_terminal_polyfill@1.70.2" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "44e4a8a96ba5fffac1618980329c98bbaae8b6acc5365659a688553c4c36f5cd", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/itoa@1.0.18" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "90ce55778cfac3e0f098de0b24f5e2e035d65d0b28f7c09647bf2a433f0ced65", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/libc@0.2.191" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "92fa2f521dd2cabdf45f3ba7d0efa52f4d91674015be492d2f7fd994d1843c9b", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/linux-raw-sys@0.12.1" }, "rule": { "namespace": "license", "id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "71154f949e7c2014f20dbe7d654741451e3def11140bc8612e413c799d1d8c28", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/memchr@2.8.3" }, "rule": { "namespace": "license", "id": "Unlicense OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "72d443496cd2f5431e7f4347680d3790fed414966236ac9d635539cddfc310d7", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/once_cell@1.21.4" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "d0ca8c614318f904a95eef3273640692f921fbea88f4681b46a944098a7f4767", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/once_cell_polyfill@1.70.2" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "33502fd83559ad67d44c080bde985d7528478ab1397cfd11a8218d36537c4e31", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/pkcs8@0.10.2" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "f36a59e9dbd1511f0ef2b47db501e35a66e0dd081a18f992255f811a35b17415", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/ppv-lite86@0.2.21" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "875825c505903cfb9b602a23e74f0edf7eb1621583ed9e583c410103af3d402d", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/proc-macro2@1.0.107" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "d94338e54aeaf7fdb9048fc5ec3defa5504f99aab2210cec5156b23ac309f0fd", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/quote@1.0.47" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "73c9c8606efa4200ec16f7e1121489b31dba86fe5c2093dd9907af8d742ee0d3", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/r-efi@6.0.0" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0 OR LGPL-2.1-or-later" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "583bffa666173cd89ec5435a820a182f195e80ec3430f14ae356e22996f0c604", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/rand@0.8.8" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "c25b8b5f19fbb27189204b7c69f7d0bb55b519b678667bf698371f8884cc9037", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/rand_chacha@0.3.1" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "9b2b8375abad347b471c42d1cf7a4c0535119bbe425e5485aad498ec17f767c4", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/rand_core@0.6.4" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "175e264aed60c77f52af0e9e671e8ac55bec5e6e45abdc84a5ebcb3ec8228a32", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/rustc_version@0.4.1" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "0af9738feb17c972c978f5fb2a9d015e97b728ba66aa088f9c16113be8df3a91", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/rustix@1.1.5" }, "rule": { "namespace": "license", "id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "2dba13d7eff3023b8735741b2cebfcf48401ab80634cc83fa074d62e0029c6e5", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/semver@1.0.28" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "b7f56764e7744f74cad3387a716a5246077d8c6e9f0089883df0dbb8288aeb5d", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/serde@1.0.229" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "881652ce03c9fbb009ba2d5e92cacd9454e5366d43e3712ab99c1a0bb52cb0c8", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/serde_core@1.0.229" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "7d3cf8ea302039c6b559c6537f587340c694b5e20193dbc5bcb157a006d26b8a", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/serde_derive@1.0.229" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "da48400504894d432651db8f2dc88973bc202459db2f7d825ad79be718e1475d", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/serde_json@1.0.154" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "4e1769b1e32b9db38c1c88b395bbb79d75dbc84ccebcd482bc8e372323612ea5", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/sha2@0.10.9" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "7d786c3589077e405f9f6eefb654a291c2151ab077bdf2fd98c88ca1872cb009", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/signature@2.2.0" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "137f488cae7954a76b606a56914e8a17efe4b31f2b08ac1e0f518150c86ca603", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/smallvec@1.6.0" }, "rule": { "namespace": "license", "id": "MIT/Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "2da68b323dc569bcbc497ed8b2cfb0120654e76776cf3c35f8d3e950f5747bc0", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/spki@0.7.3" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "190387b967c5696b7e77e95e77baff38bd4c4cf266e724c09cc8cc70dc665da5", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/strsim@0.11.1" }, "rule": { "namespace": "license", "id": "MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "f09ee24c509b49380459f50c80591806cd7c73ad6c6c2dc99229670041fee674", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/subtle@2.6.1" }, "rule": { "namespace": "license", "id": "BSD-3-Clause" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "88cca70db371b2eb5db003aa26dca694e18d04d14f10fea6bb7b77c9d8a5915c", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/syn@2.0.119" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "15bedfcd4863b93f38b7d0bc2bd56e41531843d5c2953974ebb947a686aebc48", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/syn@3.0.9" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "1c2df16adcb1e41856c04a70f745f44ed8efe15e1f2423e4d6a024902014f96c", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/tempfile@3.27.0" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "7ce501395a51a046ddd2de234813e8610fecb37a279dd7581b6a230876216f09", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/typenum@1.20.1" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "10ebd1e19e81d1b55e547bcf583a4da0d086d5d47b86817360bc2d6fa1daecc8", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/unicode-ident@1.0.27" }, "rule": { "namespace": "license", "id": "(MIT OR Apache-2.0) AND Unicode-3.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "2a48ac251537ab5616cb3a1c8b7c09ed5253e442bcb585a6a812cc2e12df9a99", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/utf8parse@0.2.2" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "a178fed10f746a25a38e1a123cff01f7148bdfc82f2d75d55aa653a382c86dcb", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/version_check@0.9.5" }, "rule": { "namespace": "license", "id": "MIT/Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "b505efbcbc2188a627d169bdbdc34901dec4f22b50255975c9c07961ddf3391d", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/wasi@0.11.1+wasi-snapshot-preview1" }, "rule": { "namespace": "license", "id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "7cc0ff2a3a61ff414a371dabeaef2dfd080dc6981383f0d056f5807f9f7f7716", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/windows-link@0.2.1" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "88f3e265d85daf89a5f53123d8cb24aa877f866f5a9e0798e3fcbfba44e07401", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/windows-sys@0.61.2" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "ccde7aa1c7e4a197172dbdd8d438652d4e46433fa65f363abd51fd3f4d5e042a", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/zerocopy@0.8.63" }, "rule": { "namespace": "license", "id": "BSD-2-Clause OR Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "155008951dcca3c42ca968720dec1ba279f3836ef1c6921e7384a41ced42b7fb", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/zerocopy-derive@0.8.63" }, "rule": { "namespace": "license", "id": "BSD-2-Clause OR Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "44f17f90be8e27066147ced08a81acf0709bf297e99ffb794be4f91f07a37819", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/zeroize@1.9.1" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" }, { "id": "9c06bc92074e46c9fad575585278ef5b558d6f9e86471f5f1afb991819aab2c7", "class": "license", "subject": { "specimen_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "component_id": "pkg:cargo/zmij@1.0.23" }, "rule": { "namespace": "license", "id": "MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:00:06.581753282Z" } ], "witnesses": [ { "tool": "osv-scanner", "version": "2.7.0", "binary_digest": "160c6253e2922e9e0a6a9771c5c4c40a4b3c6090b34a3cdd5e80c96cc2e4218b", "config_digest": "0c3d6fef8ea59e1de5610e13ccb1035a7232318288aaed517ee2feec9402455a", "invocation_digest": "d8074ab5c6d76d28eab05b4e1d0db1c91b68509d2e23c46c8eb87bbce42d9527", "input_subject_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "c647ccd86a5128d8c20e2dc28642f4927e1f23aeac4c91b87d19d40bd3422c0c", "normalized_evidence_digest": "a01c9fbe2e0f89ba51e98a9f9adb3e2221181b02f05426888a8e8e1d4c6f99a0", "limitations": [ "osv-scanner checks registry-based ecosystems (crates.io in 0.6.0); git-sourced dependencies (lean [[require]], gpr) have no advisory database — Insufficient Evidence for them, never a silent pass" ], "evidence_class": "dependency_vulnerability", "observed_at": "2026-10-21T18:00:06.581753282Z" }, { "tool": "semgrep", "version": "1.181.0", "binary_digest": "c29de7c43986faa3c3ca5a8acf1d115811e15ab305ba7657b79e775d40e16391", "config_digest": "206116bd213f0786f8378755ad48adbccfe30376afe8fe2ecdd24eb44161d009", "invocation_digest": "949b441645a10c98195bd8c79e3e4ebb77f6fea3dc6ec6233b96f8e662814188", "input_subject_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "80c185ac8e17503197e8195c202d98db3f0cd3865a37ba7065f37bdbf2a58d54", "normalized_evidence_digest": "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "limitations": [], "evidence_class": "static_analysis", "observed_at": "2026-10-21T18:00:06.581753282Z" }, { "tool": "gitleaks", "version": "8.30.1", "binary_digest": "88f91962aa2f93ac6ab281d553b9e125f5197bbbce38f9f2437f7299c32e5509", "config_digest": "e1f77c307b36a43d3707ab5fed4a4007f6d63d9302bcf0d5509cd3e52e32ed6f", "invocation_digest": "f6434314eb3740ddf62f0ca3cfe902dc17a75f2bfb51629ada1f61e2b62a8198", "input_subject_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "37517e5f3dc66819f61f5a7bb8ace1921282415f10551d2defa5c3eb0985b570", "normalized_evidence_digest": "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "limitations": [], "evidence_class": "secret", "observed_at": "2026-10-21T18:00:06.581753282Z" }, { "tool": "syft", "version": "1.54.1", "binary_digest": "dbf75864e7a7ff9e1fbf00552c31483f693188632a9f68f343cd7653dac513d6", "config_digest": "b6f045a568b2dd1dcd1a1723f4eb0b8f5863215301ced35067a5f7a53c07c7e6", "invocation_digest": "ec8f4b83ce7d2adbba56c74237b66a33b80180a2ac61519992831a556636ff7a", "input_subject_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601", "normalized_evidence_digest": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "limitations": [], "evidence_class": "supply_chain", "observed_at": "2026-10-21T18:00:06.581753282Z" }, { "tool": "dependency-manifest", "version": "1", "binary_digest": "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4", "config_digest": "2402cf6f9fd45d6c6d7b9bc10abdba72e36d61e88515a01d2cda19ee8d375b3b", "invocation_digest": "9868ab0d587c0a92ce3b85b8c1d3d916f3c6ac04983c8e805abcbc47ddcdfc3e", "input_subject_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4", "normalized_evidence_digest": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "limitations": [ "license facts are the job dependency manifest's registry SPDX ids; the workspace's own code and git-sourced dependencies carry no registry license facts" ], "evidence_class": "license", "observed_at": "2026-10-21T18:00:06.581753282Z" } ], "vulnerability_snapshot": { "source_identity": "osv.dev", "snapshot_identity": "osv-dev-20261021-457e10c8", "observed_at": "2026-10-21T17:30:12Z", "freshness_hours": 24 }, "exceptions": [], "open_findings": 2, "satisfied": false, "evaluated_at": "2026-10-26T05:58:17.902953173Z" } }, { "index": 7, "outcome": "Insufficient", "at": "2026-10-21T18:01:22.013284Z", "duration_ms": 29364, "source_sha256": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "security": { "policy": { "id": "falsegreen-platform", "version": "1", "digest": "372d3c74758acb113c1bef14b20b08b326a7703dd57d943247de6541743c0fad", "required": [ "dependency_vulnerability", "static_analysis", "secret", "supply_chain", "license" ], "minimum_witnesses": 1, "fail_on_severities": [ "critical", "high" ], "unknown_severity": "insufficient", "secrets_fail_on_any_unexcepted": true, "required_standards": [], "unavailable_behavior": "insufficient" }, "language": "", "classes": [ { "class": "dependency_vulnerability", "required": true, "status": "fail", "witness_refs": [ "a01c9fbe2e0f89ba51e98a9f9adb3e2221181b02f05426888a8e8e1d4c6f99a0" ], "reasons": [ "vulnerability snapshot is stale (observed 2026-10-21T17:30:12Z, freshness bound 24h)", "finding 5046f75b49bcc91e972fe6e37dff89bd730acac66b5c0835cdfea59610c6a9a5 severity `high` is frozen-fail (osv/RUSTSEC-2021-0003)", "finding 538efbca6ab37d1de7206475fd690628e0d69cbb5b3b1d27719f69b6caaf43f7 severity `high` is frozen-fail (osv/GHSA-43w2-9j62-hq99)" ] }, { "class": "static_analysis", "required": true, "status": "pass", "witness_refs": [ "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945" ], "reasons": [] }, { "class": "secret", "required": true, "status": "pass", "witness_refs": [ "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945" ], "reasons": [] }, { "class": "supply_chain", "required": true, "status": "pass", "witness_refs": [ "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db" ], "reasons": [] }, { "class": "license", "required": true, "status": "not_assessed", "witness_refs": [ "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a" ], "reasons": [ "no licence policy frozen — the licence facts are inventory, nothing was asserted" ] } ], "findings": [ { "id": "5046f75b49bcc91e972fe6e37dff89bd730acac66b5c0835cdfea59610c6a9a5", "class": "dependency_vulnerability", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:crates.io/smallvec@1.6.0" }, "rule": { "namespace": "osv", "id": "RUSTSEC-2021-0003" }, "severity": { "value": "high" }, "state": "open", "evidence_refs": [ "e4c0fda20522604529803debe233864ee89f505f6cce118fcdee9011e7558643" ], "witness_tool_ref": "a01c9fbe2e0f89ba51e98a9f9adb3e2221181b02f05426888a8e8e1d4c6f99a0", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "538efbca6ab37d1de7206475fd690628e0d69cbb5b3b1d27719f69b6caaf43f7", "class": "dependency_vulnerability", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:crates.io/smallvec@1.6.0" }, "rule": { "namespace": "osv", "id": "GHSA-43w2-9j62-hq99" }, "severity": { "value": "high" }, "state": "open", "evidence_refs": [ "e4c0fda20522604529803debe233864ee89f505f6cce118fcdee9011e7558643" ], "witness_tool_ref": "a01c9fbe2e0f89ba51e98a9f9adb3e2221181b02f05426888a8e8e1d4c6f99a0", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "585dc8dd419afdf4e9bf3c874f2701e31d5f3338bc9b4203dc562020a35876ec", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/anstream@1.0.0" }, "rule": { "namespace": "syft", "id": "anstream@1.0.0" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "5812a90517ca8a7be4835875c4821ace43a4835c915372e2902c66fdb38fdc43", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/anstyle@1.0.14" }, "rule": { "namespace": "syft", "id": "anstyle@1.0.14" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "0c2acffbd95840f484ecf5ead5dbf02d3043c8cd99e95cffcecb6dd06aad1689", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/anstyle-parse@1.0.0" }, "rule": { "namespace": "syft", "id": "anstyle-parse@1.0.0" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "38e530b1f35c1f97754741dcb41c150fc5f37b19537d0a862f1cf412d5d5eb77", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/anstyle-query@1.1.5" }, "rule": { "namespace": "syft", "id": "anstyle-query@1.1.5" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "43a7bbf00d060e71d216d2dba5a8507586b4879c8c606cb5701f4721a1340984", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/anstyle-wincon@3.0.11" }, "rule": { "namespace": "syft", "id": "anstyle-wincon@3.0.11" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "b53200027bb397c19303a57035a312ff9896f23494778cfe8417bf3b566802b7", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/base64ct@1.8.3" }, "rule": { "namespace": "syft", "id": "base64ct@1.8.3" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "a27f471935b3ca54a96a87c1168029f17d49df469b5d7fb9768f5be6a479cb5a", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/bitflags@2.13.2" }, "rule": { "namespace": "syft", "id": "bitflags@2.13.2" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "d954449ff474a768cbba77304caa220f9361597bbb1fdcfa4f395dc2ff3ab6a3", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/block-buffer@0.10.4" }, "rule": { "namespace": "syft", "id": "block-buffer@0.10.4" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "298a3dc87ed455182e39269edd7bcb85eb69d2fdfaed33bb248b55ce4ef400bf", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/cfg-if@1.0.5" }, "rule": { "namespace": "syft", "id": "cfg-if@1.0.5" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "c945fdb692b50e54a5707923beed9b74cc8840b872dda759232c54f54faf3e13", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/clap@4.6.7" }, "rule": { "namespace": "syft", "id": "clap@4.6.7" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "4c660220014879503df0995f4e53893f079ed601c9ca4351754a91d944cd5747", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/clap_builder@4.6.7" }, "rule": { "namespace": "syft", "id": "clap_builder@4.6.7" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "8bb04af9d989b5eb357e0b7a5a47760babc2e2e30e6622131f0b704e82099de2", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/clap_derive@4.6.7" }, "rule": { "namespace": "syft", "id": "clap_derive@4.6.7" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "0806d9370588be53df7d7e7b13b4cd97fe96353945c1a2e612f0cb42e6b0a9fa", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/clap_lex@1.1.1" }, "rule": { "namespace": "syft", "id": "clap_lex@1.1.1" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "564bee5e0ca4f5b0b9d5c7f3c80949c2379225cc93896b64d7cf40572e67f707", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/colorchoice@1.0.5" }, "rule": { "namespace": "syft", "id": "colorchoice@1.0.5" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "e67b364fc025909689d2318cd8edbb4eff67f8550970a92413e57be11015fa73", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/const-oid@0.9.6" }, "rule": { "namespace": "syft", "id": "const-oid@0.9.6" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "6d706f34a5c990989290bf9a40545e25199499f4d7896fb17db92c9f5704d9dd", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/cpufeatures@0.2.17" }, "rule": { "namespace": "syft", "id": "cpufeatures@0.2.17" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "145a268fb83cc9efa6d7dbc1f2c7a5bb878887bd309a7a13c70db7c26a3dd4a6", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/crypto-common@0.1.7" }, "rule": { "namespace": "syft", "id": "crypto-common@0.1.7" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "787a89ac66a8ee454e76700ba05fd7449ee2e0a02adba4d5703b4e43a3ad63ee", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/curve25519-dalek@4.1.3" }, "rule": { "namespace": "syft", "id": "curve25519-dalek@4.1.3" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "e363a3158ed291249701f7a913b490cfd8e21da33cc9bf6cadf72aebdb110e38", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/curve25519-dalek-derive@0.1.1" }, "rule": { "namespace": "syft", "id": "curve25519-dalek-derive@0.1.1" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "5751ef29264c20e19c6275a8edbcb5fe4e9fd09f069d6478509958c3c665a5e5", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/der@0.7.10" }, "rule": { "namespace": "syft", "id": "der@0.7.10" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "abddfb4ca732e056419f5daea9c997464fb39a808c74315e77618f63aad577b5", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/digest@0.10.7" }, "rule": { "namespace": "syft", "id": "digest@0.10.7" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "09b4b23b72b30909f311f514c3047c3b683412752ce0f30b550c35f69175ccb1", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/ed25519@2.2.3" }, "rule": { "namespace": "syft", "id": "ed25519@2.2.3" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "5e9cb7bd671ff507af20938bceec17825515186a8d16aaaebdc53f2962c62f4d", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/ed25519-dalek@2.2.0" }, "rule": { "namespace": "syft", "id": "ed25519-dalek@2.2.0" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "ebfe761a2619776f2942064a3f4868f3e0008f237546af684b50af44dfc3b099", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/errno@0.3.14" }, "rule": { "namespace": "syft", "id": "errno@0.3.14" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "305b6e419555a415bf2c3931f34c2f2a305b322905e7d62a155a394c36a7f9ee", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "" }, "rule": { "namespace": "syft", "id": "falsegreen-ledger@0.1.0" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "037fe54909861dd855fbdb0b49d679ac7e8db1fef9f31cee62b92f74ea406033", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "" }, "rule": { "namespace": "syft", "id": "falsegreen-ledger-core@0.1.0" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "6114365595d08a3bfc7e5d101289c1511fd658287c777c4ec53b73a764a8419f", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/fastrand@2.5.0" }, "rule": { "namespace": "syft", "id": "fastrand@2.5.0" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "8c813dcb9098a7c8941eb1aaffa3513c58020c83e085b04e6767488e300c6c97", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/fiat-crypto@0.2.9" }, "rule": { "namespace": "syft", "id": "fiat-crypto@0.2.9" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "5e9894b399a2c47a307185031536daaee5ded5c707a623024827a381aad89903", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/generic-array@0.14.7" }, "rule": { "namespace": "syft", "id": "generic-array@0.14.7" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "992e1c30dd219f9cf75f520e5d8dbf0588faae5d1a6bc9f2607da898d9f5c847", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/getrandom@0.2.17" }, "rule": { "namespace": "syft", "id": "getrandom@0.2.17" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "11a15cd49953aaee1017644804d1c3f9e5c0f2dece9366168276bff362fc0d24", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/getrandom@0.4.3" }, "rule": { "namespace": "syft", "id": "getrandom@0.4.3" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "c2a49ee05fb8e39068222324fb06d7af16937aff1e9a9ea99a8e17acc514f457", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/heck@0.5.0" }, "rule": { "namespace": "syft", "id": "heck@0.5.0" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "e29ecb67830b5145d857685e3f25db579bbcf432c785c6d223baf8bea97d1a9d", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/hex@0.4.3" }, "rule": { "namespace": "syft", "id": "hex@0.4.3" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "b3d93215b7294d3158ac885a5f44df493b9205f88c1d1b8730891332fd3b7030", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/is_terminal_polyfill@1.70.2" }, "rule": { "namespace": "syft", "id": "is_terminal_polyfill@1.70.2" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "2198026ba7738261a15516b44aed3a688f8b546c317b64b35c08cd6141612cd3", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/itoa@1.0.18" }, "rule": { "namespace": "syft", "id": "itoa@1.0.18" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "61aaeff62260c1d967d95422d89a28bc19dd0e5a930b6c9dfd3f031a4999dd7f", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/libc@0.2.191" }, "rule": { "namespace": "syft", "id": "libc@0.2.191" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "9638a8b320f9ef1e348eb212d7b9b5aff9cff37075971380c717f44f8c144d91", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/linux-raw-sys@0.12.1" }, "rule": { "namespace": "syft", "id": "linux-raw-sys@0.12.1" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "e2d6e087930e3834218a876fdb280683d5efcdaf50ae2eab592e1e22f97d815d", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/memchr@2.8.3" }, "rule": { "namespace": "syft", "id": "memchr@2.8.3" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "06cfdd42abb0c9e4d1075d601a05b33ad12f4e0770c117f758e768a380957b48", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/once_cell@1.21.4" }, "rule": { "namespace": "syft", "id": "once_cell@1.21.4" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "25d8ffe4413b6cf3ccf7a0646d5136789bd33d4b513d6ef17a7f8549d27ff3c4", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/once_cell_polyfill@1.70.2" }, "rule": { "namespace": "syft", "id": "once_cell_polyfill@1.70.2" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "426f5a3c744e86d89a996166238d634b5159d615a2642460863a26de9ebe1afe", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/pkcs8@0.10.2" }, "rule": { "namespace": "syft", "id": "pkcs8@0.10.2" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "c694e303f6d517d79b9440f754fd2092277919227356a55095046c9b6938a128", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/ppv-lite86@0.2.21" }, "rule": { "namespace": "syft", "id": "ppv-lite86@0.2.21" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "83840aaef8208540db5387d039d782fb6638ce97e06bd3f18ce20661ab601f55", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/proc-macro2@1.0.107" }, "rule": { "namespace": "syft", "id": "proc-macro2@1.0.107" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "7ec44be48b990fd8c38cb446e9e2cde3c7a02c7b35c9e4514bf7974c9def81eb", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/quote@1.0.47" }, "rule": { "namespace": "syft", "id": "quote@1.0.47" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "e5bc87872cb19c9a211895bbde8092b0512f0338b0bde534dade96b289166a5b", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/r-efi@6.0.0" }, "rule": { "namespace": "syft", "id": "r-efi@6.0.0" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "f119984d74172df79e8ed614888308c422e4e3e76e09acdd7c7df03156c6ebab", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/rand@0.8.8" }, "rule": { "namespace": "syft", "id": "rand@0.8.8" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "da733f873e8e22258550231003a3cc91d78301c5807ea9c5c6c953bdfc93a386", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/rand_chacha@0.3.1" }, "rule": { "namespace": "syft", "id": "rand_chacha@0.3.1" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "303db3e1caa7ec327fb3d438d968f3ece32234dbb594a8d0ef3addca9bcb61de", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/rand_core@0.6.4" }, "rule": { "namespace": "syft", "id": "rand_core@0.6.4" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "8c2b4d1a270f8c039f231929858e0a81f04e4168eaa9e3884e96d2cf67fa0b9f", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/rustc_version@0.4.1" }, "rule": { "namespace": "syft", "id": "rustc_version@0.4.1" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "94f78cc0a41219cf8bd76e72370c1e3f7a25a1c5d3682c962ebcac51f96e6107", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/rustix@1.1.5" }, "rule": { "namespace": "syft", "id": "rustix@1.1.5" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "9e26a95ae3dfd058f160efaaad125c58e9e4df33de1cd9e89f238a5af96e1d8d", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/semver@1.0.28" }, "rule": { "namespace": "syft", "id": "semver@1.0.28" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "6b250dfbe70ae2dd0686b791c854ea29d60fcced5847ef1097b33776640b726b", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/serde@1.0.229" }, "rule": { "namespace": "syft", "id": "serde@1.0.229" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "0907c849ff021995b320333d903013c3e35609e44fdd439d0185cdd6b2b42b33", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/serde_core@1.0.229" }, "rule": { "namespace": "syft", "id": "serde_core@1.0.229" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "eea06b68ab5dfabe29545176a15ca67d241e54bcf1a54c735e99406c378c3b0d", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/serde_derive@1.0.229" }, "rule": { "namespace": "syft", "id": "serde_derive@1.0.229" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "567f9a6ec6dd74ea27cceeecd20cc8f83ec2bad60cb4992da15e71fa478e3c8b", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/serde_json@1.0.154" }, "rule": { "namespace": "syft", "id": "serde_json@1.0.154" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "1dc35a3d9010bd6a84e1fe0d75e39d2f1507e7d761fba360a6a011b297aff75b", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/sha2@0.10.9" }, "rule": { "namespace": "syft", "id": "sha2@0.10.9" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "039783866d8dc87a18a205702b098ce8341f6e3032a121b65f5888dbc79dbf86", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/signature@2.2.0" }, "rule": { "namespace": "syft", "id": "signature@2.2.0" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "64738dd926f6eb4044f0de2fde1b326703bbc228579b56e08373f9fb8b6936c3", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/smallvec@1.6.0" }, "rule": { "namespace": "syft", "id": "smallvec@1.6.0" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "b1b266ef80a1dcba71b6ea153bd32e5b3d9e89c33461e3638c6b56ecea92fde9", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/spki@0.7.3" }, "rule": { "namespace": "syft", "id": "spki@0.7.3" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "a2d0f5f6f8ebcca0da8bbf2c323fb2013afa905a47a570b6c73442bc9a5b8620", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/strsim@0.11.1" }, "rule": { "namespace": "syft", "id": "strsim@0.11.1" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "6ef75c868a28b31d2d9bdd28764b8c3e232fbcdb70190659f0ecebb57c8e2a3e", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/subtle@2.6.1" }, "rule": { "namespace": "syft", "id": "subtle@2.6.1" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "172012ad51c91dc3a2e8a3a4c30026893420917739d047e5dc8918d5af26e93e", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/syn@2.0.119" }, "rule": { "namespace": "syft", "id": "syn@2.0.119" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "4cf5b83b5e47207b200be1c28233d037d4896752b572d0edb52975dc429e0b1c", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/syn@3.0.9" }, "rule": { "namespace": "syft", "id": "syn@3.0.9" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "96826fe9035d6551629c4e2a5e7d6f2df945796fac5128adf613901f231612ce", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/tempfile@3.27.0" }, "rule": { "namespace": "syft", "id": "tempfile@3.27.0" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "4cabb90893a6e49358a09f507c1134173b15a041a74b54cf9d4c1d93ce6d2e82", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/typenum@1.20.1" }, "rule": { "namespace": "syft", "id": "typenum@1.20.1" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "cdf512d7b7b4b6aad7b87252ee1d8aa13deced196dc20e86af4c693914775db0", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/unicode-ident@1.0.27" }, "rule": { "namespace": "syft", "id": "unicode-ident@1.0.27" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "493be846b106eef3741941ff4fbf118d156cd42bcbf90ef0820faff50ed6aeb4", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/utf8parse@0.2.2" }, "rule": { "namespace": "syft", "id": "utf8parse@0.2.2" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "4113c0d164e406e3897d48a025ec03de3591018065c023d609aa9a1a24a8535e", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/version_check@0.9.5" }, "rule": { "namespace": "syft", "id": "version_check@0.9.5" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "2908eeb04b59a653d934e0cdb89832021bfaa96dec7ff3dafcffbf192d06ba0b", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/wasi@0.11.1%2Bwasi-snapshot-preview1" }, "rule": { "namespace": "syft", "id": "wasi@0.11.1+wasi-snapshot-preview1" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "6e216a5e2b506734f75006b2f0a084aa655272534631ff3e365dae942872f46e", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/windows-link@0.2.1" }, "rule": { "namespace": "syft", "id": "windows-link@0.2.1" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "9077dd0b2b86b914f0b095c8d6bcc189167ee95b7021993b57088bd5e25c724f", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/windows-sys@0.61.2" }, "rule": { "namespace": "syft", "id": "windows-sys@0.61.2" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "e88bf689d1aa0a4bcdfaefe867dd26346df4be90d067004b93b7d73fb75cfe38", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/zerocopy@0.8.63" }, "rule": { "namespace": "syft", "id": "zerocopy@0.8.63" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "2f618422a7648ae74d807312d3a397d16eef2a47e85b7a412fe58ff50268a109", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/zerocopy-derive@0.8.63" }, "rule": { "namespace": "syft", "id": "zerocopy-derive@0.8.63" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "3cfb926e0c9258ea27f8d32a2de899d498b245fbd099dff9cbf872a3d9832914", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/zeroize@1.9.1" }, "rule": { "namespace": "syft", "id": "zeroize@1.9.1" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "57cc8ce7a77d7b267625f03e149331e422afd6e028ace34137fe11514f19b0e4", "class": "supply_chain", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/zmij@1.0.23" }, "rule": { "namespace": "syft", "id": "zmij@1.0.23" }, "state": "open", "evidence_refs": [ "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "3cb3f72855ec8da34228f8a8b8b49d110c5f6296126a0396e384b78dff93858b", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/anstream@1.0.0" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "105d7e1b0ce045f5eaecf4886b2a3a53f11740059022390aeed0641349be6370", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/anstyle@1.0.14" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "6a1bdd16582f18fdb1fa91303573db6370cbc6c6791e13662c519f3bf67e2b58", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/anstyle-parse@1.0.0" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "c32d140352b51004cc522860ec69e78b1648a34309a6a9be6f3bcdf6b34c3ea8", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/anstyle-query@1.1.5" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "4e5f3b8af12d986d540eb760ff9cd8b6855eaad28f2aad327cfb27528eddab32", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/anstyle-wincon@3.0.11" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "d87de0e2410e4ce9c1b03a1c509b3ddf5960b0936f81d4647ba1c5d6d89fc86b", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/base64ct@1.8.3" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "0ae447b9c774db7ecc15622af01746eae86cf6f47a4192ff75afdbb184bd4f0d", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/bitflags@2.13.2" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "88f6dcc043cb942462a57d4e8de3f5e67de6a2bcfe84ec10f2977e7df83f3f70", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/block-buffer@0.10.4" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "6dc467fded10560a16e1a85aae690fdd4d560ab3a7854ff858b0790cbced7ab2", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/cfg-if@1.0.5" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "d62527e65bfebf56c615db5a8b57a52ebb14d9d01d5737b36026ffcd385e020f", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/clap@4.6.7" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "5022223658ce227834152beda2f8039c2f620048d573cdfafca1df7435cd10a4", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/clap_builder@4.6.7" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "b4acb80d59203342fec461529a44fbdf49e70bc6ca659f541896faa542ea43c5", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/clap_derive@4.6.7" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "f18f5e7c89578e9678c5c7348530bcd16566d209feb0453558bd4177a56e4519", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/clap_lex@1.1.1" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "3aa7445371bcced37f805b8b93e9c78dc9638f3ebccedb2087fd6a4bf369b408", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/colorchoice@1.0.5" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "e23a545bde38131ecd1958e9a627d1c94d4e1e13ac04f45d6d19ea0ba3ffa3d6", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/const-oid@0.9.6" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "524744fd861891b779e920a35054e452215c00ca7ad2ecd0c314ce8176be8972", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/cpufeatures@0.2.17" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "7f21367b3adac10c420edf92206d55530b768dbb37f26d97ab71624f4897a4ef", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/crypto-common@0.1.7" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "fe2c38830f0c36aa5c2b7e92c8ce6e5f5ffce3359ea8c601e5c38043e1bdf8a2", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/curve25519-dalek@4.1.3" }, "rule": { "namespace": "license", "id": "BSD-3-Clause" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "22e858ebe1e0cd3085665c0b1ddb0258c163e74d25bd86359b4b5f2a6c9ac9a4", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/curve25519-dalek-derive@0.1.1" }, "rule": { "namespace": "license", "id": "MIT/Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "1d544f0845dcc666855e99dd2b294924d14fc9a59ee95d04ab545ef5a456563a", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/der@0.7.10" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "52412f24e374c82ecd63af7620df4b525ebf66faccde3420a82407886bd0c284", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/digest@0.10.7" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "ae41ba9e474899a525f07dedebf70d5b4d90f42b867dade39a918ff0dc56cdbd", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/ed25519@2.2.3" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "bfba5b2b48789d0999e04341c49eb12720a3312e6c03ae463dc733e6fbb7f47a", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/ed25519-dalek@2.2.0" }, "rule": { "namespace": "license", "id": "BSD-3-Clause" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "3e1257c111ee0929dbe8413202dd62d02da5e23805b3c7b82ee7db2e60e2e5bf", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/errno@0.3.14" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "413b301a14873d3fa09cfbeb904a1753aff90083f7faf45c9fa10ae41e514c95", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/fastrand@2.5.0" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "ca89f09616c15bc6e6aac2d3d9a826d665ed042c69fe8093e11ca0e11215fa88", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/fiat-crypto@0.2.9" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0 OR BSD-1-Clause" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "b56a6ad063aa5b2a36eb7f5ca9f3d6a67d4edee01d6b1bf01994bd1049382aa1", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/generic-array@0.14.7" }, "rule": { "namespace": "license", "id": "MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "a2e087ff1e664313a70e2e8ce7eed24cea66820e3750c483ddf3f4d1e254d8bf", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/getrandom@0.2.17" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "e8a05789f8c7ca2d56115d6721959efab7dee18603092589b99cc0603b4e4931", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/getrandom@0.4.3" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "a045045ab5f79bbc6d89c842641627a66ef7838cf2c4a6956b7cdb1c8adcce1f", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/heck@0.5.0" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "2bfc1148428c407eb319a7e6c10fde0605121ffa1716eaa1db0ddd9d8aad5e7b", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/hex@0.4.3" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "1607bce4d21887f6c3c6cd523cd4781bb966af2914910df1bf0813f5ca357718", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/is_terminal_polyfill@1.70.2" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "44e4a8a96ba5fffac1618980329c98bbaae8b6acc5365659a688553c4c36f5cd", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/itoa@1.0.18" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "90ce55778cfac3e0f098de0b24f5e2e035d65d0b28f7c09647bf2a433f0ced65", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/libc@0.2.191" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "92fa2f521dd2cabdf45f3ba7d0efa52f4d91674015be492d2f7fd994d1843c9b", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/linux-raw-sys@0.12.1" }, "rule": { "namespace": "license", "id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "71154f949e7c2014f20dbe7d654741451e3def11140bc8612e413c799d1d8c28", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/memchr@2.8.3" }, "rule": { "namespace": "license", "id": "Unlicense OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "72d443496cd2f5431e7f4347680d3790fed414966236ac9d635539cddfc310d7", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/once_cell@1.21.4" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "d0ca8c614318f904a95eef3273640692f921fbea88f4681b46a944098a7f4767", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/once_cell_polyfill@1.70.2" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "33502fd83559ad67d44c080bde985d7528478ab1397cfd11a8218d36537c4e31", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/pkcs8@0.10.2" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "f36a59e9dbd1511f0ef2b47db501e35a66e0dd081a18f992255f811a35b17415", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/ppv-lite86@0.2.21" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "875825c505903cfb9b602a23e74f0edf7eb1621583ed9e583c410103af3d402d", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/proc-macro2@1.0.107" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "d94338e54aeaf7fdb9048fc5ec3defa5504f99aab2210cec5156b23ac309f0fd", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/quote@1.0.47" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "73c9c8606efa4200ec16f7e1121489b31dba86fe5c2093dd9907af8d742ee0d3", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/r-efi@6.0.0" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0 OR LGPL-2.1-or-later" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "583bffa666173cd89ec5435a820a182f195e80ec3430f14ae356e22996f0c604", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/rand@0.8.8" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "c25b8b5f19fbb27189204b7c69f7d0bb55b519b678667bf698371f8884cc9037", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/rand_chacha@0.3.1" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "9b2b8375abad347b471c42d1cf7a4c0535119bbe425e5485aad498ec17f767c4", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/rand_core@0.6.4" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "175e264aed60c77f52af0e9e671e8ac55bec5e6e45abdc84a5ebcb3ec8228a32", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/rustc_version@0.4.1" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "0af9738feb17c972c978f5fb2a9d015e97b728ba66aa088f9c16113be8df3a91", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/rustix@1.1.5" }, "rule": { "namespace": "license", "id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "2dba13d7eff3023b8735741b2cebfcf48401ab80634cc83fa074d62e0029c6e5", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/semver@1.0.28" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "b7f56764e7744f74cad3387a716a5246077d8c6e9f0089883df0dbb8288aeb5d", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/serde@1.0.229" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "881652ce03c9fbb009ba2d5e92cacd9454e5366d43e3712ab99c1a0bb52cb0c8", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/serde_core@1.0.229" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "7d3cf8ea302039c6b559c6537f587340c694b5e20193dbc5bcb157a006d26b8a", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/serde_derive@1.0.229" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "da48400504894d432651db8f2dc88973bc202459db2f7d825ad79be718e1475d", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/serde_json@1.0.154" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "4e1769b1e32b9db38c1c88b395bbb79d75dbc84ccebcd482bc8e372323612ea5", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/sha2@0.10.9" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "7d786c3589077e405f9f6eefb654a291c2151ab077bdf2fd98c88ca1872cb009", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/signature@2.2.0" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "137f488cae7954a76b606a56914e8a17efe4b31f2b08ac1e0f518150c86ca603", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/smallvec@1.6.0" }, "rule": { "namespace": "license", "id": "MIT/Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "2da68b323dc569bcbc497ed8b2cfb0120654e76776cf3c35f8d3e950f5747bc0", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/spki@0.7.3" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "190387b967c5696b7e77e95e77baff38bd4c4cf266e724c09cc8cc70dc665da5", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/strsim@0.11.1" }, "rule": { "namespace": "license", "id": "MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "f09ee24c509b49380459f50c80591806cd7c73ad6c6c2dc99229670041fee674", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/subtle@2.6.1" }, "rule": { "namespace": "license", "id": "BSD-3-Clause" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "88cca70db371b2eb5db003aa26dca694e18d04d14f10fea6bb7b77c9d8a5915c", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/syn@2.0.119" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "15bedfcd4863b93f38b7d0bc2bd56e41531843d5c2953974ebb947a686aebc48", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/syn@3.0.9" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "1c2df16adcb1e41856c04a70f745f44ed8efe15e1f2423e4d6a024902014f96c", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/tempfile@3.27.0" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "7ce501395a51a046ddd2de234813e8610fecb37a279dd7581b6a230876216f09", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/typenum@1.20.1" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "10ebd1e19e81d1b55e547bcf583a4da0d086d5d47b86817360bc2d6fa1daecc8", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/unicode-ident@1.0.27" }, "rule": { "namespace": "license", "id": "(MIT OR Apache-2.0) AND Unicode-3.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "2a48ac251537ab5616cb3a1c8b7c09ed5253e442bcb585a6a812cc2e12df9a99", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/utf8parse@0.2.2" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "a178fed10f746a25a38e1a123cff01f7148bdfc82f2d75d55aa653a382c86dcb", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/version_check@0.9.5" }, "rule": { "namespace": "license", "id": "MIT/Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "b505efbcbc2188a627d169bdbdc34901dec4f22b50255975c9c07961ddf3391d", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/wasi@0.11.1+wasi-snapshot-preview1" }, "rule": { "namespace": "license", "id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "7cc0ff2a3a61ff414a371dabeaef2dfd080dc6981383f0d056f5807f9f7f7716", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/windows-link@0.2.1" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "88f3e265d85daf89a5f53123d8cb24aa877f866f5a9e0798e3fcbfba44e07401", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/windows-sys@0.61.2" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "ccde7aa1c7e4a197172dbdd8d438652d4e46433fa65f363abd51fd3f4d5e042a", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/zerocopy@0.8.63" }, "rule": { "namespace": "license", "id": "BSD-2-Clause OR Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "155008951dcca3c42ca968720dec1ba279f3836ef1c6921e7384a41ced42b7fb", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/zerocopy-derive@0.8.63" }, "rule": { "namespace": "license", "id": "BSD-2-Clause OR Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "44f17f90be8e27066147ced08a81acf0709bf297e99ffb794be4f91f07a37819", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/zeroize@1.9.1" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" }, { "id": "9c06bc92074e46c9fad575585278ef5b558d6f9e86471f5f1afb991819aab2c7", "class": "license", "subject": { "specimen_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "component_id": "pkg:cargo/zmij@1.0.23" }, "rule": { "namespace": "license", "id": "MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:01:12.276776289Z" } ], "witnesses": [ { "tool": "osv-scanner", "version": "2.7.0", "binary_digest": "160c6253e2922e9e0a6a9771c5c4c40a4b3c6090b34a3cdd5e80c96cc2e4218b", "config_digest": "0c3d6fef8ea59e1de5610e13ccb1035a7232318288aaed517ee2feec9402455a", "invocation_digest": "a047c4a358b9c3a2c1e5ede3b32650bd79e95455b6d64deb09329794ad43f932", "input_subject_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "e4c0fda20522604529803debe233864ee89f505f6cce118fcdee9011e7558643", "normalized_evidence_digest": "a01c9fbe2e0f89ba51e98a9f9adb3e2221181b02f05426888a8e8e1d4c6f99a0", "limitations": [ "osv-scanner checks registry-based ecosystems (crates.io in 0.6.0); git-sourced dependencies (lean [[require]], gpr) have no advisory database — Insufficient Evidence for them, never a silent pass" ], "evidence_class": "dependency_vulnerability", "observed_at": "2026-10-21T18:01:12.276776289Z" }, { "tool": "semgrep", "version": "1.181.0", "binary_digest": "c29de7c43986faa3c3ca5a8acf1d115811e15ab305ba7657b79e775d40e16391", "config_digest": "206116bd213f0786f8378755ad48adbccfe30376afe8fe2ecdd24eb44161d009", "invocation_digest": "8b463d1c7e0e24912eaca187664be878873a6b1ab113eb374c68b4cc561fff34", "input_subject_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "80c185ac8e17503197e8195c202d98db3f0cd3865a37ba7065f37bdbf2a58d54", "normalized_evidence_digest": "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "limitations": [], "evidence_class": "static_analysis", "observed_at": "2026-10-21T18:01:12.276776289Z" }, { "tool": "gitleaks", "version": "8.30.1", "binary_digest": "88f91962aa2f93ac6ab281d553b9e125f5197bbbce38f9f2437f7299c32e5509", "config_digest": "e1f77c307b36a43d3707ab5fed4a4007f6d63d9302bcf0d5509cd3e52e32ed6f", "invocation_digest": "c5e131c50d8d0e88fd6e1b54056a35838f6fb3e10f894c64c4ad60ff638715dd", "input_subject_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "37517e5f3dc66819f61f5a7bb8ace1921282415f10551d2defa5c3eb0985b570", "normalized_evidence_digest": "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "limitations": [], "evidence_class": "secret", "observed_at": "2026-10-21T18:01:12.276776289Z" }, { "tool": "syft", "version": "1.54.1", "binary_digest": "dbf75864e7a7ff9e1fbf00552c31483f693188632a9f68f343cd7653dac513d6", "config_digest": "b6f045a568b2dd1dcd1a1723f4eb0b8f5863215301ced35067a5f7a53c07c7e6", "invocation_digest": "c6a55d436349f372334a6d45337472ffa0c394e59bd33692f874de57ea530091", "input_subject_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2", "normalized_evidence_digest": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "limitations": [], "evidence_class": "supply_chain", "observed_at": "2026-10-21T18:01:12.276776289Z" }, { "tool": "dependency-manifest", "version": "1", "binary_digest": "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4", "config_digest": "2402cf6f9fd45d6c6d7b9bc10abdba72e36d61e88515a01d2cda19ee8d375b3b", "invocation_digest": "4c7cabee6de971dd4182bcc75fc73df8bf572878ca3b709a1616bd3785b31b51", "input_subject_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4", "normalized_evidence_digest": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "limitations": [ "license facts are the job dependency manifest's registry SPDX ids; the workspace's own code and git-sourced dependencies carry no registry license facts" ], "evidence_class": "license", "observed_at": "2026-10-21T18:01:12.276776289Z" } ], "vulnerability_snapshot": { "source_identity": "osv.dev", "snapshot_identity": "osv-dev-20261021-457e10c8", "observed_at": "2026-10-21T17:30:12Z", "freshness_hours": 24 }, "exceptions": [], "open_findings": 2, "satisfied": false, "evaluated_at": "2026-10-26T05:58:17.902953173Z" } } ], "evidence": [ { "attempt_no": 1, "verdict": "passed", "evidence_sha256": "d928b7dd446da11e026271a53b32af2c780186d11fb2a7890dd45941d18fe48e", "env_sha256": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "wall_seconds": 42.21814708, "result": { "job_id": "520d2155-f6c4-43c6-953c-1829b6dd5cc3", "verdict": "passed", "criteria": [ { "id": "build", "required": true, "passed": true, "commands": [ { "argv": [ "cargo", "build", "--workspace", "--release" ], "exit_code": 0, "timed_out": false, "duration_seconds": 23.538990723, "tail": " Compiling proc-macro2 v1.0.107\n Compiling quote v1.0.47\n Compiling unicode-ident v1.0.27\n Compiling version_check v0.9.5\n Compiling typenum v1.20.1\n Compiling cfg-if v1.0.5\n Compiling libc v0.2.191\n Compiling semver v1.0.28\n Compiling serde_core v1.0.229\n Compiling zerocopy v0.8.63\n Compiling zmij v1.0.23\n Compiling cpufeatures v0.2.17\n Compiling utf8parse v0.2.2\n Compiling signature v2.2.0\n Compiling zeroize v1.9.1\n Compiling subtle v2.6.1\n Compiling serde_json v1.0.154\n Compiling is_terminal_polyfill v1.70.2\n Compiling colorchoice v1.0.5\n Compiling serde v1.0.229\n Compiling anstyle-query v1.1.5\n Compiling anstyle v1.0.14\n Compiling heck v0.5.0\n Compiling strsim v0.11.1\n Compiling anstyle-parse v1.0.0\n Compiling clap_lex v1.1.1\n Compiling itoa v1.0.18\n Compiling ed25519 v2.2.3\n Compiling memchr v2.8.3\n Compiling smallvec v1.6.0\n Compiling hex v0.4.3\n Compiling rustc_version v0.4.1\n Compiling anstream v1.0.0\n Compiling generic-array v0.14.7\n Compiling curve25519-dalek v4.1.3\n Compiling clap_builder v4.6.7\n Compiling syn v3.0.9\n Compiling syn v2.0.119\n Compiling getrandom v0.2.17\n Compiling crypto-common v0.1.7\n Compiling block-buffer v0.10.4\n Compiling digest v0.10.7\n Compiling rand_core v0.6.4\n Compiling sha2 v0.10.9\n Compiling curve25519-dalek-derive v0.1.1\n Compiling serde_derive v1.0.229\n Compiling clap_derive v4.6.7\n Compiling ppv-lite86 v0.2.21\n Compiling rand_chacha v0.3.1\n Compiling rand v0.8.8\n Compiling clap v4.6.7\n Compiling ed25519-dalek v2.2.0\n Compiling falsegreen-ledger-core v0.1.0 (/var/lib/falsegreen/work/520d2155-f6c4-43c6-953c-1829b6dd5cc3/run/crates/falsegreen-ledger-core)\n Compiling falsegreen-ledger v0.1.0 (/var/lib/falsegreen/work/520d2155-f6c4-43c6-953c-1829b6dd5cc3/run/crates/falsegreen-ledger)\n Finished `release` profile [optimized] target(s) in 23.50s\n" } ] }, { "id": "tests", "required": true, "passed": true, "commands": [ { "argv": [ "cargo", "test", "--workspace" ], "exit_code": 0, "timed_out": false, "duration_seconds": 9.52826039, "tail": "\nrunning 0 tests\n\ntest result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s\n\n\nrunning 10 tests\ntest the_cli_help_lists_every_command ... ok\ntest a_corrupt_shard_exits_corrupt ... ok\ntest a_policy_violation_exits_policy ... ok\ntest the_export_import_roundtrip_is_hash_stable ... ok\ntest a_tampered_seal_signature_is_detected ... ok\ntest a_tampered_event_field_is_detected ... ok\ntest a_tampered_cross_shard_link_is_detected ... ok\ntest the_full_lifecycle_verifies_clean ... ok\ntest a_tampered_prev_hash_is_detected ... ok\ntest compaction_keeps_the_ledger_verifiable ... ok\n\ntest result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.21s\n\n\nrunning 41 tests\ntest chain::tests::genesis_record_is_deterministic ... ok\ntest chain::tests::sequence_gap_fails_link_check ... ok\ntest chain::tests::tampered_record_fails_hash_check ... ok\ntest chain::tests::prev_hash_is_committed ... ok\ntest chain::tests::hash_changes_when_any_event_field_changes ... ok\ntest chain::tests::unknown_fields_rejected_in_record ... ok\ntest event::tests::canonical_is_sorted_and_stable ... ok\ntest event::tests::context_null_is_canonicalized_as_null_and_rejected ... ok\ntest event::tests::canonical_round_trips_through_json_with_shuffled_keys ... ok\ntest event::tests::optionals_omit_none_in_canonical_form ... ok\ntest event::tests::unknown_fields_are_rejected ... ok\ntest event::tests::validation_rejects_bad_timestamp ... ok\ntest event::tests::validation_rejects_empty_required_fields ... ok\ntest integrity::tests::a_lone_leaf_is_its_own_root_and_odd_leaves_pair_with_themselves ... ok\ntest integrity::tests::merkle_root_rejects_empty_and_non_hex ... ok\ntest integrity::tests::malformed_keys_and_signatures_are_rejected ... ok\ntest policy::tests::an_event_can_violate_several_rules ... ok\ntest policy::tests::deny_rule_fires_on_match ... ok\ntest policy::tests::deny_rule_fires_only_on_a_match ... ok\ntest policy::tests::validation_rejects_malformed_policies ... ok\ntest policy::tests::require_outcome_enforces_the_decision ... ok\ntest integrity::tests::the_trusted_key_must_match_the_embedded_key ... ok\ntest integrity::tests::merkle_root_is_deterministic_and_order_sensitive ... ok\ntest store::tests::empty_append_is_a_noop ... ok\ntest store::tests::corrupt_line_is_a_parse_error ... ok\ntest store::tests::invalid_event_rejected ... ok\ntest store::tests::init_and_append_continues_from_genesis ... ok\ntest store::tests::seal_count_mismatch_rejected ... ok\ntest verify::tests::the_report_is_canonical_json ... ok\ntest verify::tests::a_sequence_gap_is_caught ... ok\ntest compact::tests::compaction_refuses_unsealed_empty_and_already_compacted ... ok\ntest store::tests::append_after_seal_starts_new_shard_linked_to_merkle_root ... ok\ntest verify::tests::a_tampered_record_hash_cascades_downstream ... ok\ntest compact::tests::the_chain_continues_from_the_original_root_after_compaction ... ok\ntest verify::tests::a_bad_seal_signature_is_caught ... ok\ntest verify::tests::a_tampered_event_is_caught ... ok\ntest compact::tests::the_compacted_shard_verifies_and_reports_the_source_root ... ok\ntest verify::tests::policy_violations_land_in_the_report ... ok\ntest integrity::tests::sign_and_verify_roundtrip ... ok\ntest verify::tests::a_clean_ledger_verifies ... ok\ntest integrity::tests::a_tampered_seal_field_fails_verification ... ok\n\ntest result: ok. 41 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s\n\n\nrunning 0 tests\n\ntest result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s\n\n Compiling proc-macro2 v1.0.107\n Compiling unicode-ident v1.0.27\n Compiling quote v1.0.47\n Compiling libc v0.2.191\n Compiling cfg-if v1.0.5\n Compiling version_check v0.9.5\n Compiling typenum v1.20.1\n Compiling semver v1.0.28\n Compiling serde_core v1.0.229\n Compiling zerocopy v0.8.63\n Compiling cpufeatures v0.2.17\n Compiling zmij v1.0.23\n Compiling subtle v2.6.1\n Compiling serde_json v1.0.154\n Compiling serde v1.0.229\n Compiling signature v2.2.0\n Compiling zeroize v1.9.1\n Compiling utf8parse v0.2.2\n Compiling rustix v1.1.5\n Compiling itoa v1.0.18\n Compiling memchr v2.8.3\n Compiling getrandom v0.4.3\n Compiling anstyle v1.0.14\n Compiling anstyle-parse v1.0.0\n Compiling ed25519 v2.2.3\n Compiling smallvec v1.6.0\n Compiling rustc_version v0.4.1\n Compiling bitflags v2.13.2\n Compiling colorchoice v1.0.5\n Compiling generic-array v0.14.7\n Compiling hex v0.4.3\n Compiling is_terminal_polyfill v1.70.2\n Compiling linux-raw-sys v0.12.1\n Compiling anstyle-query v1.1.5\n Compiling once_cell v1.21.4\n Compiling heck v0.5.0\n Compiling strsim v0.11.1\n Compiling clap_lex v1.1.1\n Compiling fastrand v2.5.0\n Compiling anstream v1.0.0\n Compiling curve25519-dalek v4.1.3\n Compiling clap_builder v4.6.7\n Compiling syn v3.0.9\n Compiling syn v2.0.119\n Compiling block-buffer v0.10.4\n Compiling crypto-common v0.1.7\n Compiling digest v0.10.7\n Compiling sha2 v0.10.9\n Compiling getrandom v0.2.17\n Compiling rand_core v0.6.4\n Compiling tempfile v3.27.0\n Compiling serde_derive v1.0.229\n Compiling clap_derive v4.6.7\n Compiling curve25519-dalek-derive v0.1.1\n Compiling ppv-lite86 v0.2.21\n Compiling rand_chacha v0.3.1\n Compiling clap v4.6.7\n Compiling rand v0.8.8\n Compiling ed25519-dalek v2.2.0\n Compiling falsegreen-ledger-core v0.1.0 (/var/lib/falsegreen/work/520d2155-f6c4-43c6-953c-1829b6dd5cc3/run/crates/falsegreen-ledger-core)\n Compiling falsegreen-ledger v0.1.0 (/var/lib/falsegreen/work/520d2155-f6c4-43c6-953c-1829b6dd5cc3/run/crates/falsegreen-ledger)\n Finished `test` profile [unoptimized + debuginfo] target(s) in 9.12s\n Running unittests src/main.rs (target/debug/deps/falsegreen_ledger-ab76082b4462b0b1)\n Running tests/integration.rs (target/debug/deps/integration-22dc6beef3e29bb7)\n Running unittests src/lib.rs (target/debug/deps/falsegreen_ledger_core-d00132f4be88bc4a)\n Doc-tests falsegreen_ledger_core\n" } ] }, { "id": "lint", "required": false, "passed": true, "commands": [ { "argv": [ "cargo", "clippy", "--workspace", "--all-targets", "--", "-D", "warnings" ], "exit_code": 0, "timed_out": false, "duration_seconds": 8.220241981, "tail": " Checking cfg-if v1.0.5\n Checking typenum v1.20.1\n Checking cpufeatures v0.2.17\n Checking utf8parse v0.2.2\n Checking zeroize v1.9.1\n Checking subtle v2.6.1\n Checking signature v2.2.0\n Checking memchr v2.8.3\n Checking anstyle-query v1.1.5\n Checking anstyle v1.0.14\n Checking libc v0.2.191\n Checking serde_core v1.0.229\n Checking zerocopy v0.8.63\n Checking itoa v1.0.18\n Checking is_terminal_polyfill v1.70.2\n Checking colorchoice v1.0.5\n Checking zmij v1.0.23\n Checking hex v0.4.3\n Checking linux-raw-sys v0.12.1\n Checking bitflags v2.13.2\n Checking strsim v0.11.1\n Checking smallvec v1.6.0\n Checking clap_lex v1.1.1\n Checking anstyle-parse v1.0.0\n Checking fastrand v2.5.0\n Checking ed25519 v2.2.3\n Checking once_cell v1.21.4\n Checking anstream v1.0.0\n Checking clap_builder v4.6.7\n Checking rustix v1.1.5\n Checking generic-array v0.14.7\n Checking getrandom v0.2.17\n Checking getrandom v0.4.3\n Checking rand_core v0.6.4\n Checking block-buffer v0.10.4\n Checking crypto-common v0.1.7\n Checking digest v0.10.7\n Checking sha2 v0.10.9\n Checking curve25519-dalek v4.1.3\n Checking clap v4.6.7\n Checking serde v1.0.229\n Checking serde_json v1.0.154\n Checking tempfile v3.27.0\n Checking ed25519-dalek v2.2.0\n Checking falsegreen-ledger-core v0.1.0 (/var/lib/falsegreen/work/520d2155-f6c4-43c6-953c-1829b6dd5cc3/run/crates/falsegreen-ledger-core)\n Checking ppv-lite86 v0.2.21\n Checking rand_chacha v0.3.1\n Checking rand v0.8.8\n Checking falsegreen-ledger v0.1.0 (/var/lib/falsegreen/work/520d2155-f6c4-43c6-953c-1829b6dd5cc3/run/crates/falsegreen-ledger)\n Finished `dev` profile [unoptimized + debuginfo] target(s) in 8.15s\n" }, { "argv": [ "cargo", "fmt", "--all", "--check" ], "exit_code": 0, "timed_out": false, "duration_seconds": 0.170409148, "tail": "" } ] } ], "wall_seconds": 42.21814708, "error": null, "env_sha256": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "environment": { "schema": 1, "eco": "rust", "toolchain": "rustc 1.99.0 (rustc)", "toolchain_version": "1.99.0", "fingerprint": "cb72048928286df9d194d6d7356350b373cefcc81d7ee1899729b6ebe14c8817", "artifacts": [ { "name": "anstream", "version": "1.0.0", "sha256": "824a212faf96e9acacdbd09febd34438f8f711fb84e09a8916013cd7815ca28d" }, { "name": "anstyle", "version": "1.0.14", "sha256": "940b3a0ca603d1eade50a4846a2afffd5ef57a9feac2c0e2ec2e14f9ead76000" }, { "name": "anstyle-parse", "version": "1.0.0", "sha256": "52ce7f38b242319f7cabaa6813055467063ecdc9d355bbb4ce0c68908cd8130e" }, { "name": "anstyle-query", "version": "1.1.5", "sha256": "40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc" }, { "name": "anstyle-wincon", "version": "3.0.11", "sha256": "291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d" }, { "name": "base64ct", "version": "1.8.3", "sha256": "2af50177e190e07a26ab74f8b1efbfe2ef87da2116221318cb1c2e82baf7de06" }, { "name": "bitflags", "version": "2.13.2", "sha256": "3ded4057c258ba199e2d26386d3af3780957ecaee6c4ef4041c6b4b8b97c0b06" }, { "name": "block-buffer", "version": "0.10.4", "sha256": "3078c7629b62d3f0439517fa394996acacc5cbc91c5a20d8c658e77abd503a71" }, { "name": "cfg-if", "version": "1.0.5", "sha256": "4e7648175b45a9a48536d676f68d918270699102aa8dab5496df06904c914600" }, { "name": "clap", "version": "4.6.7", "sha256": "aa8876b300ab35ba921adea3dfd70157a46249b33f95c9084ae5709785478946" }, { "name": "clap_builder", "version": "4.6.7", "sha256": "ec0797fb7aeb1406c84efac526901f7ec3ead2124f946b494e72879d4b54704d" }, { "name": "clap_derive", "version": "4.6.7", "sha256": "f9c751b79415d4e559e3d1fcf128e09e720eb673a06d26cf6f392d37d75b66e0" }, { "name": "clap_lex", "version": "1.1.1", "sha256": "1c133bc6a41be0d194c306b5506d15e6feeea7b1d6604bd3f8310dfb2ca96486" }, { "name": "colorchoice", "version": "1.0.5", "sha256": "1d07550c9036bf2ae0c684c4297d503f838287c83c53686d05370d0e139ae570" }, { "name": "const-oid", "version": "0.9.6", "sha256": "c2459377285ad874054d797f3ccebf984978aa39129f6eafde5cdc8315b612f8" }, { "name": "cpufeatures", "version": "0.2.17", "sha256": "59ed5838eebb26a2bb2e58f6d5b5316989ae9d08bab10e0e6d103e656d1b0280" }, { "name": "crypto-common", "version": "0.1.7", "sha256": "78c8292055d1c1df0cce5d180393dc8cce0abec0a7102adb6c7b1eef6016d60a" }, { "name": "curve25519-dalek", "version": "4.1.3", "sha256": "97fb8b7c4503de7d6ae7b42ab72a5a59857b4c937ec27a3d4539dba95b5ab2be" }, { "name": "curve25519-dalek-derive", "version": "0.1.1", "sha256": "f46882e17999c6cc590af592290432be3bce0428cb0d5f8b6715e4dc7b383eb3" }, { "name": "der", "version": "0.7.10", "sha256": "e7c1832837b905bbfb5101e07cc24c8deddf52f93225eee6ead5f4d63d53ddcb" }, { "name": "digest", "version": "0.10.7", "sha256": "9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292" }, { "name": "ed25519", "version": "2.2.3", "sha256": "115531babc129696a58c64a4fef0a8bf9e9698629fb97e9e40767d235cfbcd53" }, { "name": "ed25519-dalek", "version": "2.2.0", "sha256": "70e796c081cee67dc755e1a36a0a172b897fab85fc3f6bc48307991f64e4eca9" }, { "name": "errno", "version": "0.3.14", "sha256": "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb" }, { "name": "fastrand", "version": "2.5.0", "sha256": "da7c62ceae207dd37ea5b845da6a0696c799f85e97da1ab5b7910be3c1c80223" }, { "name": "fiat-crypto", "version": "0.2.9", "sha256": "28dea519a9695b9977216879a3ebfddf92f1c08c05d984f8996aecd6ecdc811d" }, { "name": "generic-array", "version": "0.14.7", "sha256": "85649ca51fd72272d7821adaf274ad91c288277713d9c18820d8499a7ff69e9a" }, { "name": "getrandom", "version": "0.2.17", "sha256": "ff2abc00be7fca6ebc474524697ae276ad847ad0a6b3faa4bcb027e9a4614ad0" }, { "name": "getrandom", "version": "0.4.3", "sha256": "300e883d756b2e4ec94e02791f39b04b522276138852cfc41d9fb7e904106099" }, { "name": "heck", "version": "0.5.0", "sha256": "2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea" }, { "name": "hex", "version": "0.4.3", "sha256": "7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70" }, { "name": "is_terminal_polyfill", "version": "1.70.2", "sha256": "a6cb138bb79a146c1bd460005623e142ef0181e3d0219cb493e02f7d08a35695" }, { "name": "itoa", "version": "1.0.18", "sha256": "8f42a60cbdf9a97f5d2305f08a87dc4e09308d1276d28c869c684d7777685682" }, { "name": "libc", "version": "0.2.191", "sha256": "65cd87c9a6d60536580b316ad985726104730a5151c99845f2490428ef91240a" }, { "name": "linux-raw-sys", "version": "0.12.1", "sha256": "32a66949e030da00e8c7d4434b251670a91556f4144941d37452769c25d58a53" }, { "name": "memchr", "version": "2.8.3", "sha256": "cf8baf1c55e62ffcace7a9f06f4bd9cd3f0c4beb022d3b367256b91b87513d98" }, { "name": "once_cell", "version": "1.21.4", "sha256": "9f7c3e4beb33f85d45ae3e3a1792185706c8e16d043238c593331cc7cd313b50" }, { "name": "once_cell_polyfill", "version": "1.70.2", "sha256": "384b8ab6d37215f3c5301a95a4accb5d64aa607f1fcb26a11b5303878451b4fe" }, { "name": "pkcs8", "version": "0.10.2", "sha256": "f950b2377845cebe5cf8b5165cb3cc1a5e0fa5cfa3e1f7f55707d8fd82e0a7b7" }, { "name": "ppv-lite86", "version": "0.2.21", "sha256": "85eae3c4ed2f50dcfe72643da4befc30deadb458a9b590d720cde2f2b1e97da9" }, { "name": "proc-macro2", "version": "1.0.107", "sha256": "985e7ec9bb745e6ce6535b544d84d6cd6f7ad8bd711c398938ae983b91a766d9" }, { "name": "quote", "version": "1.0.47", "sha256": "1fbf4db142a473a8d80c26bbf18454ed458bf8d26c8219c331daecfdbd079001" }, { "name": "r-efi", "version": "6.0.0", "sha256": "f8dcc9c7d52a811697d2151c701e0d08956f92b0e24136cf4cf27b57a6a0d9bf" }, { "name": "rand", "version": "0.8.8", "sha256": "e058c7de0b26af77780c769414d6257830bb240f3c38477dbc2c16e5f54d6d4c" }, { "name": "rand_chacha", "version": "0.3.1", "sha256": "e6c10a63a0fa32252be49d21e7709d4d4baf8d231c2dbce1eaa8141b9b127d88" }, { "name": "rand_core", "version": "0.6.4", "sha256": "ec0be4795e2f6a28069bec0b5ff3e2ac9bafc99e6a9a7dc3547996c5c816922c" }, { "name": "rustc_version", "version": "0.4.1", "sha256": "cfcb3a22ef46e85b45de6ee7e79d063319ebb6594faafcf1c225ea92ab6e9b92" }, { "name": "rustix", "version": "1.1.5", "sha256": "891efababe418670775f199f0d233d84843c227a0949a883ce15b37c78d6629d" }, { "name": "semver", "version": "1.0.28", "sha256": "8a7852d02fc848982e0c167ef163aaff9cd91dc640ba85e263cb1ce46fae51cd" }, { "name": "serde", "version": "1.0.229", "sha256": "4148590afebada386688f18773da617792bf2ef03ffc1e4cbd2b1d45b023e0ba" }, { "name": "serde_core", "version": "1.0.229", "sha256": "67dca2c9c51e58a4791a4b1ed58308b39c64224d349a935ab5039aa360942a48" }, { "name": "serde_derive", "version": "1.0.229", "sha256": "e7a5d71263a5a7d47b41f6b3f06ba276f10cc18b0931f1799f710578e2309348" }, { "name": "serde_json", "version": "1.0.154", "sha256": "e7e9cc8b1b85264074fbcc02a88680c4096b1e47df8f739dceb03bf482f04bd6" }, { "name": "sha2", "version": "0.10.9", "sha256": "a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283" }, { "name": "signature", "version": "2.2.0", "sha256": "77549399552de45a898a580c1b41d445bf730df867cc44e6c0233bbc4b8329de" }, { "name": "smallvec", "version": "1.6.0", "sha256": "1a55ca5f3b68e41c979bf8c46a6f1da892ca4db8f94023ce0bd32407573b1ac0" }, { "name": "spki", "version": "0.7.3", "sha256": "d91ed6c858b01f942cd56b37a94b3e0a1798290327d1236e4d9cf4eaca44d29d" }, { "name": "strsim", "version": "0.11.1", "sha256": "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f" }, { "name": "subtle", "version": "2.6.1", "sha256": "13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292" }, { "name": "syn", "version": "2.0.119", "sha256": "872831b642d1a07999a962a351ed35b955ea2cfc8f3862091e2a240a84f17297" }, { "name": "syn", "version": "3.0.9", "sha256": "d78c8dee4c7bf0e14673097256fed6142ce9d3b85a408189d07482442145823b" }, { "name": "tempfile", "version": "3.27.0", "sha256": "32497e9a4c7b38532efcdebeef879707aa9f794296a4f0244f6f69e9bc8574bd" }, { "name": "typenum", "version": "1.20.1", "sha256": "b6f5e870be6c3b371b77fe0ee0bafb859fa4964b4404c27de1d380043c4dda20" }, { "name": "unicode-ident", "version": "1.0.27", "sha256": "a2c754d6c33795a1c324727428e5a7dedb5b06195f9890bdbcba760d3e246563" }, { "name": "utf8parse", "version": "0.2.2", "sha256": "06abde3611657adf66d383f00b093d7faecc7fa57071cce2578660c9f1010821" }, { "name": "version_check", "version": "0.9.5", "sha256": "0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a" }, { "name": "wasi", "version": "0.11.1+wasi-snapshot-preview1", "sha256": "ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b" }, { "name": "windows-link", "version": "0.2.1", "sha256": "f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5" }, { "name": "windows-sys", "version": "0.61.2", "sha256": "ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc" }, { "name": "zerocopy", "version": "0.8.63", "sha256": "e5fe1f8f1b06191a00962174c61aa5005e0bb391a6d80d07e24d115c01a92ed8" }, { "name": "zerocopy-derive", "version": "0.8.63", "sha256": "863ad3ac83293fb4d740aedbfdc9240dd8d1a50c1099acd76ce80ce7c7230c7f" }, { "name": "zeroize", "version": "1.9.1", "sha256": "e13084392c5e4bc371903e2935a5eaeed24905a7511356b883835e18a78f6879" }, { "name": "zmij", "version": "1.0.23", "sha256": "29666d0abbfad1e3dc4dcf6144730dd3a3ab225bbbdac83319345b1b44ccfc1b" } ] }, "witness_invocations": [ { "tool": "osv-scanner", "version": "2.7.0", "binary_digest": "160c6253e2922e9e0a6a9771c5c4c40a4b3c6090b34a3cdd5e80c96cc2e4218b", "config_digest": "0c3d6fef8ea59e1de5610e13ccb1035a7232318288aaed517ee2feec9402455a", "invocation_digest": "ac16580f3759d425c22f939caf047faa04f51428b6faec95432fb11d9f6bac0c", "input_subject_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "bc3a9475f41113399b37bbb06fa93ad463c0c15a2a842fcc5ec6a352dbcead48", "normalized_evidence_digest": "a01c9fbe2e0f89ba51e98a9f9adb3e2221181b02f05426888a8e8e1d4c6f99a0", "limitations": [ "osv-scanner checks registry-based ecosystems (crates.io in 0.6.0); git-sourced dependencies (lean [[require]], gpr) have no advisory database — Insufficient Evidence for them, never a silent pass" ], "evidence_class": "dependency_vulnerability", "observed_at": "2026-10-21T17:51:44.362638861+00:00", "findings": [ { "rule_namespace": "osv", "rule_id": "RUSTSEC-2021-0003", "severity": "high", "component": "pkg:crates.io/smallvec@1.6.0", "fingerprint": "33785582b0bffd15e2724184577c08f01121749519544d60019637759fc0278a", "state": "open" }, { "rule_namespace": "osv", "rule_id": "GHSA-43w2-9j62-hq99", "severity": "high", "component": "pkg:crates.io/smallvec@1.6.0", "fingerprint": "ba50c1802e51ced38a54ef5d84d292c2efbb3b72e0751e638b8539d27f3d1ebb", "state": "open" } ] }, { "tool": "semgrep", "version": "1.181.0", "binary_digest": "c29de7c43986faa3c3ca5a8acf1d115811e15ab305ba7657b79e775d40e16391", "config_digest": "206116bd213f0786f8378755ad48adbccfe30376afe8fe2ecdd24eb44161d009", "invocation_digest": "1e54512445675df2d7018f991bdf25c566833d99eeae47599057456c5cf30c7f", "input_subject_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "80c185ac8e17503197e8195c202d98db3f0cd3865a37ba7065f37bdbf2a58d54", "normalized_evidence_digest": "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "limitations": [], "evidence_class": "static_analysis", "observed_at": "2026-10-21T17:51:44.362638861+00:00", "findings": [] }, { "tool": "gitleaks", "version": "8.30.1", "binary_digest": "88f91962aa2f93ac6ab281d553b9e125f5197bbbce38f9f2437f7299c32e5509", "config_digest": "e1f77c307b36a43d3707ab5fed4a4007f6d63d9302bcf0d5509cd3e52e32ed6f", "invocation_digest": "aa4b8fd36f7f5b2301b5594c131f3e6cb4d9402214729243829876ac807d5d6b", "input_subject_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "37517e5f3dc66819f61f5a7bb8ace1921282415f10551d2defa5c3eb0985b570", "normalized_evidence_digest": "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "limitations": [], "evidence_class": "secret", "observed_at": "2026-10-21T17:51:44.362638861+00:00", "findings": [] }, { "tool": "syft", "version": "1.54.1", "binary_digest": "dbf75864e7a7ff9e1fbf00552c31483f693188632a9f68f343cd7653dac513d6", "config_digest": "b6f045a568b2dd1dcd1a1723f4eb0b8f5863215301ced35067a5f7a53c07c7e6", "invocation_digest": "e359dbe5b043da4c0faa86a7829cf344befe92895850aa43295fb3a04f1097e8", "input_subject_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "511ee2ef0bd6cf995f2cd752df64921b15d9cbb19ea70d1d4ceb7b84b4b5a2e5", "normalized_evidence_digest": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "limitations": [], "evidence_class": "supply_chain", "observed_at": "2026-10-21T17:51:44.362638861+00:00", "findings": [ { "rule_namespace": "syft", "rule_id": "anstream@1.0.0", "component": "pkg:cargo/anstream@1.0.0", "fingerprint": "1001468a98bf8f886f889f3b76dee0717eea1611dbab5c3ec415bc0a9d3f9853", "state": "open" }, { "rule_namespace": "syft", "rule_id": "anstyle@1.0.14", "component": "pkg:cargo/anstyle@1.0.14", "fingerprint": "b4423ac5d91607f895d2e4f6b3b58b3b98e3220e95d5a560719a38f26e88a9aa", "state": "open" }, { "rule_namespace": "syft", "rule_id": "anstyle-parse@1.0.0", "component": "pkg:cargo/anstyle-parse@1.0.0", "fingerprint": "86b1ca2b439dac8c8ccf11610d2f44a40fa2c28b49c7a4f67fffc5ad7e7a4c34", "state": "open" }, { "rule_namespace": "syft", "rule_id": "anstyle-query@1.1.5", "component": "pkg:cargo/anstyle-query@1.1.5", "fingerprint": "59e640d2af9d99361184e5dd537b90d2c59bda2eba7000d96ad1688025214430", "state": "open" }, { "rule_namespace": "syft", "rule_id": "anstyle-wincon@3.0.11", "component": "pkg:cargo/anstyle-wincon@3.0.11", "fingerprint": "3b50475de5d0ec3dd61737fa6a9f81887b3ee6ff55d9fd7afecaa6d985cd26e6", "state": "open" }, { "rule_namespace": "syft", "rule_id": "base64ct@1.8.3", "component": "pkg:cargo/base64ct@1.8.3", "fingerprint": "5656f108cca5b4825c10d9ceed24fec9707f89915b6d39bb2c2f79b59f6a1eaf", "state": "open" }, { "rule_namespace": "syft", "rule_id": "bitflags@2.13.2", "component": "pkg:cargo/bitflags@2.13.2", "fingerprint": "2f570cfac9dde16b280d8ce6521d29be556270814081e669ebb29f300aac7e82", "state": "open" }, { "rule_namespace": "syft", "rule_id": "block-buffer@0.10.4", "component": "pkg:cargo/block-buffer@0.10.4", "fingerprint": "2b4e003d5403bd7ccd2ef88c2dcfba20586172a36e9e5feb24203884290f3fb8", "state": "open" }, { "rule_namespace": "syft", "rule_id": "cfg-if@1.0.5", "component": "pkg:cargo/cfg-if@1.0.5", "fingerprint": "40e2ca0f72307e7f2b92a7626063d84ab55fa1db6f40e2fdaea4eb417bb3d9f6", "state": "open" }, { "rule_namespace": "syft", "rule_id": "clap@4.6.7", "component": "pkg:cargo/clap@4.6.7", "fingerprint": "8b5288edc94ee3c1804eb2664bb8a57974ed5bd708efaad6ab63165c19e80dfd", "state": "open" }, { "rule_namespace": "syft", "rule_id": "clap_builder@4.6.7", "component": "pkg:cargo/clap_builder@4.6.7", "fingerprint": "4b4192da7ea8835334cc519c92e9230c5aa48d6e8b5905d5dc735155981a1f5d", "state": "open" }, { "rule_namespace": "syft", "rule_id": "clap_derive@4.6.7", "component": "pkg:cargo/clap_derive@4.6.7", "fingerprint": "4d51f0052690cd07873e9f2360688e746bd74d01be8bce8eb1e09d4b5ee2869f", "state": "open" }, { "rule_namespace": "syft", "rule_id": "clap_lex@1.1.1", "component": "pkg:cargo/clap_lex@1.1.1", "fingerprint": "d5118fb3b03cf55c1b5d2058dc703e5287863abfafc62e948f8bd37c554eed93", "state": "open" }, { "rule_namespace": "syft", "rule_id": "colorchoice@1.0.5", "component": "pkg:cargo/colorchoice@1.0.5", "fingerprint": "333b5e3b16c10da6f952448b19c196e74ca809dd500e5b626c5e94eca9950908", "state": "open" }, { "rule_namespace": "syft", "rule_id": "const-oid@0.9.6", "component": "pkg:cargo/const-oid@0.9.6", "fingerprint": "5541a7190761ecc001f652cbea75f887d34a63857a9d4a833c6c04c4f66c9cc2", "state": "open" }, { "rule_namespace": "syft", "rule_id": "cpufeatures@0.2.17", "component": "pkg:cargo/cpufeatures@0.2.17", "fingerprint": "2c41be5a411d55d53a6e1ecaae69000d6cfafc653329b5a415c3833ca3d938a3", "state": "open" }, { "rule_namespace": "syft", "rule_id": "crypto-common@0.1.7", "component": "pkg:cargo/crypto-common@0.1.7", "fingerprint": "94ebb3d3a04823de45b978f7f2d92b817a60a7eb82d8c7b676a832d72e58684f", "state": "open" }, { "rule_namespace": "syft", "rule_id": "curve25519-dalek@4.1.3", "component": "pkg:cargo/curve25519-dalek@4.1.3", "fingerprint": "fe69847583a09dbb422ed424b8822f6081a5b9a9ea4a5a0659aeeae90a1f3b68", "state": "open" }, { "rule_namespace": "syft", "rule_id": "curve25519-dalek-derive@0.1.1", "component": "pkg:cargo/curve25519-dalek-derive@0.1.1", "fingerprint": "30988a4946cd7b5896513c53b8f46fef2f041b7a32a8444f2fbbbe35504b0d30", "state": "open" }, { "rule_namespace": "syft", "rule_id": "der@0.7.10", "component": "pkg:cargo/der@0.7.10", "fingerprint": "8163a7cb6df166afc2111e82c998716d8b3a803f1869d677792d321ac2c09c7e", "state": "open" }, { "rule_namespace": "syft", "rule_id": "digest@0.10.7", "component": "pkg:cargo/digest@0.10.7", "fingerprint": "f543d9aefa032f0994738474a351c2d2be5ba43859f3a3edd9a65494ee9238b8", "state": "open" }, { "rule_namespace": "syft", "rule_id": "ed25519@2.2.3", "component": "pkg:cargo/ed25519@2.2.3", "fingerprint": "1a02d28487a2543cf9326fab370709729bebc9627626b39581bd1df154e91dbd", "state": "open" }, { "rule_namespace": "syft", "rule_id": "ed25519-dalek@2.2.0", "component": "pkg:cargo/ed25519-dalek@2.2.0", "fingerprint": "5d7bc1f87b8a0a9b4d360efd55b594a08fa0a5fef8d15fcf5ad942263a934c2d", "state": "open" }, { "rule_namespace": "syft", "rule_id": "errno@0.3.14", "component": "pkg:cargo/errno@0.3.14", "fingerprint": "fe0c520b266d11e2ad249f8ded3c90b5f136fb9263021fc61136e8c181a8023f", "state": "open" }, { "rule_namespace": "syft", "rule_id": "falsegreen-ledger@0.1.0", "component": "", "fingerprint": "841d8d48762b69b0eac8a31c3cdc02cd1eacac1caf7d69c291615aecc96b9ba8", "state": "open" }, { "rule_namespace": "syft", "rule_id": "falsegreen-ledger-core@0.1.0", "component": "", "fingerprint": "99c0e29b042978b26ae2896dfffc0866c8638f5604b43b5a33122de2f9811c19", "state": "open" }, { "rule_namespace": "syft", "rule_id": "fastrand@2.5.0", "component": "pkg:cargo/fastrand@2.5.0", "fingerprint": "2b7ba02485a3d76cc19b17317882c1dd65511ed5ad95e9e70a0bb5d7f5dd4043", "state": "open" }, { "rule_namespace": "syft", "rule_id": "fiat-crypto@0.2.9", "component": "pkg:cargo/fiat-crypto@0.2.9", "fingerprint": "de9f033198ba6f74b0c4f8cc0f961ff4d5f3b764d3a1e60f0f68a66fcb26f54f", "state": "open" }, { "rule_namespace": "syft", "rule_id": "generic-array@0.14.7", "component": "pkg:cargo/generic-array@0.14.7", "fingerprint": "375236d1387d03ae58db25418fce92969adbd21eca601a82cd8dc683fe60f20f", "state": "open" }, { "rule_namespace": "syft", "rule_id": "getrandom@0.2.17", "component": "pkg:cargo/getrandom@0.2.17", "fingerprint": "80e36ea36c4959f0d1b4dd76769554760054be60923fa8eae72bc10d83b30b90", "state": "open" }, { "rule_namespace": "syft", "rule_id": "getrandom@0.4.3", "component": "pkg:cargo/getrandom@0.4.3", "fingerprint": "05b5d32e6e201ead770f640d3986020565688d70ca4bf6d323def662c9b10bc0", "state": "open" }, { "rule_namespace": "syft", "rule_id": "heck@0.5.0", "component": "pkg:cargo/heck@0.5.0", "fingerprint": "c5eb23be3fdbc8afafc1cca8b9c5767bab582488149444a86b1d000d74e3c97a", "state": "open" }, { "rule_namespace": "syft", "rule_id": "hex@0.4.3", "component": "pkg:cargo/hex@0.4.3", "fingerprint": "79f94666cd1756f5374c513addc3b9444043d08bb49050dae4998fc934de41af", "state": "open" }, { "rule_namespace": "syft", "rule_id": "is_terminal_polyfill@1.70.2", "component": "pkg:cargo/is_terminal_polyfill@1.70.2", "fingerprint": "b005b2478a3e5a28b543b644c46c0e2049ab156cd1ccd7133ea9f40a5626b62d", "state": "open" }, { "rule_namespace": "syft", "rule_id": "itoa@1.0.18", "component": "pkg:cargo/itoa@1.0.18", "fingerprint": "aec45ddec07a815da2a5c182001bfe6e554ed2a0b89259d327f793511a774c40", "state": "open" }, { "rule_namespace": "syft", "rule_id": "libc@0.2.191", "component": "pkg:cargo/libc@0.2.191", "fingerprint": "b0e83395a6df61531693965b5dc89908e48f1fc30363b236cdebf457b3b8d84a", "state": "open" }, { "rule_namespace": "syft", "rule_id": "linux-raw-sys@0.12.1", "component": "pkg:cargo/linux-raw-sys@0.12.1", "fingerprint": "7516ef772912bc7e53189e7272c2213556425bc370efc1936e07fd2f7141dab0", "state": "open" }, { "rule_namespace": "syft", "rule_id": "memchr@2.8.3", "component": "pkg:cargo/memchr@2.8.3", "fingerprint": "19c7f7c6470891a44bd18bae9b5a2d1d0a9674e609cb6b681b6d78594026b1c0", "state": "open" }, { "rule_namespace": "syft", "rule_id": "once_cell@1.21.4", "component": "pkg:cargo/once_cell@1.21.4", "fingerprint": "5df49b2099b0dc508144dd3ce7f17d8ef89e1ca37347a5a9732cc45bef8a0865", "state": "open" }, { "rule_namespace": "syft", "rule_id": "once_cell_polyfill@1.70.2", "component": "pkg:cargo/once_cell_polyfill@1.70.2", "fingerprint": "67dbadfb6f4218d894e3b81d8d454f1540509b7c38981b00170ce499b12f89cc", "state": "open" }, { "rule_namespace": "syft", "rule_id": "pkcs8@0.10.2", "component": "pkg:cargo/pkcs8@0.10.2", "fingerprint": "c47c76d7946c7de7d9e8ccb0ce88035f70f673c663ff4bc87d7186e2cd59e8fe", "state": "open" }, { "rule_namespace": "syft", "rule_id": "ppv-lite86@0.2.21", "component": "pkg:cargo/ppv-lite86@0.2.21", "fingerprint": "9947e5da4cc28604998b938686ba44e72cd4382ce0330b0b7457439028a32e72", "state": "open" }, { "rule_namespace": "syft", "rule_id": "proc-macro2@1.0.107", "component": "pkg:cargo/proc-macro2@1.0.107", "fingerprint": "8a7eb5f7e790f0c2621a0b8b0602d5e8df183461cc0627f75774260b6b3ade32", "state": "open" }, { "rule_namespace": "syft", "rule_id": "quote@1.0.47", "component": "pkg:cargo/quote@1.0.47", "fingerprint": "ba5b73c1936ffd2ab425cc8480b56e7b5f48125bec80e2b12a1a44baa9c1c558", "state": "open" }, { "rule_namespace": "syft", "rule_id": "r-efi@6.0.0", "component": "pkg:cargo/r-efi@6.0.0", "fingerprint": "122b7ca8782f044bbf34b34a6611015ab063c5941471a1f9edf52859953335ea", "state": "open" }, { "rule_namespace": "syft", "rule_id": "rand@0.8.8", "component": "pkg:cargo/rand@0.8.8", "fingerprint": "d75967c1358b7152e9dec7577066f5049015cdd77c70b9c353ec196342cef83b", "state": "open" }, { "rule_namespace": "syft", "rule_id": "rand_chacha@0.3.1", "component": "pkg:cargo/rand_chacha@0.3.1", "fingerprint": "98b4b52cb9630b79c95cd3ce370098fda6810c9893935c1623818e6c2bc6a950", "state": "open" }, { "rule_namespace": "syft", "rule_id": "rand_core@0.6.4", "component": "pkg:cargo/rand_core@0.6.4", "fingerprint": "881bc35797d5dbc04b02e40860ac237cc76ab1e8561cd4d39d3fc0a1c3155a12", "state": "open" }, { "rule_namespace": "syft", "rule_id": "rustc_version@0.4.1", "component": "pkg:cargo/rustc_version@0.4.1", "fingerprint": "b856fc7dc29ef6489b43403c317b31a5c2f7469df3e78eb38496d906f65a41f9", "state": "open" }, { "rule_namespace": "syft", "rule_id": "rustix@1.1.5", "component": "pkg:cargo/rustix@1.1.5", "fingerprint": "161a149e15f158acea456dd7572470352fcc38e9861cf74a7affcdbebb3be84c", "state": "open" }, { "rule_namespace": "syft", "rule_id": "semver@1.0.28", "component": "pkg:cargo/semver@1.0.28", "fingerprint": "adf8dd8c6eab8cbfba291126118409767783c7721216321d264e71566a86fb64", "state": "open" }, { "rule_namespace": "syft", "rule_id": "serde@1.0.229", "component": "pkg:cargo/serde@1.0.229", "fingerprint": "6d867eaaeef95071a1e043e0f22f4765333205c756611890f0f6ee0f0bf2844a", "state": "open" }, { "rule_namespace": "syft", "rule_id": "serde_core@1.0.229", "component": "pkg:cargo/serde_core@1.0.229", "fingerprint": "e510c18b9a78eaa008df3d1ced75890c6610e5b6802183c55c7bbe66f2b08705", "state": "open" }, { "rule_namespace": "syft", "rule_id": "serde_derive@1.0.229", "component": "pkg:cargo/serde_derive@1.0.229", "fingerprint": "000799b93838d093c6bbd43247666d235ecbfd735b93222d2cd26233f0fb28ec", "state": "open" }, { "rule_namespace": "syft", "rule_id": "serde_json@1.0.154", "component": "pkg:cargo/serde_json@1.0.154", "fingerprint": "349a0dd333a0d2897b42960e7efb1d0830ab09b3e9eeb1e2acdeb5a200f289e1", "state": "open" }, { "rule_namespace": "syft", "rule_id": "sha2@0.10.9", "component": "pkg:cargo/sha2@0.10.9", "fingerprint": "477b1f1b81c82609f675f2c5aeb53cfb9f1191376ff8845a5647e9c6b05388df", "state": "open" }, { "rule_namespace": "syft", "rule_id": "signature@2.2.0", "component": "pkg:cargo/signature@2.2.0", "fingerprint": "7d8fc0ddf33982f4c2b6ca2f3739dc5f209faca02c4d8a01cb67023acf125d9c", "state": "open" }, { "rule_namespace": "syft", "rule_id": "smallvec@1.6.0", "component": "pkg:cargo/smallvec@1.6.0", "fingerprint": "1b292519074e47f7a1b01edc1ec1476b2f282e47ec7640820c0bad1afd635a20", "state": "open" }, { "rule_namespace": "syft", "rule_id": "spki@0.7.3", "component": "pkg:cargo/spki@0.7.3", "fingerprint": "e7593fa9bc039e2db40a3a71927e7b104a79be42d02d04e04b1b373dad5f9354", "state": "open" }, { "rule_namespace": "syft", "rule_id": "strsim@0.11.1", "component": "pkg:cargo/strsim@0.11.1", "fingerprint": "7260c481b09f354b4c8d13996a46735f790af5206fa07ffa86f3d9601768719a", "state": "open" }, { "rule_namespace": "syft", "rule_id": "subtle@2.6.1", "component": "pkg:cargo/subtle@2.6.1", "fingerprint": "abf520278b97397636ae0d0fba9c430b656b0af89b288300d4c9e12cd1bad2a9", "state": "open" }, { "rule_namespace": "syft", "rule_id": "syn@2.0.119", "component": "pkg:cargo/syn@2.0.119", "fingerprint": "80bcee46aef1b69a610a3810a2f7dc3fec1a8cff8a4366bc2369f50b8543a5e0", "state": "open" }, { "rule_namespace": "syft", "rule_id": "syn@3.0.9", "component": "pkg:cargo/syn@3.0.9", "fingerprint": "114cde3e9bfa178c4b502cb01a87d49a704c293fc6d1a07270388d14b152c9c2", "state": "open" }, { "rule_namespace": "syft", "rule_id": "tempfile@3.27.0", "component": "pkg:cargo/tempfile@3.27.0", "fingerprint": "cc64344e2b0f434ddea53beb971184de5fd0a84c6a9739eff5255d69b2d42a3c", "state": "open" }, { "rule_namespace": "syft", "rule_id": "typenum@1.20.1", "component": "pkg:cargo/typenum@1.20.1", "fingerprint": "69fca6104cc42ad018ccf1e723d8e6cc55ad7d890cbeaf9f3073487edb4e9c81", "state": "open" }, { "rule_namespace": "syft", "rule_id": "unicode-ident@1.0.27", "component": "pkg:cargo/unicode-ident@1.0.27", "fingerprint": "c8f069b4043c8b0afcbf7d2f1d9fdb3681c8f8cc75ee03d318b515654ab1e21c", "state": "open" }, { "rule_namespace": "syft", "rule_id": "utf8parse@0.2.2", "component": "pkg:cargo/utf8parse@0.2.2", "fingerprint": "c28ef21ff55492434ef623166a53f268c1c02540b430df3967683388cacd9336", "state": "open" }, { "rule_namespace": "syft", "rule_id": "version_check@0.9.5", "component": "pkg:cargo/version_check@0.9.5", "fingerprint": "a37defdbf8011a14f68d31205b137179a3eec551816dc2a2b861965901eed251", "state": "open" }, { "rule_namespace": "syft", "rule_id": "wasi@0.11.1+wasi-snapshot-preview1", "component": "pkg:cargo/wasi@0.11.1%2Bwasi-snapshot-preview1", "fingerprint": "8224d335948f5ae82312adc7b5040e9331715f1f580a94ac77e55f15af60fb24", "state": "open" }, { "rule_namespace": "syft", "rule_id": "windows-link@0.2.1", "component": "pkg:cargo/windows-link@0.2.1", "fingerprint": "f2e9441ed9c64738dc6bd8be208ecb9b3f0f2eb8ea5ddeb4fa1303339bb340d6", "state": "open" }, { "rule_namespace": "syft", "rule_id": "windows-sys@0.61.2", "component": "pkg:cargo/windows-sys@0.61.2", "fingerprint": "b2713fc2f7bff729a27c0f62ee1be368d8344e0a7237e06edae435bfe00f9353", "state": "open" }, { "rule_namespace": "syft", "rule_id": "zerocopy@0.8.63", "component": "pkg:cargo/zerocopy@0.8.63", "fingerprint": "538de62743d2a698d49ae17957387bceef902f05602838b337eb33ef3a2018ca", "state": "open" }, { "rule_namespace": "syft", "rule_id": "zerocopy-derive@0.8.63", "component": "pkg:cargo/zerocopy-derive@0.8.63", "fingerprint": "c28066f0d74cc875b1313b642f5b65466e41ca5928021fdf354e3a5158e5f887", "state": "open" }, { "rule_namespace": "syft", "rule_id": "zeroize@1.9.1", "component": "pkg:cargo/zeroize@1.9.1", "fingerprint": "a9b132d8d889548f19dbf2f1ed6a078ca10079500e9a4e3e2c23e407a3c4c2bb", "state": "open" }, { "rule_namespace": "syft", "rule_id": "zmij@1.0.23", "component": "pkg:cargo/zmij@1.0.23", "fingerprint": "18a805aded02f77466f8ea530827dac33264f4eea283a1e3793fe895db3d0ad5", "state": "open" } ] }, { "tool": "dependency-manifest", "version": "1", "binary_digest": "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4", "config_digest": "2402cf6f9fd45d6c6d7b9bc10abdba72e36d61e88515a01d2cda19ee8d375b3b", "invocation_digest": "967c9f01ac4955d8e0637edaf1fae1171a965f2f40111bdbcd053a12c7f2137a", "input_subject_digest": "c29cc78fa67a8ad57fe6b25c3b42fd29f5d6cfb4d9fcfcf06263ce8e4686811e", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4", "normalized_evidence_digest": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "limitations": [ "license facts are the job dependency manifest's registry SPDX ids; the workspace's own code and git-sourced dependencies carry no registry license facts" ], "evidence_class": "license", "observed_at": "2026-10-21T17:51:44.362638861+00:00", "findings": [ { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/anstream@1.0.0", "fingerprint": "81c389e920feb226956ea5e7e905e055ef3190e347d2024731cba977530b1c28", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/anstyle@1.0.14", "fingerprint": "72cb9f765ade0582fd1b8d4e3ec30734124e9580702182e52b07ce552ace97b1", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/anstyle-parse@1.0.0", "fingerprint": "03dae4cdd1bc7ba73958bf1c617e4f5aa93a31d30b5efa57cb32af82f5010ef9", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/anstyle-query@1.1.5", "fingerprint": "847b1133ac62af0c80b617aa8a687925f44ff02a38077b59d57f8a3d2c9e7377", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/anstyle-wincon@3.0.11", "fingerprint": "930051eead4685b3c169c214c7e4bf568a6b18c75060c642828af9b1e4a92cb7", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/base64ct@1.8.3", "fingerprint": "c2936ea98513be3acbc17ec843a0b5a87f2ec66b23198a7e457cbfe82501de17", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/bitflags@2.13.2", "fingerprint": "5a267ea0d4b32ca26ee6285110e4831c63bc24aba4b4ef50a6ce820dab9bc9c7", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/block-buffer@0.10.4", "fingerprint": "65f5493f0209c5bb833a448c5a4f8d34ea9cbb19fd226d673fb6378da3d45d81", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/cfg-if@1.0.5", "fingerprint": "9c66873ce2b15cedf8971b5136299c6dbbdbdb00096f984baca5c60e43f20b86", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/clap@4.6.7", "fingerprint": "b6d470dc0b142702b891dd8112eb44dacb7f1e64144fc95e7c4d8188299612c5", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/clap_builder@4.6.7", "fingerprint": "57fd5416fc287aefb50fdd41cdf558dc3aab82e27a8e542cb21cb6641a034fbf", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/clap_derive@4.6.7", "fingerprint": "e4955ec9e34c975255437f60abb69c42ffe6c4faff7bd1b2c2f1f582a1266f6f", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/clap_lex@1.1.1", "fingerprint": "9c1ce04a546342b75e26dcedd88dfd64ed4c42c1e22db5d575ebd9b83bdab96f", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/colorchoice@1.0.5", "fingerprint": "0cd1130d559feb72b1789c9dfc5ca946a042b193f6efe22b205f7179ae628471", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/const-oid@0.9.6", "fingerprint": "dd86b6e6f0675712fca49ad744596692f3308ad888e80c2fe798ae86fcc44761", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/cpufeatures@0.2.17", "fingerprint": "04a7c96209fbd41f9a1817ea4d2a6e8677796fa4ec0dc537d76a9dec0036eb8f", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/crypto-common@0.1.7", "fingerprint": "745d756e8999f1a9a249aed77699c555941595329a4e4343de89ae96e1d0333a", "state": "open" }, { "rule_namespace": "license", "rule_id": "BSD-3-Clause", "component": "pkg:cargo/curve25519-dalek@4.1.3", "fingerprint": "0bb575d6587d75ee9592137d2931238680210aecc215909adba1e5f8072feb00", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT/Apache-2.0", "component": "pkg:cargo/curve25519-dalek-derive@0.1.1", "fingerprint": "2bd313068cc5979f66814611d0f2653764f5f02a5fea3659e6622b7141a9efb2", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/der@0.7.10", "fingerprint": "5581ac6ec26f13cf9bf99838842922d224f796330520c89e209f34f8263deca9", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/digest@0.10.7", "fingerprint": "66d845a56cbb7c318352a08f46d3b6991b4e15095a844109683d6395bea3a1c7", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/ed25519@2.2.3", "fingerprint": "b1ef1484de84840c7c0a2c51933966b0868f8da06be7d59e7b77a92b3dcd12c6", "state": "open" }, { "rule_namespace": "license", "rule_id": "BSD-3-Clause", "component": "pkg:cargo/ed25519-dalek@2.2.0", "fingerprint": "59ce4b8271427de2f3c94b79b2d666608dd0ab80f62ba57ba79decbe90460d6c", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/errno@0.3.14", "fingerprint": "b2cf2d50c9d7e3df66abaf43435835639e08034d0258c853bbb967068248c7c1", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/fastrand@2.5.0", "fingerprint": "68281187c66d4c9670acbf7a748a35df777f7796eace3eb74ecd3c0df1af2377", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0 OR BSD-1-Clause", "component": "pkg:cargo/fiat-crypto@0.2.9", "fingerprint": "ab0d3ee1c57f754c8e9f310625a0a15790a9d09e9ce260b33597c5215179f9fd", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT", "component": "pkg:cargo/generic-array@0.14.7", "fingerprint": "4100baa4894d6f4a883eefdffa6f2a3f3f8932c5f513fd1b463bea367b450a8b", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/getrandom@0.2.17", "fingerprint": "e0e248e843d9c977190d92d5e8671ff1fe633094bec2fd78deda8cc2b9ddd913", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/getrandom@0.4.3", "fingerprint": "d34eb7b77676d5fa2a2fb54ccbdcf812b2e95ece08d523b51a8112876b9e9f1b", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/heck@0.5.0", "fingerprint": "f15e7f9397ec2df7435dfa719bd9ed4ec07a7f9b63f63a6b0a1ded192a681875", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/hex@0.4.3", "fingerprint": "0880807ea598985ae4e2b054afdf19681651cc0555d47de97c81bf15d308e1c1", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/is_terminal_polyfill@1.70.2", "fingerprint": "ea5404a32d8fe5f4d7b7c150ae9c418bef44434084f9807f04760b247a1833b6", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/itoa@1.0.18", "fingerprint": "0b71ec3d77ef8519b86e537ff5fac2a87a1e23a1a94302a67b55044db9e38cb7", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/libc@0.2.191", "fingerprint": "9d9973caa830049a9211e8ed805b7dcf7f690659b71db96bf5c4593d7b2ca614", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT", "component": "pkg:cargo/linux-raw-sys@0.12.1", "fingerprint": "773523a49f8cd1a1df7385ad357b411d263186aa04cb952428f2225c95e692a2", "state": "open" }, { "rule_namespace": "license", "rule_id": "Unlicense OR MIT", "component": "pkg:cargo/memchr@2.8.3", "fingerprint": "bf1591437a6f99fe31f560f71637dd4271236182cf3fe1f2a57f545ab377d916", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/once_cell@1.21.4", "fingerprint": "bf0bc6b374808f7c6f3fd08c0a7d63965be10e3ff39ebcd785fcf0d624f8acb0", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/once_cell_polyfill@1.70.2", "fingerprint": "4e122c54241f8e08146c80b9e7aace82ab89579bab281e82a26ef89d5444df44", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/pkcs8@0.10.2", "fingerprint": "dcf79ef96b12576f3da49211f68cd786c965cbcb198cc01af73f3d5426884627", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/ppv-lite86@0.2.21", "fingerprint": "10dbed4778cb7f48cbbaaafe5a6bc2839b58297bde9f43d49cab1a639d5c927c", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/proc-macro2@1.0.107", "fingerprint": "1efce8992cf906cfadfccce323fa0ae6955df07a7460965cebb2a64de11dc74b", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/quote@1.0.47", "fingerprint": "ab119f6f830df1f8f8ca18f18a1b7e8166482bbc79b529b2b01f1ef8d351dc9d", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0 OR LGPL-2.1-or-later", "component": "pkg:cargo/r-efi@6.0.0", "fingerprint": "79b3757623de39a2d1e2cbc582531edb2232c2fedae78ae86266ff0a657e6692", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/rand@0.8.8", "fingerprint": "671dab68d2ada9d89ee44f0464a0e42d22a9c70a7b4862b87c34ef30801c0b99", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/rand_chacha@0.3.1", "fingerprint": "09545686bd0a3e470a4467c0216f6dd076ee18f9ccdc19e939a2a0c8338a130c", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/rand_core@0.6.4", "fingerprint": "5b4629e1e1e878c03195737d30e6f492dc34c5d799ba36c5c04b8192eece897e", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/rustc_version@0.4.1", "fingerprint": "6ed6e8818bc7dbe359728d9d8c8e843d5421d6999b5853490c9cf658d37e59e0", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT", "component": "pkg:cargo/rustix@1.1.5", "fingerprint": "70045df0de7040cc8e3f8920f8dbce683735be2f3505c999933268304eed3d01", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/semver@1.0.28", "fingerprint": "d1f1194d0512ca4c7a020f03728853a518bbdb6719bc6a3a7fc7caeda7f6bdfe", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/serde@1.0.229", "fingerprint": "e1eb81e653a288a15481d6312ab337b18d44e2d94d49f48ac7c8c3ec800a36f5", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/serde_core@1.0.229", "fingerprint": "4086d666853f837b329582f4ada668b8ee6eb0983c029a5fa7eacb4cd7b95ea7", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/serde_derive@1.0.229", "fingerprint": "4077d1047525fda030d22d1788a1c3aa36c56309be7434055545e4a5acc5435e", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/serde_json@1.0.154", "fingerprint": "2dc62cd2e94dfe2e326379ab19b563408bee14cbd79b7c9730b3cf913df685ee", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/sha2@0.10.9", "fingerprint": "8fffdf2de9a098e260c473f456893764abfb0da25c8edf8f28ef1d8b3b483857", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/signature@2.2.0", "fingerprint": "8409e8477eaa8b299157e472284dbb382c65babc4a10856896a0325c741bfc84", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT/Apache-2.0", "component": "pkg:cargo/smallvec@1.6.0", "fingerprint": "cfe55c94dcb01bd350011e0618de53cfeeccc9fedcf5a83cd1bd293d6dedb9f4", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/spki@0.7.3", "fingerprint": "6d2575dae8ab3515840e41bc7dd0289d19fe62354849d325d3f4876f96842a9b", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT", "component": "pkg:cargo/strsim@0.11.1", "fingerprint": "3803c2ce269d8937cb5ca282cfc7de1c38bec3947a7f800554d22c9b6af0b4ff", "state": "open" }, { "rule_namespace": "license", "rule_id": "BSD-3-Clause", "component": "pkg:cargo/subtle@2.6.1", "fingerprint": "b2905d01e0f0b65a50ff69518e7472eced519c61c4f31a958fedf47503a048c5", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/syn@2.0.119", "fingerprint": "ec75866e642d56853e0689f491ec83f5ca076a545a518dbc71cb657872de02ba", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/syn@3.0.9", "fingerprint": "50816f9296ebef556556bbf41104d9aff94dc3c3b78917993d062c356ece3a83", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/tempfile@3.27.0", "fingerprint": "fb7e166af30cc01cf8d9fa7bc5864a37ef17e94f0dcad6591c23c48b4f16a08f", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/typenum@1.20.1", "fingerprint": "64aa3bf3c0ae12c744475d6fbd6062f2bf93df107d8585dce88c78832b669779", "state": "open" }, { "rule_namespace": "license", "rule_id": "(MIT OR Apache-2.0) AND Unicode-3.0", "component": "pkg:cargo/unicode-ident@1.0.27", "fingerprint": "bbfb4a615f30648ef5a8eaf210033aa1baaab14fa0bc9482ac72ae7641a6e466", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/utf8parse@0.2.2", "fingerprint": "af63bfd1ce1cfe636db88caaa115b8843ca67e96b3dd93f523d84771bf40a073", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT/Apache-2.0", "component": "pkg:cargo/version_check@0.9.5", "fingerprint": "99b8a953eefdb41a40a9a077b9032a3b6a395900604be21a32da30658ce61f15", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT", "component": "pkg:cargo/wasi@0.11.1+wasi-snapshot-preview1", "fingerprint": "d9cbaa8941d43791ff495ffbc74a5ec516e48db88243ab8abce575acfe23e028", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/windows-link@0.2.1", "fingerprint": "6a884f0186ee68ed468285b3dee5325fccd3809ca04aafabffd42e588d76a3e0", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/windows-sys@0.61.2", "fingerprint": "169218fdfc26698b6fd1a352d504c2359a123be3ebf7d7b9e0c223406ce70d21", "state": "open" }, { "rule_namespace": "license", "rule_id": "BSD-2-Clause OR Apache-2.0 OR MIT", "component": "pkg:cargo/zerocopy@0.8.63", "fingerprint": "dca0f093c749462f428d68cecfb63c6f0b0443b944e3f93172bc7b85bea835ec", "state": "open" }, { "rule_namespace": "license", "rule_id": "BSD-2-Clause OR Apache-2.0 OR MIT", "component": "pkg:cargo/zerocopy-derive@0.8.63", "fingerprint": "aa23299329debd40f4b88bbe41983c6f0b798920fe0306bdb2bd12307011eff0", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/zeroize@1.9.1", "fingerprint": "ad04bc15c43493a874503f1f4e5228c67653134c34ae698ee27abc3ba5027fed", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT", "component": "pkg:cargo/zmij@1.0.23", "fingerprint": "cf39f12ea4d06ecb2c119337d3ddd79c7cc97ef7e7e900bb4beb745ac2696a0d", "state": "open" } ] } ], "dependency_manifest": { "ecosystem": "rust", "tool": "cargo", "tool_version": "1.99.0", "entries": [ { "name": "anstream", "version": "1.0.0", "purl": "pkg:cargo/anstream@1.0.0", "sha256": "824a212faf96e9acacdbd09febd34438f8f711fb84e09a8916013cd7815ca28d", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "anstyle", "version": "1.0.14", "purl": "pkg:cargo/anstyle@1.0.14", "sha256": "940b3a0ca603d1eade50a4846a2afffd5ef57a9feac2c0e2ec2e14f9ead76000", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "anstyle-parse", "version": "1.0.0", "purl": "pkg:cargo/anstyle-parse@1.0.0", "sha256": "52ce7f38b242319f7cabaa6813055467063ecdc9d355bbb4ce0c68908cd8130e", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "anstyle-query", "version": "1.1.5", "purl": "pkg:cargo/anstyle-query@1.1.5", "sha256": "40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "anstyle-wincon", "version": "3.0.11", "purl": "pkg:cargo/anstyle-wincon@3.0.11", "sha256": "291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "base64ct", "version": "1.8.3", "purl": "pkg:cargo/base64ct@1.8.3", "sha256": "2af50177e190e07a26ab74f8b1efbfe2ef87da2116221318cb1c2e82baf7de06", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "bitflags", "version": "2.13.2", "purl": "pkg:cargo/bitflags@2.13.2", "sha256": "3ded4057c258ba199e2d26386d3af3780957ecaee6c4ef4041c6b4b8b97c0b06", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "block-buffer", "version": "0.10.4", "purl": "pkg:cargo/block-buffer@0.10.4", "sha256": "3078c7629b62d3f0439517fa394996acacc5cbc91c5a20d8c658e77abd503a71", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "cfg-if", "version": "1.0.5", "purl": "pkg:cargo/cfg-if@1.0.5", "sha256": "4e7648175b45a9a48536d676f68d918270699102aa8dab5496df06904c914600", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "clap", "version": "4.6.7", "purl": "pkg:cargo/clap@4.6.7", "sha256": "aa8876b300ab35ba921adea3dfd70157a46249b33f95c9084ae5709785478946", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "clap_builder", "version": "4.6.7", "purl": "pkg:cargo/clap_builder@4.6.7", "sha256": "ec0797fb7aeb1406c84efac526901f7ec3ead2124f946b494e72879d4b54704d", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "clap_derive", "version": "4.6.7", "purl": "pkg:cargo/clap_derive@4.6.7", "sha256": "f9c751b79415d4e559e3d1fcf128e09e720eb673a06d26cf6f392d37d75b66e0", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "clap_lex", "version": "1.1.1", "purl": "pkg:cargo/clap_lex@1.1.1", "sha256": "1c133bc6a41be0d194c306b5506d15e6feeea7b1d6604bd3f8310dfb2ca96486", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "colorchoice", "version": "1.0.5", "purl": "pkg:cargo/colorchoice@1.0.5", "sha256": "1d07550c9036bf2ae0c684c4297d503f838287c83c53686d05370d0e139ae570", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "const-oid", "version": "0.9.6", "purl": "pkg:cargo/const-oid@0.9.6", "sha256": "c2459377285ad874054d797f3ccebf984978aa39129f6eafde5cdc8315b612f8", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "cpufeatures", "version": "0.2.17", "purl": "pkg:cargo/cpufeatures@0.2.17", "sha256": "59ed5838eebb26a2bb2e58f6d5b5316989ae9d08bab10e0e6d103e656d1b0280", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "crypto-common", "version": "0.1.7", "purl": "pkg:cargo/crypto-common@0.1.7", "sha256": "78c8292055d1c1df0cce5d180393dc8cce0abec0a7102adb6c7b1eef6016d60a", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "curve25519-dalek", "version": "4.1.3", "purl": "pkg:cargo/curve25519-dalek@4.1.3", "sha256": "97fb8b7c4503de7d6ae7b42ab72a5a59857b4c937ec27a3d4539dba95b5ab2be", "scope": "runtime", "licenses": [ "BSD-3-Clause" ] }, { "name": "curve25519-dalek-derive", "version": "0.1.1", "purl": "pkg:cargo/curve25519-dalek-derive@0.1.1", "sha256": "f46882e17999c6cc590af592290432be3bce0428cb0d5f8b6715e4dc7b383eb3", "scope": "runtime", "licenses": [ "MIT/Apache-2.0" ] }, { "name": "der", "version": "0.7.10", "purl": "pkg:cargo/der@0.7.10", "sha256": "e7c1832837b905bbfb5101e07cc24c8deddf52f93225eee6ead5f4d63d53ddcb", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "digest", "version": "0.10.7", "purl": "pkg:cargo/digest@0.10.7", "sha256": "9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "ed25519", "version": "2.2.3", "purl": "pkg:cargo/ed25519@2.2.3", "sha256": "115531babc129696a58c64a4fef0a8bf9e9698629fb97e9e40767d235cfbcd53", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "ed25519-dalek", "version": "2.2.0", "purl": "pkg:cargo/ed25519-dalek@2.2.0", "sha256": "70e796c081cee67dc755e1a36a0a172b897fab85fc3f6bc48307991f64e4eca9", "scope": "runtime", "licenses": [ "BSD-3-Clause" ] }, { "name": "errno", "version": "0.3.14", "purl": "pkg:cargo/errno@0.3.14", "sha256": "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "fastrand", "version": "2.5.0", "purl": "pkg:cargo/fastrand@2.5.0", "sha256": "da7c62ceae207dd37ea5b845da6a0696c799f85e97da1ab5b7910be3c1c80223", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "fiat-crypto", "version": "0.2.9", "purl": "pkg:cargo/fiat-crypto@0.2.9", "sha256": "28dea519a9695b9977216879a3ebfddf92f1c08c05d984f8996aecd6ecdc811d", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0 OR BSD-1-Clause" ] }, { "name": "generic-array", "version": "0.14.7", "purl": "pkg:cargo/generic-array@0.14.7", "sha256": "85649ca51fd72272d7821adaf274ad91c288277713d9c18820d8499a7ff69e9a", "scope": "runtime", "licenses": [ "MIT" ] }, { "name": "getrandom", "version": "0.2.17", "purl": "pkg:cargo/getrandom@0.2.17", "sha256": "ff2abc00be7fca6ebc474524697ae276ad847ad0a6b3faa4bcb027e9a4614ad0", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "getrandom", "version": "0.4.3", "purl": "pkg:cargo/getrandom@0.4.3", "sha256": "300e883d756b2e4ec94e02791f39b04b522276138852cfc41d9fb7e904106099", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "heck", "version": "0.5.0", "purl": "pkg:cargo/heck@0.5.0", "sha256": "2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "hex", "version": "0.4.3", "purl": "pkg:cargo/hex@0.4.3", "sha256": "7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "is_terminal_polyfill", "version": "1.70.2", "purl": "pkg:cargo/is_terminal_polyfill@1.70.2", "sha256": "a6cb138bb79a146c1bd460005623e142ef0181e3d0219cb493e02f7d08a35695", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "itoa", "version": "1.0.18", "purl": "pkg:cargo/itoa@1.0.18", "sha256": "8f42a60cbdf9a97f5d2305f08a87dc4e09308d1276d28c869c684d7777685682", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "libc", "version": "0.2.191", "purl": "pkg:cargo/libc@0.2.191", "sha256": "65cd87c9a6d60536580b316ad985726104730a5151c99845f2490428ef91240a", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "linux-raw-sys", "version": "0.12.1", "purl": "pkg:cargo/linux-raw-sys@0.12.1", "sha256": "32a66949e030da00e8c7d4434b251670a91556f4144941d37452769c25d58a53", "scope": "runtime", "licenses": [ "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT" ] }, { "name": "memchr", "version": "2.8.3", "purl": "pkg:cargo/memchr@2.8.3", "sha256": "cf8baf1c55e62ffcace7a9f06f4bd9cd3f0c4beb022d3b367256b91b87513d98", "scope": "runtime", "licenses": [ "Unlicense OR MIT" ] }, { "name": "once_cell", "version": "1.21.4", "purl": "pkg:cargo/once_cell@1.21.4", "sha256": "9f7c3e4beb33f85d45ae3e3a1792185706c8e16d043238c593331cc7cd313b50", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "once_cell_polyfill", "version": "1.70.2", "purl": "pkg:cargo/once_cell_polyfill@1.70.2", "sha256": "384b8ab6d37215f3c5301a95a4accb5d64aa607f1fcb26a11b5303878451b4fe", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "pkcs8", "version": "0.10.2", "purl": "pkg:cargo/pkcs8@0.10.2", "sha256": "f950b2377845cebe5cf8b5165cb3cc1a5e0fa5cfa3e1f7f55707d8fd82e0a7b7", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "ppv-lite86", "version": "0.2.21", "purl": "pkg:cargo/ppv-lite86@0.2.21", "sha256": "85eae3c4ed2f50dcfe72643da4befc30deadb458a9b590d720cde2f2b1e97da9", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "proc-macro2", "version": "1.0.107", "purl": "pkg:cargo/proc-macro2@1.0.107", "sha256": "985e7ec9bb745e6ce6535b544d84d6cd6f7ad8bd711c398938ae983b91a766d9", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "quote", "version": "1.0.47", "purl": "pkg:cargo/quote@1.0.47", "sha256": "1fbf4db142a473a8d80c26bbf18454ed458bf8d26c8219c331daecfdbd079001", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "r-efi", "version": "6.0.0", "purl": "pkg:cargo/r-efi@6.0.0", "sha256": "f8dcc9c7d52a811697d2151c701e0d08956f92b0e24136cf4cf27b57a6a0d9bf", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0 OR LGPL-2.1-or-later" ] }, { "name": "rand", "version": "0.8.8", "purl": "pkg:cargo/rand@0.8.8", "sha256": "e058c7de0b26af77780c769414d6257830bb240f3c38477dbc2c16e5f54d6d4c", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "rand_chacha", "version": "0.3.1", "purl": "pkg:cargo/rand_chacha@0.3.1", "sha256": "e6c10a63a0fa32252be49d21e7709d4d4baf8d231c2dbce1eaa8141b9b127d88", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "rand_core", "version": "0.6.4", "purl": "pkg:cargo/rand_core@0.6.4", "sha256": "ec0be4795e2f6a28069bec0b5ff3e2ac9bafc99e6a9a7dc3547996c5c816922c", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "rustc_version", "version": "0.4.1", "purl": "pkg:cargo/rustc_version@0.4.1", "sha256": "cfcb3a22ef46e85b45de6ee7e79d063319ebb6594faafcf1c225ea92ab6e9b92", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "rustix", "version": "1.1.5", "purl": "pkg:cargo/rustix@1.1.5", "sha256": "891efababe418670775f199f0d233d84843c227a0949a883ce15b37c78d6629d", "scope": "runtime", "licenses": [ "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT" ] }, { "name": "semver", "version": "1.0.28", "purl": "pkg:cargo/semver@1.0.28", "sha256": "8a7852d02fc848982e0c167ef163aaff9cd91dc640ba85e263cb1ce46fae51cd", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "serde", "version": "1.0.229", "purl": "pkg:cargo/serde@1.0.229", "sha256": "4148590afebada386688f18773da617792bf2ef03ffc1e4cbd2b1d45b023e0ba", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "serde_core", "version": "1.0.229", "purl": "pkg:cargo/serde_core@1.0.229", "sha256": "67dca2c9c51e58a4791a4b1ed58308b39c64224d349a935ab5039aa360942a48", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "serde_derive", "version": "1.0.229", "purl": "pkg:cargo/serde_derive@1.0.229", "sha256": "e7a5d71263a5a7d47b41f6b3f06ba276f10cc18b0931f1799f710578e2309348", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "serde_json", "version": "1.0.154", "purl": "pkg:cargo/serde_json@1.0.154", "sha256": "e7e9cc8b1b85264074fbcc02a88680c4096b1e47df8f739dceb03bf482f04bd6", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "sha2", "version": "0.10.9", "purl": "pkg:cargo/sha2@0.10.9", "sha256": "a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "signature", "version": "2.2.0", "purl": "pkg:cargo/signature@2.2.0", "sha256": "77549399552de45a898a580c1b41d445bf730df867cc44e6c0233bbc4b8329de", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "smallvec", "version": "1.6.0", "purl": "pkg:cargo/smallvec@1.6.0", "sha256": "1a55ca5f3b68e41c979bf8c46a6f1da892ca4db8f94023ce0bd32407573b1ac0", "scope": "runtime", "licenses": [ "MIT/Apache-2.0" ] }, { "name": "spki", "version": "0.7.3", "purl": "pkg:cargo/spki@0.7.3", "sha256": "d91ed6c858b01f942cd56b37a94b3e0a1798290327d1236e4d9cf4eaca44d29d", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "strsim", "version": "0.11.1", "purl": "pkg:cargo/strsim@0.11.1", "sha256": "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f", "scope": "runtime", "licenses": [ "MIT" ] }, { "name": "subtle", "version": "2.6.1", "purl": "pkg:cargo/subtle@2.6.1", "sha256": "13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292", "scope": "runtime", "licenses": [ "BSD-3-Clause" ] }, { "name": "syn", "version": "2.0.119", "purl": "pkg:cargo/syn@2.0.119", "sha256": "872831b642d1a07999a962a351ed35b955ea2cfc8f3862091e2a240a84f17297", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "syn", "version": "3.0.9", "purl": "pkg:cargo/syn@3.0.9", "sha256": "d78c8dee4c7bf0e14673097256fed6142ce9d3b85a408189d07482442145823b", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "tempfile", "version": "3.27.0", "purl": "pkg:cargo/tempfile@3.27.0", "sha256": "32497e9a4c7b38532efcdebeef879707aa9f794296a4f0244f6f69e9bc8574bd", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "typenum", "version": "1.20.1", "purl": "pkg:cargo/typenum@1.20.1", "sha256": "b6f5e870be6c3b371b77fe0ee0bafb859fa4964b4404c27de1d380043c4dda20", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "unicode-ident", "version": "1.0.27", "purl": "pkg:cargo/unicode-ident@1.0.27", "sha256": "a2c754d6c33795a1c324727428e5a7dedb5b06195f9890bdbcba760d3e246563", "scope": "runtime", "licenses": [ "(MIT OR Apache-2.0) AND Unicode-3.0" ] }, { "name": "utf8parse", "version": "0.2.2", "purl": "pkg:cargo/utf8parse@0.2.2", "sha256": "06abde3611657adf66d383f00b093d7faecc7fa57071cce2578660c9f1010821", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "version_check", "version": "0.9.5", "purl": "pkg:cargo/version_check@0.9.5", "sha256": "0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a", "scope": "runtime", "licenses": [ "MIT/Apache-2.0" ] }, { "name": "wasi", "version": "0.11.1+wasi-snapshot-preview1", "purl": "pkg:cargo/wasi@0.11.1+wasi-snapshot-preview1", "sha256": "ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b", "scope": "runtime", "licenses": [ "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT" ] }, { "name": "windows-link", "version": "0.2.1", "purl": "pkg:cargo/windows-link@0.2.1", "sha256": "f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "windows-sys", "version": "0.61.2", "purl": "pkg:cargo/windows-sys@0.61.2", "sha256": "ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "zerocopy", "version": "0.8.63", "purl": "pkg:cargo/zerocopy@0.8.63", "sha256": "e5fe1f8f1b06191a00962174c61aa5005e0bb391a6d80d07e24d115c01a92ed8", "scope": "runtime", "licenses": [ "BSD-2-Clause OR Apache-2.0 OR MIT" ] }, { "name": "zerocopy-derive", "version": "0.8.63", "purl": "pkg:cargo/zerocopy-derive@0.8.63", "sha256": "863ad3ac83293fb4d740aedbfdc9240dd8d1a50c1099acd76ce80ce7c7230c7f", "scope": "runtime", "licenses": [ "BSD-2-Clause OR Apache-2.0 OR MIT" ] }, { "name": "zeroize", "version": "1.9.1", "purl": "pkg:cargo/zeroize@1.9.1", "sha256": "e13084392c5e4bc371903e2935a5eaeed24905a7511356b883835e18a78f6879", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "zmij", "version": "1.0.23", "purl": "pkg:cargo/zmij@1.0.23", "sha256": "29666d0abbfad1e3dc4dcf6144730dd3a3ab225bbbdac83319345b1b44ccfc1b", "scope": "runtime", "licenses": [ "MIT" ] } ] } } }, { "attempt_no": 2, "verdict": "passed", "evidence_sha256": "9642f6dda9c64f9021ee6ff01f996a547e57011cb9529c8c5be1c522c0674599", "env_sha256": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "wall_seconds": 29.184302124, "result": { "job_id": "520d2155-f6c4-43c6-953c-1829b6dd5cc3", "verdict": "passed", "criteria": [ { "id": "build", "required": true, "passed": true, "commands": [ { "argv": [ "cargo", "build", "--workspace", "--release" ], "exit_code": 0, "timed_out": false, "duration_seconds": 18.887602854, "tail": " Compiling proc-macro2 v1.0.107\n Compiling quote v1.0.47\n Compiling unicode-ident v1.0.27\n Compiling version_check v0.9.5\n Compiling libc v0.2.191\n Compiling typenum v1.20.1\n Compiling cfg-if v1.0.5\n Compiling semver v1.0.28\n Compiling serde_core v1.0.229\n Compiling zerocopy v0.8.63\n Compiling utf8parse v0.2.2\n Compiling zmij v1.0.23\n Compiling cpufeatures v0.2.17\n Compiling is_terminal_polyfill v1.70.2\n Compiling zeroize v1.9.1\n Compiling colorchoice v1.0.5\n Compiling anstyle-query v1.1.5\n Compiling anstyle v1.0.14\n Compiling serde v1.0.229\n Compiling subtle v2.6.1\n Compiling serde_json v1.0.154\n Compiling signature v2.2.0\n Compiling heck v0.5.0\n Compiling anstyle-parse v1.0.0\n Compiling strsim v0.11.1\n Compiling itoa v1.0.18\n Compiling clap_lex v1.1.1\n Compiling memchr v2.8.3\n Compiling ed25519 v2.2.3\n Compiling smallvec v1.6.0\n Compiling hex v0.4.3\n Compiling anstream v1.0.0\n Compiling rustc_version v0.4.1\n Compiling generic-array v0.14.7\n Compiling curve25519-dalek v4.1.3\n Compiling clap_builder v4.6.7\n Compiling syn v3.0.9\n Compiling syn v2.0.119\n Compiling block-buffer v0.10.4\n Compiling crypto-common v0.1.7\n Compiling getrandom v0.2.17\n Compiling digest v0.10.7\n Compiling rand_core v0.6.4\n Compiling sha2 v0.10.9\n Compiling curve25519-dalek-derive v0.1.1\n Compiling serde_derive v1.0.229\n Compiling clap_derive v4.6.7\n Compiling ppv-lite86 v0.2.21\n Compiling rand_chacha v0.3.1\n Compiling clap v4.6.7\n Compiling ed25519-dalek v2.2.0\n Compiling rand v0.8.8\n Compiling falsegreen-ledger-core v0.1.0 (/var/lib/falsegreen/work/520d2155-f6c4-43c6-953c-1829b6dd5cc3/run/crates/falsegreen-ledger-core)\n Compiling falsegreen-ledger v0.1.0 (/var/lib/falsegreen/work/520d2155-f6c4-43c6-953c-1829b6dd5cc3/run/crates/falsegreen-ledger)\n Finished `release` profile [optimized] target(s) in 18.84s\n" } ] }, { "id": "tests", "required": true, "passed": true, "commands": [ { "argv": [ "cargo", "test", "--workspace" ], "exit_code": 0, "timed_out": false, "duration_seconds": 6.2097008, "tail": "\nrunning 0 tests\n\ntest result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s\n\n\nrunning 10 tests\ntest the_cli_help_lists_every_command ... ok\ntest a_corrupt_shard_exits_corrupt ... ok\ntest a_policy_violation_exits_policy ... ok\ntest the_export_import_roundtrip_is_hash_stable ... ok\ntest a_tampered_prev_hash_is_detected ... ok\ntest the_full_lifecycle_verifies_clean ... ok\ntest a_tampered_event_field_is_detected ... ok\ntest a_tampered_seal_signature_is_detected ... ok\ntest a_tampered_cross_shard_link_is_detected ... ok\ntest compaction_keeps_the_ledger_verifiable ... ok\n\ntest result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.21s\n\n\nrunning 41 tests\ntest chain::tests::genesis_record_is_deterministic ... ok\ntest chain::tests::prev_hash_is_committed ... ok\ntest chain::tests::hash_changes_when_any_event_field_changes ... ok\ntest chain::tests::sequence_gap_fails_link_check ... ok\ntest chain::tests::tampered_record_fails_hash_check ... ok\ntest chain::tests::unknown_fields_rejected_in_record ... ok\ntest event::tests::canonical_is_sorted_and_stable ... ok\ntest event::tests::context_null_is_canonicalized_as_null_and_rejected ... ok\ntest event::tests::optionals_omit_none_in_canonical_form ... ok\ntest event::tests::canonical_round_trips_through_json_with_shuffled_keys ... ok\ntest event::tests::validation_rejects_empty_required_fields ... ok\ntest event::tests::unknown_fields_are_rejected ... ok\ntest event::tests::validation_rejects_bad_timestamp ... ok\ntest integrity::tests::merkle_root_rejects_empty_and_non_hex ... ok\ntest integrity::tests::a_lone_leaf_is_its_own_root_and_odd_leaves_pair_with_themselves ... ok\ntest policy::tests::an_event_can_violate_several_rules ... ok\ntest policy::tests::deny_rule_fires_only_on_a_match ... ok\ntest policy::tests::deny_rule_fires_on_match ... ok\ntest policy::tests::require_outcome_enforces_the_decision ... ok\ntest policy::tests::validation_rejects_malformed_policies ... ok\ntest integrity::tests::malformed_keys_and_signatures_are_rejected ... ok\ntest integrity::tests::merkle_root_is_deterministic_and_order_sensitive ... ok\ntest integrity::tests::the_trusted_key_must_match_the_embedded_key ... ok\ntest store::tests::empty_append_is_a_noop ... ok\ntest store::tests::corrupt_line_is_a_parse_error ... ok\ntest store::tests::invalid_event_rejected ... ok\ntest store::tests::init_and_append_continues_from_genesis ... ok\ntest compact::tests::compaction_refuses_unsealed_empty_and_already_compacted ... ok\ntest verify::tests::the_report_is_canonical_json ... ok\ntest store::tests::seal_count_mismatch_rejected ... ok\ntest store::tests::append_after_seal_starts_new_shard_linked_to_merkle_root ... ok\ntest verify::tests::a_sequence_gap_is_caught ... ok\ntest verify::tests::policy_violations_land_in_the_report ... ok\ntest verify::tests::a_clean_ledger_verifies ... ok\ntest verify::tests::a_tampered_record_hash_cascades_downstream ... ok\ntest integrity::tests::sign_and_verify_roundtrip ... ok\ntest compact::tests::the_compacted_shard_verifies_and_reports_the_source_root ... ok\ntest verify::tests::a_bad_seal_signature_is_caught ... ok\ntest compact::tests::the_chain_continues_from_the_original_root_after_compaction ... ok\ntest verify::tests::a_tampered_event_is_caught ... ok\ntest integrity::tests::a_tampered_seal_field_fails_verification ... ok\n\ntest result: ok. 41 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s\n\n\nrunning 0 tests\n\ntest result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s\n\n Compiling proc-macro2 v1.0.107\n Compiling quote v1.0.47\n Compiling unicode-ident v1.0.27\n Compiling cfg-if v1.0.5\n Compiling libc v0.2.191\n Compiling version_check v0.9.5\n Compiling typenum v1.20.1\n Compiling semver v1.0.28\n Compiling serde_core v1.0.229\n Compiling zerocopy v0.8.63\n Compiling cpufeatures v0.2.17\n Compiling zmij v1.0.23\n Compiling zeroize v1.9.1\n Compiling serde_json v1.0.154\n Compiling subtle v2.6.1\n Compiling serde v1.0.229\n Compiling signature v2.2.0\n Compiling itoa v1.0.18\n Compiling getrandom v0.4.3\n Compiling memchr v2.8.3\n Compiling rustix v1.1.5\n Compiling utf8parse v0.2.2\n Compiling linux-raw-sys v0.12.1\n Compiling is_terminal_polyfill v1.70.2\n Compiling ed25519 v2.2.3\n Compiling anstyle-parse v1.0.0\n Compiling smallvec v1.6.0\n Compiling colorchoice v1.0.5\n Compiling anstyle-query v1.1.5\n Compiling anstyle v1.0.14\n Compiling hex v0.4.3\n Compiling rustc_version v0.4.1\n Compiling bitflags v2.13.2\n Compiling once_cell v1.21.4\n Compiling heck v0.5.0\n Compiling generic-array v0.14.7\n Compiling strsim v0.11.1\n Compiling clap_lex v1.1.1\n Compiling fastrand v2.5.0\n Compiling anstream v1.0.0\n Compiling curve25519-dalek v4.1.3\n Compiling clap_builder v4.6.7\n Compiling syn v3.0.9\n Compiling syn v2.0.119\n Compiling block-buffer v0.10.4\n Compiling crypto-common v0.1.7\n Compiling digest v0.10.7\n Compiling getrandom v0.2.17\n Compiling sha2 v0.10.9\n Compiling rand_core v0.6.4\n Compiling tempfile v3.27.0\n Compiling curve25519-dalek-derive v0.1.1\n Compiling serde_derive v1.0.229\n Compiling clap_derive v4.6.7\n Compiling ppv-lite86 v0.2.21\n Compiling rand_chacha v0.3.1\n Compiling clap v4.6.7\n Compiling ed25519-dalek v2.2.0\n Compiling rand v0.8.8\n Compiling falsegreen-ledger-core v0.1.0 (/var/lib/falsegreen/work/520d2155-f6c4-43c6-953c-1829b6dd5cc3/run/crates/falsegreen-ledger-core)\n Compiling falsegreen-ledger v0.1.0 (/var/lib/falsegreen/work/520d2155-f6c4-43c6-953c-1829b6dd5cc3/run/crates/falsegreen-ledger)\n Finished `test` profile [unoptimized + debuginfo] target(s) in 5.82s\n Running unittests src/main.rs (target/debug/deps/falsegreen_ledger-ab76082b4462b0b1)\n Running tests/integration.rs (target/debug/deps/integration-22dc6beef3e29bb7)\n Running unittests src/lib.rs (target/debug/deps/falsegreen_ledger_core-d00132f4be88bc4a)\n Doc-tests falsegreen_ledger_core\n" } ] }, { "id": "lint", "required": false, "passed": true, "commands": [ { "argv": [ "cargo", "clippy", "--workspace", "--all-targets", "--", "-D", "warnings" ], "exit_code": 0, "timed_out": false, "duration_seconds": 3.800509168, "tail": " Checking cfg-if v1.0.5\n Checking typenum v1.20.1\n Checking cpufeatures v0.2.17\n Checking subtle v2.6.1\n Checking utf8parse v0.2.2\n Checking signature v2.2.0\n Checking zeroize v1.9.1\n Checking is_terminal_polyfill v1.70.2\n Checking colorchoice v1.0.5\n Checking anstyle-query v1.1.5\n Checking itoa v1.0.18\n Checking libc v0.2.191\n Checking serde_core v1.0.229\n Checking zerocopy v0.8.63\n Checking zmij v1.0.23\n Checking anstyle v1.0.14\n Checking memchr v2.8.3\n Checking strsim v0.11.1\n Checking clap_lex v1.1.1\n Checking bitflags v2.13.2\n Checking smallvec v1.6.0\n Checking linux-raw-sys v0.12.1\n Checking hex v0.4.3\n Checking anstyle-parse v1.0.0\n Checking once_cell v1.21.4\n Checking fastrand v2.5.0\n Checking ed25519 v2.2.3\n Checking anstream v1.0.0\n Checking clap_builder v4.6.7\n Checking rustix v1.1.5\n Checking generic-array v0.14.7\n Checking getrandom v0.2.17\n Checking getrandom v0.4.3\n Checking rand_core v0.6.4\n Checking block-buffer v0.10.4\n Checking crypto-common v0.1.7\n Checking digest v0.10.7\n Checking sha2 v0.10.9\n Checking curve25519-dalek v4.1.3\n Checking clap v4.6.7\n Checking serde_json v1.0.154\n Checking serde v1.0.229\n Checking tempfile v3.27.0\n Checking ed25519-dalek v2.2.0\n Checking falsegreen-ledger-core v0.1.0 (/var/lib/falsegreen/work/520d2155-f6c4-43c6-953c-1829b6dd5cc3/run/crates/falsegreen-ledger-core)\n Checking ppv-lite86 v0.2.21\n Checking rand_chacha v0.3.1\n Checking rand v0.8.8\n Checking falsegreen-ledger v0.1.0 (/var/lib/falsegreen/work/520d2155-f6c4-43c6-953c-1829b6dd5cc3/run/crates/falsegreen-ledger)\n Finished `dev` profile [unoptimized + debuginfo] target(s) in 3.73s\n" }, { "argv": [ "cargo", "fmt", "--all", "--check" ], "exit_code": 0, "timed_out": false, "duration_seconds": 0.111435661, "tail": "" } ] } ], "wall_seconds": 29.184302124, "error": null, "env_sha256": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "environment": { "schema": 1, "eco": "rust", "toolchain": "rustc 1.99.0 (rustc)", "toolchain_version": "1.99.0", "fingerprint": "cb72048928286df9d194d6d7356350b373cefcc81d7ee1899729b6ebe14c8817", "artifacts": [ { "name": "anstream", "version": "1.0.0", "sha256": "824a212faf96e9acacdbd09febd34438f8f711fb84e09a8916013cd7815ca28d" }, { "name": "anstyle", "version": "1.0.14", "sha256": "940b3a0ca603d1eade50a4846a2afffd5ef57a9feac2c0e2ec2e14f9ead76000" }, { "name": "anstyle-parse", "version": "1.0.0", "sha256": "52ce7f38b242319f7cabaa6813055467063ecdc9d355bbb4ce0c68908cd8130e" }, { "name": "anstyle-query", "version": "1.1.5", "sha256": "40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc" }, { "name": "anstyle-wincon", "version": "3.0.11", "sha256": "291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d" }, { "name": "base64ct", "version": "1.8.3", "sha256": "2af50177e190e07a26ab74f8b1efbfe2ef87da2116221318cb1c2e82baf7de06" }, { "name": "bitflags", "version": "2.13.2", "sha256": "3ded4057c258ba199e2d26386d3af3780957ecaee6c4ef4041c6b4b8b97c0b06" }, { "name": "block-buffer", "version": "0.10.4", "sha256": "3078c7629b62d3f0439517fa394996acacc5cbc91c5a20d8c658e77abd503a71" }, { "name": "cfg-if", "version": "1.0.5", "sha256": "4e7648175b45a9a48536d676f68d918270699102aa8dab5496df06904c914600" }, { "name": "clap", "version": "4.6.7", "sha256": "aa8876b300ab35ba921adea3dfd70157a46249b33f95c9084ae5709785478946" }, { "name": "clap_builder", "version": "4.6.7", "sha256": "ec0797fb7aeb1406c84efac526901f7ec3ead2124f946b494e72879d4b54704d" }, { "name": "clap_derive", "version": "4.6.7", "sha256": "f9c751b79415d4e559e3d1fcf128e09e720eb673a06d26cf6f392d37d75b66e0" }, { "name": "clap_lex", "version": "1.1.1", "sha256": "1c133bc6a41be0d194c306b5506d15e6feeea7b1d6604bd3f8310dfb2ca96486" }, { "name": "colorchoice", "version": "1.0.5", "sha256": "1d07550c9036bf2ae0c684c4297d503f838287c83c53686d05370d0e139ae570" }, { "name": "const-oid", "version": "0.9.6", "sha256": "c2459377285ad874054d797f3ccebf984978aa39129f6eafde5cdc8315b612f8" }, { "name": "cpufeatures", "version": "0.2.17", "sha256": "59ed5838eebb26a2bb2e58f6d5b5316989ae9d08bab10e0e6d103e656d1b0280" }, { "name": "crypto-common", "version": "0.1.7", "sha256": "78c8292055d1c1df0cce5d180393dc8cce0abec0a7102adb6c7b1eef6016d60a" }, { "name": "curve25519-dalek", "version": "4.1.3", "sha256": "97fb8b7c4503de7d6ae7b42ab72a5a59857b4c937ec27a3d4539dba95b5ab2be" }, { "name": "curve25519-dalek-derive", "version": "0.1.1", "sha256": "f46882e17999c6cc590af592290432be3bce0428cb0d5f8b6715e4dc7b383eb3" }, { "name": "der", "version": "0.7.10", "sha256": "e7c1832837b905bbfb5101e07cc24c8deddf52f93225eee6ead5f4d63d53ddcb" }, { "name": "digest", "version": "0.10.7", "sha256": "9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292" }, { "name": "ed25519", "version": "2.2.3", "sha256": "115531babc129696a58c64a4fef0a8bf9e9698629fb97e9e40767d235cfbcd53" }, { "name": "ed25519-dalek", "version": "2.2.0", "sha256": "70e796c081cee67dc755e1a36a0a172b897fab85fc3f6bc48307991f64e4eca9" }, { "name": "errno", "version": "0.3.14", "sha256": "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb" }, { "name": "fastrand", "version": "2.5.0", "sha256": "da7c62ceae207dd37ea5b845da6a0696c799f85e97da1ab5b7910be3c1c80223" }, { "name": "fiat-crypto", "version": "0.2.9", "sha256": "28dea519a9695b9977216879a3ebfddf92f1c08c05d984f8996aecd6ecdc811d" }, { "name": "generic-array", "version": "0.14.7", "sha256": "85649ca51fd72272d7821adaf274ad91c288277713d9c18820d8499a7ff69e9a" }, { "name": "getrandom", "version": "0.2.17", "sha256": "ff2abc00be7fca6ebc474524697ae276ad847ad0a6b3faa4bcb027e9a4614ad0" }, { "name": "getrandom", "version": "0.4.3", "sha256": "300e883d756b2e4ec94e02791f39b04b522276138852cfc41d9fb7e904106099" }, { "name": "heck", "version": "0.5.0", "sha256": "2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea" }, { "name": "hex", "version": "0.4.3", "sha256": "7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70" }, { "name": "is_terminal_polyfill", "version": "1.70.2", "sha256": "a6cb138bb79a146c1bd460005623e142ef0181e3d0219cb493e02f7d08a35695" }, { "name": "itoa", "version": "1.0.18", "sha256": "8f42a60cbdf9a97f5d2305f08a87dc4e09308d1276d28c869c684d7777685682" }, { "name": "libc", "version": "0.2.191", "sha256": "65cd87c9a6d60536580b316ad985726104730a5151c99845f2490428ef91240a" }, { "name": "linux-raw-sys", "version": "0.12.1", "sha256": "32a66949e030da00e8c7d4434b251670a91556f4144941d37452769c25d58a53" }, { "name": "memchr", "version": "2.8.3", "sha256": "cf8baf1c55e62ffcace7a9f06f4bd9cd3f0c4beb022d3b367256b91b87513d98" }, { "name": "once_cell", "version": "1.21.4", "sha256": "9f7c3e4beb33f85d45ae3e3a1792185706c8e16d043238c593331cc7cd313b50" }, { "name": "once_cell_polyfill", "version": "1.70.2", "sha256": "384b8ab6d37215f3c5301a95a4accb5d64aa607f1fcb26a11b5303878451b4fe" }, { "name": "pkcs8", "version": "0.10.2", "sha256": "f950b2377845cebe5cf8b5165cb3cc1a5e0fa5cfa3e1f7f55707d8fd82e0a7b7" }, { "name": "ppv-lite86", "version": "0.2.21", "sha256": "85eae3c4ed2f50dcfe72643da4befc30deadb458a9b590d720cde2f2b1e97da9" }, { "name": "proc-macro2", "version": "1.0.107", "sha256": "985e7ec9bb745e6ce6535b544d84d6cd6f7ad8bd711c398938ae983b91a766d9" }, { "name": "quote", "version": "1.0.47", "sha256": "1fbf4db142a473a8d80c26bbf18454ed458bf8d26c8219c331daecfdbd079001" }, { "name": "r-efi", "version": "6.0.0", "sha256": "f8dcc9c7d52a811697d2151c701e0d08956f92b0e24136cf4cf27b57a6a0d9bf" }, { "name": "rand", "version": "0.8.8", "sha256": "e058c7de0b26af77780c769414d6257830bb240f3c38477dbc2c16e5f54d6d4c" }, { "name": "rand_chacha", "version": "0.3.1", "sha256": "e6c10a63a0fa32252be49d21e7709d4d4baf8d231c2dbce1eaa8141b9b127d88" }, { "name": "rand_core", "version": "0.6.4", "sha256": "ec0be4795e2f6a28069bec0b5ff3e2ac9bafc99e6a9a7dc3547996c5c816922c" }, { "name": "rustc_version", "version": "0.4.1", "sha256": "cfcb3a22ef46e85b45de6ee7e79d063319ebb6594faafcf1c225ea92ab6e9b92" }, { "name": "rustix", "version": "1.1.5", "sha256": "891efababe418670775f199f0d233d84843c227a0949a883ce15b37c78d6629d" }, { "name": "semver", "version": "1.0.28", "sha256": "8a7852d02fc848982e0c167ef163aaff9cd91dc640ba85e263cb1ce46fae51cd" }, { "name": "serde", "version": "1.0.229", "sha256": "4148590afebada386688f18773da617792bf2ef03ffc1e4cbd2b1d45b023e0ba" }, { "name": "serde_core", "version": "1.0.229", "sha256": "67dca2c9c51e58a4791a4b1ed58308b39c64224d349a935ab5039aa360942a48" }, { "name": "serde_derive", "version": "1.0.229", "sha256": "e7a5d71263a5a7d47b41f6b3f06ba276f10cc18b0931f1799f710578e2309348" }, { "name": "serde_json", "version": "1.0.154", "sha256": "e7e9cc8b1b85264074fbcc02a88680c4096b1e47df8f739dceb03bf482f04bd6" }, { "name": "sha2", "version": "0.10.9", "sha256": "a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283" }, { "name": "signature", "version": "2.2.0", "sha256": "77549399552de45a898a580c1b41d445bf730df867cc44e6c0233bbc4b8329de" }, { "name": "smallvec", "version": "1.6.0", "sha256": "1a55ca5f3b68e41c979bf8c46a6f1da892ca4db8f94023ce0bd32407573b1ac0" }, { "name": "spki", "version": "0.7.3", "sha256": "d91ed6c858b01f942cd56b37a94b3e0a1798290327d1236e4d9cf4eaca44d29d" }, { "name": "strsim", "version": "0.11.1", "sha256": "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f" }, { "name": "subtle", "version": "2.6.1", "sha256": "13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292" }, { "name": "syn", "version": "2.0.119", "sha256": "872831b642d1a07999a962a351ed35b955ea2cfc8f3862091e2a240a84f17297" }, { "name": "syn", "version": "3.0.9", "sha256": "d78c8dee4c7bf0e14673097256fed6142ce9d3b85a408189d07482442145823b" }, { "name": "tempfile", "version": "3.27.0", "sha256": "32497e9a4c7b38532efcdebeef879707aa9f794296a4f0244f6f69e9bc8574bd" }, { "name": "typenum", "version": "1.20.1", "sha256": "b6f5e870be6c3b371b77fe0ee0bafb859fa4964b4404c27de1d380043c4dda20" }, { "name": "unicode-ident", "version": "1.0.27", "sha256": "a2c754d6c33795a1c324727428e5a7dedb5b06195f9890bdbcba760d3e246563" }, { "name": "utf8parse", "version": "0.2.2", "sha256": "06abde3611657adf66d383f00b093d7faecc7fa57071cce2578660c9f1010821" }, { "name": "version_check", "version": "0.9.5", "sha256": "0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a" }, { "name": "wasi", "version": "0.11.1+wasi-snapshot-preview1", "sha256": "ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b" }, { "name": "windows-link", "version": "0.2.1", "sha256": "f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5" }, { "name": "windows-sys", "version": "0.61.2", "sha256": "ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc" }, { "name": "zerocopy", "version": "0.8.63", "sha256": "e5fe1f8f1b06191a00962174c61aa5005e0bb391a6d80d07e24d115c01a92ed8" }, { "name": "zerocopy-derive", "version": "0.8.63", "sha256": "863ad3ac83293fb4d740aedbfdc9240dd8d1a50c1099acd76ce80ce7c7230c7f" }, { "name": "zeroize", "version": "1.9.1", "sha256": "e13084392c5e4bc371903e2935a5eaeed24905a7511356b883835e18a78f6879" }, { "name": "zmij", "version": "1.0.23", "sha256": "29666d0abbfad1e3dc4dcf6144730dd3a3ab225bbbdac83319345b1b44ccfc1b" } ] }, "witness_invocations": [ { "tool": "osv-scanner", "version": "2.7.0", "binary_digest": "160c6253e2922e9e0a6a9771c5c4c40a4b3c6090b34a3cdd5e80c96cc2e4218b", "config_digest": "0c3d6fef8ea59e1de5610e13ccb1035a7232318288aaed517ee2feec9402455a", "invocation_digest": "24f80c6175448be9efb1f53a223fcafbf51407586dfe0ddec0fbb02d75de75cb", "input_subject_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "81c474ee9e32281e85a443e152eed7008437c0b75bd32bf7837120d228cb99b8", "normalized_evidence_digest": "a01c9fbe2e0f89ba51e98a9f9adb3e2221181b02f05426888a8e8e1d4c6f99a0", "limitations": [ "osv-scanner checks registry-based ecosystems (crates.io in 0.6.0); git-sourced dependencies (lean [[require]], gpr) have no advisory database — Insufficient Evidence for them, never a silent pass" ], "evidence_class": "dependency_vulnerability", "observed_at": "2026-10-21T17:54:35.532304241+00:00", "findings": [ { "rule_namespace": "osv", "rule_id": "RUSTSEC-2021-0003", "severity": "high", "component": "pkg:crates.io/smallvec@1.6.0", "fingerprint": "33785582b0bffd15e2724184577c08f01121749519544d60019637759fc0278a", "state": "open" }, { "rule_namespace": "osv", "rule_id": "GHSA-43w2-9j62-hq99", "severity": "high", "component": "pkg:crates.io/smallvec@1.6.0", "fingerprint": "ba50c1802e51ced38a54ef5d84d292c2efbb3b72e0751e638b8539d27f3d1ebb", "state": "open" } ] }, { "tool": "semgrep", "version": "1.181.0", "binary_digest": "c29de7c43986faa3c3ca5a8acf1d115811e15ab305ba7657b79e775d40e16391", "config_digest": "206116bd213f0786f8378755ad48adbccfe30376afe8fe2ecdd24eb44161d009", "invocation_digest": "e791b8ecfa486564d1e600616f91008306bb57bc036347793aadee8852357e10", "input_subject_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "80c185ac8e17503197e8195c202d98db3f0cd3865a37ba7065f37bdbf2a58d54", "normalized_evidence_digest": "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "limitations": [], "evidence_class": "static_analysis", "observed_at": "2026-10-21T17:54:35.532304241+00:00", "findings": [] }, { "tool": "gitleaks", "version": "8.30.1", "binary_digest": "88f91962aa2f93ac6ab281d553b9e125f5197bbbce38f9f2437f7299c32e5509", "config_digest": "e1f77c307b36a43d3707ab5fed4a4007f6d63d9302bcf0d5509cd3e52e32ed6f", "invocation_digest": "b53b0bc6ce0f03bd1cfce7e2acf7c81506b6aaa431b4f2ff0b2aeae98e43416a", "input_subject_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "37517e5f3dc66819f61f5a7bb8ace1921282415f10551d2defa5c3eb0985b570", "normalized_evidence_digest": "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "limitations": [], "evidence_class": "secret", "observed_at": "2026-10-21T17:54:35.532304241+00:00", "findings": [] }, { "tool": "syft", "version": "1.54.1", "binary_digest": "dbf75864e7a7ff9e1fbf00552c31483f693188632a9f68f343cd7653dac513d6", "config_digest": "b6f045a568b2dd1dcd1a1723f4eb0b8f5863215301ced35067a5f7a53c07c7e6", "invocation_digest": "2db9cdab6760622ad4d95a31d89276e61f32a147ecb27ed2130b05b416039607", "input_subject_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "58d91cd9bd874e572e122d2d3f38ad9916d50918005f5c7dbf2164ad254e6b81", "normalized_evidence_digest": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "limitations": [], "evidence_class": "supply_chain", "observed_at": "2026-10-21T17:54:35.532304241+00:00", "findings": [ { "rule_namespace": "syft", "rule_id": "anstream@1.0.0", "component": "pkg:cargo/anstream@1.0.0", "fingerprint": "1001468a98bf8f886f889f3b76dee0717eea1611dbab5c3ec415bc0a9d3f9853", "state": "open" }, { "rule_namespace": "syft", "rule_id": "anstyle@1.0.14", "component": "pkg:cargo/anstyle@1.0.14", "fingerprint": "b4423ac5d91607f895d2e4f6b3b58b3b98e3220e95d5a560719a38f26e88a9aa", "state": "open" }, { "rule_namespace": "syft", "rule_id": "anstyle-parse@1.0.0", "component": "pkg:cargo/anstyle-parse@1.0.0", "fingerprint": "86b1ca2b439dac8c8ccf11610d2f44a40fa2c28b49c7a4f67fffc5ad7e7a4c34", "state": "open" }, { "rule_namespace": "syft", "rule_id": "anstyle-query@1.1.5", "component": "pkg:cargo/anstyle-query@1.1.5", "fingerprint": "59e640d2af9d99361184e5dd537b90d2c59bda2eba7000d96ad1688025214430", "state": "open" }, { "rule_namespace": "syft", "rule_id": "anstyle-wincon@3.0.11", "component": "pkg:cargo/anstyle-wincon@3.0.11", "fingerprint": "3b50475de5d0ec3dd61737fa6a9f81887b3ee6ff55d9fd7afecaa6d985cd26e6", "state": "open" }, { "rule_namespace": "syft", "rule_id": "base64ct@1.8.3", "component": "pkg:cargo/base64ct@1.8.3", "fingerprint": "5656f108cca5b4825c10d9ceed24fec9707f89915b6d39bb2c2f79b59f6a1eaf", "state": "open" }, { "rule_namespace": "syft", "rule_id": "bitflags@2.13.2", "component": "pkg:cargo/bitflags@2.13.2", "fingerprint": "2f570cfac9dde16b280d8ce6521d29be556270814081e669ebb29f300aac7e82", "state": "open" }, { "rule_namespace": "syft", "rule_id": "block-buffer@0.10.4", "component": "pkg:cargo/block-buffer@0.10.4", "fingerprint": "2b4e003d5403bd7ccd2ef88c2dcfba20586172a36e9e5feb24203884290f3fb8", "state": "open" }, { "rule_namespace": "syft", "rule_id": "cfg-if@1.0.5", "component": "pkg:cargo/cfg-if@1.0.5", "fingerprint": "40e2ca0f72307e7f2b92a7626063d84ab55fa1db6f40e2fdaea4eb417bb3d9f6", "state": "open" }, { "rule_namespace": "syft", "rule_id": "clap@4.6.7", "component": "pkg:cargo/clap@4.6.7", "fingerprint": "8b5288edc94ee3c1804eb2664bb8a57974ed5bd708efaad6ab63165c19e80dfd", "state": "open" }, { "rule_namespace": "syft", "rule_id": "clap_builder@4.6.7", "component": "pkg:cargo/clap_builder@4.6.7", "fingerprint": "4b4192da7ea8835334cc519c92e9230c5aa48d6e8b5905d5dc735155981a1f5d", "state": "open" }, { "rule_namespace": "syft", "rule_id": "clap_derive@4.6.7", "component": "pkg:cargo/clap_derive@4.6.7", "fingerprint": "4d51f0052690cd07873e9f2360688e746bd74d01be8bce8eb1e09d4b5ee2869f", "state": "open" }, { "rule_namespace": "syft", "rule_id": "clap_lex@1.1.1", "component": "pkg:cargo/clap_lex@1.1.1", "fingerprint": "d5118fb3b03cf55c1b5d2058dc703e5287863abfafc62e948f8bd37c554eed93", "state": "open" }, { "rule_namespace": "syft", "rule_id": "colorchoice@1.0.5", "component": "pkg:cargo/colorchoice@1.0.5", "fingerprint": "333b5e3b16c10da6f952448b19c196e74ca809dd500e5b626c5e94eca9950908", "state": "open" }, { "rule_namespace": "syft", "rule_id": "const-oid@0.9.6", "component": "pkg:cargo/const-oid@0.9.6", "fingerprint": "5541a7190761ecc001f652cbea75f887d34a63857a9d4a833c6c04c4f66c9cc2", "state": "open" }, { "rule_namespace": "syft", "rule_id": "cpufeatures@0.2.17", "component": "pkg:cargo/cpufeatures@0.2.17", "fingerprint": "2c41be5a411d55d53a6e1ecaae69000d6cfafc653329b5a415c3833ca3d938a3", "state": "open" }, { "rule_namespace": "syft", "rule_id": "crypto-common@0.1.7", "component": "pkg:cargo/crypto-common@0.1.7", "fingerprint": "94ebb3d3a04823de45b978f7f2d92b817a60a7eb82d8c7b676a832d72e58684f", "state": "open" }, { "rule_namespace": "syft", "rule_id": "curve25519-dalek@4.1.3", "component": "pkg:cargo/curve25519-dalek@4.1.3", "fingerprint": "fe69847583a09dbb422ed424b8822f6081a5b9a9ea4a5a0659aeeae90a1f3b68", "state": "open" }, { "rule_namespace": "syft", "rule_id": "curve25519-dalek-derive@0.1.1", "component": "pkg:cargo/curve25519-dalek-derive@0.1.1", "fingerprint": "30988a4946cd7b5896513c53b8f46fef2f041b7a32a8444f2fbbbe35504b0d30", "state": "open" }, { "rule_namespace": "syft", "rule_id": "der@0.7.10", "component": "pkg:cargo/der@0.7.10", "fingerprint": "8163a7cb6df166afc2111e82c998716d8b3a803f1869d677792d321ac2c09c7e", "state": "open" }, { "rule_namespace": "syft", "rule_id": "digest@0.10.7", "component": "pkg:cargo/digest@0.10.7", "fingerprint": "f543d9aefa032f0994738474a351c2d2be5ba43859f3a3edd9a65494ee9238b8", "state": "open" }, { "rule_namespace": "syft", "rule_id": "ed25519@2.2.3", "component": "pkg:cargo/ed25519@2.2.3", "fingerprint": "1a02d28487a2543cf9326fab370709729bebc9627626b39581bd1df154e91dbd", "state": "open" }, { "rule_namespace": "syft", "rule_id": "ed25519-dalek@2.2.0", "component": "pkg:cargo/ed25519-dalek@2.2.0", "fingerprint": "5d7bc1f87b8a0a9b4d360efd55b594a08fa0a5fef8d15fcf5ad942263a934c2d", "state": "open" }, { "rule_namespace": "syft", "rule_id": "errno@0.3.14", "component": "pkg:cargo/errno@0.3.14", "fingerprint": "fe0c520b266d11e2ad249f8ded3c90b5f136fb9263021fc61136e8c181a8023f", "state": "open" }, { "rule_namespace": "syft", "rule_id": "falsegreen-ledger@0.1.0", "component": "", "fingerprint": "841d8d48762b69b0eac8a31c3cdc02cd1eacac1caf7d69c291615aecc96b9ba8", "state": "open" }, { "rule_namespace": "syft", "rule_id": "falsegreen-ledger-core@0.1.0", "component": "", "fingerprint": "99c0e29b042978b26ae2896dfffc0866c8638f5604b43b5a33122de2f9811c19", "state": "open" }, { "rule_namespace": "syft", "rule_id": "fastrand@2.5.0", "component": "pkg:cargo/fastrand@2.5.0", "fingerprint": "2b7ba02485a3d76cc19b17317882c1dd65511ed5ad95e9e70a0bb5d7f5dd4043", "state": "open" }, { "rule_namespace": "syft", "rule_id": "fiat-crypto@0.2.9", "component": "pkg:cargo/fiat-crypto@0.2.9", "fingerprint": "de9f033198ba6f74b0c4f8cc0f961ff4d5f3b764d3a1e60f0f68a66fcb26f54f", "state": "open" }, { "rule_namespace": "syft", "rule_id": "generic-array@0.14.7", "component": "pkg:cargo/generic-array@0.14.7", "fingerprint": "375236d1387d03ae58db25418fce92969adbd21eca601a82cd8dc683fe60f20f", "state": "open" }, { "rule_namespace": "syft", "rule_id": "getrandom@0.2.17", "component": "pkg:cargo/getrandom@0.2.17", "fingerprint": "80e36ea36c4959f0d1b4dd76769554760054be60923fa8eae72bc10d83b30b90", "state": "open" }, { "rule_namespace": "syft", "rule_id": "getrandom@0.4.3", "component": "pkg:cargo/getrandom@0.4.3", "fingerprint": "05b5d32e6e201ead770f640d3986020565688d70ca4bf6d323def662c9b10bc0", "state": "open" }, { "rule_namespace": "syft", "rule_id": "heck@0.5.0", "component": "pkg:cargo/heck@0.5.0", "fingerprint": "c5eb23be3fdbc8afafc1cca8b9c5767bab582488149444a86b1d000d74e3c97a", "state": "open" }, { "rule_namespace": "syft", "rule_id": "hex@0.4.3", "component": "pkg:cargo/hex@0.4.3", "fingerprint": "79f94666cd1756f5374c513addc3b9444043d08bb49050dae4998fc934de41af", "state": "open" }, { "rule_namespace": "syft", "rule_id": "is_terminal_polyfill@1.70.2", "component": "pkg:cargo/is_terminal_polyfill@1.70.2", "fingerprint": "b005b2478a3e5a28b543b644c46c0e2049ab156cd1ccd7133ea9f40a5626b62d", "state": "open" }, { "rule_namespace": "syft", "rule_id": "itoa@1.0.18", "component": "pkg:cargo/itoa@1.0.18", "fingerprint": "aec45ddec07a815da2a5c182001bfe6e554ed2a0b89259d327f793511a774c40", "state": "open" }, { "rule_namespace": "syft", "rule_id": "libc@0.2.191", "component": "pkg:cargo/libc@0.2.191", "fingerprint": "b0e83395a6df61531693965b5dc89908e48f1fc30363b236cdebf457b3b8d84a", "state": "open" }, { "rule_namespace": "syft", "rule_id": "linux-raw-sys@0.12.1", "component": "pkg:cargo/linux-raw-sys@0.12.1", "fingerprint": "7516ef772912bc7e53189e7272c2213556425bc370efc1936e07fd2f7141dab0", "state": "open" }, { "rule_namespace": "syft", "rule_id": "memchr@2.8.3", "component": "pkg:cargo/memchr@2.8.3", "fingerprint": "19c7f7c6470891a44bd18bae9b5a2d1d0a9674e609cb6b681b6d78594026b1c0", "state": "open" }, { "rule_namespace": "syft", "rule_id": "once_cell@1.21.4", "component": "pkg:cargo/once_cell@1.21.4", "fingerprint": "5df49b2099b0dc508144dd3ce7f17d8ef89e1ca37347a5a9732cc45bef8a0865", "state": "open" }, { "rule_namespace": "syft", "rule_id": "once_cell_polyfill@1.70.2", "component": "pkg:cargo/once_cell_polyfill@1.70.2", "fingerprint": "67dbadfb6f4218d894e3b81d8d454f1540509b7c38981b00170ce499b12f89cc", "state": "open" }, { "rule_namespace": "syft", "rule_id": "pkcs8@0.10.2", "component": "pkg:cargo/pkcs8@0.10.2", "fingerprint": "c47c76d7946c7de7d9e8ccb0ce88035f70f673c663ff4bc87d7186e2cd59e8fe", "state": "open" }, { "rule_namespace": "syft", "rule_id": "ppv-lite86@0.2.21", "component": "pkg:cargo/ppv-lite86@0.2.21", "fingerprint": "9947e5da4cc28604998b938686ba44e72cd4382ce0330b0b7457439028a32e72", "state": "open" }, { "rule_namespace": "syft", "rule_id": "proc-macro2@1.0.107", "component": "pkg:cargo/proc-macro2@1.0.107", "fingerprint": "8a7eb5f7e790f0c2621a0b8b0602d5e8df183461cc0627f75774260b6b3ade32", "state": "open" }, { "rule_namespace": "syft", "rule_id": "quote@1.0.47", "component": "pkg:cargo/quote@1.0.47", "fingerprint": "ba5b73c1936ffd2ab425cc8480b56e7b5f48125bec80e2b12a1a44baa9c1c558", "state": "open" }, { "rule_namespace": "syft", "rule_id": "r-efi@6.0.0", "component": "pkg:cargo/r-efi@6.0.0", "fingerprint": "122b7ca8782f044bbf34b34a6611015ab063c5941471a1f9edf52859953335ea", "state": "open" }, { "rule_namespace": "syft", "rule_id": "rand@0.8.8", "component": "pkg:cargo/rand@0.8.8", "fingerprint": "d75967c1358b7152e9dec7577066f5049015cdd77c70b9c353ec196342cef83b", "state": "open" }, { "rule_namespace": "syft", "rule_id": "rand_chacha@0.3.1", "component": "pkg:cargo/rand_chacha@0.3.1", "fingerprint": "98b4b52cb9630b79c95cd3ce370098fda6810c9893935c1623818e6c2bc6a950", "state": "open" }, { "rule_namespace": "syft", "rule_id": "rand_core@0.6.4", "component": "pkg:cargo/rand_core@0.6.4", "fingerprint": "881bc35797d5dbc04b02e40860ac237cc76ab1e8561cd4d39d3fc0a1c3155a12", "state": "open" }, { "rule_namespace": "syft", "rule_id": "rustc_version@0.4.1", "component": "pkg:cargo/rustc_version@0.4.1", "fingerprint": "b856fc7dc29ef6489b43403c317b31a5c2f7469df3e78eb38496d906f65a41f9", "state": "open" }, { "rule_namespace": "syft", "rule_id": "rustix@1.1.5", "component": "pkg:cargo/rustix@1.1.5", "fingerprint": "161a149e15f158acea456dd7572470352fcc38e9861cf74a7affcdbebb3be84c", "state": "open" }, { "rule_namespace": "syft", "rule_id": "semver@1.0.28", "component": "pkg:cargo/semver@1.0.28", "fingerprint": "adf8dd8c6eab8cbfba291126118409767783c7721216321d264e71566a86fb64", "state": "open" }, { "rule_namespace": "syft", "rule_id": "serde@1.0.229", "component": "pkg:cargo/serde@1.0.229", "fingerprint": "6d867eaaeef95071a1e043e0f22f4765333205c756611890f0f6ee0f0bf2844a", "state": "open" }, { "rule_namespace": "syft", "rule_id": "serde_core@1.0.229", "component": "pkg:cargo/serde_core@1.0.229", "fingerprint": "e510c18b9a78eaa008df3d1ced75890c6610e5b6802183c55c7bbe66f2b08705", "state": "open" }, { "rule_namespace": "syft", "rule_id": "serde_derive@1.0.229", "component": "pkg:cargo/serde_derive@1.0.229", "fingerprint": "000799b93838d093c6bbd43247666d235ecbfd735b93222d2cd26233f0fb28ec", "state": "open" }, { "rule_namespace": "syft", "rule_id": "serde_json@1.0.154", "component": "pkg:cargo/serde_json@1.0.154", "fingerprint": "349a0dd333a0d2897b42960e7efb1d0830ab09b3e9eeb1e2acdeb5a200f289e1", "state": "open" }, { "rule_namespace": "syft", "rule_id": "sha2@0.10.9", "component": "pkg:cargo/sha2@0.10.9", "fingerprint": "477b1f1b81c82609f675f2c5aeb53cfb9f1191376ff8845a5647e9c6b05388df", "state": "open" }, { "rule_namespace": "syft", "rule_id": "signature@2.2.0", "component": "pkg:cargo/signature@2.2.0", "fingerprint": "7d8fc0ddf33982f4c2b6ca2f3739dc5f209faca02c4d8a01cb67023acf125d9c", "state": "open" }, { "rule_namespace": "syft", "rule_id": "smallvec@1.6.0", "component": "pkg:cargo/smallvec@1.6.0", "fingerprint": "1b292519074e47f7a1b01edc1ec1476b2f282e47ec7640820c0bad1afd635a20", "state": "open" }, { "rule_namespace": "syft", "rule_id": "spki@0.7.3", "component": "pkg:cargo/spki@0.7.3", "fingerprint": "e7593fa9bc039e2db40a3a71927e7b104a79be42d02d04e04b1b373dad5f9354", "state": "open" }, { "rule_namespace": "syft", "rule_id": "strsim@0.11.1", "component": "pkg:cargo/strsim@0.11.1", "fingerprint": "7260c481b09f354b4c8d13996a46735f790af5206fa07ffa86f3d9601768719a", "state": "open" }, { "rule_namespace": "syft", "rule_id": "subtle@2.6.1", "component": "pkg:cargo/subtle@2.6.1", "fingerprint": "abf520278b97397636ae0d0fba9c430b656b0af89b288300d4c9e12cd1bad2a9", "state": "open" }, { "rule_namespace": "syft", "rule_id": "syn@2.0.119", "component": "pkg:cargo/syn@2.0.119", "fingerprint": "80bcee46aef1b69a610a3810a2f7dc3fec1a8cff8a4366bc2369f50b8543a5e0", "state": "open" }, { "rule_namespace": "syft", "rule_id": "syn@3.0.9", "component": "pkg:cargo/syn@3.0.9", "fingerprint": "114cde3e9bfa178c4b502cb01a87d49a704c293fc6d1a07270388d14b152c9c2", "state": "open" }, { "rule_namespace": "syft", "rule_id": "tempfile@3.27.0", "component": "pkg:cargo/tempfile@3.27.0", "fingerprint": "cc64344e2b0f434ddea53beb971184de5fd0a84c6a9739eff5255d69b2d42a3c", "state": "open" }, { "rule_namespace": "syft", "rule_id": "typenum@1.20.1", "component": "pkg:cargo/typenum@1.20.1", "fingerprint": "69fca6104cc42ad018ccf1e723d8e6cc55ad7d890cbeaf9f3073487edb4e9c81", "state": "open" }, { "rule_namespace": "syft", "rule_id": "unicode-ident@1.0.27", "component": "pkg:cargo/unicode-ident@1.0.27", "fingerprint": "c8f069b4043c8b0afcbf7d2f1d9fdb3681c8f8cc75ee03d318b515654ab1e21c", "state": "open" }, { "rule_namespace": "syft", "rule_id": "utf8parse@0.2.2", "component": "pkg:cargo/utf8parse@0.2.2", "fingerprint": "c28ef21ff55492434ef623166a53f268c1c02540b430df3967683388cacd9336", "state": "open" }, { "rule_namespace": "syft", "rule_id": "version_check@0.9.5", "component": "pkg:cargo/version_check@0.9.5", "fingerprint": "a37defdbf8011a14f68d31205b137179a3eec551816dc2a2b861965901eed251", "state": "open" }, { "rule_namespace": "syft", "rule_id": "wasi@0.11.1+wasi-snapshot-preview1", "component": "pkg:cargo/wasi@0.11.1%2Bwasi-snapshot-preview1", "fingerprint": "8224d335948f5ae82312adc7b5040e9331715f1f580a94ac77e55f15af60fb24", "state": "open" }, { "rule_namespace": "syft", "rule_id": "windows-link@0.2.1", "component": "pkg:cargo/windows-link@0.2.1", "fingerprint": "f2e9441ed9c64738dc6bd8be208ecb9b3f0f2eb8ea5ddeb4fa1303339bb340d6", "state": "open" }, { "rule_namespace": "syft", "rule_id": "windows-sys@0.61.2", "component": "pkg:cargo/windows-sys@0.61.2", "fingerprint": "b2713fc2f7bff729a27c0f62ee1be368d8344e0a7237e06edae435bfe00f9353", "state": "open" }, { "rule_namespace": "syft", "rule_id": "zerocopy@0.8.63", "component": "pkg:cargo/zerocopy@0.8.63", "fingerprint": "538de62743d2a698d49ae17957387bceef902f05602838b337eb33ef3a2018ca", "state": "open" }, { "rule_namespace": "syft", "rule_id": "zerocopy-derive@0.8.63", "component": "pkg:cargo/zerocopy-derive@0.8.63", "fingerprint": "c28066f0d74cc875b1313b642f5b65466e41ca5928021fdf354e3a5158e5f887", "state": "open" }, { "rule_namespace": "syft", "rule_id": "zeroize@1.9.1", "component": "pkg:cargo/zeroize@1.9.1", "fingerprint": "a9b132d8d889548f19dbf2f1ed6a078ca10079500e9a4e3e2c23e407a3c4c2bb", "state": "open" }, { "rule_namespace": "syft", "rule_id": "zmij@1.0.23", "component": "pkg:cargo/zmij@1.0.23", "fingerprint": "18a805aded02f77466f8ea530827dac33264f4eea283a1e3793fe895db3d0ad5", "state": "open" } ] }, { "tool": "dependency-manifest", "version": "1", "binary_digest": "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4", "config_digest": "2402cf6f9fd45d6c6d7b9bc10abdba72e36d61e88515a01d2cda19ee8d375b3b", "invocation_digest": "884328726010e6c1b20c59cdf5c2762817fee5f9c109ccf19622c720dc634efd", "input_subject_digest": "4db442db0b30ff15694e4c46da2b8be04d9c388e312903c3b3b69144543dccdd", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4", "normalized_evidence_digest": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "limitations": [ "license facts are the job dependency manifest's registry SPDX ids; the workspace's own code and git-sourced dependencies carry no registry license facts" ], "evidence_class": "license", "observed_at": "2026-10-21T17:54:35.532304241+00:00", "findings": [ { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/anstream@1.0.0", "fingerprint": "81c389e920feb226956ea5e7e905e055ef3190e347d2024731cba977530b1c28", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/anstyle@1.0.14", "fingerprint": "72cb9f765ade0582fd1b8d4e3ec30734124e9580702182e52b07ce552ace97b1", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/anstyle-parse@1.0.0", "fingerprint": "03dae4cdd1bc7ba73958bf1c617e4f5aa93a31d30b5efa57cb32af82f5010ef9", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/anstyle-query@1.1.5", "fingerprint": "847b1133ac62af0c80b617aa8a687925f44ff02a38077b59d57f8a3d2c9e7377", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/anstyle-wincon@3.0.11", "fingerprint": "930051eead4685b3c169c214c7e4bf568a6b18c75060c642828af9b1e4a92cb7", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/base64ct@1.8.3", "fingerprint": "c2936ea98513be3acbc17ec843a0b5a87f2ec66b23198a7e457cbfe82501de17", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/bitflags@2.13.2", "fingerprint": "5a267ea0d4b32ca26ee6285110e4831c63bc24aba4b4ef50a6ce820dab9bc9c7", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/block-buffer@0.10.4", "fingerprint": "65f5493f0209c5bb833a448c5a4f8d34ea9cbb19fd226d673fb6378da3d45d81", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/cfg-if@1.0.5", "fingerprint": "9c66873ce2b15cedf8971b5136299c6dbbdbdb00096f984baca5c60e43f20b86", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/clap@4.6.7", "fingerprint": "b6d470dc0b142702b891dd8112eb44dacb7f1e64144fc95e7c4d8188299612c5", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/clap_builder@4.6.7", "fingerprint": "57fd5416fc287aefb50fdd41cdf558dc3aab82e27a8e542cb21cb6641a034fbf", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/clap_derive@4.6.7", "fingerprint": "e4955ec9e34c975255437f60abb69c42ffe6c4faff7bd1b2c2f1f582a1266f6f", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/clap_lex@1.1.1", "fingerprint": "9c1ce04a546342b75e26dcedd88dfd64ed4c42c1e22db5d575ebd9b83bdab96f", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/colorchoice@1.0.5", "fingerprint": "0cd1130d559feb72b1789c9dfc5ca946a042b193f6efe22b205f7179ae628471", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/const-oid@0.9.6", "fingerprint": "dd86b6e6f0675712fca49ad744596692f3308ad888e80c2fe798ae86fcc44761", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/cpufeatures@0.2.17", "fingerprint": "04a7c96209fbd41f9a1817ea4d2a6e8677796fa4ec0dc537d76a9dec0036eb8f", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/crypto-common@0.1.7", "fingerprint": "745d756e8999f1a9a249aed77699c555941595329a4e4343de89ae96e1d0333a", "state": "open" }, { "rule_namespace": "license", "rule_id": "BSD-3-Clause", "component": "pkg:cargo/curve25519-dalek@4.1.3", "fingerprint": "0bb575d6587d75ee9592137d2931238680210aecc215909adba1e5f8072feb00", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT/Apache-2.0", "component": "pkg:cargo/curve25519-dalek-derive@0.1.1", "fingerprint": "2bd313068cc5979f66814611d0f2653764f5f02a5fea3659e6622b7141a9efb2", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/der@0.7.10", "fingerprint": "5581ac6ec26f13cf9bf99838842922d224f796330520c89e209f34f8263deca9", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/digest@0.10.7", "fingerprint": "66d845a56cbb7c318352a08f46d3b6991b4e15095a844109683d6395bea3a1c7", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/ed25519@2.2.3", "fingerprint": "b1ef1484de84840c7c0a2c51933966b0868f8da06be7d59e7b77a92b3dcd12c6", "state": "open" }, { "rule_namespace": "license", "rule_id": "BSD-3-Clause", "component": "pkg:cargo/ed25519-dalek@2.2.0", "fingerprint": "59ce4b8271427de2f3c94b79b2d666608dd0ab80f62ba57ba79decbe90460d6c", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/errno@0.3.14", "fingerprint": "b2cf2d50c9d7e3df66abaf43435835639e08034d0258c853bbb967068248c7c1", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/fastrand@2.5.0", "fingerprint": "68281187c66d4c9670acbf7a748a35df777f7796eace3eb74ecd3c0df1af2377", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0 OR BSD-1-Clause", "component": "pkg:cargo/fiat-crypto@0.2.9", "fingerprint": "ab0d3ee1c57f754c8e9f310625a0a15790a9d09e9ce260b33597c5215179f9fd", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT", "component": "pkg:cargo/generic-array@0.14.7", "fingerprint": "4100baa4894d6f4a883eefdffa6f2a3f3f8932c5f513fd1b463bea367b450a8b", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/getrandom@0.2.17", "fingerprint": "e0e248e843d9c977190d92d5e8671ff1fe633094bec2fd78deda8cc2b9ddd913", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/getrandom@0.4.3", "fingerprint": "d34eb7b77676d5fa2a2fb54ccbdcf812b2e95ece08d523b51a8112876b9e9f1b", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/heck@0.5.0", "fingerprint": "f15e7f9397ec2df7435dfa719bd9ed4ec07a7f9b63f63a6b0a1ded192a681875", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/hex@0.4.3", "fingerprint": "0880807ea598985ae4e2b054afdf19681651cc0555d47de97c81bf15d308e1c1", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/is_terminal_polyfill@1.70.2", "fingerprint": "ea5404a32d8fe5f4d7b7c150ae9c418bef44434084f9807f04760b247a1833b6", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/itoa@1.0.18", "fingerprint": "0b71ec3d77ef8519b86e537ff5fac2a87a1e23a1a94302a67b55044db9e38cb7", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/libc@0.2.191", "fingerprint": "9d9973caa830049a9211e8ed805b7dcf7f690659b71db96bf5c4593d7b2ca614", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT", "component": "pkg:cargo/linux-raw-sys@0.12.1", "fingerprint": "773523a49f8cd1a1df7385ad357b411d263186aa04cb952428f2225c95e692a2", "state": "open" }, { "rule_namespace": "license", "rule_id": "Unlicense OR MIT", "component": "pkg:cargo/memchr@2.8.3", "fingerprint": "bf1591437a6f99fe31f560f71637dd4271236182cf3fe1f2a57f545ab377d916", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/once_cell@1.21.4", "fingerprint": "bf0bc6b374808f7c6f3fd08c0a7d63965be10e3ff39ebcd785fcf0d624f8acb0", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/once_cell_polyfill@1.70.2", "fingerprint": "4e122c54241f8e08146c80b9e7aace82ab89579bab281e82a26ef89d5444df44", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/pkcs8@0.10.2", "fingerprint": "dcf79ef96b12576f3da49211f68cd786c965cbcb198cc01af73f3d5426884627", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/ppv-lite86@0.2.21", "fingerprint": "10dbed4778cb7f48cbbaaafe5a6bc2839b58297bde9f43d49cab1a639d5c927c", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/proc-macro2@1.0.107", "fingerprint": "1efce8992cf906cfadfccce323fa0ae6955df07a7460965cebb2a64de11dc74b", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/quote@1.0.47", "fingerprint": "ab119f6f830df1f8f8ca18f18a1b7e8166482bbc79b529b2b01f1ef8d351dc9d", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0 OR LGPL-2.1-or-later", "component": "pkg:cargo/r-efi@6.0.0", "fingerprint": "79b3757623de39a2d1e2cbc582531edb2232c2fedae78ae86266ff0a657e6692", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/rand@0.8.8", "fingerprint": "671dab68d2ada9d89ee44f0464a0e42d22a9c70a7b4862b87c34ef30801c0b99", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/rand_chacha@0.3.1", "fingerprint": "09545686bd0a3e470a4467c0216f6dd076ee18f9ccdc19e939a2a0c8338a130c", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/rand_core@0.6.4", "fingerprint": "5b4629e1e1e878c03195737d30e6f492dc34c5d799ba36c5c04b8192eece897e", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/rustc_version@0.4.1", "fingerprint": "6ed6e8818bc7dbe359728d9d8c8e843d5421d6999b5853490c9cf658d37e59e0", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT", "component": "pkg:cargo/rustix@1.1.5", "fingerprint": "70045df0de7040cc8e3f8920f8dbce683735be2f3505c999933268304eed3d01", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/semver@1.0.28", "fingerprint": "d1f1194d0512ca4c7a020f03728853a518bbdb6719bc6a3a7fc7caeda7f6bdfe", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/serde@1.0.229", "fingerprint": "e1eb81e653a288a15481d6312ab337b18d44e2d94d49f48ac7c8c3ec800a36f5", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/serde_core@1.0.229", "fingerprint": "4086d666853f837b329582f4ada668b8ee6eb0983c029a5fa7eacb4cd7b95ea7", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/serde_derive@1.0.229", "fingerprint": "4077d1047525fda030d22d1788a1c3aa36c56309be7434055545e4a5acc5435e", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/serde_json@1.0.154", "fingerprint": "2dc62cd2e94dfe2e326379ab19b563408bee14cbd79b7c9730b3cf913df685ee", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/sha2@0.10.9", "fingerprint": "8fffdf2de9a098e260c473f456893764abfb0da25c8edf8f28ef1d8b3b483857", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/signature@2.2.0", "fingerprint": "8409e8477eaa8b299157e472284dbb382c65babc4a10856896a0325c741bfc84", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT/Apache-2.0", "component": "pkg:cargo/smallvec@1.6.0", "fingerprint": "cfe55c94dcb01bd350011e0618de53cfeeccc9fedcf5a83cd1bd293d6dedb9f4", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/spki@0.7.3", "fingerprint": "6d2575dae8ab3515840e41bc7dd0289d19fe62354849d325d3f4876f96842a9b", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT", "component": "pkg:cargo/strsim@0.11.1", "fingerprint": "3803c2ce269d8937cb5ca282cfc7de1c38bec3947a7f800554d22c9b6af0b4ff", "state": "open" }, { "rule_namespace": "license", "rule_id": "BSD-3-Clause", "component": "pkg:cargo/subtle@2.6.1", "fingerprint": "b2905d01e0f0b65a50ff69518e7472eced519c61c4f31a958fedf47503a048c5", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/syn@2.0.119", "fingerprint": "ec75866e642d56853e0689f491ec83f5ca076a545a518dbc71cb657872de02ba", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/syn@3.0.9", "fingerprint": "50816f9296ebef556556bbf41104d9aff94dc3c3b78917993d062c356ece3a83", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/tempfile@3.27.0", "fingerprint": "fb7e166af30cc01cf8d9fa7bc5864a37ef17e94f0dcad6591c23c48b4f16a08f", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/typenum@1.20.1", "fingerprint": "64aa3bf3c0ae12c744475d6fbd6062f2bf93df107d8585dce88c78832b669779", "state": "open" }, { "rule_namespace": "license", "rule_id": "(MIT OR Apache-2.0) AND Unicode-3.0", "component": "pkg:cargo/unicode-ident@1.0.27", "fingerprint": "bbfb4a615f30648ef5a8eaf210033aa1baaab14fa0bc9482ac72ae7641a6e466", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/utf8parse@0.2.2", "fingerprint": "af63bfd1ce1cfe636db88caaa115b8843ca67e96b3dd93f523d84771bf40a073", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT/Apache-2.0", "component": "pkg:cargo/version_check@0.9.5", "fingerprint": "99b8a953eefdb41a40a9a077b9032a3b6a395900604be21a32da30658ce61f15", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT", "component": "pkg:cargo/wasi@0.11.1+wasi-snapshot-preview1", "fingerprint": "d9cbaa8941d43791ff495ffbc74a5ec516e48db88243ab8abce575acfe23e028", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/windows-link@0.2.1", "fingerprint": "6a884f0186ee68ed468285b3dee5325fccd3809ca04aafabffd42e588d76a3e0", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/windows-sys@0.61.2", "fingerprint": "169218fdfc26698b6fd1a352d504c2359a123be3ebf7d7b9e0c223406ce70d21", "state": "open" }, { "rule_namespace": "license", "rule_id": "BSD-2-Clause OR Apache-2.0 OR MIT", "component": "pkg:cargo/zerocopy@0.8.63", "fingerprint": "dca0f093c749462f428d68cecfb63c6f0b0443b944e3f93172bc7b85bea835ec", "state": "open" }, { "rule_namespace": "license", "rule_id": "BSD-2-Clause OR Apache-2.0 OR MIT", "component": "pkg:cargo/zerocopy-derive@0.8.63", "fingerprint": "aa23299329debd40f4b88bbe41983c6f0b798920fe0306bdb2bd12307011eff0", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/zeroize@1.9.1", "fingerprint": "ad04bc15c43493a874503f1f4e5228c67653134c34ae698ee27abc3ba5027fed", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT", "component": "pkg:cargo/zmij@1.0.23", "fingerprint": "cf39f12ea4d06ecb2c119337d3ddd79c7cc97ef7e7e900bb4beb745ac2696a0d", "state": "open" } ] } ], "dependency_manifest": { "ecosystem": "rust", "tool": "cargo", "tool_version": "1.99.0", "entries": [ { "name": "anstream", "version": "1.0.0", "purl": "pkg:cargo/anstream@1.0.0", "sha256": "824a212faf96e9acacdbd09febd34438f8f711fb84e09a8916013cd7815ca28d", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "anstyle", "version": "1.0.14", "purl": "pkg:cargo/anstyle@1.0.14", "sha256": "940b3a0ca603d1eade50a4846a2afffd5ef57a9feac2c0e2ec2e14f9ead76000", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "anstyle-parse", "version": "1.0.0", "purl": "pkg:cargo/anstyle-parse@1.0.0", "sha256": "52ce7f38b242319f7cabaa6813055467063ecdc9d355bbb4ce0c68908cd8130e", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "anstyle-query", "version": "1.1.5", "purl": "pkg:cargo/anstyle-query@1.1.5", "sha256": "40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "anstyle-wincon", "version": "3.0.11", "purl": "pkg:cargo/anstyle-wincon@3.0.11", "sha256": "291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "base64ct", "version": "1.8.3", "purl": "pkg:cargo/base64ct@1.8.3", "sha256": "2af50177e190e07a26ab74f8b1efbfe2ef87da2116221318cb1c2e82baf7de06", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "bitflags", "version": "2.13.2", "purl": "pkg:cargo/bitflags@2.13.2", "sha256": "3ded4057c258ba199e2d26386d3af3780957ecaee6c4ef4041c6b4b8b97c0b06", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "block-buffer", "version": "0.10.4", "purl": "pkg:cargo/block-buffer@0.10.4", "sha256": "3078c7629b62d3f0439517fa394996acacc5cbc91c5a20d8c658e77abd503a71", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "cfg-if", "version": "1.0.5", "purl": "pkg:cargo/cfg-if@1.0.5", "sha256": "4e7648175b45a9a48536d676f68d918270699102aa8dab5496df06904c914600", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "clap", "version": "4.6.7", "purl": "pkg:cargo/clap@4.6.7", "sha256": "aa8876b300ab35ba921adea3dfd70157a46249b33f95c9084ae5709785478946", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "clap_builder", "version": "4.6.7", "purl": "pkg:cargo/clap_builder@4.6.7", "sha256": "ec0797fb7aeb1406c84efac526901f7ec3ead2124f946b494e72879d4b54704d", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "clap_derive", "version": "4.6.7", "purl": "pkg:cargo/clap_derive@4.6.7", "sha256": "f9c751b79415d4e559e3d1fcf128e09e720eb673a06d26cf6f392d37d75b66e0", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "clap_lex", "version": "1.1.1", "purl": "pkg:cargo/clap_lex@1.1.1", "sha256": "1c133bc6a41be0d194c306b5506d15e6feeea7b1d6604bd3f8310dfb2ca96486", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "colorchoice", "version": "1.0.5", "purl": "pkg:cargo/colorchoice@1.0.5", "sha256": "1d07550c9036bf2ae0c684c4297d503f838287c83c53686d05370d0e139ae570", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "const-oid", "version": "0.9.6", "purl": "pkg:cargo/const-oid@0.9.6", "sha256": "c2459377285ad874054d797f3ccebf984978aa39129f6eafde5cdc8315b612f8", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "cpufeatures", "version": "0.2.17", "purl": "pkg:cargo/cpufeatures@0.2.17", "sha256": "59ed5838eebb26a2bb2e58f6d5b5316989ae9d08bab10e0e6d103e656d1b0280", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "crypto-common", "version": "0.1.7", "purl": "pkg:cargo/crypto-common@0.1.7", "sha256": "78c8292055d1c1df0cce5d180393dc8cce0abec0a7102adb6c7b1eef6016d60a", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "curve25519-dalek", "version": "4.1.3", "purl": "pkg:cargo/curve25519-dalek@4.1.3", "sha256": "97fb8b7c4503de7d6ae7b42ab72a5a59857b4c937ec27a3d4539dba95b5ab2be", "scope": "runtime", "licenses": [ "BSD-3-Clause" ] }, { "name": "curve25519-dalek-derive", "version": "0.1.1", "purl": "pkg:cargo/curve25519-dalek-derive@0.1.1", "sha256": "f46882e17999c6cc590af592290432be3bce0428cb0d5f8b6715e4dc7b383eb3", "scope": "runtime", "licenses": [ "MIT/Apache-2.0" ] }, { "name": "der", "version": "0.7.10", "purl": "pkg:cargo/der@0.7.10", "sha256": "e7c1832837b905bbfb5101e07cc24c8deddf52f93225eee6ead5f4d63d53ddcb", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "digest", "version": "0.10.7", "purl": "pkg:cargo/digest@0.10.7", "sha256": "9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "ed25519", "version": "2.2.3", "purl": "pkg:cargo/ed25519@2.2.3", "sha256": "115531babc129696a58c64a4fef0a8bf9e9698629fb97e9e40767d235cfbcd53", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "ed25519-dalek", "version": "2.2.0", "purl": "pkg:cargo/ed25519-dalek@2.2.0", "sha256": "70e796c081cee67dc755e1a36a0a172b897fab85fc3f6bc48307991f64e4eca9", "scope": "runtime", "licenses": [ "BSD-3-Clause" ] }, { "name": "errno", "version": "0.3.14", "purl": "pkg:cargo/errno@0.3.14", "sha256": "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "fastrand", "version": "2.5.0", "purl": "pkg:cargo/fastrand@2.5.0", "sha256": "da7c62ceae207dd37ea5b845da6a0696c799f85e97da1ab5b7910be3c1c80223", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "fiat-crypto", "version": "0.2.9", "purl": "pkg:cargo/fiat-crypto@0.2.9", "sha256": "28dea519a9695b9977216879a3ebfddf92f1c08c05d984f8996aecd6ecdc811d", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0 OR BSD-1-Clause" ] }, { "name": "generic-array", "version": "0.14.7", "purl": "pkg:cargo/generic-array@0.14.7", "sha256": "85649ca51fd72272d7821adaf274ad91c288277713d9c18820d8499a7ff69e9a", "scope": "runtime", "licenses": [ "MIT" ] }, { "name": "getrandom", "version": "0.2.17", "purl": "pkg:cargo/getrandom@0.2.17", "sha256": "ff2abc00be7fca6ebc474524697ae276ad847ad0a6b3faa4bcb027e9a4614ad0", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "getrandom", "version": "0.4.3", "purl": "pkg:cargo/getrandom@0.4.3", "sha256": "300e883d756b2e4ec94e02791f39b04b522276138852cfc41d9fb7e904106099", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "heck", "version": "0.5.0", "purl": "pkg:cargo/heck@0.5.0", "sha256": "2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "hex", "version": "0.4.3", "purl": "pkg:cargo/hex@0.4.3", "sha256": "7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "is_terminal_polyfill", "version": "1.70.2", "purl": "pkg:cargo/is_terminal_polyfill@1.70.2", "sha256": "a6cb138bb79a146c1bd460005623e142ef0181e3d0219cb493e02f7d08a35695", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "itoa", "version": "1.0.18", "purl": "pkg:cargo/itoa@1.0.18", "sha256": "8f42a60cbdf9a97f5d2305f08a87dc4e09308d1276d28c869c684d7777685682", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "libc", "version": "0.2.191", "purl": "pkg:cargo/libc@0.2.191", "sha256": "65cd87c9a6d60536580b316ad985726104730a5151c99845f2490428ef91240a", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "linux-raw-sys", "version": "0.12.1", "purl": "pkg:cargo/linux-raw-sys@0.12.1", "sha256": "32a66949e030da00e8c7d4434b251670a91556f4144941d37452769c25d58a53", "scope": "runtime", "licenses": [ "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT" ] }, { "name": "memchr", "version": "2.8.3", "purl": "pkg:cargo/memchr@2.8.3", "sha256": "cf8baf1c55e62ffcace7a9f06f4bd9cd3f0c4beb022d3b367256b91b87513d98", "scope": "runtime", "licenses": [ "Unlicense OR MIT" ] }, { "name": "once_cell", "version": "1.21.4", "purl": "pkg:cargo/once_cell@1.21.4", "sha256": "9f7c3e4beb33f85d45ae3e3a1792185706c8e16d043238c593331cc7cd313b50", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "once_cell_polyfill", "version": "1.70.2", "purl": "pkg:cargo/once_cell_polyfill@1.70.2", "sha256": "384b8ab6d37215f3c5301a95a4accb5d64aa607f1fcb26a11b5303878451b4fe", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "pkcs8", "version": "0.10.2", "purl": "pkg:cargo/pkcs8@0.10.2", "sha256": "f950b2377845cebe5cf8b5165cb3cc1a5e0fa5cfa3e1f7f55707d8fd82e0a7b7", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "ppv-lite86", "version": "0.2.21", "purl": "pkg:cargo/ppv-lite86@0.2.21", "sha256": "85eae3c4ed2f50dcfe72643da4befc30deadb458a9b590d720cde2f2b1e97da9", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "proc-macro2", "version": "1.0.107", "purl": "pkg:cargo/proc-macro2@1.0.107", "sha256": "985e7ec9bb745e6ce6535b544d84d6cd6f7ad8bd711c398938ae983b91a766d9", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "quote", "version": "1.0.47", "purl": "pkg:cargo/quote@1.0.47", "sha256": "1fbf4db142a473a8d80c26bbf18454ed458bf8d26c8219c331daecfdbd079001", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "r-efi", "version": "6.0.0", "purl": "pkg:cargo/r-efi@6.0.0", "sha256": "f8dcc9c7d52a811697d2151c701e0d08956f92b0e24136cf4cf27b57a6a0d9bf", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0 OR LGPL-2.1-or-later" ] }, { "name": "rand", "version": "0.8.8", "purl": "pkg:cargo/rand@0.8.8", "sha256": "e058c7de0b26af77780c769414d6257830bb240f3c38477dbc2c16e5f54d6d4c", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "rand_chacha", "version": "0.3.1", "purl": "pkg:cargo/rand_chacha@0.3.1", "sha256": "e6c10a63a0fa32252be49d21e7709d4d4baf8d231c2dbce1eaa8141b9b127d88", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "rand_core", "version": "0.6.4", "purl": "pkg:cargo/rand_core@0.6.4", "sha256": "ec0be4795e2f6a28069bec0b5ff3e2ac9bafc99e6a9a7dc3547996c5c816922c", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "rustc_version", "version": "0.4.1", "purl": "pkg:cargo/rustc_version@0.4.1", "sha256": "cfcb3a22ef46e85b45de6ee7e79d063319ebb6594faafcf1c225ea92ab6e9b92", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "rustix", "version": "1.1.5", "purl": "pkg:cargo/rustix@1.1.5", "sha256": "891efababe418670775f199f0d233d84843c227a0949a883ce15b37c78d6629d", "scope": "runtime", "licenses": [ "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT" ] }, { "name": "semver", "version": "1.0.28", "purl": "pkg:cargo/semver@1.0.28", "sha256": "8a7852d02fc848982e0c167ef163aaff9cd91dc640ba85e263cb1ce46fae51cd", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "serde", "version": "1.0.229", "purl": "pkg:cargo/serde@1.0.229", "sha256": "4148590afebada386688f18773da617792bf2ef03ffc1e4cbd2b1d45b023e0ba", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "serde_core", "version": "1.0.229", "purl": "pkg:cargo/serde_core@1.0.229", "sha256": "67dca2c9c51e58a4791a4b1ed58308b39c64224d349a935ab5039aa360942a48", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "serde_derive", "version": "1.0.229", "purl": "pkg:cargo/serde_derive@1.0.229", "sha256": "e7a5d71263a5a7d47b41f6b3f06ba276f10cc18b0931f1799f710578e2309348", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "serde_json", "version": "1.0.154", "purl": "pkg:cargo/serde_json@1.0.154", "sha256": "e7e9cc8b1b85264074fbcc02a88680c4096b1e47df8f739dceb03bf482f04bd6", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "sha2", "version": "0.10.9", "purl": "pkg:cargo/sha2@0.10.9", "sha256": "a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "signature", "version": "2.2.0", "purl": "pkg:cargo/signature@2.2.0", "sha256": "77549399552de45a898a580c1b41d445bf730df867cc44e6c0233bbc4b8329de", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "smallvec", "version": "1.6.0", "purl": "pkg:cargo/smallvec@1.6.0", "sha256": "1a55ca5f3b68e41c979bf8c46a6f1da892ca4db8f94023ce0bd32407573b1ac0", "scope": "runtime", "licenses": [ "MIT/Apache-2.0" ] }, { "name": "spki", "version": "0.7.3", "purl": "pkg:cargo/spki@0.7.3", "sha256": "d91ed6c858b01f942cd56b37a94b3e0a1798290327d1236e4d9cf4eaca44d29d", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "strsim", "version": "0.11.1", "purl": "pkg:cargo/strsim@0.11.1", "sha256": "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f", "scope": "runtime", "licenses": [ "MIT" ] }, { "name": "subtle", "version": "2.6.1", "purl": "pkg:cargo/subtle@2.6.1", "sha256": "13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292", "scope": "runtime", "licenses": [ "BSD-3-Clause" ] }, { "name": "syn", "version": "2.0.119", "purl": "pkg:cargo/syn@2.0.119", "sha256": "872831b642d1a07999a962a351ed35b955ea2cfc8f3862091e2a240a84f17297", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "syn", "version": "3.0.9", "purl": "pkg:cargo/syn@3.0.9", "sha256": "d78c8dee4c7bf0e14673097256fed6142ce9d3b85a408189d07482442145823b", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "tempfile", "version": "3.27.0", "purl": "pkg:cargo/tempfile@3.27.0", "sha256": "32497e9a4c7b38532efcdebeef879707aa9f794296a4f0244f6f69e9bc8574bd", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "typenum", "version": "1.20.1", "purl": "pkg:cargo/typenum@1.20.1", "sha256": "b6f5e870be6c3b371b77fe0ee0bafb859fa4964b4404c27de1d380043c4dda20", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "unicode-ident", "version": "1.0.27", "purl": "pkg:cargo/unicode-ident@1.0.27", "sha256": "a2c754d6c33795a1c324727428e5a7dedb5b06195f9890bdbcba760d3e246563", "scope": "runtime", "licenses": [ "(MIT OR Apache-2.0) AND Unicode-3.0" ] }, { "name": "utf8parse", "version": "0.2.2", "purl": "pkg:cargo/utf8parse@0.2.2", "sha256": "06abde3611657adf66d383f00b093d7faecc7fa57071cce2578660c9f1010821", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "version_check", "version": "0.9.5", "purl": "pkg:cargo/version_check@0.9.5", "sha256": "0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a", "scope": "runtime", "licenses": [ "MIT/Apache-2.0" ] }, { "name": "wasi", "version": "0.11.1+wasi-snapshot-preview1", "purl": "pkg:cargo/wasi@0.11.1+wasi-snapshot-preview1", "sha256": "ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b", "scope": "runtime", "licenses": [ "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT" ] }, { "name": "windows-link", "version": "0.2.1", "purl": "pkg:cargo/windows-link@0.2.1", "sha256": "f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "windows-sys", "version": "0.61.2", "purl": "pkg:cargo/windows-sys@0.61.2", "sha256": "ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "zerocopy", "version": "0.8.63", "purl": "pkg:cargo/zerocopy@0.8.63", "sha256": "e5fe1f8f1b06191a00962174c61aa5005e0bb391a6d80d07e24d115c01a92ed8", "scope": "runtime", "licenses": [ "BSD-2-Clause OR Apache-2.0 OR MIT" ] }, { "name": "zerocopy-derive", "version": "0.8.63", "purl": "pkg:cargo/zerocopy-derive@0.8.63", "sha256": "863ad3ac83293fb4d740aedbfdc9240dd8d1a50c1099acd76ce80ce7c7230c7f", "scope": "runtime", "licenses": [ "BSD-2-Clause OR Apache-2.0 OR MIT" ] }, { "name": "zeroize", "version": "1.9.1", "purl": "pkg:cargo/zeroize@1.9.1", "sha256": "e13084392c5e4bc371903e2935a5eaeed24905a7511356b883835e18a78f6879", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "zmij", "version": "1.0.23", "purl": "pkg:cargo/zmij@1.0.23", "sha256": "29666d0abbfad1e3dc4dcf6144730dd3a3ab225bbbdac83319345b1b44ccfc1b", "scope": "runtime", "licenses": [ "MIT" ] } ] } } }, { "attempt_no": 3, "verdict": "passed", "evidence_sha256": "d5e9ad45360c2d4dfd8eee2abcd017443f4119b0a8c69db21d34fa76806cb2ce", "env_sha256": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "wall_seconds": 29.16677027, "result": { "job_id": "520d2155-f6c4-43c6-953c-1829b6dd5cc3", "verdict": "passed", "criteria": [ { "id": "build", "required": true, "passed": true, "commands": [ { "argv": [ "cargo", "build", "--workspace", "--release" ], "exit_code": 0, "timed_out": false, "duration_seconds": 18.443543582, "tail": " Compiling proc-macro2 v1.0.107\n Compiling quote v1.0.47\n Compiling unicode-ident v1.0.27\n Compiling version_check v0.9.5\n Compiling cfg-if v1.0.5\n Compiling libc v0.2.191\n Compiling typenum v1.20.1\n Compiling semver v1.0.28\n Compiling serde_core v1.0.229\n Compiling zerocopy v0.8.63\n Compiling cpufeatures v0.2.17\n Compiling utf8parse v0.2.2\n Compiling zmij v1.0.23\n Compiling colorchoice v1.0.5\n Compiling anstyle-query v1.1.5\n Compiling anstyle v1.0.14\n Compiling zeroize v1.9.1\n Compiling serde v1.0.229\n Compiling serde_json v1.0.154\n Compiling subtle v2.6.1\n Compiling signature v2.2.0\n Compiling is_terminal_polyfill v1.70.2\n Compiling heck v0.5.0\n Compiling anstyle-parse v1.0.0\n Compiling strsim v0.11.1\n Compiling clap_lex v1.1.1\n Compiling itoa v1.0.18\n Compiling memchr v2.8.3\n Compiling ed25519 v2.2.3\n Compiling smallvec v1.6.0\n Compiling hex v0.4.3\n Compiling rustc_version v0.4.1\n Compiling generic-array v0.14.7\n Compiling anstream v1.0.0\n Compiling curve25519-dalek v4.1.3\n Compiling clap_builder v4.6.7\n Compiling syn v3.0.9\n Compiling syn v2.0.119\n Compiling block-buffer v0.10.4\n Compiling crypto-common v0.1.7\n Compiling getrandom v0.2.17\n Compiling digest v0.10.7\n Compiling rand_core v0.6.4\n Compiling sha2 v0.10.9\n Compiling serde_derive v1.0.229\n Compiling clap_derive v4.6.7\n Compiling curve25519-dalek-derive v0.1.1\n Compiling ppv-lite86 v0.2.21\n Compiling clap v4.6.7\n Compiling rand_chacha v0.3.1\n Compiling ed25519-dalek v2.2.0\n Compiling rand v0.8.8\n Compiling falsegreen-ledger-core v0.1.0 (/var/lib/falsegreen/work/520d2155-f6c4-43c6-953c-1829b6dd5cc3/run/crates/falsegreen-ledger-core)\n Compiling falsegreen-ledger v0.1.0 (/var/lib/falsegreen/work/520d2155-f6c4-43c6-953c-1829b6dd5cc3/run/crates/falsegreen-ledger)\n Finished `release` profile [optimized] target(s) in 18.40s\n" } ] }, { "id": "tests", "required": true, "passed": true, "commands": [ { "argv": [ "cargo", "test", "--workspace" ], "exit_code": 0, "timed_out": false, "duration_seconds": 6.455088686, "tail": "\nrunning 0 tests\n\ntest result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s\n\n\nrunning 10 tests\ntest the_cli_help_lists_every_command ... ok\ntest a_corrupt_shard_exits_corrupt ... ok\ntest a_policy_violation_exits_policy ... ok\ntest the_export_import_roundtrip_is_hash_stable ... ok\ntest the_full_lifecycle_verifies_clean ... ok\ntest a_tampered_seal_signature_is_detected ... ok\ntest a_tampered_prev_hash_is_detected ... ok\ntest a_tampered_event_field_is_detected ... ok\ntest a_tampered_cross_shard_link_is_detected ... ok\ntest compaction_keeps_the_ledger_verifiable ... ok\n\ntest result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.24s\n\n\nrunning 41 tests\ntest chain::tests::genesis_record_is_deterministic ... ok\ntest chain::tests::prev_hash_is_committed ... ok\ntest chain::tests::tampered_record_fails_hash_check ... ok\ntest chain::tests::hash_changes_when_any_event_field_changes ... ok\ntest chain::tests::unknown_fields_rejected_in_record ... ok\ntest chain::tests::sequence_gap_fails_link_check ... ok\ntest event::tests::canonical_is_sorted_and_stable ... ok\ntest event::tests::context_null_is_canonicalized_as_null_and_rejected ... ok\ntest event::tests::unknown_fields_are_rejected ... ok\ntest event::tests::canonical_round_trips_through_json_with_shuffled_keys ... ok\ntest event::tests::validation_rejects_bad_timestamp ... ok\ntest event::tests::optionals_omit_none_in_canonical_form ... ok\ntest event::tests::validation_rejects_empty_required_fields ... ok\ntest integrity::tests::a_lone_leaf_is_its_own_root_and_odd_leaves_pair_with_themselves ... ok\ntest integrity::tests::merkle_root_rejects_empty_and_non_hex ... ok\ntest policy::tests::an_event_can_violate_several_rules ... ok\ntest integrity::tests::malformed_keys_and_signatures_are_rejected ... ok\ntest policy::tests::deny_rule_fires_on_match ... ok\ntest policy::tests::require_outcome_enforces_the_decision ... ok\ntest integrity::tests::merkle_root_is_deterministic_and_order_sensitive ... ok\ntest policy::tests::deny_rule_fires_only_on_a_match ... ok\ntest policy::tests::validation_rejects_malformed_policies ... ok\ntest store::tests::invalid_event_rejected ... ok\ntest integrity::tests::the_trusted_key_must_match_the_embedded_key ... ok\ntest store::tests::empty_append_is_a_noop ... ok\ntest store::tests::init_and_append_continues_from_genesis ... ok\ntest store::tests::corrupt_line_is_a_parse_error ... ok\ntest store::tests::seal_count_mismatch_rejected ... ok\ntest verify::tests::the_report_is_canonical_json ... ok\ntest compact::tests::compaction_refuses_unsealed_empty_and_already_compacted ... ok\ntest verify::tests::a_sequence_gap_is_caught ... ok\ntest store::tests::append_after_seal_starts_new_shard_linked_to_merkle_root ... ok\ntest verify::tests::policy_violations_land_in_the_report ... ok\ntest verify::tests::a_bad_seal_signature_is_caught ... ok\ntest compact::tests::the_compacted_shard_verifies_and_reports_the_source_root ... ok\ntest verify::tests::a_clean_ledger_verifies ... ok\ntest integrity::tests::sign_and_verify_roundtrip ... ok\ntest integrity::tests::a_tampered_seal_field_fails_verification ... ok\ntest verify::tests::a_tampered_event_is_caught ... ok\ntest verify::tests::a_tampered_record_hash_cascades_downstream ... ok\ntest compact::tests::the_chain_continues_from_the_original_root_after_compaction ... ok\n\ntest result: ok. 41 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s\n\n\nrunning 0 tests\n\ntest result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s\n\n Compiling proc-macro2 v1.0.107\n Compiling unicode-ident v1.0.27\n Compiling quote v1.0.47\n Compiling cfg-if v1.0.5\n Compiling version_check v0.9.5\n Compiling libc v0.2.191\n Compiling typenum v1.20.1\n Compiling semver v1.0.28\n Compiling zerocopy v0.8.63\n Compiling serde_core v1.0.229\n Compiling cpufeatures v0.2.17\n Compiling zmij v1.0.23\n Compiling serde_json v1.0.154\n Compiling signature v2.2.0\n Compiling zeroize v1.9.1\n Compiling serde v1.0.229\n Compiling subtle v2.6.1\n Compiling itoa v1.0.18\n Compiling memchr v2.8.3\n Compiling getrandom v0.4.3\n Compiling utf8parse v0.2.2\n Compiling rustix v1.1.5\n Compiling smallvec v1.6.0\n Compiling ed25519 v2.2.3\n Compiling bitflags v2.13.2\n Compiling anstyle-parse v1.0.0\n Compiling hex v0.4.3\n Compiling linux-raw-sys v0.12.1\n Compiling colorchoice v1.0.5\n Compiling anstyle-query v1.1.5\n Compiling anstyle v1.0.14\n Compiling is_terminal_polyfill v1.70.2\n Compiling once_cell v1.21.4\n Compiling fastrand v2.5.0\n Compiling heck v0.5.0\n Compiling strsim v0.11.1\n Compiling clap_lex v1.1.1\n Compiling rustc_version v0.4.1\n Compiling generic-array v0.14.7\n Compiling anstream v1.0.0\n Compiling curve25519-dalek v4.1.3\n Compiling clap_builder v4.6.7\n Compiling syn v3.0.9\n Compiling syn v2.0.119\n Compiling crypto-common v0.1.7\n Compiling block-buffer v0.10.4\n Compiling getrandom v0.2.17\n Compiling digest v0.10.7\n Compiling rand_core v0.6.4\n Compiling sha2 v0.10.9\n Compiling tempfile v3.27.0\n Compiling curve25519-dalek-derive v0.1.1\n Compiling serde_derive v1.0.229\n Compiling clap_derive v4.6.7\n Compiling ppv-lite86 v0.2.21\n Compiling ed25519-dalek v2.2.0\n Compiling rand_chacha v0.3.1\n Compiling clap v4.6.7\n Compiling rand v0.8.8\n Compiling falsegreen-ledger-core v0.1.0 (/var/lib/falsegreen/work/520d2155-f6c4-43c6-953c-1829b6dd5cc3/run/crates/falsegreen-ledger-core)\n Compiling falsegreen-ledger v0.1.0 (/var/lib/falsegreen/work/520d2155-f6c4-43c6-953c-1829b6dd5cc3/run/crates/falsegreen-ledger)\n Finished `test` profile [unoptimized + debuginfo] target(s) in 6.03s\n Running unittests src/main.rs (target/debug/deps/falsegreen_ledger-ab76082b4462b0b1)\n Running tests/integration.rs (target/debug/deps/integration-22dc6beef3e29bb7)\n Running unittests src/lib.rs (target/debug/deps/falsegreen_ledger_core-d00132f4be88bc4a)\n Doc-tests falsegreen_ledger_core\n" } ] }, { "id": "lint", "required": false, "passed": true, "commands": [ { "argv": [ "cargo", "clippy", "--workspace", "--all-targets", "--", "-D", "warnings" ], "exit_code": 0, "timed_out": false, "duration_seconds": 3.989837834, "tail": " Checking cfg-if v1.0.5\n Checking typenum v1.20.1\n Checking cpufeatures v0.2.17\n Checking utf8parse v0.2.2\n Checking zeroize v1.9.1\n Checking subtle v2.6.1\n Checking signature v2.2.0\n Checking is_terminal_polyfill v1.70.2\n Checking colorchoice v1.0.5\n Checking anstyle-query v1.1.5\n Checking anstyle v1.0.14\n Checking libc v0.2.191\n Checking serde_core v1.0.229\n Checking zerocopy v0.8.63\n Checking zmij v1.0.23\n Checking itoa v1.0.18\n Checking memchr v2.8.3\n Checking strsim v0.11.1\n Checking bitflags v2.13.2\n Checking clap_lex v1.1.1\n Checking smallvec v1.6.0\n Checking linux-raw-sys v0.12.1\n Checking hex v0.4.3\n Checking fastrand v2.5.0\n Checking once_cell v1.21.4\n Checking anstyle-parse v1.0.0\n Checking ed25519 v2.2.3\n Checking anstream v1.0.0\n Checking clap_builder v4.6.7\n Checking rustix v1.1.5\n Checking generic-array v0.14.7\n Checking getrandom v0.2.17\n Checking getrandom v0.4.3\n Checking rand_core v0.6.4\n Checking block-buffer v0.10.4\n Checking crypto-common v0.1.7\n Checking digest v0.10.7\n Checking sha2 v0.10.9\n Checking curve25519-dalek v4.1.3\n Checking clap v4.6.7\n Checking tempfile v3.27.0\n Checking serde v1.0.229\n Checking serde_json v1.0.154\n Checking ed25519-dalek v2.2.0\n Checking falsegreen-ledger-core v0.1.0 (/var/lib/falsegreen/work/520d2155-f6c4-43c6-953c-1829b6dd5cc3/run/crates/falsegreen-ledger-core)\n Checking ppv-lite86 v0.2.21\n Checking rand_chacha v0.3.1\n Checking rand v0.8.8\n Checking falsegreen-ledger v0.1.0 (/var/lib/falsegreen/work/520d2155-f6c4-43c6-953c-1829b6dd5cc3/run/crates/falsegreen-ledger)\n Finished `dev` profile [unoptimized + debuginfo] target(s) in 3.92s\n" }, { "argv": [ "cargo", "fmt", "--all", "--check" ], "exit_code": 0, "timed_out": false, "duration_seconds": 0.092954035, "tail": "" } ] } ], "wall_seconds": 29.16677027, "error": null, "env_sha256": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "environment": { "schema": 1, "eco": "rust", "toolchain": "rustc 1.99.0 (rustc)", "toolchain_version": "1.99.0", "fingerprint": "cb72048928286df9d194d6d7356350b373cefcc81d7ee1899729b6ebe14c8817", "artifacts": [ { "name": "anstream", "version": "1.0.0", "sha256": "824a212faf96e9acacdbd09febd34438f8f711fb84e09a8916013cd7815ca28d" }, { "name": "anstyle", "version": "1.0.14", "sha256": "940b3a0ca603d1eade50a4846a2afffd5ef57a9feac2c0e2ec2e14f9ead76000" }, { "name": "anstyle-parse", "version": "1.0.0", "sha256": "52ce7f38b242319f7cabaa6813055467063ecdc9d355bbb4ce0c68908cd8130e" }, { "name": "anstyle-query", "version": "1.1.5", "sha256": "40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc" }, { "name": "anstyle-wincon", "version": "3.0.11", "sha256": "291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d" }, { "name": "base64ct", "version": "1.8.3", "sha256": "2af50177e190e07a26ab74f8b1efbfe2ef87da2116221318cb1c2e82baf7de06" }, { "name": "bitflags", "version": "2.13.2", "sha256": "3ded4057c258ba199e2d26386d3af3780957ecaee6c4ef4041c6b4b8b97c0b06" }, { "name": "block-buffer", "version": "0.10.4", "sha256": "3078c7629b62d3f0439517fa394996acacc5cbc91c5a20d8c658e77abd503a71" }, { "name": "cfg-if", "version": "1.0.5", "sha256": "4e7648175b45a9a48536d676f68d918270699102aa8dab5496df06904c914600" }, { "name": "clap", "version": "4.6.7", "sha256": "aa8876b300ab35ba921adea3dfd70157a46249b33f95c9084ae5709785478946" }, { "name": "clap_builder", "version": "4.6.7", "sha256": "ec0797fb7aeb1406c84efac526901f7ec3ead2124f946b494e72879d4b54704d" }, { "name": "clap_derive", "version": "4.6.7", "sha256": "f9c751b79415d4e559e3d1fcf128e09e720eb673a06d26cf6f392d37d75b66e0" }, { "name": "clap_lex", "version": "1.1.1", "sha256": "1c133bc6a41be0d194c306b5506d15e6feeea7b1d6604bd3f8310dfb2ca96486" }, { "name": "colorchoice", "version": "1.0.5", "sha256": "1d07550c9036bf2ae0c684c4297d503f838287c83c53686d05370d0e139ae570" }, { "name": "const-oid", "version": "0.9.6", "sha256": "c2459377285ad874054d797f3ccebf984978aa39129f6eafde5cdc8315b612f8" }, { "name": "cpufeatures", "version": "0.2.17", "sha256": "59ed5838eebb26a2bb2e58f6d5b5316989ae9d08bab10e0e6d103e656d1b0280" }, { "name": "crypto-common", "version": "0.1.7", "sha256": "78c8292055d1c1df0cce5d180393dc8cce0abec0a7102adb6c7b1eef6016d60a" }, { "name": "curve25519-dalek", "version": "4.1.3", "sha256": "97fb8b7c4503de7d6ae7b42ab72a5a59857b4c937ec27a3d4539dba95b5ab2be" }, { "name": "curve25519-dalek-derive", "version": "0.1.1", "sha256": "f46882e17999c6cc590af592290432be3bce0428cb0d5f8b6715e4dc7b383eb3" }, { "name": "der", "version": "0.7.10", "sha256": "e7c1832837b905bbfb5101e07cc24c8deddf52f93225eee6ead5f4d63d53ddcb" }, { "name": "digest", "version": "0.10.7", "sha256": "9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292" }, { "name": "ed25519", "version": "2.2.3", "sha256": "115531babc129696a58c64a4fef0a8bf9e9698629fb97e9e40767d235cfbcd53" }, { "name": "ed25519-dalek", "version": "2.2.0", "sha256": "70e796c081cee67dc755e1a36a0a172b897fab85fc3f6bc48307991f64e4eca9" }, { "name": "errno", "version": "0.3.14", "sha256": "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb" }, { "name": "fastrand", "version": "2.5.0", "sha256": "da7c62ceae207dd37ea5b845da6a0696c799f85e97da1ab5b7910be3c1c80223" }, { "name": "fiat-crypto", "version": "0.2.9", "sha256": "28dea519a9695b9977216879a3ebfddf92f1c08c05d984f8996aecd6ecdc811d" }, { "name": "generic-array", "version": "0.14.7", "sha256": "85649ca51fd72272d7821adaf274ad91c288277713d9c18820d8499a7ff69e9a" }, { "name": "getrandom", "version": "0.2.17", "sha256": "ff2abc00be7fca6ebc474524697ae276ad847ad0a6b3faa4bcb027e9a4614ad0" }, { "name": "getrandom", "version": "0.4.3", "sha256": "300e883d756b2e4ec94e02791f39b04b522276138852cfc41d9fb7e904106099" }, { "name": "heck", "version": "0.5.0", "sha256": "2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea" }, { "name": "hex", "version": "0.4.3", "sha256": "7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70" }, { "name": "is_terminal_polyfill", "version": "1.70.2", "sha256": "a6cb138bb79a146c1bd460005623e142ef0181e3d0219cb493e02f7d08a35695" }, { "name": "itoa", "version": "1.0.18", "sha256": "8f42a60cbdf9a97f5d2305f08a87dc4e09308d1276d28c869c684d7777685682" }, { "name": "libc", "version": "0.2.191", "sha256": "65cd87c9a6d60536580b316ad985726104730a5151c99845f2490428ef91240a" }, { "name": "linux-raw-sys", "version": "0.12.1", "sha256": "32a66949e030da00e8c7d4434b251670a91556f4144941d37452769c25d58a53" }, { "name": "memchr", "version": "2.8.3", "sha256": "cf8baf1c55e62ffcace7a9f06f4bd9cd3f0c4beb022d3b367256b91b87513d98" }, { "name": "once_cell", "version": "1.21.4", "sha256": "9f7c3e4beb33f85d45ae3e3a1792185706c8e16d043238c593331cc7cd313b50" }, { "name": "once_cell_polyfill", "version": "1.70.2", "sha256": "384b8ab6d37215f3c5301a95a4accb5d64aa607f1fcb26a11b5303878451b4fe" }, { "name": "pkcs8", "version": "0.10.2", "sha256": "f950b2377845cebe5cf8b5165cb3cc1a5e0fa5cfa3e1f7f55707d8fd82e0a7b7" }, { "name": "ppv-lite86", "version": "0.2.21", "sha256": "85eae3c4ed2f50dcfe72643da4befc30deadb458a9b590d720cde2f2b1e97da9" }, { "name": "proc-macro2", "version": "1.0.107", "sha256": "985e7ec9bb745e6ce6535b544d84d6cd6f7ad8bd711c398938ae983b91a766d9" }, { "name": "quote", "version": "1.0.47", "sha256": "1fbf4db142a473a8d80c26bbf18454ed458bf8d26c8219c331daecfdbd079001" }, { "name": "r-efi", "version": "6.0.0", "sha256": "f8dcc9c7d52a811697d2151c701e0d08956f92b0e24136cf4cf27b57a6a0d9bf" }, { "name": "rand", "version": "0.8.8", "sha256": "e058c7de0b26af77780c769414d6257830bb240f3c38477dbc2c16e5f54d6d4c" }, { "name": "rand_chacha", "version": "0.3.1", "sha256": "e6c10a63a0fa32252be49d21e7709d4d4baf8d231c2dbce1eaa8141b9b127d88" }, { "name": "rand_core", "version": "0.6.4", "sha256": "ec0be4795e2f6a28069bec0b5ff3e2ac9bafc99e6a9a7dc3547996c5c816922c" }, { "name": "rustc_version", "version": "0.4.1", "sha256": "cfcb3a22ef46e85b45de6ee7e79d063319ebb6594faafcf1c225ea92ab6e9b92" }, { "name": "rustix", "version": "1.1.5", "sha256": "891efababe418670775f199f0d233d84843c227a0949a883ce15b37c78d6629d" }, { "name": "semver", "version": "1.0.28", "sha256": "8a7852d02fc848982e0c167ef163aaff9cd91dc640ba85e263cb1ce46fae51cd" }, { "name": "serde", "version": "1.0.229", "sha256": "4148590afebada386688f18773da617792bf2ef03ffc1e4cbd2b1d45b023e0ba" }, { "name": "serde_core", "version": "1.0.229", "sha256": "67dca2c9c51e58a4791a4b1ed58308b39c64224d349a935ab5039aa360942a48" }, { "name": "serde_derive", "version": "1.0.229", "sha256": "e7a5d71263a5a7d47b41f6b3f06ba276f10cc18b0931f1799f710578e2309348" }, { "name": "serde_json", "version": "1.0.154", "sha256": "e7e9cc8b1b85264074fbcc02a88680c4096b1e47df8f739dceb03bf482f04bd6" }, { "name": "sha2", "version": "0.10.9", "sha256": "a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283" }, { "name": "signature", "version": "2.2.0", "sha256": "77549399552de45a898a580c1b41d445bf730df867cc44e6c0233bbc4b8329de" }, { "name": "smallvec", "version": "1.6.0", "sha256": "1a55ca5f3b68e41c979bf8c46a6f1da892ca4db8f94023ce0bd32407573b1ac0" }, { "name": "spki", "version": "0.7.3", "sha256": "d91ed6c858b01f942cd56b37a94b3e0a1798290327d1236e4d9cf4eaca44d29d" }, { "name": "strsim", "version": "0.11.1", "sha256": "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f" }, { "name": "subtle", "version": "2.6.1", "sha256": "13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292" }, { "name": "syn", "version": "2.0.119", "sha256": "872831b642d1a07999a962a351ed35b955ea2cfc8f3862091e2a240a84f17297" }, { "name": "syn", "version": "3.0.9", "sha256": "d78c8dee4c7bf0e14673097256fed6142ce9d3b85a408189d07482442145823b" }, { "name": "tempfile", "version": "3.27.0", "sha256": "32497e9a4c7b38532efcdebeef879707aa9f794296a4f0244f6f69e9bc8574bd" }, { "name": "typenum", "version": "1.20.1", "sha256": "b6f5e870be6c3b371b77fe0ee0bafb859fa4964b4404c27de1d380043c4dda20" }, { "name": "unicode-ident", "version": "1.0.27", "sha256": "a2c754d6c33795a1c324727428e5a7dedb5b06195f9890bdbcba760d3e246563" }, { "name": "utf8parse", "version": "0.2.2", "sha256": "06abde3611657adf66d383f00b093d7faecc7fa57071cce2578660c9f1010821" }, { "name": "version_check", "version": "0.9.5", "sha256": "0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a" }, { "name": "wasi", "version": "0.11.1+wasi-snapshot-preview1", "sha256": "ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b" }, { "name": "windows-link", "version": "0.2.1", "sha256": "f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5" }, { "name": "windows-sys", "version": "0.61.2", "sha256": "ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc" }, { "name": "zerocopy", "version": "0.8.63", "sha256": "e5fe1f8f1b06191a00962174c61aa5005e0bb391a6d80d07e24d115c01a92ed8" }, { "name": "zerocopy-derive", "version": "0.8.63", "sha256": "863ad3ac83293fb4d740aedbfdc9240dd8d1a50c1099acd76ce80ce7c7230c7f" }, { "name": "zeroize", "version": "1.9.1", "sha256": "e13084392c5e4bc371903e2935a5eaeed24905a7511356b883835e18a78f6879" }, { "name": "zmij", "version": "1.0.23", "sha256": "29666d0abbfad1e3dc4dcf6144730dd3a3ab225bbbdac83319345b1b44ccfc1b" } ] }, "witness_invocations": [ { "tool": "osv-scanner", "version": "2.7.0", "binary_digest": "160c6253e2922e9e0a6a9771c5c4c40a4b3c6090b34a3cdd5e80c96cc2e4218b", "config_digest": "0c3d6fef8ea59e1de5610e13ccb1035a7232318288aaed517ee2feec9402455a", "invocation_digest": "15a5265bc4667e071e501c5a47363b48c6fcceeb9d6576979fb954be9065d729", "input_subject_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "504f53629d55e16689863e5f5be007f8569c05eb846a54fb0a6d3c3adb4dca39", "normalized_evidence_digest": "a01c9fbe2e0f89ba51e98a9f9adb3e2221181b02f05426888a8e8e1d4c6f99a0", "limitations": [ "osv-scanner checks registry-based ecosystems (crates.io in 0.6.0); git-sourced dependencies (lean [[require]], gpr) have no advisory database — Insufficient Evidence for them, never a silent pass" ], "evidence_class": "dependency_vulnerability", "observed_at": "2026-10-21T17:55:42.395700205+00:00", "findings": [ { "rule_namespace": "osv", "rule_id": "RUSTSEC-2021-0003", "severity": "high", "component": "pkg:crates.io/smallvec@1.6.0", "fingerprint": "33785582b0bffd15e2724184577c08f01121749519544d60019637759fc0278a", "state": "open" }, { "rule_namespace": "osv", "rule_id": "GHSA-43w2-9j62-hq99", "severity": "high", "component": "pkg:crates.io/smallvec@1.6.0", "fingerprint": "ba50c1802e51ced38a54ef5d84d292c2efbb3b72e0751e638b8539d27f3d1ebb", "state": "open" } ] }, { "tool": "semgrep", "version": "1.181.0", "binary_digest": "c29de7c43986faa3c3ca5a8acf1d115811e15ab305ba7657b79e775d40e16391", "config_digest": "206116bd213f0786f8378755ad48adbccfe30376afe8fe2ecdd24eb44161d009", "invocation_digest": "f1f5bcbd6c30b2a3103b2d7b406b6b47621af05e894478878f75a703a1bea1a8", "input_subject_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "80c185ac8e17503197e8195c202d98db3f0cd3865a37ba7065f37bdbf2a58d54", "normalized_evidence_digest": "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "limitations": [], "evidence_class": "static_analysis", "observed_at": "2026-10-21T17:55:42.395700205+00:00", "findings": [] }, { "tool": "gitleaks", "version": "8.30.1", "binary_digest": "88f91962aa2f93ac6ab281d553b9e125f5197bbbce38f9f2437f7299c32e5509", "config_digest": "e1f77c307b36a43d3707ab5fed4a4007f6d63d9302bcf0d5509cd3e52e32ed6f", "invocation_digest": "42666d05fda40180a6e02009efbf2804e8943b00bdfe111385984d6de0574164", "input_subject_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "37517e5f3dc66819f61f5a7bb8ace1921282415f10551d2defa5c3eb0985b570", "normalized_evidence_digest": "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "limitations": [], "evidence_class": "secret", "observed_at": "2026-10-21T17:55:42.395700205+00:00", "findings": [] }, { "tool": "syft", "version": "1.54.1", "binary_digest": "dbf75864e7a7ff9e1fbf00552c31483f693188632a9f68f343cd7653dac513d6", "config_digest": "b6f045a568b2dd1dcd1a1723f4eb0b8f5863215301ced35067a5f7a53c07c7e6", "invocation_digest": "a95ce6f3f2d3bbc188fbc95c27a2fcebeace6084d0f572bd53ee496b88fc9204", "input_subject_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "9296e29d5a5b2a30bfc021afcde5b459bdbf82b5154e55b327d7df3e0cee8c01", "normalized_evidence_digest": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "limitations": [], "evidence_class": "supply_chain", "observed_at": "2026-10-21T17:55:42.395700205+00:00", "findings": [ { "rule_namespace": "syft", "rule_id": "anstream@1.0.0", "component": "pkg:cargo/anstream@1.0.0", "fingerprint": "1001468a98bf8f886f889f3b76dee0717eea1611dbab5c3ec415bc0a9d3f9853", "state": "open" }, { "rule_namespace": "syft", "rule_id": "anstyle@1.0.14", "component": "pkg:cargo/anstyle@1.0.14", "fingerprint": "b4423ac5d91607f895d2e4f6b3b58b3b98e3220e95d5a560719a38f26e88a9aa", "state": "open" }, { "rule_namespace": "syft", "rule_id": "anstyle-parse@1.0.0", "component": "pkg:cargo/anstyle-parse@1.0.0", "fingerprint": "86b1ca2b439dac8c8ccf11610d2f44a40fa2c28b49c7a4f67fffc5ad7e7a4c34", "state": "open" }, { "rule_namespace": "syft", "rule_id": "anstyle-query@1.1.5", "component": "pkg:cargo/anstyle-query@1.1.5", "fingerprint": "59e640d2af9d99361184e5dd537b90d2c59bda2eba7000d96ad1688025214430", "state": "open" }, { "rule_namespace": "syft", "rule_id": "anstyle-wincon@3.0.11", "component": "pkg:cargo/anstyle-wincon@3.0.11", "fingerprint": "3b50475de5d0ec3dd61737fa6a9f81887b3ee6ff55d9fd7afecaa6d985cd26e6", "state": "open" }, { "rule_namespace": "syft", "rule_id": "base64ct@1.8.3", "component": "pkg:cargo/base64ct@1.8.3", "fingerprint": "5656f108cca5b4825c10d9ceed24fec9707f89915b6d39bb2c2f79b59f6a1eaf", "state": "open" }, { "rule_namespace": "syft", "rule_id": "bitflags@2.13.2", "component": "pkg:cargo/bitflags@2.13.2", "fingerprint": "2f570cfac9dde16b280d8ce6521d29be556270814081e669ebb29f300aac7e82", "state": "open" }, { "rule_namespace": "syft", "rule_id": "block-buffer@0.10.4", "component": "pkg:cargo/block-buffer@0.10.4", "fingerprint": "2b4e003d5403bd7ccd2ef88c2dcfba20586172a36e9e5feb24203884290f3fb8", "state": "open" }, { "rule_namespace": "syft", "rule_id": "cfg-if@1.0.5", "component": "pkg:cargo/cfg-if@1.0.5", "fingerprint": "40e2ca0f72307e7f2b92a7626063d84ab55fa1db6f40e2fdaea4eb417bb3d9f6", "state": "open" }, { "rule_namespace": "syft", "rule_id": "clap@4.6.7", "component": "pkg:cargo/clap@4.6.7", "fingerprint": "8b5288edc94ee3c1804eb2664bb8a57974ed5bd708efaad6ab63165c19e80dfd", "state": "open" }, { "rule_namespace": "syft", "rule_id": "clap_builder@4.6.7", "component": "pkg:cargo/clap_builder@4.6.7", "fingerprint": "4b4192da7ea8835334cc519c92e9230c5aa48d6e8b5905d5dc735155981a1f5d", "state": "open" }, { "rule_namespace": "syft", "rule_id": "clap_derive@4.6.7", "component": "pkg:cargo/clap_derive@4.6.7", "fingerprint": "4d51f0052690cd07873e9f2360688e746bd74d01be8bce8eb1e09d4b5ee2869f", "state": "open" }, { "rule_namespace": "syft", "rule_id": "clap_lex@1.1.1", "component": "pkg:cargo/clap_lex@1.1.1", "fingerprint": "d5118fb3b03cf55c1b5d2058dc703e5287863abfafc62e948f8bd37c554eed93", "state": "open" }, { "rule_namespace": "syft", "rule_id": "colorchoice@1.0.5", "component": "pkg:cargo/colorchoice@1.0.5", "fingerprint": "333b5e3b16c10da6f952448b19c196e74ca809dd500e5b626c5e94eca9950908", "state": "open" }, { "rule_namespace": "syft", "rule_id": "const-oid@0.9.6", "component": "pkg:cargo/const-oid@0.9.6", "fingerprint": "5541a7190761ecc001f652cbea75f887d34a63857a9d4a833c6c04c4f66c9cc2", "state": "open" }, { "rule_namespace": "syft", "rule_id": "cpufeatures@0.2.17", "component": "pkg:cargo/cpufeatures@0.2.17", "fingerprint": "2c41be5a411d55d53a6e1ecaae69000d6cfafc653329b5a415c3833ca3d938a3", "state": "open" }, { "rule_namespace": "syft", "rule_id": "crypto-common@0.1.7", "component": "pkg:cargo/crypto-common@0.1.7", "fingerprint": "94ebb3d3a04823de45b978f7f2d92b817a60a7eb82d8c7b676a832d72e58684f", "state": "open" }, { "rule_namespace": "syft", "rule_id": "curve25519-dalek@4.1.3", "component": "pkg:cargo/curve25519-dalek@4.1.3", "fingerprint": "fe69847583a09dbb422ed424b8822f6081a5b9a9ea4a5a0659aeeae90a1f3b68", "state": "open" }, { "rule_namespace": "syft", "rule_id": "curve25519-dalek-derive@0.1.1", "component": "pkg:cargo/curve25519-dalek-derive@0.1.1", "fingerprint": "30988a4946cd7b5896513c53b8f46fef2f041b7a32a8444f2fbbbe35504b0d30", "state": "open" }, { "rule_namespace": "syft", "rule_id": "der@0.7.10", "component": "pkg:cargo/der@0.7.10", "fingerprint": "8163a7cb6df166afc2111e82c998716d8b3a803f1869d677792d321ac2c09c7e", "state": "open" }, { "rule_namespace": "syft", "rule_id": "digest@0.10.7", "component": "pkg:cargo/digest@0.10.7", "fingerprint": "f543d9aefa032f0994738474a351c2d2be5ba43859f3a3edd9a65494ee9238b8", "state": "open" }, { "rule_namespace": "syft", "rule_id": "ed25519@2.2.3", "component": "pkg:cargo/ed25519@2.2.3", "fingerprint": "1a02d28487a2543cf9326fab370709729bebc9627626b39581bd1df154e91dbd", "state": "open" }, { "rule_namespace": "syft", "rule_id": "ed25519-dalek@2.2.0", "component": "pkg:cargo/ed25519-dalek@2.2.0", "fingerprint": "5d7bc1f87b8a0a9b4d360efd55b594a08fa0a5fef8d15fcf5ad942263a934c2d", "state": "open" }, { "rule_namespace": "syft", "rule_id": "errno@0.3.14", "component": "pkg:cargo/errno@0.3.14", "fingerprint": "fe0c520b266d11e2ad249f8ded3c90b5f136fb9263021fc61136e8c181a8023f", "state": "open" }, { "rule_namespace": "syft", "rule_id": "falsegreen-ledger@0.1.0", "component": "", "fingerprint": "841d8d48762b69b0eac8a31c3cdc02cd1eacac1caf7d69c291615aecc96b9ba8", "state": "open" }, { "rule_namespace": "syft", "rule_id": "falsegreen-ledger-core@0.1.0", "component": "", "fingerprint": "99c0e29b042978b26ae2896dfffc0866c8638f5604b43b5a33122de2f9811c19", "state": "open" }, { "rule_namespace": "syft", "rule_id": "fastrand@2.5.0", "component": "pkg:cargo/fastrand@2.5.0", "fingerprint": "2b7ba02485a3d76cc19b17317882c1dd65511ed5ad95e9e70a0bb5d7f5dd4043", "state": "open" }, { "rule_namespace": "syft", "rule_id": "fiat-crypto@0.2.9", "component": "pkg:cargo/fiat-crypto@0.2.9", "fingerprint": "de9f033198ba6f74b0c4f8cc0f961ff4d5f3b764d3a1e60f0f68a66fcb26f54f", "state": "open" }, { "rule_namespace": "syft", "rule_id": "generic-array@0.14.7", "component": "pkg:cargo/generic-array@0.14.7", "fingerprint": "375236d1387d03ae58db25418fce92969adbd21eca601a82cd8dc683fe60f20f", "state": "open" }, { "rule_namespace": "syft", "rule_id": "getrandom@0.2.17", "component": "pkg:cargo/getrandom@0.2.17", "fingerprint": "80e36ea36c4959f0d1b4dd76769554760054be60923fa8eae72bc10d83b30b90", "state": "open" }, { "rule_namespace": "syft", "rule_id": "getrandom@0.4.3", "component": "pkg:cargo/getrandom@0.4.3", "fingerprint": "05b5d32e6e201ead770f640d3986020565688d70ca4bf6d323def662c9b10bc0", "state": "open" }, { "rule_namespace": "syft", "rule_id": "heck@0.5.0", "component": "pkg:cargo/heck@0.5.0", "fingerprint": "c5eb23be3fdbc8afafc1cca8b9c5767bab582488149444a86b1d000d74e3c97a", "state": "open" }, { "rule_namespace": "syft", "rule_id": "hex@0.4.3", "component": "pkg:cargo/hex@0.4.3", "fingerprint": "79f94666cd1756f5374c513addc3b9444043d08bb49050dae4998fc934de41af", "state": "open" }, { "rule_namespace": "syft", "rule_id": "is_terminal_polyfill@1.70.2", "component": "pkg:cargo/is_terminal_polyfill@1.70.2", "fingerprint": "b005b2478a3e5a28b543b644c46c0e2049ab156cd1ccd7133ea9f40a5626b62d", "state": "open" }, { "rule_namespace": "syft", "rule_id": "itoa@1.0.18", "component": "pkg:cargo/itoa@1.0.18", "fingerprint": "aec45ddec07a815da2a5c182001bfe6e554ed2a0b89259d327f793511a774c40", "state": "open" }, { "rule_namespace": "syft", "rule_id": "libc@0.2.191", "component": "pkg:cargo/libc@0.2.191", "fingerprint": "b0e83395a6df61531693965b5dc89908e48f1fc30363b236cdebf457b3b8d84a", "state": "open" }, { "rule_namespace": "syft", "rule_id": "linux-raw-sys@0.12.1", "component": "pkg:cargo/linux-raw-sys@0.12.1", "fingerprint": "7516ef772912bc7e53189e7272c2213556425bc370efc1936e07fd2f7141dab0", "state": "open" }, { "rule_namespace": "syft", "rule_id": "memchr@2.8.3", "component": "pkg:cargo/memchr@2.8.3", "fingerprint": "19c7f7c6470891a44bd18bae9b5a2d1d0a9674e609cb6b681b6d78594026b1c0", "state": "open" }, { "rule_namespace": "syft", "rule_id": "once_cell@1.21.4", "component": "pkg:cargo/once_cell@1.21.4", "fingerprint": "5df49b2099b0dc508144dd3ce7f17d8ef89e1ca37347a5a9732cc45bef8a0865", "state": "open" }, { "rule_namespace": "syft", "rule_id": "once_cell_polyfill@1.70.2", "component": "pkg:cargo/once_cell_polyfill@1.70.2", "fingerprint": "67dbadfb6f4218d894e3b81d8d454f1540509b7c38981b00170ce499b12f89cc", "state": "open" }, { "rule_namespace": "syft", "rule_id": "pkcs8@0.10.2", "component": "pkg:cargo/pkcs8@0.10.2", "fingerprint": "c47c76d7946c7de7d9e8ccb0ce88035f70f673c663ff4bc87d7186e2cd59e8fe", "state": "open" }, { "rule_namespace": "syft", "rule_id": "ppv-lite86@0.2.21", "component": "pkg:cargo/ppv-lite86@0.2.21", "fingerprint": "9947e5da4cc28604998b938686ba44e72cd4382ce0330b0b7457439028a32e72", "state": "open" }, { "rule_namespace": "syft", "rule_id": "proc-macro2@1.0.107", "component": "pkg:cargo/proc-macro2@1.0.107", "fingerprint": "8a7eb5f7e790f0c2621a0b8b0602d5e8df183461cc0627f75774260b6b3ade32", "state": "open" }, { "rule_namespace": "syft", "rule_id": "quote@1.0.47", "component": "pkg:cargo/quote@1.0.47", "fingerprint": "ba5b73c1936ffd2ab425cc8480b56e7b5f48125bec80e2b12a1a44baa9c1c558", "state": "open" }, { "rule_namespace": "syft", "rule_id": "r-efi@6.0.0", "component": "pkg:cargo/r-efi@6.0.0", "fingerprint": "122b7ca8782f044bbf34b34a6611015ab063c5941471a1f9edf52859953335ea", "state": "open" }, { "rule_namespace": "syft", "rule_id": "rand@0.8.8", "component": "pkg:cargo/rand@0.8.8", "fingerprint": "d75967c1358b7152e9dec7577066f5049015cdd77c70b9c353ec196342cef83b", "state": "open" }, { "rule_namespace": "syft", "rule_id": "rand_chacha@0.3.1", "component": "pkg:cargo/rand_chacha@0.3.1", "fingerprint": "98b4b52cb9630b79c95cd3ce370098fda6810c9893935c1623818e6c2bc6a950", "state": "open" }, { "rule_namespace": "syft", "rule_id": "rand_core@0.6.4", "component": "pkg:cargo/rand_core@0.6.4", "fingerprint": "881bc35797d5dbc04b02e40860ac237cc76ab1e8561cd4d39d3fc0a1c3155a12", "state": "open" }, { "rule_namespace": "syft", "rule_id": "rustc_version@0.4.1", "component": "pkg:cargo/rustc_version@0.4.1", "fingerprint": "b856fc7dc29ef6489b43403c317b31a5c2f7469df3e78eb38496d906f65a41f9", "state": "open" }, { "rule_namespace": "syft", "rule_id": "rustix@1.1.5", "component": "pkg:cargo/rustix@1.1.5", "fingerprint": "161a149e15f158acea456dd7572470352fcc38e9861cf74a7affcdbebb3be84c", "state": "open" }, { "rule_namespace": "syft", "rule_id": "semver@1.0.28", "component": "pkg:cargo/semver@1.0.28", "fingerprint": "adf8dd8c6eab8cbfba291126118409767783c7721216321d264e71566a86fb64", "state": "open" }, { "rule_namespace": "syft", "rule_id": "serde@1.0.229", "component": "pkg:cargo/serde@1.0.229", "fingerprint": "6d867eaaeef95071a1e043e0f22f4765333205c756611890f0f6ee0f0bf2844a", "state": "open" }, { "rule_namespace": "syft", "rule_id": "serde_core@1.0.229", "component": "pkg:cargo/serde_core@1.0.229", "fingerprint": "e510c18b9a78eaa008df3d1ced75890c6610e5b6802183c55c7bbe66f2b08705", "state": "open" }, { "rule_namespace": "syft", "rule_id": "serde_derive@1.0.229", "component": "pkg:cargo/serde_derive@1.0.229", "fingerprint": "000799b93838d093c6bbd43247666d235ecbfd735b93222d2cd26233f0fb28ec", "state": "open" }, { "rule_namespace": "syft", "rule_id": "serde_json@1.0.154", "component": "pkg:cargo/serde_json@1.0.154", "fingerprint": "349a0dd333a0d2897b42960e7efb1d0830ab09b3e9eeb1e2acdeb5a200f289e1", "state": "open" }, { "rule_namespace": "syft", "rule_id": "sha2@0.10.9", "component": "pkg:cargo/sha2@0.10.9", "fingerprint": "477b1f1b81c82609f675f2c5aeb53cfb9f1191376ff8845a5647e9c6b05388df", "state": "open" }, { "rule_namespace": "syft", "rule_id": "signature@2.2.0", "component": "pkg:cargo/signature@2.2.0", "fingerprint": "7d8fc0ddf33982f4c2b6ca2f3739dc5f209faca02c4d8a01cb67023acf125d9c", "state": "open" }, { "rule_namespace": "syft", "rule_id": "smallvec@1.6.0", "component": "pkg:cargo/smallvec@1.6.0", "fingerprint": "1b292519074e47f7a1b01edc1ec1476b2f282e47ec7640820c0bad1afd635a20", "state": "open" }, { "rule_namespace": "syft", "rule_id": "spki@0.7.3", "component": "pkg:cargo/spki@0.7.3", "fingerprint": "e7593fa9bc039e2db40a3a71927e7b104a79be42d02d04e04b1b373dad5f9354", "state": "open" }, { "rule_namespace": "syft", "rule_id": "strsim@0.11.1", "component": "pkg:cargo/strsim@0.11.1", "fingerprint": "7260c481b09f354b4c8d13996a46735f790af5206fa07ffa86f3d9601768719a", "state": "open" }, { "rule_namespace": "syft", "rule_id": "subtle@2.6.1", "component": "pkg:cargo/subtle@2.6.1", "fingerprint": "abf520278b97397636ae0d0fba9c430b656b0af89b288300d4c9e12cd1bad2a9", "state": "open" }, { "rule_namespace": "syft", "rule_id": "syn@2.0.119", "component": "pkg:cargo/syn@2.0.119", "fingerprint": "80bcee46aef1b69a610a3810a2f7dc3fec1a8cff8a4366bc2369f50b8543a5e0", "state": "open" }, { "rule_namespace": "syft", "rule_id": "syn@3.0.9", "component": "pkg:cargo/syn@3.0.9", "fingerprint": "114cde3e9bfa178c4b502cb01a87d49a704c293fc6d1a07270388d14b152c9c2", "state": "open" }, { "rule_namespace": "syft", "rule_id": "tempfile@3.27.0", "component": "pkg:cargo/tempfile@3.27.0", "fingerprint": "cc64344e2b0f434ddea53beb971184de5fd0a84c6a9739eff5255d69b2d42a3c", "state": "open" }, { "rule_namespace": "syft", "rule_id": "typenum@1.20.1", "component": "pkg:cargo/typenum@1.20.1", "fingerprint": "69fca6104cc42ad018ccf1e723d8e6cc55ad7d890cbeaf9f3073487edb4e9c81", "state": "open" }, { "rule_namespace": "syft", "rule_id": "unicode-ident@1.0.27", "component": "pkg:cargo/unicode-ident@1.0.27", "fingerprint": "c8f069b4043c8b0afcbf7d2f1d9fdb3681c8f8cc75ee03d318b515654ab1e21c", "state": "open" }, { "rule_namespace": "syft", "rule_id": "utf8parse@0.2.2", "component": "pkg:cargo/utf8parse@0.2.2", "fingerprint": "c28ef21ff55492434ef623166a53f268c1c02540b430df3967683388cacd9336", "state": "open" }, { "rule_namespace": "syft", "rule_id": "version_check@0.9.5", "component": "pkg:cargo/version_check@0.9.5", "fingerprint": "a37defdbf8011a14f68d31205b137179a3eec551816dc2a2b861965901eed251", "state": "open" }, { "rule_namespace": "syft", "rule_id": "wasi@0.11.1+wasi-snapshot-preview1", "component": "pkg:cargo/wasi@0.11.1%2Bwasi-snapshot-preview1", "fingerprint": "8224d335948f5ae82312adc7b5040e9331715f1f580a94ac77e55f15af60fb24", "state": "open" }, { "rule_namespace": "syft", "rule_id": "windows-link@0.2.1", "component": "pkg:cargo/windows-link@0.2.1", "fingerprint": "f2e9441ed9c64738dc6bd8be208ecb9b3f0f2eb8ea5ddeb4fa1303339bb340d6", "state": "open" }, { "rule_namespace": "syft", "rule_id": "windows-sys@0.61.2", "component": "pkg:cargo/windows-sys@0.61.2", "fingerprint": "b2713fc2f7bff729a27c0f62ee1be368d8344e0a7237e06edae435bfe00f9353", "state": "open" }, { "rule_namespace": "syft", "rule_id": "zerocopy@0.8.63", "component": "pkg:cargo/zerocopy@0.8.63", "fingerprint": "538de62743d2a698d49ae17957387bceef902f05602838b337eb33ef3a2018ca", "state": "open" }, { "rule_namespace": "syft", "rule_id": "zerocopy-derive@0.8.63", "component": "pkg:cargo/zerocopy-derive@0.8.63", "fingerprint": "c28066f0d74cc875b1313b642f5b65466e41ca5928021fdf354e3a5158e5f887", "state": "open" }, { "rule_namespace": "syft", "rule_id": "zeroize@1.9.1", "component": "pkg:cargo/zeroize@1.9.1", "fingerprint": "a9b132d8d889548f19dbf2f1ed6a078ca10079500e9a4e3e2c23e407a3c4c2bb", "state": "open" }, { "rule_namespace": "syft", "rule_id": "zmij@1.0.23", "component": "pkg:cargo/zmij@1.0.23", "fingerprint": "18a805aded02f77466f8ea530827dac33264f4eea283a1e3793fe895db3d0ad5", "state": "open" } ] }, { "tool": "dependency-manifest", "version": "1", "binary_digest": "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4", "config_digest": "2402cf6f9fd45d6c6d7b9bc10abdba72e36d61e88515a01d2cda19ee8d375b3b", "invocation_digest": "ea3bcb0676655d57ddbde14979bc7caa0358a6b87a32fe47ad6fc28ecfe3e0d0", "input_subject_digest": "bdfbca2b16dfbe856fb4b96879974d70b50882791902d790ae24e85e8e8640b7", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4", "normalized_evidence_digest": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "limitations": [ "license facts are the job dependency manifest's registry SPDX ids; the workspace's own code and git-sourced dependencies carry no registry license facts" ], "evidence_class": "license", "observed_at": "2026-10-21T17:55:42.395700205+00:00", "findings": [ { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/anstream@1.0.0", "fingerprint": "81c389e920feb226956ea5e7e905e055ef3190e347d2024731cba977530b1c28", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/anstyle@1.0.14", "fingerprint": "72cb9f765ade0582fd1b8d4e3ec30734124e9580702182e52b07ce552ace97b1", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/anstyle-parse@1.0.0", "fingerprint": "03dae4cdd1bc7ba73958bf1c617e4f5aa93a31d30b5efa57cb32af82f5010ef9", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/anstyle-query@1.1.5", "fingerprint": "847b1133ac62af0c80b617aa8a687925f44ff02a38077b59d57f8a3d2c9e7377", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/anstyle-wincon@3.0.11", "fingerprint": "930051eead4685b3c169c214c7e4bf568a6b18c75060c642828af9b1e4a92cb7", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/base64ct@1.8.3", "fingerprint": "c2936ea98513be3acbc17ec843a0b5a87f2ec66b23198a7e457cbfe82501de17", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/bitflags@2.13.2", "fingerprint": "5a267ea0d4b32ca26ee6285110e4831c63bc24aba4b4ef50a6ce820dab9bc9c7", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/block-buffer@0.10.4", "fingerprint": "65f5493f0209c5bb833a448c5a4f8d34ea9cbb19fd226d673fb6378da3d45d81", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/cfg-if@1.0.5", "fingerprint": "9c66873ce2b15cedf8971b5136299c6dbbdbdb00096f984baca5c60e43f20b86", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/clap@4.6.7", "fingerprint": "b6d470dc0b142702b891dd8112eb44dacb7f1e64144fc95e7c4d8188299612c5", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/clap_builder@4.6.7", "fingerprint": "57fd5416fc287aefb50fdd41cdf558dc3aab82e27a8e542cb21cb6641a034fbf", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/clap_derive@4.6.7", "fingerprint": "e4955ec9e34c975255437f60abb69c42ffe6c4faff7bd1b2c2f1f582a1266f6f", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/clap_lex@1.1.1", "fingerprint": "9c1ce04a546342b75e26dcedd88dfd64ed4c42c1e22db5d575ebd9b83bdab96f", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/colorchoice@1.0.5", "fingerprint": "0cd1130d559feb72b1789c9dfc5ca946a042b193f6efe22b205f7179ae628471", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/const-oid@0.9.6", "fingerprint": "dd86b6e6f0675712fca49ad744596692f3308ad888e80c2fe798ae86fcc44761", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/cpufeatures@0.2.17", "fingerprint": "04a7c96209fbd41f9a1817ea4d2a6e8677796fa4ec0dc537d76a9dec0036eb8f", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/crypto-common@0.1.7", "fingerprint": "745d756e8999f1a9a249aed77699c555941595329a4e4343de89ae96e1d0333a", "state": "open" }, { "rule_namespace": "license", "rule_id": "BSD-3-Clause", "component": "pkg:cargo/curve25519-dalek@4.1.3", "fingerprint": "0bb575d6587d75ee9592137d2931238680210aecc215909adba1e5f8072feb00", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT/Apache-2.0", "component": "pkg:cargo/curve25519-dalek-derive@0.1.1", "fingerprint": "2bd313068cc5979f66814611d0f2653764f5f02a5fea3659e6622b7141a9efb2", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/der@0.7.10", "fingerprint": "5581ac6ec26f13cf9bf99838842922d224f796330520c89e209f34f8263deca9", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/digest@0.10.7", "fingerprint": "66d845a56cbb7c318352a08f46d3b6991b4e15095a844109683d6395bea3a1c7", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/ed25519@2.2.3", "fingerprint": "b1ef1484de84840c7c0a2c51933966b0868f8da06be7d59e7b77a92b3dcd12c6", "state": "open" }, { "rule_namespace": "license", "rule_id": "BSD-3-Clause", "component": "pkg:cargo/ed25519-dalek@2.2.0", "fingerprint": "59ce4b8271427de2f3c94b79b2d666608dd0ab80f62ba57ba79decbe90460d6c", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/errno@0.3.14", "fingerprint": "b2cf2d50c9d7e3df66abaf43435835639e08034d0258c853bbb967068248c7c1", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/fastrand@2.5.0", "fingerprint": "68281187c66d4c9670acbf7a748a35df777f7796eace3eb74ecd3c0df1af2377", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0 OR BSD-1-Clause", "component": "pkg:cargo/fiat-crypto@0.2.9", "fingerprint": "ab0d3ee1c57f754c8e9f310625a0a15790a9d09e9ce260b33597c5215179f9fd", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT", "component": "pkg:cargo/generic-array@0.14.7", "fingerprint": "4100baa4894d6f4a883eefdffa6f2a3f3f8932c5f513fd1b463bea367b450a8b", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/getrandom@0.2.17", "fingerprint": "e0e248e843d9c977190d92d5e8671ff1fe633094bec2fd78deda8cc2b9ddd913", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/getrandom@0.4.3", "fingerprint": "d34eb7b77676d5fa2a2fb54ccbdcf812b2e95ece08d523b51a8112876b9e9f1b", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/heck@0.5.0", "fingerprint": "f15e7f9397ec2df7435dfa719bd9ed4ec07a7f9b63f63a6b0a1ded192a681875", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/hex@0.4.3", "fingerprint": "0880807ea598985ae4e2b054afdf19681651cc0555d47de97c81bf15d308e1c1", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/is_terminal_polyfill@1.70.2", "fingerprint": "ea5404a32d8fe5f4d7b7c150ae9c418bef44434084f9807f04760b247a1833b6", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/itoa@1.0.18", "fingerprint": "0b71ec3d77ef8519b86e537ff5fac2a87a1e23a1a94302a67b55044db9e38cb7", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/libc@0.2.191", "fingerprint": "9d9973caa830049a9211e8ed805b7dcf7f690659b71db96bf5c4593d7b2ca614", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT", "component": "pkg:cargo/linux-raw-sys@0.12.1", "fingerprint": "773523a49f8cd1a1df7385ad357b411d263186aa04cb952428f2225c95e692a2", "state": "open" }, { "rule_namespace": "license", "rule_id": "Unlicense OR MIT", "component": "pkg:cargo/memchr@2.8.3", "fingerprint": "bf1591437a6f99fe31f560f71637dd4271236182cf3fe1f2a57f545ab377d916", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/once_cell@1.21.4", "fingerprint": "bf0bc6b374808f7c6f3fd08c0a7d63965be10e3ff39ebcd785fcf0d624f8acb0", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/once_cell_polyfill@1.70.2", "fingerprint": "4e122c54241f8e08146c80b9e7aace82ab89579bab281e82a26ef89d5444df44", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/pkcs8@0.10.2", "fingerprint": "dcf79ef96b12576f3da49211f68cd786c965cbcb198cc01af73f3d5426884627", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/ppv-lite86@0.2.21", "fingerprint": "10dbed4778cb7f48cbbaaafe5a6bc2839b58297bde9f43d49cab1a639d5c927c", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/proc-macro2@1.0.107", "fingerprint": "1efce8992cf906cfadfccce323fa0ae6955df07a7460965cebb2a64de11dc74b", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/quote@1.0.47", "fingerprint": "ab119f6f830df1f8f8ca18f18a1b7e8166482bbc79b529b2b01f1ef8d351dc9d", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0 OR LGPL-2.1-or-later", "component": "pkg:cargo/r-efi@6.0.0", "fingerprint": "79b3757623de39a2d1e2cbc582531edb2232c2fedae78ae86266ff0a657e6692", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/rand@0.8.8", "fingerprint": "671dab68d2ada9d89ee44f0464a0e42d22a9c70a7b4862b87c34ef30801c0b99", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/rand_chacha@0.3.1", "fingerprint": "09545686bd0a3e470a4467c0216f6dd076ee18f9ccdc19e939a2a0c8338a130c", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/rand_core@0.6.4", "fingerprint": "5b4629e1e1e878c03195737d30e6f492dc34c5d799ba36c5c04b8192eece897e", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/rustc_version@0.4.1", "fingerprint": "6ed6e8818bc7dbe359728d9d8c8e843d5421d6999b5853490c9cf658d37e59e0", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT", "component": "pkg:cargo/rustix@1.1.5", "fingerprint": "70045df0de7040cc8e3f8920f8dbce683735be2f3505c999933268304eed3d01", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/semver@1.0.28", "fingerprint": "d1f1194d0512ca4c7a020f03728853a518bbdb6719bc6a3a7fc7caeda7f6bdfe", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/serde@1.0.229", "fingerprint": "e1eb81e653a288a15481d6312ab337b18d44e2d94d49f48ac7c8c3ec800a36f5", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/serde_core@1.0.229", "fingerprint": "4086d666853f837b329582f4ada668b8ee6eb0983c029a5fa7eacb4cd7b95ea7", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/serde_derive@1.0.229", "fingerprint": "4077d1047525fda030d22d1788a1c3aa36c56309be7434055545e4a5acc5435e", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/serde_json@1.0.154", "fingerprint": "2dc62cd2e94dfe2e326379ab19b563408bee14cbd79b7c9730b3cf913df685ee", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/sha2@0.10.9", "fingerprint": "8fffdf2de9a098e260c473f456893764abfb0da25c8edf8f28ef1d8b3b483857", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/signature@2.2.0", "fingerprint": "8409e8477eaa8b299157e472284dbb382c65babc4a10856896a0325c741bfc84", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT/Apache-2.0", "component": "pkg:cargo/smallvec@1.6.0", "fingerprint": "cfe55c94dcb01bd350011e0618de53cfeeccc9fedcf5a83cd1bd293d6dedb9f4", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/spki@0.7.3", "fingerprint": "6d2575dae8ab3515840e41bc7dd0289d19fe62354849d325d3f4876f96842a9b", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT", "component": "pkg:cargo/strsim@0.11.1", "fingerprint": "3803c2ce269d8937cb5ca282cfc7de1c38bec3947a7f800554d22c9b6af0b4ff", "state": "open" }, { "rule_namespace": "license", "rule_id": "BSD-3-Clause", "component": "pkg:cargo/subtle@2.6.1", "fingerprint": "b2905d01e0f0b65a50ff69518e7472eced519c61c4f31a958fedf47503a048c5", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/syn@2.0.119", "fingerprint": "ec75866e642d56853e0689f491ec83f5ca076a545a518dbc71cb657872de02ba", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/syn@3.0.9", "fingerprint": "50816f9296ebef556556bbf41104d9aff94dc3c3b78917993d062c356ece3a83", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/tempfile@3.27.0", "fingerprint": "fb7e166af30cc01cf8d9fa7bc5864a37ef17e94f0dcad6591c23c48b4f16a08f", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/typenum@1.20.1", "fingerprint": "64aa3bf3c0ae12c744475d6fbd6062f2bf93df107d8585dce88c78832b669779", "state": "open" }, { "rule_namespace": "license", "rule_id": "(MIT OR Apache-2.0) AND Unicode-3.0", "component": "pkg:cargo/unicode-ident@1.0.27", "fingerprint": "bbfb4a615f30648ef5a8eaf210033aa1baaab14fa0bc9482ac72ae7641a6e466", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/utf8parse@0.2.2", "fingerprint": "af63bfd1ce1cfe636db88caaa115b8843ca67e96b3dd93f523d84771bf40a073", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT/Apache-2.0", "component": "pkg:cargo/version_check@0.9.5", "fingerprint": "99b8a953eefdb41a40a9a077b9032a3b6a395900604be21a32da30658ce61f15", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT", "component": "pkg:cargo/wasi@0.11.1+wasi-snapshot-preview1", "fingerprint": "d9cbaa8941d43791ff495ffbc74a5ec516e48db88243ab8abce575acfe23e028", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/windows-link@0.2.1", "fingerprint": "6a884f0186ee68ed468285b3dee5325fccd3809ca04aafabffd42e588d76a3e0", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/windows-sys@0.61.2", "fingerprint": "169218fdfc26698b6fd1a352d504c2359a123be3ebf7d7b9e0c223406ce70d21", "state": "open" }, { "rule_namespace": "license", "rule_id": "BSD-2-Clause OR Apache-2.0 OR MIT", "component": "pkg:cargo/zerocopy@0.8.63", "fingerprint": "dca0f093c749462f428d68cecfb63c6f0b0443b944e3f93172bc7b85bea835ec", "state": "open" }, { "rule_namespace": "license", "rule_id": "BSD-2-Clause OR Apache-2.0 OR MIT", "component": "pkg:cargo/zerocopy-derive@0.8.63", "fingerprint": "aa23299329debd40f4b88bbe41983c6f0b798920fe0306bdb2bd12307011eff0", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/zeroize@1.9.1", "fingerprint": "ad04bc15c43493a874503f1f4e5228c67653134c34ae698ee27abc3ba5027fed", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT", "component": "pkg:cargo/zmij@1.0.23", "fingerprint": "cf39f12ea4d06ecb2c119337d3ddd79c7cc97ef7e7e900bb4beb745ac2696a0d", "state": "open" } ] } ], "dependency_manifest": { "ecosystem": "rust", "tool": "cargo", "tool_version": "1.99.0", "entries": [ { "name": "anstream", "version": "1.0.0", "purl": "pkg:cargo/anstream@1.0.0", "sha256": "824a212faf96e9acacdbd09febd34438f8f711fb84e09a8916013cd7815ca28d", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "anstyle", "version": "1.0.14", "purl": "pkg:cargo/anstyle@1.0.14", "sha256": "940b3a0ca603d1eade50a4846a2afffd5ef57a9feac2c0e2ec2e14f9ead76000", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "anstyle-parse", "version": "1.0.0", "purl": "pkg:cargo/anstyle-parse@1.0.0", "sha256": "52ce7f38b242319f7cabaa6813055467063ecdc9d355bbb4ce0c68908cd8130e", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "anstyle-query", "version": "1.1.5", "purl": "pkg:cargo/anstyle-query@1.1.5", "sha256": "40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "anstyle-wincon", "version": "3.0.11", "purl": "pkg:cargo/anstyle-wincon@3.0.11", "sha256": "291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "base64ct", "version": "1.8.3", "purl": "pkg:cargo/base64ct@1.8.3", "sha256": "2af50177e190e07a26ab74f8b1efbfe2ef87da2116221318cb1c2e82baf7de06", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "bitflags", "version": "2.13.2", "purl": "pkg:cargo/bitflags@2.13.2", "sha256": "3ded4057c258ba199e2d26386d3af3780957ecaee6c4ef4041c6b4b8b97c0b06", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "block-buffer", "version": "0.10.4", "purl": "pkg:cargo/block-buffer@0.10.4", "sha256": "3078c7629b62d3f0439517fa394996acacc5cbc91c5a20d8c658e77abd503a71", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "cfg-if", "version": "1.0.5", "purl": "pkg:cargo/cfg-if@1.0.5", "sha256": "4e7648175b45a9a48536d676f68d918270699102aa8dab5496df06904c914600", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "clap", "version": "4.6.7", "purl": "pkg:cargo/clap@4.6.7", "sha256": "aa8876b300ab35ba921adea3dfd70157a46249b33f95c9084ae5709785478946", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "clap_builder", "version": "4.6.7", "purl": "pkg:cargo/clap_builder@4.6.7", "sha256": "ec0797fb7aeb1406c84efac526901f7ec3ead2124f946b494e72879d4b54704d", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "clap_derive", "version": "4.6.7", "purl": "pkg:cargo/clap_derive@4.6.7", "sha256": "f9c751b79415d4e559e3d1fcf128e09e720eb673a06d26cf6f392d37d75b66e0", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "clap_lex", "version": "1.1.1", "purl": "pkg:cargo/clap_lex@1.1.1", "sha256": "1c133bc6a41be0d194c306b5506d15e6feeea7b1d6604bd3f8310dfb2ca96486", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "colorchoice", "version": "1.0.5", "purl": "pkg:cargo/colorchoice@1.0.5", "sha256": "1d07550c9036bf2ae0c684c4297d503f838287c83c53686d05370d0e139ae570", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "const-oid", "version": "0.9.6", "purl": "pkg:cargo/const-oid@0.9.6", "sha256": "c2459377285ad874054d797f3ccebf984978aa39129f6eafde5cdc8315b612f8", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "cpufeatures", "version": "0.2.17", "purl": "pkg:cargo/cpufeatures@0.2.17", "sha256": "59ed5838eebb26a2bb2e58f6d5b5316989ae9d08bab10e0e6d103e656d1b0280", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "crypto-common", "version": "0.1.7", "purl": "pkg:cargo/crypto-common@0.1.7", "sha256": "78c8292055d1c1df0cce5d180393dc8cce0abec0a7102adb6c7b1eef6016d60a", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "curve25519-dalek", "version": "4.1.3", "purl": "pkg:cargo/curve25519-dalek@4.1.3", "sha256": "97fb8b7c4503de7d6ae7b42ab72a5a59857b4c937ec27a3d4539dba95b5ab2be", "scope": "runtime", "licenses": [ "BSD-3-Clause" ] }, { "name": "curve25519-dalek-derive", "version": "0.1.1", "purl": "pkg:cargo/curve25519-dalek-derive@0.1.1", "sha256": "f46882e17999c6cc590af592290432be3bce0428cb0d5f8b6715e4dc7b383eb3", "scope": "runtime", "licenses": [ "MIT/Apache-2.0" ] }, { "name": "der", "version": "0.7.10", "purl": "pkg:cargo/der@0.7.10", "sha256": "e7c1832837b905bbfb5101e07cc24c8deddf52f93225eee6ead5f4d63d53ddcb", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "digest", "version": "0.10.7", "purl": "pkg:cargo/digest@0.10.7", "sha256": "9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "ed25519", "version": "2.2.3", "purl": "pkg:cargo/ed25519@2.2.3", "sha256": "115531babc129696a58c64a4fef0a8bf9e9698629fb97e9e40767d235cfbcd53", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "ed25519-dalek", "version": "2.2.0", "purl": "pkg:cargo/ed25519-dalek@2.2.0", "sha256": "70e796c081cee67dc755e1a36a0a172b897fab85fc3f6bc48307991f64e4eca9", "scope": "runtime", "licenses": [ "BSD-3-Clause" ] }, { "name": "errno", "version": "0.3.14", "purl": "pkg:cargo/errno@0.3.14", "sha256": "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "fastrand", "version": "2.5.0", "purl": "pkg:cargo/fastrand@2.5.0", "sha256": "da7c62ceae207dd37ea5b845da6a0696c799f85e97da1ab5b7910be3c1c80223", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "fiat-crypto", "version": "0.2.9", "purl": "pkg:cargo/fiat-crypto@0.2.9", "sha256": "28dea519a9695b9977216879a3ebfddf92f1c08c05d984f8996aecd6ecdc811d", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0 OR BSD-1-Clause" ] }, { "name": "generic-array", "version": "0.14.7", "purl": "pkg:cargo/generic-array@0.14.7", "sha256": "85649ca51fd72272d7821adaf274ad91c288277713d9c18820d8499a7ff69e9a", "scope": "runtime", "licenses": [ "MIT" ] }, { "name": "getrandom", "version": "0.2.17", "purl": "pkg:cargo/getrandom@0.2.17", "sha256": "ff2abc00be7fca6ebc474524697ae276ad847ad0a6b3faa4bcb027e9a4614ad0", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "getrandom", "version": "0.4.3", "purl": "pkg:cargo/getrandom@0.4.3", "sha256": "300e883d756b2e4ec94e02791f39b04b522276138852cfc41d9fb7e904106099", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "heck", "version": "0.5.0", "purl": "pkg:cargo/heck@0.5.0", "sha256": "2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "hex", "version": "0.4.3", "purl": "pkg:cargo/hex@0.4.3", "sha256": "7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "is_terminal_polyfill", "version": "1.70.2", "purl": "pkg:cargo/is_terminal_polyfill@1.70.2", "sha256": "a6cb138bb79a146c1bd460005623e142ef0181e3d0219cb493e02f7d08a35695", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "itoa", "version": "1.0.18", "purl": "pkg:cargo/itoa@1.0.18", "sha256": "8f42a60cbdf9a97f5d2305f08a87dc4e09308d1276d28c869c684d7777685682", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "libc", "version": "0.2.191", "purl": "pkg:cargo/libc@0.2.191", "sha256": "65cd87c9a6d60536580b316ad985726104730a5151c99845f2490428ef91240a", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "linux-raw-sys", "version": "0.12.1", "purl": "pkg:cargo/linux-raw-sys@0.12.1", "sha256": "32a66949e030da00e8c7d4434b251670a91556f4144941d37452769c25d58a53", "scope": "runtime", "licenses": [ "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT" ] }, { "name": "memchr", "version": "2.8.3", "purl": "pkg:cargo/memchr@2.8.3", "sha256": "cf8baf1c55e62ffcace7a9f06f4bd9cd3f0c4beb022d3b367256b91b87513d98", "scope": "runtime", "licenses": [ "Unlicense OR MIT" ] }, { "name": "once_cell", "version": "1.21.4", "purl": "pkg:cargo/once_cell@1.21.4", "sha256": "9f7c3e4beb33f85d45ae3e3a1792185706c8e16d043238c593331cc7cd313b50", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "once_cell_polyfill", "version": "1.70.2", "purl": "pkg:cargo/once_cell_polyfill@1.70.2", "sha256": "384b8ab6d37215f3c5301a95a4accb5d64aa607f1fcb26a11b5303878451b4fe", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "pkcs8", "version": "0.10.2", "purl": "pkg:cargo/pkcs8@0.10.2", "sha256": "f950b2377845cebe5cf8b5165cb3cc1a5e0fa5cfa3e1f7f55707d8fd82e0a7b7", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "ppv-lite86", "version": "0.2.21", "purl": "pkg:cargo/ppv-lite86@0.2.21", "sha256": "85eae3c4ed2f50dcfe72643da4befc30deadb458a9b590d720cde2f2b1e97da9", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "proc-macro2", "version": "1.0.107", "purl": "pkg:cargo/proc-macro2@1.0.107", "sha256": "985e7ec9bb745e6ce6535b544d84d6cd6f7ad8bd711c398938ae983b91a766d9", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "quote", "version": "1.0.47", "purl": "pkg:cargo/quote@1.0.47", "sha256": "1fbf4db142a473a8d80c26bbf18454ed458bf8d26c8219c331daecfdbd079001", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "r-efi", "version": "6.0.0", "purl": "pkg:cargo/r-efi@6.0.0", "sha256": "f8dcc9c7d52a811697d2151c701e0d08956f92b0e24136cf4cf27b57a6a0d9bf", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0 OR LGPL-2.1-or-later" ] }, { "name": "rand", "version": "0.8.8", "purl": "pkg:cargo/rand@0.8.8", "sha256": "e058c7de0b26af77780c769414d6257830bb240f3c38477dbc2c16e5f54d6d4c", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "rand_chacha", "version": "0.3.1", "purl": "pkg:cargo/rand_chacha@0.3.1", "sha256": "e6c10a63a0fa32252be49d21e7709d4d4baf8d231c2dbce1eaa8141b9b127d88", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "rand_core", "version": "0.6.4", "purl": "pkg:cargo/rand_core@0.6.4", "sha256": "ec0be4795e2f6a28069bec0b5ff3e2ac9bafc99e6a9a7dc3547996c5c816922c", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "rustc_version", "version": "0.4.1", "purl": "pkg:cargo/rustc_version@0.4.1", "sha256": "cfcb3a22ef46e85b45de6ee7e79d063319ebb6594faafcf1c225ea92ab6e9b92", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "rustix", "version": "1.1.5", "purl": "pkg:cargo/rustix@1.1.5", "sha256": "891efababe418670775f199f0d233d84843c227a0949a883ce15b37c78d6629d", "scope": "runtime", "licenses": [ "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT" ] }, { "name": "semver", "version": "1.0.28", "purl": "pkg:cargo/semver@1.0.28", "sha256": "8a7852d02fc848982e0c167ef163aaff9cd91dc640ba85e263cb1ce46fae51cd", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "serde", "version": "1.0.229", "purl": "pkg:cargo/serde@1.0.229", "sha256": "4148590afebada386688f18773da617792bf2ef03ffc1e4cbd2b1d45b023e0ba", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "serde_core", "version": "1.0.229", "purl": "pkg:cargo/serde_core@1.0.229", "sha256": "67dca2c9c51e58a4791a4b1ed58308b39c64224d349a935ab5039aa360942a48", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "serde_derive", "version": "1.0.229", "purl": "pkg:cargo/serde_derive@1.0.229", "sha256": "e7a5d71263a5a7d47b41f6b3f06ba276f10cc18b0931f1799f710578e2309348", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "serde_json", "version": "1.0.154", "purl": "pkg:cargo/serde_json@1.0.154", "sha256": "e7e9cc8b1b85264074fbcc02a88680c4096b1e47df8f739dceb03bf482f04bd6", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "sha2", "version": "0.10.9", "purl": "pkg:cargo/sha2@0.10.9", "sha256": "a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "signature", "version": "2.2.0", "purl": "pkg:cargo/signature@2.2.0", "sha256": "77549399552de45a898a580c1b41d445bf730df867cc44e6c0233bbc4b8329de", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "smallvec", "version": "1.6.0", "purl": "pkg:cargo/smallvec@1.6.0", "sha256": "1a55ca5f3b68e41c979bf8c46a6f1da892ca4db8f94023ce0bd32407573b1ac0", "scope": "runtime", "licenses": [ "MIT/Apache-2.0" ] }, { "name": "spki", "version": "0.7.3", "purl": "pkg:cargo/spki@0.7.3", "sha256": "d91ed6c858b01f942cd56b37a94b3e0a1798290327d1236e4d9cf4eaca44d29d", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "strsim", "version": "0.11.1", "purl": "pkg:cargo/strsim@0.11.1", "sha256": "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f", "scope": "runtime", "licenses": [ "MIT" ] }, { "name": "subtle", "version": "2.6.1", "purl": "pkg:cargo/subtle@2.6.1", "sha256": "13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292", "scope": "runtime", "licenses": [ "BSD-3-Clause" ] }, { "name": "syn", "version": "2.0.119", "purl": "pkg:cargo/syn@2.0.119", "sha256": "872831b642d1a07999a962a351ed35b955ea2cfc8f3862091e2a240a84f17297", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "syn", "version": "3.0.9", "purl": "pkg:cargo/syn@3.0.9", "sha256": "d78c8dee4c7bf0e14673097256fed6142ce9d3b85a408189d07482442145823b", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "tempfile", "version": "3.27.0", "purl": "pkg:cargo/tempfile@3.27.0", "sha256": "32497e9a4c7b38532efcdebeef879707aa9f794296a4f0244f6f69e9bc8574bd", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "typenum", "version": "1.20.1", "purl": "pkg:cargo/typenum@1.20.1", "sha256": "b6f5e870be6c3b371b77fe0ee0bafb859fa4964b4404c27de1d380043c4dda20", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "unicode-ident", "version": "1.0.27", "purl": "pkg:cargo/unicode-ident@1.0.27", "sha256": "a2c754d6c33795a1c324727428e5a7dedb5b06195f9890bdbcba760d3e246563", "scope": "runtime", "licenses": [ "(MIT OR Apache-2.0) AND Unicode-3.0" ] }, { "name": "utf8parse", "version": "0.2.2", "purl": "pkg:cargo/utf8parse@0.2.2", "sha256": "06abde3611657adf66d383f00b093d7faecc7fa57071cce2578660c9f1010821", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "version_check", "version": "0.9.5", "purl": "pkg:cargo/version_check@0.9.5", "sha256": "0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a", "scope": "runtime", "licenses": [ "MIT/Apache-2.0" ] }, { "name": "wasi", "version": "0.11.1+wasi-snapshot-preview1", "purl": "pkg:cargo/wasi@0.11.1+wasi-snapshot-preview1", "sha256": "ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b", "scope": "runtime", "licenses": [ "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT" ] }, { "name": "windows-link", "version": "0.2.1", "purl": "pkg:cargo/windows-link@0.2.1", "sha256": "f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "windows-sys", "version": "0.61.2", "purl": "pkg:cargo/windows-sys@0.61.2", "sha256": "ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "zerocopy", "version": "0.8.63", "purl": "pkg:cargo/zerocopy@0.8.63", "sha256": "e5fe1f8f1b06191a00962174c61aa5005e0bb391a6d80d07e24d115c01a92ed8", "scope": "runtime", "licenses": [ "BSD-2-Clause OR Apache-2.0 OR MIT" ] }, { "name": "zerocopy-derive", "version": "0.8.63", "purl": "pkg:cargo/zerocopy-derive@0.8.63", "sha256": "863ad3ac83293fb4d740aedbfdc9240dd8d1a50c1099acd76ce80ce7c7230c7f", "scope": "runtime", "licenses": [ "BSD-2-Clause OR Apache-2.0 OR MIT" ] }, { "name": "zeroize", "version": "1.9.1", "purl": "pkg:cargo/zeroize@1.9.1", "sha256": "e13084392c5e4bc371903e2935a5eaeed24905a7511356b883835e18a78f6879", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "zmij", "version": "1.0.23", "purl": "pkg:cargo/zmij@1.0.23", "sha256": "29666d0abbfad1e3dc4dcf6144730dd3a3ab225bbbdac83319345b1b44ccfc1b", "scope": "runtime", "licenses": [ "MIT" ] } ] } } }, { "attempt_no": 4, "verdict": "passed", "evidence_sha256": "22ea7e92b96a8429ede43c1f69af4da5e23cc22bd83bea60674ed9d3f8882b23", "env_sha256": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "wall_seconds": 34.757549262, "result": { "job_id": "520d2155-f6c4-43c6-953c-1829b6dd5cc3", "verdict": "passed", "criteria": [ { "id": "build", "required": true, "passed": true, "commands": [ { "argv": [ "cargo", "build", "--workspace", "--release" ], "exit_code": 0, "timed_out": false, "duration_seconds": 21.054467239, "tail": " Compiling proc-macro2 v1.0.107\n Compiling unicode-ident v1.0.27\n Compiling quote v1.0.47\n Compiling version_check v0.9.5\n Compiling libc v0.2.191\n Compiling cfg-if v1.0.5\n Compiling typenum v1.20.1\n Compiling semver v1.0.28\n Compiling serde_core v1.0.229\n Compiling zerocopy v0.8.63\n Compiling utf8parse v0.2.2\n Compiling cpufeatures v0.2.17\n Compiling zmij v1.0.23\n Compiling colorchoice v1.0.5\n Compiling anstyle-query v1.1.5\n Compiling anstyle v1.0.14\n Compiling zeroize v1.9.1\n Compiling serde_json v1.0.154\n Compiling subtle v2.6.1\n Compiling serde v1.0.229\n Compiling signature v2.2.0\n Compiling is_terminal_polyfill v1.70.2\n Compiling heck v0.5.0\n Compiling anstyle-parse v1.0.0\n Compiling itoa v1.0.18\n Compiling strsim v0.11.1\n Compiling clap_lex v1.1.1\n Compiling memchr v2.8.3\n Compiling ed25519 v2.2.3\n Compiling smallvec v1.6.0\n Compiling hex v0.4.3\n Compiling rustc_version v0.4.1\n Compiling anstream v1.0.0\n Compiling generic-array v0.14.7\n Compiling clap_builder v4.6.7\n Compiling curve25519-dalek v4.1.3\n Compiling syn v3.0.9\n Compiling syn v2.0.119\n Compiling block-buffer v0.10.4\n Compiling crypto-common v0.1.7\n Compiling digest v0.10.7\n Compiling getrandom v0.2.17\n Compiling rand_core v0.6.4\n Compiling sha2 v0.10.9\n Compiling curve25519-dalek-derive v0.1.1\n Compiling serde_derive v1.0.229\n Compiling clap_derive v4.6.7\n Compiling ppv-lite86 v0.2.21\n Compiling clap v4.6.7\n Compiling ed25519-dalek v2.2.0\n Compiling rand_chacha v0.3.1\n Compiling rand v0.8.8\n Compiling falsegreen-ledger-core v0.1.0 (/var/lib/falsegreen/work/520d2155-f6c4-43c6-953c-1829b6dd5cc3/run/crates/falsegreen-ledger-core)\n Compiling falsegreen-ledger v0.1.0 (/var/lib/falsegreen/work/520d2155-f6c4-43c6-953c-1829b6dd5cc3/run/crates/falsegreen-ledger)\n Finished `release` profile [optimized] target(s) in 21.01s\n" } ] }, { "id": "tests", "required": true, "passed": true, "commands": [ { "argv": [ "cargo", "test", "--workspace" ], "exit_code": 0, "timed_out": false, "duration_seconds": 9.452155962, "tail": "\nrunning 0 tests\n\ntest result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s\n\n\nrunning 10 tests\ntest the_cli_help_lists_every_command ... ok\ntest a_corrupt_shard_exits_corrupt ... ok\ntest a_policy_violation_exits_policy ... ok\ntest the_export_import_roundtrip_is_hash_stable ... ok\ntest the_full_lifecycle_verifies_clean ... ok\ntest a_tampered_prev_hash_is_detected ... ok\ntest a_tampered_cross_shard_link_is_detected ... ok\ntest a_tampered_seal_signature_is_detected ... ok\ntest a_tampered_event_field_is_detected ... ok\ntest compaction_keeps_the_ledger_verifiable ... ok\n\ntest result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.21s\n\n\nrunning 41 tests\ntest chain::tests::hash_changes_when_any_event_field_changes ... ok\ntest chain::tests::genesis_record_is_deterministic ... ok\ntest chain::tests::tampered_record_fails_hash_check ... ok\ntest chain::tests::prev_hash_is_committed ... ok\ntest chain::tests::unknown_fields_rejected_in_record ... ok\ntest chain::tests::sequence_gap_fails_link_check ... ok\ntest event::tests::context_null_is_canonicalized_as_null_and_rejected ... ok\ntest event::tests::optionals_omit_none_in_canonical_form ... ok\ntest event::tests::validation_rejects_bad_timestamp ... ok\ntest event::tests::validation_rejects_empty_required_fields ... ok\ntest event::tests::unknown_fields_are_rejected ... ok\ntest event::tests::canonical_round_trips_through_json_with_shuffled_keys ... ok\ntest event::tests::canonical_is_sorted_and_stable ... ok\ntest integrity::tests::a_lone_leaf_is_its_own_root_and_odd_leaves_pair_with_themselves ... ok\ntest integrity::tests::merkle_root_rejects_empty_and_non_hex ... ok\ntest integrity::tests::malformed_keys_and_signatures_are_rejected ... ok\ntest policy::tests::an_event_can_violate_several_rules ... ok\ntest policy::tests::deny_rule_fires_on_match ... ok\ntest policy::tests::require_outcome_enforces_the_decision ... ok\ntest policy::tests::deny_rule_fires_only_on_a_match ... ok\ntest policy::tests::validation_rejects_malformed_policies ... ok\ntest integrity::tests::merkle_root_is_deterministic_and_order_sensitive ... ok\ntest integrity::tests::the_trusted_key_must_match_the_embedded_key ... ok\ntest store::tests::empty_append_is_a_noop ... ok\ntest store::tests::corrupt_line_is_a_parse_error ... ok\ntest store::tests::invalid_event_rejected ... ok\ntest store::tests::seal_count_mismatch_rejected ... ok\ntest store::tests::append_after_seal_starts_new_shard_linked_to_merkle_root ... ok\ntest store::tests::init_and_append_continues_from_genesis ... ok\ntest verify::tests::the_report_is_canonical_json ... ok\ntest compact::tests::compaction_refuses_unsealed_empty_and_already_compacted ... ok\ntest verify::tests::a_sequence_gap_is_caught ... ok\ntest verify::tests::a_bad_seal_signature_is_caught ... ok\ntest verify::tests::policy_violations_land_in_the_report ... ok\ntest verify::tests::a_clean_ledger_verifies ... ok\ntest integrity::tests::sign_and_verify_roundtrip ... ok\ntest compact::tests::the_compacted_shard_verifies_and_reports_the_source_root ... ok\ntest verify::tests::a_tampered_event_is_caught ... ok\ntest verify::tests::a_tampered_record_hash_cascades_downstream ... ok\ntest integrity::tests::a_tampered_seal_field_fails_verification ... ok\ntest compact::tests::the_chain_continues_from_the_original_root_after_compaction ... ok\n\ntest result: ok. 41 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s\n\n\nrunning 0 tests\n\ntest result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s\n\n Compiling proc-macro2 v1.0.107\n Compiling unicode-ident v1.0.27\n Compiling quote v1.0.47\n Compiling libc v0.2.191\n Compiling cfg-if v1.0.5\n Compiling version_check v0.9.5\n Compiling typenum v1.20.1\n Compiling semver v1.0.28\n Compiling serde_core v1.0.229\n Compiling zerocopy v0.8.63\n Compiling cpufeatures v0.2.17\n Compiling zmij v1.0.23\n Compiling zeroize v1.9.1\n Compiling subtle v2.6.1\n Compiling serde_json v1.0.154\n Compiling serde v1.0.229\n Compiling signature v2.2.0\n Compiling getrandom v0.4.3\n Compiling utf8parse v0.2.2\n Compiling rustix v1.1.5\n Compiling itoa v1.0.18\n Compiling ed25519 v2.2.3\n Compiling memchr v2.8.3\n Compiling anstyle-parse v1.0.0\n Compiling anstyle-query v1.1.5\n Compiling anstyle v1.0.14\n Compiling smallvec v1.6.0\n Compiling bitflags v2.13.2\n Compiling colorchoice v1.0.5\n Compiling hex v0.4.3\n Compiling linux-raw-sys v0.12.1\n Compiling rustc_version v0.4.1\n Compiling is_terminal_polyfill v1.70.2\n Compiling fastrand v2.5.0\n Compiling once_cell v1.21.4\n Compiling heck v0.5.0\n Compiling strsim v0.11.1\n Compiling generic-array v0.14.7\n Compiling clap_lex v1.1.1\n Compiling anstream v1.0.0\n Compiling curve25519-dalek v4.1.3\n Compiling clap_builder v4.6.7\n Compiling syn v3.0.9\n Compiling syn v2.0.119\n Compiling block-buffer v0.10.4\n Compiling crypto-common v0.1.7\n Compiling digest v0.10.7\n Compiling getrandom v0.2.17\n Compiling sha2 v0.10.9\n Compiling rand_core v0.6.4\n Compiling tempfile v3.27.0\n Compiling serde_derive v1.0.229\n Compiling clap_derive v4.6.7\n Compiling ppv-lite86 v0.2.21\n Compiling curve25519-dalek-derive v0.1.1\n Compiling rand_chacha v0.3.1\n Compiling rand v0.8.8\n Compiling clap v4.6.7\n Compiling ed25519-dalek v2.2.0\n Compiling falsegreen-ledger-core v0.1.0 (/var/lib/falsegreen/work/520d2155-f6c4-43c6-953c-1829b6dd5cc3/run/crates/falsegreen-ledger-core)\n Compiling falsegreen-ledger v0.1.0 (/var/lib/falsegreen/work/520d2155-f6c4-43c6-953c-1829b6dd5cc3/run/crates/falsegreen-ledger)\n Finished `test` profile [unoptimized + debuginfo] target(s) in 9.06s\n Running unittests src/main.rs (target/debug/deps/falsegreen_ledger-ab76082b4462b0b1)\n Running tests/integration.rs (target/debug/deps/integration-22dc6beef3e29bb7)\n Running unittests src/lib.rs (target/debug/deps/falsegreen_ledger_core-d00132f4be88bc4a)\n Doc-tests falsegreen_ledger_core\n" } ] }, { "id": "lint", "required": false, "passed": true, "commands": [ { "argv": [ "cargo", "clippy", "--workspace", "--all-targets", "--", "-D", "warnings" ], "exit_code": 0, "timed_out": false, "duration_seconds": 3.979766377, "tail": " Checking cfg-if v1.0.5\n Checking typenum v1.20.1\n Checking cpufeatures v0.2.17\n Checking subtle v2.6.1\n Checking signature v2.2.0\n Checking zeroize v1.9.1\n Checking utf8parse v0.2.2\n Checking itoa v1.0.18\n Checking memchr v2.8.3\n Checking is_terminal_polyfill v1.70.2\n Checking libc v0.2.191\n Checking serde_core v1.0.229\n Checking colorchoice v1.0.5\n Checking zerocopy v0.8.63\n Checking zmij v1.0.23\n Checking anstyle-query v1.1.5\n Checking anstyle v1.0.14\n Checking smallvec v1.6.0\n Checking bitflags v2.13.2\n Checking hex v0.4.3\n Checking linux-raw-sys v0.12.1\n Checking strsim v0.11.1\n Checking clap_lex v1.1.1\n Checking once_cell v1.21.4\n Checking anstyle-parse v1.0.0\n Checking fastrand v2.5.0\n Checking ed25519 v2.2.3\n Checking anstream v1.0.0\n Checking clap_builder v4.6.7\n Checking rustix v1.1.5\n Checking generic-array v0.14.7\n Checking getrandom v0.2.17\n Checking getrandom v0.4.3\n Checking block-buffer v0.10.4\n Checking crypto-common v0.1.7\n Checking rand_core v0.6.4\n Checking digest v0.10.7\n Checking curve25519-dalek v4.1.3\n Checking sha2 v0.10.9\n Checking clap v4.6.7\n Checking tempfile v3.27.0\n Checking serde_json v1.0.154\n Checking serde v1.0.229\n Checking ed25519-dalek v2.2.0\n Checking falsegreen-ledger-core v0.1.0 (/var/lib/falsegreen/work/520d2155-f6c4-43c6-953c-1829b6dd5cc3/run/crates/falsegreen-ledger-core)\n Checking ppv-lite86 v0.2.21\n Checking rand_chacha v0.3.1\n Checking rand v0.8.8\n Checking falsegreen-ledger v0.1.0 (/var/lib/falsegreen/work/520d2155-f6c4-43c6-953c-1829b6dd5cc3/run/crates/falsegreen-ledger)\n Finished `dev` profile [unoptimized + debuginfo] target(s) in 3.92s\n" }, { "argv": [ "cargo", "fmt", "--all", "--check" ], "exit_code": 0, "timed_out": false, "duration_seconds": 0.097724536, "tail": "" } ] } ], "wall_seconds": 34.757549262, "error": null, "env_sha256": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "environment": { "schema": 1, "eco": "rust", "toolchain": "rustc 1.99.0 (rustc)", "toolchain_version": "1.99.0", "fingerprint": "cb72048928286df9d194d6d7356350b373cefcc81d7ee1899729b6ebe14c8817", "artifacts": [ { "name": "anstream", "version": "1.0.0", "sha256": "824a212faf96e9acacdbd09febd34438f8f711fb84e09a8916013cd7815ca28d" }, { "name": "anstyle", "version": "1.0.14", "sha256": "940b3a0ca603d1eade50a4846a2afffd5ef57a9feac2c0e2ec2e14f9ead76000" }, { "name": "anstyle-parse", "version": "1.0.0", "sha256": "52ce7f38b242319f7cabaa6813055467063ecdc9d355bbb4ce0c68908cd8130e" }, { "name": "anstyle-query", "version": "1.1.5", "sha256": "40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc" }, { "name": "anstyle-wincon", "version": "3.0.11", "sha256": "291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d" }, { "name": "base64ct", "version": "1.8.3", "sha256": "2af50177e190e07a26ab74f8b1efbfe2ef87da2116221318cb1c2e82baf7de06" }, { "name": "bitflags", "version": "2.13.2", "sha256": "3ded4057c258ba199e2d26386d3af3780957ecaee6c4ef4041c6b4b8b97c0b06" }, { "name": "block-buffer", "version": "0.10.4", "sha256": "3078c7629b62d3f0439517fa394996acacc5cbc91c5a20d8c658e77abd503a71" }, { "name": "cfg-if", "version": "1.0.5", "sha256": "4e7648175b45a9a48536d676f68d918270699102aa8dab5496df06904c914600" }, { "name": "clap", "version": "4.6.7", "sha256": "aa8876b300ab35ba921adea3dfd70157a46249b33f95c9084ae5709785478946" }, { "name": "clap_builder", "version": "4.6.7", "sha256": "ec0797fb7aeb1406c84efac526901f7ec3ead2124f946b494e72879d4b54704d" }, { "name": "clap_derive", "version": "4.6.7", "sha256": "f9c751b79415d4e559e3d1fcf128e09e720eb673a06d26cf6f392d37d75b66e0" }, { "name": "clap_lex", "version": "1.1.1", "sha256": "1c133bc6a41be0d194c306b5506d15e6feeea7b1d6604bd3f8310dfb2ca96486" }, { "name": "colorchoice", "version": "1.0.5", "sha256": "1d07550c9036bf2ae0c684c4297d503f838287c83c53686d05370d0e139ae570" }, { "name": "const-oid", "version": "0.9.6", "sha256": "c2459377285ad874054d797f3ccebf984978aa39129f6eafde5cdc8315b612f8" }, { "name": "cpufeatures", "version": "0.2.17", "sha256": "59ed5838eebb26a2bb2e58f6d5b5316989ae9d08bab10e0e6d103e656d1b0280" }, { "name": "crypto-common", "version": "0.1.7", "sha256": "78c8292055d1c1df0cce5d180393dc8cce0abec0a7102adb6c7b1eef6016d60a" }, { "name": "curve25519-dalek", "version": "4.1.3", "sha256": "97fb8b7c4503de7d6ae7b42ab72a5a59857b4c937ec27a3d4539dba95b5ab2be" }, { "name": "curve25519-dalek-derive", "version": "0.1.1", "sha256": "f46882e17999c6cc590af592290432be3bce0428cb0d5f8b6715e4dc7b383eb3" }, { "name": "der", "version": "0.7.10", "sha256": "e7c1832837b905bbfb5101e07cc24c8deddf52f93225eee6ead5f4d63d53ddcb" }, { "name": "digest", "version": "0.10.7", "sha256": "9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292" }, { "name": "ed25519", "version": "2.2.3", "sha256": "115531babc129696a58c64a4fef0a8bf9e9698629fb97e9e40767d235cfbcd53" }, { "name": "ed25519-dalek", "version": "2.2.0", "sha256": "70e796c081cee67dc755e1a36a0a172b897fab85fc3f6bc48307991f64e4eca9" }, { "name": "errno", "version": "0.3.14", "sha256": "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb" }, { "name": "fastrand", "version": "2.5.0", "sha256": "da7c62ceae207dd37ea5b845da6a0696c799f85e97da1ab5b7910be3c1c80223" }, { "name": "fiat-crypto", "version": "0.2.9", "sha256": "28dea519a9695b9977216879a3ebfddf92f1c08c05d984f8996aecd6ecdc811d" }, { "name": "generic-array", "version": "0.14.7", "sha256": "85649ca51fd72272d7821adaf274ad91c288277713d9c18820d8499a7ff69e9a" }, { "name": "getrandom", "version": "0.2.17", "sha256": "ff2abc00be7fca6ebc474524697ae276ad847ad0a6b3faa4bcb027e9a4614ad0" }, { "name": "getrandom", "version": "0.4.3", "sha256": "300e883d756b2e4ec94e02791f39b04b522276138852cfc41d9fb7e904106099" }, { "name": "heck", "version": "0.5.0", "sha256": "2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea" }, { "name": "hex", "version": "0.4.3", "sha256": "7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70" }, { "name": "is_terminal_polyfill", "version": "1.70.2", "sha256": "a6cb138bb79a146c1bd460005623e142ef0181e3d0219cb493e02f7d08a35695" }, { "name": "itoa", "version": "1.0.18", "sha256": "8f42a60cbdf9a97f5d2305f08a87dc4e09308d1276d28c869c684d7777685682" }, { "name": "libc", "version": "0.2.191", "sha256": "65cd87c9a6d60536580b316ad985726104730a5151c99845f2490428ef91240a" }, { "name": "linux-raw-sys", "version": "0.12.1", "sha256": "32a66949e030da00e8c7d4434b251670a91556f4144941d37452769c25d58a53" }, { "name": "memchr", "version": "2.8.3", "sha256": "cf8baf1c55e62ffcace7a9f06f4bd9cd3f0c4beb022d3b367256b91b87513d98" }, { "name": "once_cell", "version": "1.21.4", "sha256": "9f7c3e4beb33f85d45ae3e3a1792185706c8e16d043238c593331cc7cd313b50" }, { "name": "once_cell_polyfill", "version": "1.70.2", "sha256": "384b8ab6d37215f3c5301a95a4accb5d64aa607f1fcb26a11b5303878451b4fe" }, { "name": "pkcs8", "version": "0.10.2", "sha256": "f950b2377845cebe5cf8b5165cb3cc1a5e0fa5cfa3e1f7f55707d8fd82e0a7b7" }, { "name": "ppv-lite86", "version": "0.2.21", "sha256": "85eae3c4ed2f50dcfe72643da4befc30deadb458a9b590d720cde2f2b1e97da9" }, { "name": "proc-macro2", "version": "1.0.107", "sha256": "985e7ec9bb745e6ce6535b544d84d6cd6f7ad8bd711c398938ae983b91a766d9" }, { "name": "quote", "version": "1.0.47", "sha256": "1fbf4db142a473a8d80c26bbf18454ed458bf8d26c8219c331daecfdbd079001" }, { "name": "r-efi", "version": "6.0.0", "sha256": "f8dcc9c7d52a811697d2151c701e0d08956f92b0e24136cf4cf27b57a6a0d9bf" }, { "name": "rand", "version": "0.8.8", "sha256": "e058c7de0b26af77780c769414d6257830bb240f3c38477dbc2c16e5f54d6d4c" }, { "name": "rand_chacha", "version": "0.3.1", "sha256": "e6c10a63a0fa32252be49d21e7709d4d4baf8d231c2dbce1eaa8141b9b127d88" }, { "name": "rand_core", "version": "0.6.4", "sha256": "ec0be4795e2f6a28069bec0b5ff3e2ac9bafc99e6a9a7dc3547996c5c816922c" }, { "name": "rustc_version", "version": "0.4.1", "sha256": "cfcb3a22ef46e85b45de6ee7e79d063319ebb6594faafcf1c225ea92ab6e9b92" }, { "name": "rustix", "version": "1.1.5", "sha256": "891efababe418670775f199f0d233d84843c227a0949a883ce15b37c78d6629d" }, { "name": "semver", "version": "1.0.28", "sha256": "8a7852d02fc848982e0c167ef163aaff9cd91dc640ba85e263cb1ce46fae51cd" }, { "name": "serde", "version": "1.0.229", "sha256": "4148590afebada386688f18773da617792bf2ef03ffc1e4cbd2b1d45b023e0ba" }, { "name": "serde_core", "version": "1.0.229", "sha256": "67dca2c9c51e58a4791a4b1ed58308b39c64224d349a935ab5039aa360942a48" }, { "name": "serde_derive", "version": "1.0.229", "sha256": "e7a5d71263a5a7d47b41f6b3f06ba276f10cc18b0931f1799f710578e2309348" }, { "name": "serde_json", "version": "1.0.154", "sha256": "e7e9cc8b1b85264074fbcc02a88680c4096b1e47df8f739dceb03bf482f04bd6" }, { "name": "sha2", "version": "0.10.9", "sha256": "a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283" }, { "name": "signature", "version": "2.2.0", "sha256": "77549399552de45a898a580c1b41d445bf730df867cc44e6c0233bbc4b8329de" }, { "name": "smallvec", "version": "1.6.0", "sha256": "1a55ca5f3b68e41c979bf8c46a6f1da892ca4db8f94023ce0bd32407573b1ac0" }, { "name": "spki", "version": "0.7.3", "sha256": "d91ed6c858b01f942cd56b37a94b3e0a1798290327d1236e4d9cf4eaca44d29d" }, { "name": "strsim", "version": "0.11.1", "sha256": "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f" }, { "name": "subtle", "version": "2.6.1", "sha256": "13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292" }, { "name": "syn", "version": "2.0.119", "sha256": "872831b642d1a07999a962a351ed35b955ea2cfc8f3862091e2a240a84f17297" }, { "name": "syn", "version": "3.0.9", "sha256": "d78c8dee4c7bf0e14673097256fed6142ce9d3b85a408189d07482442145823b" }, { "name": "tempfile", "version": "3.27.0", "sha256": "32497e9a4c7b38532efcdebeef879707aa9f794296a4f0244f6f69e9bc8574bd" }, { "name": "typenum", "version": "1.20.1", "sha256": "b6f5e870be6c3b371b77fe0ee0bafb859fa4964b4404c27de1d380043c4dda20" }, { "name": "unicode-ident", "version": "1.0.27", "sha256": "a2c754d6c33795a1c324727428e5a7dedb5b06195f9890bdbcba760d3e246563" }, { "name": "utf8parse", "version": "0.2.2", "sha256": "06abde3611657adf66d383f00b093d7faecc7fa57071cce2578660c9f1010821" }, { "name": "version_check", "version": "0.9.5", "sha256": "0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a" }, { "name": "wasi", "version": "0.11.1+wasi-snapshot-preview1", "sha256": "ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b" }, { "name": "windows-link", "version": "0.2.1", "sha256": "f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5" }, { "name": "windows-sys", "version": "0.61.2", "sha256": "ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc" }, { "name": "zerocopy", "version": "0.8.63", "sha256": "e5fe1f8f1b06191a00962174c61aa5005e0bb391a6d80d07e24d115c01a92ed8" }, { "name": "zerocopy-derive", "version": "0.8.63", "sha256": "863ad3ac83293fb4d740aedbfdc9240dd8d1a50c1099acd76ce80ce7c7230c7f" }, { "name": "zeroize", "version": "1.9.1", "sha256": "e13084392c5e4bc371903e2935a5eaeed24905a7511356b883835e18a78f6879" }, { "name": "zmij", "version": "1.0.23", "sha256": "29666d0abbfad1e3dc4dcf6144730dd3a3ab225bbbdac83319345b1b44ccfc1b" } ] }, "witness_invocations": [ { "tool": "osv-scanner", "version": "2.7.0", "binary_digest": "160c6253e2922e9e0a6a9771c5c4c40a4b3c6090b34a3cdd5e80c96cc2e4218b", "config_digest": "0c3d6fef8ea59e1de5610e13ccb1035a7232318288aaed517ee2feec9402455a", "invocation_digest": "00b7f999fcca5bc8cd11bee6a25c30ddd87eec20902820825f3f20306e0ff252", "input_subject_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "b7402118126ef7264d194c32cbe0f57e5f5d0c6621769ece44810d6870f161a5", "normalized_evidence_digest": "a01c9fbe2e0f89ba51e98a9f9adb3e2221181b02f05426888a8e8e1d4c6f99a0", "limitations": [ "osv-scanner checks registry-based ecosystems (crates.io in 0.6.0); git-sourced dependencies (lean [[require]], gpr) have no advisory database — Insufficient Evidence for them, never a silent pass" ], "evidence_class": "dependency_vulnerability", "observed_at": "2026-10-21T17:56:54.662892596+00:00", "findings": [ { "rule_namespace": "osv", "rule_id": "RUSTSEC-2021-0003", "severity": "high", "component": "pkg:crates.io/smallvec@1.6.0", "fingerprint": "33785582b0bffd15e2724184577c08f01121749519544d60019637759fc0278a", "state": "open" }, { "rule_namespace": "osv", "rule_id": "GHSA-43w2-9j62-hq99", "severity": "high", "component": "pkg:crates.io/smallvec@1.6.0", "fingerprint": "ba50c1802e51ced38a54ef5d84d292c2efbb3b72e0751e638b8539d27f3d1ebb", "state": "open" } ] }, { "tool": "semgrep", "version": "1.181.0", "binary_digest": "c29de7c43986faa3c3ca5a8acf1d115811e15ab305ba7657b79e775d40e16391", "config_digest": "206116bd213f0786f8378755ad48adbccfe30376afe8fe2ecdd24eb44161d009", "invocation_digest": "9c1cf3fe8e6eb2fbc05a7e9a6469768fbb0e8cfdacac91c815ad493700c68995", "input_subject_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "80c185ac8e17503197e8195c202d98db3f0cd3865a37ba7065f37bdbf2a58d54", "normalized_evidence_digest": "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "limitations": [], "evidence_class": "static_analysis", "observed_at": "2026-10-21T17:56:54.662892596+00:00", "findings": [] }, { "tool": "gitleaks", "version": "8.30.1", "binary_digest": "88f91962aa2f93ac6ab281d553b9e125f5197bbbce38f9f2437f7299c32e5509", "config_digest": "e1f77c307b36a43d3707ab5fed4a4007f6d63d9302bcf0d5509cd3e52e32ed6f", "invocation_digest": "d884972141fefe01c4d1d88d98af43892d8a92723340968dacb42eb93c6e83fc", "input_subject_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "37517e5f3dc66819f61f5a7bb8ace1921282415f10551d2defa5c3eb0985b570", "normalized_evidence_digest": "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "limitations": [], "evidence_class": "secret", "observed_at": "2026-10-21T17:56:54.662892596+00:00", "findings": [] }, { "tool": "syft", "version": "1.54.1", "binary_digest": "dbf75864e7a7ff9e1fbf00552c31483f693188632a9f68f343cd7653dac513d6", "config_digest": "b6f045a568b2dd1dcd1a1723f4eb0b8f5863215301ced35067a5f7a53c07c7e6", "invocation_digest": "bd85bfc2c9923c1727e25c2cd680e17a7a50e3113c5b6bf2889c93960b07c23d", "input_subject_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "9aed5ab25816c9dfa4ae83b90b2d4ea2bacac8e453e010c79fe1cd952d3d4afc", "normalized_evidence_digest": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "limitations": [], "evidence_class": "supply_chain", "observed_at": "2026-10-21T17:56:54.662892596+00:00", "findings": [ { "rule_namespace": "syft", "rule_id": "anstream@1.0.0", "component": "pkg:cargo/anstream@1.0.0", "fingerprint": "1001468a98bf8f886f889f3b76dee0717eea1611dbab5c3ec415bc0a9d3f9853", "state": "open" }, { "rule_namespace": "syft", "rule_id": "anstyle@1.0.14", "component": "pkg:cargo/anstyle@1.0.14", "fingerprint": "b4423ac5d91607f895d2e4f6b3b58b3b98e3220e95d5a560719a38f26e88a9aa", "state": "open" }, { "rule_namespace": "syft", "rule_id": "anstyle-parse@1.0.0", "component": "pkg:cargo/anstyle-parse@1.0.0", "fingerprint": "86b1ca2b439dac8c8ccf11610d2f44a40fa2c28b49c7a4f67fffc5ad7e7a4c34", "state": "open" }, { "rule_namespace": "syft", "rule_id": "anstyle-query@1.1.5", "component": "pkg:cargo/anstyle-query@1.1.5", "fingerprint": "59e640d2af9d99361184e5dd537b90d2c59bda2eba7000d96ad1688025214430", "state": "open" }, { "rule_namespace": "syft", "rule_id": "anstyle-wincon@3.0.11", "component": "pkg:cargo/anstyle-wincon@3.0.11", "fingerprint": "3b50475de5d0ec3dd61737fa6a9f81887b3ee6ff55d9fd7afecaa6d985cd26e6", "state": "open" }, { "rule_namespace": "syft", "rule_id": "base64ct@1.8.3", "component": "pkg:cargo/base64ct@1.8.3", "fingerprint": "5656f108cca5b4825c10d9ceed24fec9707f89915b6d39bb2c2f79b59f6a1eaf", "state": "open" }, { "rule_namespace": "syft", "rule_id": "bitflags@2.13.2", "component": "pkg:cargo/bitflags@2.13.2", "fingerprint": "2f570cfac9dde16b280d8ce6521d29be556270814081e669ebb29f300aac7e82", "state": "open" }, { "rule_namespace": "syft", "rule_id": "block-buffer@0.10.4", "component": "pkg:cargo/block-buffer@0.10.4", "fingerprint": "2b4e003d5403bd7ccd2ef88c2dcfba20586172a36e9e5feb24203884290f3fb8", "state": "open" }, { "rule_namespace": "syft", "rule_id": "cfg-if@1.0.5", "component": "pkg:cargo/cfg-if@1.0.5", "fingerprint": "40e2ca0f72307e7f2b92a7626063d84ab55fa1db6f40e2fdaea4eb417bb3d9f6", "state": "open" }, { "rule_namespace": "syft", "rule_id": "clap@4.6.7", "component": "pkg:cargo/clap@4.6.7", "fingerprint": "8b5288edc94ee3c1804eb2664bb8a57974ed5bd708efaad6ab63165c19e80dfd", "state": "open" }, { "rule_namespace": "syft", "rule_id": "clap_builder@4.6.7", "component": "pkg:cargo/clap_builder@4.6.7", "fingerprint": "4b4192da7ea8835334cc519c92e9230c5aa48d6e8b5905d5dc735155981a1f5d", "state": "open" }, { "rule_namespace": "syft", "rule_id": "clap_derive@4.6.7", "component": "pkg:cargo/clap_derive@4.6.7", "fingerprint": "4d51f0052690cd07873e9f2360688e746bd74d01be8bce8eb1e09d4b5ee2869f", "state": "open" }, { "rule_namespace": "syft", "rule_id": "clap_lex@1.1.1", "component": "pkg:cargo/clap_lex@1.1.1", "fingerprint": "d5118fb3b03cf55c1b5d2058dc703e5287863abfafc62e948f8bd37c554eed93", "state": "open" }, { "rule_namespace": "syft", "rule_id": "colorchoice@1.0.5", "component": "pkg:cargo/colorchoice@1.0.5", "fingerprint": "333b5e3b16c10da6f952448b19c196e74ca809dd500e5b626c5e94eca9950908", "state": "open" }, { "rule_namespace": "syft", "rule_id": "const-oid@0.9.6", "component": "pkg:cargo/const-oid@0.9.6", "fingerprint": "5541a7190761ecc001f652cbea75f887d34a63857a9d4a833c6c04c4f66c9cc2", "state": "open" }, { "rule_namespace": "syft", "rule_id": "cpufeatures@0.2.17", "component": "pkg:cargo/cpufeatures@0.2.17", "fingerprint": "2c41be5a411d55d53a6e1ecaae69000d6cfafc653329b5a415c3833ca3d938a3", "state": "open" }, { "rule_namespace": "syft", "rule_id": "crypto-common@0.1.7", "component": "pkg:cargo/crypto-common@0.1.7", "fingerprint": "94ebb3d3a04823de45b978f7f2d92b817a60a7eb82d8c7b676a832d72e58684f", "state": "open" }, { "rule_namespace": "syft", "rule_id": "curve25519-dalek@4.1.3", "component": "pkg:cargo/curve25519-dalek@4.1.3", "fingerprint": "fe69847583a09dbb422ed424b8822f6081a5b9a9ea4a5a0659aeeae90a1f3b68", "state": "open" }, { "rule_namespace": "syft", "rule_id": "curve25519-dalek-derive@0.1.1", "component": "pkg:cargo/curve25519-dalek-derive@0.1.1", "fingerprint": "30988a4946cd7b5896513c53b8f46fef2f041b7a32a8444f2fbbbe35504b0d30", "state": "open" }, { "rule_namespace": "syft", "rule_id": "der@0.7.10", "component": "pkg:cargo/der@0.7.10", "fingerprint": "8163a7cb6df166afc2111e82c998716d8b3a803f1869d677792d321ac2c09c7e", "state": "open" }, { "rule_namespace": "syft", "rule_id": "digest@0.10.7", "component": "pkg:cargo/digest@0.10.7", "fingerprint": "f543d9aefa032f0994738474a351c2d2be5ba43859f3a3edd9a65494ee9238b8", "state": "open" }, { "rule_namespace": "syft", "rule_id": "ed25519@2.2.3", "component": "pkg:cargo/ed25519@2.2.3", "fingerprint": "1a02d28487a2543cf9326fab370709729bebc9627626b39581bd1df154e91dbd", "state": "open" }, { "rule_namespace": "syft", "rule_id": "ed25519-dalek@2.2.0", "component": "pkg:cargo/ed25519-dalek@2.2.0", "fingerprint": "5d7bc1f87b8a0a9b4d360efd55b594a08fa0a5fef8d15fcf5ad942263a934c2d", "state": "open" }, { "rule_namespace": "syft", "rule_id": "errno@0.3.14", "component": "pkg:cargo/errno@0.3.14", "fingerprint": "fe0c520b266d11e2ad249f8ded3c90b5f136fb9263021fc61136e8c181a8023f", "state": "open" }, { "rule_namespace": "syft", "rule_id": "falsegreen-ledger@0.1.0", "component": "", "fingerprint": "841d8d48762b69b0eac8a31c3cdc02cd1eacac1caf7d69c291615aecc96b9ba8", "state": "open" }, { "rule_namespace": "syft", "rule_id": "falsegreen-ledger-core@0.1.0", "component": "", "fingerprint": "99c0e29b042978b26ae2896dfffc0866c8638f5604b43b5a33122de2f9811c19", "state": "open" }, { "rule_namespace": "syft", "rule_id": "fastrand@2.5.0", "component": "pkg:cargo/fastrand@2.5.0", "fingerprint": "2b7ba02485a3d76cc19b17317882c1dd65511ed5ad95e9e70a0bb5d7f5dd4043", "state": "open" }, { "rule_namespace": "syft", "rule_id": "fiat-crypto@0.2.9", "component": "pkg:cargo/fiat-crypto@0.2.9", "fingerprint": "de9f033198ba6f74b0c4f8cc0f961ff4d5f3b764d3a1e60f0f68a66fcb26f54f", "state": "open" }, { "rule_namespace": "syft", "rule_id": "generic-array@0.14.7", "component": "pkg:cargo/generic-array@0.14.7", "fingerprint": "375236d1387d03ae58db25418fce92969adbd21eca601a82cd8dc683fe60f20f", "state": "open" }, { "rule_namespace": "syft", "rule_id": "getrandom@0.2.17", "component": "pkg:cargo/getrandom@0.2.17", "fingerprint": "80e36ea36c4959f0d1b4dd76769554760054be60923fa8eae72bc10d83b30b90", "state": "open" }, { "rule_namespace": "syft", "rule_id": "getrandom@0.4.3", "component": "pkg:cargo/getrandom@0.4.3", "fingerprint": "05b5d32e6e201ead770f640d3986020565688d70ca4bf6d323def662c9b10bc0", "state": "open" }, { "rule_namespace": "syft", "rule_id": "heck@0.5.0", "component": "pkg:cargo/heck@0.5.0", "fingerprint": "c5eb23be3fdbc8afafc1cca8b9c5767bab582488149444a86b1d000d74e3c97a", "state": "open" }, { "rule_namespace": "syft", "rule_id": "hex@0.4.3", "component": "pkg:cargo/hex@0.4.3", "fingerprint": "79f94666cd1756f5374c513addc3b9444043d08bb49050dae4998fc934de41af", "state": "open" }, { "rule_namespace": "syft", "rule_id": "is_terminal_polyfill@1.70.2", "component": "pkg:cargo/is_terminal_polyfill@1.70.2", "fingerprint": "b005b2478a3e5a28b543b644c46c0e2049ab156cd1ccd7133ea9f40a5626b62d", "state": "open" }, { "rule_namespace": "syft", "rule_id": "itoa@1.0.18", "component": "pkg:cargo/itoa@1.0.18", "fingerprint": "aec45ddec07a815da2a5c182001bfe6e554ed2a0b89259d327f793511a774c40", "state": "open" }, { "rule_namespace": "syft", "rule_id": "libc@0.2.191", "component": "pkg:cargo/libc@0.2.191", "fingerprint": "b0e83395a6df61531693965b5dc89908e48f1fc30363b236cdebf457b3b8d84a", "state": "open" }, { "rule_namespace": "syft", "rule_id": "linux-raw-sys@0.12.1", "component": "pkg:cargo/linux-raw-sys@0.12.1", "fingerprint": "7516ef772912bc7e53189e7272c2213556425bc370efc1936e07fd2f7141dab0", "state": "open" }, { "rule_namespace": "syft", "rule_id": "memchr@2.8.3", "component": "pkg:cargo/memchr@2.8.3", "fingerprint": "19c7f7c6470891a44bd18bae9b5a2d1d0a9674e609cb6b681b6d78594026b1c0", "state": "open" }, { "rule_namespace": "syft", "rule_id": "once_cell@1.21.4", "component": "pkg:cargo/once_cell@1.21.4", "fingerprint": "5df49b2099b0dc508144dd3ce7f17d8ef89e1ca37347a5a9732cc45bef8a0865", "state": "open" }, { "rule_namespace": "syft", "rule_id": "once_cell_polyfill@1.70.2", "component": "pkg:cargo/once_cell_polyfill@1.70.2", "fingerprint": "67dbadfb6f4218d894e3b81d8d454f1540509b7c38981b00170ce499b12f89cc", "state": "open" }, { "rule_namespace": "syft", "rule_id": "pkcs8@0.10.2", "component": "pkg:cargo/pkcs8@0.10.2", "fingerprint": "c47c76d7946c7de7d9e8ccb0ce88035f70f673c663ff4bc87d7186e2cd59e8fe", "state": "open" }, { "rule_namespace": "syft", "rule_id": "ppv-lite86@0.2.21", "component": "pkg:cargo/ppv-lite86@0.2.21", "fingerprint": "9947e5da4cc28604998b938686ba44e72cd4382ce0330b0b7457439028a32e72", "state": "open" }, { "rule_namespace": "syft", "rule_id": "proc-macro2@1.0.107", "component": "pkg:cargo/proc-macro2@1.0.107", "fingerprint": "8a7eb5f7e790f0c2621a0b8b0602d5e8df183461cc0627f75774260b6b3ade32", "state": "open" }, { "rule_namespace": "syft", "rule_id": "quote@1.0.47", "component": "pkg:cargo/quote@1.0.47", "fingerprint": "ba5b73c1936ffd2ab425cc8480b56e7b5f48125bec80e2b12a1a44baa9c1c558", "state": "open" }, { "rule_namespace": "syft", "rule_id": "r-efi@6.0.0", "component": "pkg:cargo/r-efi@6.0.0", "fingerprint": "122b7ca8782f044bbf34b34a6611015ab063c5941471a1f9edf52859953335ea", "state": "open" }, { "rule_namespace": "syft", "rule_id": "rand@0.8.8", "component": "pkg:cargo/rand@0.8.8", "fingerprint": "d75967c1358b7152e9dec7577066f5049015cdd77c70b9c353ec196342cef83b", "state": "open" }, { "rule_namespace": "syft", "rule_id": "rand_chacha@0.3.1", "component": "pkg:cargo/rand_chacha@0.3.1", "fingerprint": "98b4b52cb9630b79c95cd3ce370098fda6810c9893935c1623818e6c2bc6a950", "state": "open" }, { "rule_namespace": "syft", "rule_id": "rand_core@0.6.4", "component": "pkg:cargo/rand_core@0.6.4", "fingerprint": "881bc35797d5dbc04b02e40860ac237cc76ab1e8561cd4d39d3fc0a1c3155a12", "state": "open" }, { "rule_namespace": "syft", "rule_id": "rustc_version@0.4.1", "component": "pkg:cargo/rustc_version@0.4.1", "fingerprint": "b856fc7dc29ef6489b43403c317b31a5c2f7469df3e78eb38496d906f65a41f9", "state": "open" }, { "rule_namespace": "syft", "rule_id": "rustix@1.1.5", "component": "pkg:cargo/rustix@1.1.5", "fingerprint": "161a149e15f158acea456dd7572470352fcc38e9861cf74a7affcdbebb3be84c", "state": "open" }, { "rule_namespace": "syft", "rule_id": "semver@1.0.28", "component": "pkg:cargo/semver@1.0.28", "fingerprint": "adf8dd8c6eab8cbfba291126118409767783c7721216321d264e71566a86fb64", "state": "open" }, { "rule_namespace": "syft", "rule_id": "serde@1.0.229", "component": "pkg:cargo/serde@1.0.229", "fingerprint": "6d867eaaeef95071a1e043e0f22f4765333205c756611890f0f6ee0f0bf2844a", "state": "open" }, { "rule_namespace": "syft", "rule_id": "serde_core@1.0.229", "component": "pkg:cargo/serde_core@1.0.229", "fingerprint": "e510c18b9a78eaa008df3d1ced75890c6610e5b6802183c55c7bbe66f2b08705", "state": "open" }, { "rule_namespace": "syft", "rule_id": "serde_derive@1.0.229", "component": "pkg:cargo/serde_derive@1.0.229", "fingerprint": "000799b93838d093c6bbd43247666d235ecbfd735b93222d2cd26233f0fb28ec", "state": "open" }, { "rule_namespace": "syft", "rule_id": "serde_json@1.0.154", "component": "pkg:cargo/serde_json@1.0.154", "fingerprint": "349a0dd333a0d2897b42960e7efb1d0830ab09b3e9eeb1e2acdeb5a200f289e1", "state": "open" }, { "rule_namespace": "syft", "rule_id": "sha2@0.10.9", "component": "pkg:cargo/sha2@0.10.9", "fingerprint": "477b1f1b81c82609f675f2c5aeb53cfb9f1191376ff8845a5647e9c6b05388df", "state": "open" }, { "rule_namespace": "syft", "rule_id": "signature@2.2.0", "component": "pkg:cargo/signature@2.2.0", "fingerprint": "7d8fc0ddf33982f4c2b6ca2f3739dc5f209faca02c4d8a01cb67023acf125d9c", "state": "open" }, { "rule_namespace": "syft", "rule_id": "smallvec@1.6.0", "component": "pkg:cargo/smallvec@1.6.0", "fingerprint": "1b292519074e47f7a1b01edc1ec1476b2f282e47ec7640820c0bad1afd635a20", "state": "open" }, { "rule_namespace": "syft", "rule_id": "spki@0.7.3", "component": "pkg:cargo/spki@0.7.3", "fingerprint": "e7593fa9bc039e2db40a3a71927e7b104a79be42d02d04e04b1b373dad5f9354", "state": "open" }, { "rule_namespace": "syft", "rule_id": "strsim@0.11.1", "component": "pkg:cargo/strsim@0.11.1", "fingerprint": "7260c481b09f354b4c8d13996a46735f790af5206fa07ffa86f3d9601768719a", "state": "open" }, { "rule_namespace": "syft", "rule_id": "subtle@2.6.1", "component": "pkg:cargo/subtle@2.6.1", "fingerprint": "abf520278b97397636ae0d0fba9c430b656b0af89b288300d4c9e12cd1bad2a9", "state": "open" }, { "rule_namespace": "syft", "rule_id": "syn@2.0.119", "component": "pkg:cargo/syn@2.0.119", "fingerprint": "80bcee46aef1b69a610a3810a2f7dc3fec1a8cff8a4366bc2369f50b8543a5e0", "state": "open" }, { "rule_namespace": "syft", "rule_id": "syn@3.0.9", "component": "pkg:cargo/syn@3.0.9", "fingerprint": "114cde3e9bfa178c4b502cb01a87d49a704c293fc6d1a07270388d14b152c9c2", "state": "open" }, { "rule_namespace": "syft", "rule_id": "tempfile@3.27.0", "component": "pkg:cargo/tempfile@3.27.0", "fingerprint": "cc64344e2b0f434ddea53beb971184de5fd0a84c6a9739eff5255d69b2d42a3c", "state": "open" }, { "rule_namespace": "syft", "rule_id": "typenum@1.20.1", "component": "pkg:cargo/typenum@1.20.1", "fingerprint": "69fca6104cc42ad018ccf1e723d8e6cc55ad7d890cbeaf9f3073487edb4e9c81", "state": "open" }, { "rule_namespace": "syft", "rule_id": "unicode-ident@1.0.27", "component": "pkg:cargo/unicode-ident@1.0.27", "fingerprint": "c8f069b4043c8b0afcbf7d2f1d9fdb3681c8f8cc75ee03d318b515654ab1e21c", "state": "open" }, { "rule_namespace": "syft", "rule_id": "utf8parse@0.2.2", "component": "pkg:cargo/utf8parse@0.2.2", "fingerprint": "c28ef21ff55492434ef623166a53f268c1c02540b430df3967683388cacd9336", "state": "open" }, { "rule_namespace": "syft", "rule_id": "version_check@0.9.5", "component": "pkg:cargo/version_check@0.9.5", "fingerprint": "a37defdbf8011a14f68d31205b137179a3eec551816dc2a2b861965901eed251", "state": "open" }, { "rule_namespace": "syft", "rule_id": "wasi@0.11.1+wasi-snapshot-preview1", "component": "pkg:cargo/wasi@0.11.1%2Bwasi-snapshot-preview1", "fingerprint": "8224d335948f5ae82312adc7b5040e9331715f1f580a94ac77e55f15af60fb24", "state": "open" }, { "rule_namespace": "syft", "rule_id": "windows-link@0.2.1", "component": "pkg:cargo/windows-link@0.2.1", "fingerprint": "f2e9441ed9c64738dc6bd8be208ecb9b3f0f2eb8ea5ddeb4fa1303339bb340d6", "state": "open" }, { "rule_namespace": "syft", "rule_id": "windows-sys@0.61.2", "component": "pkg:cargo/windows-sys@0.61.2", "fingerprint": "b2713fc2f7bff729a27c0f62ee1be368d8344e0a7237e06edae435bfe00f9353", "state": "open" }, { "rule_namespace": "syft", "rule_id": "zerocopy@0.8.63", "component": "pkg:cargo/zerocopy@0.8.63", "fingerprint": "538de62743d2a698d49ae17957387bceef902f05602838b337eb33ef3a2018ca", "state": "open" }, { "rule_namespace": "syft", "rule_id": "zerocopy-derive@0.8.63", "component": "pkg:cargo/zerocopy-derive@0.8.63", "fingerprint": "c28066f0d74cc875b1313b642f5b65466e41ca5928021fdf354e3a5158e5f887", "state": "open" }, { "rule_namespace": "syft", "rule_id": "zeroize@1.9.1", "component": "pkg:cargo/zeroize@1.9.1", "fingerprint": "a9b132d8d889548f19dbf2f1ed6a078ca10079500e9a4e3e2c23e407a3c4c2bb", "state": "open" }, { "rule_namespace": "syft", "rule_id": "zmij@1.0.23", "component": "pkg:cargo/zmij@1.0.23", "fingerprint": "18a805aded02f77466f8ea530827dac33264f4eea283a1e3793fe895db3d0ad5", "state": "open" } ] }, { "tool": "dependency-manifest", "version": "1", "binary_digest": "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4", "config_digest": "2402cf6f9fd45d6c6d7b9bc10abdba72e36d61e88515a01d2cda19ee8d375b3b", "invocation_digest": "765e420e2272afaa1a9fa2d294e6a6fb04be80c019dab73cd0965bf2ffcaae6a", "input_subject_digest": "0f803b6e96e7060ae83e7e589cfac7c1eda124872402cc22dcd2ee43df2c0067", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4", "normalized_evidence_digest": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "limitations": [ "license facts are the job dependency manifest's registry SPDX ids; the workspace's own code and git-sourced dependencies carry no registry license facts" ], "evidence_class": "license", "observed_at": "2026-10-21T17:56:54.662892596+00:00", "findings": [ { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/anstream@1.0.0", "fingerprint": "81c389e920feb226956ea5e7e905e055ef3190e347d2024731cba977530b1c28", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/anstyle@1.0.14", "fingerprint": "72cb9f765ade0582fd1b8d4e3ec30734124e9580702182e52b07ce552ace97b1", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/anstyle-parse@1.0.0", "fingerprint": "03dae4cdd1bc7ba73958bf1c617e4f5aa93a31d30b5efa57cb32af82f5010ef9", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/anstyle-query@1.1.5", "fingerprint": "847b1133ac62af0c80b617aa8a687925f44ff02a38077b59d57f8a3d2c9e7377", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/anstyle-wincon@3.0.11", "fingerprint": "930051eead4685b3c169c214c7e4bf568a6b18c75060c642828af9b1e4a92cb7", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/base64ct@1.8.3", "fingerprint": "c2936ea98513be3acbc17ec843a0b5a87f2ec66b23198a7e457cbfe82501de17", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/bitflags@2.13.2", "fingerprint": "5a267ea0d4b32ca26ee6285110e4831c63bc24aba4b4ef50a6ce820dab9bc9c7", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/block-buffer@0.10.4", "fingerprint": "65f5493f0209c5bb833a448c5a4f8d34ea9cbb19fd226d673fb6378da3d45d81", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/cfg-if@1.0.5", "fingerprint": "9c66873ce2b15cedf8971b5136299c6dbbdbdb00096f984baca5c60e43f20b86", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/clap@4.6.7", "fingerprint": "b6d470dc0b142702b891dd8112eb44dacb7f1e64144fc95e7c4d8188299612c5", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/clap_builder@4.6.7", "fingerprint": "57fd5416fc287aefb50fdd41cdf558dc3aab82e27a8e542cb21cb6641a034fbf", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/clap_derive@4.6.7", "fingerprint": "e4955ec9e34c975255437f60abb69c42ffe6c4faff7bd1b2c2f1f582a1266f6f", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/clap_lex@1.1.1", "fingerprint": "9c1ce04a546342b75e26dcedd88dfd64ed4c42c1e22db5d575ebd9b83bdab96f", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/colorchoice@1.0.5", "fingerprint": "0cd1130d559feb72b1789c9dfc5ca946a042b193f6efe22b205f7179ae628471", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/const-oid@0.9.6", "fingerprint": "dd86b6e6f0675712fca49ad744596692f3308ad888e80c2fe798ae86fcc44761", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/cpufeatures@0.2.17", "fingerprint": "04a7c96209fbd41f9a1817ea4d2a6e8677796fa4ec0dc537d76a9dec0036eb8f", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/crypto-common@0.1.7", "fingerprint": "745d756e8999f1a9a249aed77699c555941595329a4e4343de89ae96e1d0333a", "state": "open" }, { "rule_namespace": "license", "rule_id": "BSD-3-Clause", "component": "pkg:cargo/curve25519-dalek@4.1.3", "fingerprint": "0bb575d6587d75ee9592137d2931238680210aecc215909adba1e5f8072feb00", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT/Apache-2.0", "component": "pkg:cargo/curve25519-dalek-derive@0.1.1", "fingerprint": "2bd313068cc5979f66814611d0f2653764f5f02a5fea3659e6622b7141a9efb2", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/der@0.7.10", "fingerprint": "5581ac6ec26f13cf9bf99838842922d224f796330520c89e209f34f8263deca9", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/digest@0.10.7", "fingerprint": "66d845a56cbb7c318352a08f46d3b6991b4e15095a844109683d6395bea3a1c7", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/ed25519@2.2.3", "fingerprint": "b1ef1484de84840c7c0a2c51933966b0868f8da06be7d59e7b77a92b3dcd12c6", "state": "open" }, { "rule_namespace": "license", "rule_id": "BSD-3-Clause", "component": "pkg:cargo/ed25519-dalek@2.2.0", "fingerprint": "59ce4b8271427de2f3c94b79b2d666608dd0ab80f62ba57ba79decbe90460d6c", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/errno@0.3.14", "fingerprint": "b2cf2d50c9d7e3df66abaf43435835639e08034d0258c853bbb967068248c7c1", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/fastrand@2.5.0", "fingerprint": "68281187c66d4c9670acbf7a748a35df777f7796eace3eb74ecd3c0df1af2377", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0 OR BSD-1-Clause", "component": "pkg:cargo/fiat-crypto@0.2.9", "fingerprint": "ab0d3ee1c57f754c8e9f310625a0a15790a9d09e9ce260b33597c5215179f9fd", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT", "component": "pkg:cargo/generic-array@0.14.7", "fingerprint": "4100baa4894d6f4a883eefdffa6f2a3f3f8932c5f513fd1b463bea367b450a8b", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/getrandom@0.2.17", "fingerprint": "e0e248e843d9c977190d92d5e8671ff1fe633094bec2fd78deda8cc2b9ddd913", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/getrandom@0.4.3", "fingerprint": "d34eb7b77676d5fa2a2fb54ccbdcf812b2e95ece08d523b51a8112876b9e9f1b", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/heck@0.5.0", "fingerprint": "f15e7f9397ec2df7435dfa719bd9ed4ec07a7f9b63f63a6b0a1ded192a681875", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/hex@0.4.3", "fingerprint": "0880807ea598985ae4e2b054afdf19681651cc0555d47de97c81bf15d308e1c1", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/is_terminal_polyfill@1.70.2", "fingerprint": "ea5404a32d8fe5f4d7b7c150ae9c418bef44434084f9807f04760b247a1833b6", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/itoa@1.0.18", "fingerprint": "0b71ec3d77ef8519b86e537ff5fac2a87a1e23a1a94302a67b55044db9e38cb7", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/libc@0.2.191", "fingerprint": "9d9973caa830049a9211e8ed805b7dcf7f690659b71db96bf5c4593d7b2ca614", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT", "component": "pkg:cargo/linux-raw-sys@0.12.1", "fingerprint": "773523a49f8cd1a1df7385ad357b411d263186aa04cb952428f2225c95e692a2", "state": "open" }, { "rule_namespace": "license", "rule_id": "Unlicense OR MIT", "component": "pkg:cargo/memchr@2.8.3", "fingerprint": "bf1591437a6f99fe31f560f71637dd4271236182cf3fe1f2a57f545ab377d916", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/once_cell@1.21.4", "fingerprint": "bf0bc6b374808f7c6f3fd08c0a7d63965be10e3ff39ebcd785fcf0d624f8acb0", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/once_cell_polyfill@1.70.2", "fingerprint": "4e122c54241f8e08146c80b9e7aace82ab89579bab281e82a26ef89d5444df44", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/pkcs8@0.10.2", "fingerprint": "dcf79ef96b12576f3da49211f68cd786c965cbcb198cc01af73f3d5426884627", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/ppv-lite86@0.2.21", "fingerprint": "10dbed4778cb7f48cbbaaafe5a6bc2839b58297bde9f43d49cab1a639d5c927c", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/proc-macro2@1.0.107", "fingerprint": "1efce8992cf906cfadfccce323fa0ae6955df07a7460965cebb2a64de11dc74b", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/quote@1.0.47", "fingerprint": "ab119f6f830df1f8f8ca18f18a1b7e8166482bbc79b529b2b01f1ef8d351dc9d", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0 OR LGPL-2.1-or-later", "component": "pkg:cargo/r-efi@6.0.0", "fingerprint": "79b3757623de39a2d1e2cbc582531edb2232c2fedae78ae86266ff0a657e6692", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/rand@0.8.8", "fingerprint": "671dab68d2ada9d89ee44f0464a0e42d22a9c70a7b4862b87c34ef30801c0b99", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/rand_chacha@0.3.1", "fingerprint": "09545686bd0a3e470a4467c0216f6dd076ee18f9ccdc19e939a2a0c8338a130c", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/rand_core@0.6.4", "fingerprint": "5b4629e1e1e878c03195737d30e6f492dc34c5d799ba36c5c04b8192eece897e", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/rustc_version@0.4.1", "fingerprint": "6ed6e8818bc7dbe359728d9d8c8e843d5421d6999b5853490c9cf658d37e59e0", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT", "component": "pkg:cargo/rustix@1.1.5", "fingerprint": "70045df0de7040cc8e3f8920f8dbce683735be2f3505c999933268304eed3d01", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/semver@1.0.28", "fingerprint": "d1f1194d0512ca4c7a020f03728853a518bbdb6719bc6a3a7fc7caeda7f6bdfe", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/serde@1.0.229", "fingerprint": "e1eb81e653a288a15481d6312ab337b18d44e2d94d49f48ac7c8c3ec800a36f5", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/serde_core@1.0.229", "fingerprint": "4086d666853f837b329582f4ada668b8ee6eb0983c029a5fa7eacb4cd7b95ea7", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/serde_derive@1.0.229", "fingerprint": "4077d1047525fda030d22d1788a1c3aa36c56309be7434055545e4a5acc5435e", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/serde_json@1.0.154", "fingerprint": "2dc62cd2e94dfe2e326379ab19b563408bee14cbd79b7c9730b3cf913df685ee", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/sha2@0.10.9", "fingerprint": "8fffdf2de9a098e260c473f456893764abfb0da25c8edf8f28ef1d8b3b483857", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/signature@2.2.0", "fingerprint": "8409e8477eaa8b299157e472284dbb382c65babc4a10856896a0325c741bfc84", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT/Apache-2.0", "component": "pkg:cargo/smallvec@1.6.0", "fingerprint": "cfe55c94dcb01bd350011e0618de53cfeeccc9fedcf5a83cd1bd293d6dedb9f4", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/spki@0.7.3", "fingerprint": "6d2575dae8ab3515840e41bc7dd0289d19fe62354849d325d3f4876f96842a9b", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT", "component": "pkg:cargo/strsim@0.11.1", "fingerprint": "3803c2ce269d8937cb5ca282cfc7de1c38bec3947a7f800554d22c9b6af0b4ff", "state": "open" }, { "rule_namespace": "license", "rule_id": "BSD-3-Clause", "component": "pkg:cargo/subtle@2.6.1", "fingerprint": "b2905d01e0f0b65a50ff69518e7472eced519c61c4f31a958fedf47503a048c5", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/syn@2.0.119", "fingerprint": "ec75866e642d56853e0689f491ec83f5ca076a545a518dbc71cb657872de02ba", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/syn@3.0.9", "fingerprint": "50816f9296ebef556556bbf41104d9aff94dc3c3b78917993d062c356ece3a83", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/tempfile@3.27.0", "fingerprint": "fb7e166af30cc01cf8d9fa7bc5864a37ef17e94f0dcad6591c23c48b4f16a08f", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/typenum@1.20.1", "fingerprint": "64aa3bf3c0ae12c744475d6fbd6062f2bf93df107d8585dce88c78832b669779", "state": "open" }, { "rule_namespace": "license", "rule_id": "(MIT OR Apache-2.0) AND Unicode-3.0", "component": "pkg:cargo/unicode-ident@1.0.27", "fingerprint": "bbfb4a615f30648ef5a8eaf210033aa1baaab14fa0bc9482ac72ae7641a6e466", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/utf8parse@0.2.2", "fingerprint": "af63bfd1ce1cfe636db88caaa115b8843ca67e96b3dd93f523d84771bf40a073", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT/Apache-2.0", "component": "pkg:cargo/version_check@0.9.5", "fingerprint": "99b8a953eefdb41a40a9a077b9032a3b6a395900604be21a32da30658ce61f15", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT", "component": "pkg:cargo/wasi@0.11.1+wasi-snapshot-preview1", "fingerprint": "d9cbaa8941d43791ff495ffbc74a5ec516e48db88243ab8abce575acfe23e028", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/windows-link@0.2.1", "fingerprint": "6a884f0186ee68ed468285b3dee5325fccd3809ca04aafabffd42e588d76a3e0", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/windows-sys@0.61.2", "fingerprint": "169218fdfc26698b6fd1a352d504c2359a123be3ebf7d7b9e0c223406ce70d21", "state": "open" }, { "rule_namespace": "license", "rule_id": "BSD-2-Clause OR Apache-2.0 OR MIT", "component": "pkg:cargo/zerocopy@0.8.63", "fingerprint": "dca0f093c749462f428d68cecfb63c6f0b0443b944e3f93172bc7b85bea835ec", "state": "open" }, { "rule_namespace": "license", "rule_id": "BSD-2-Clause OR Apache-2.0 OR MIT", "component": "pkg:cargo/zerocopy-derive@0.8.63", "fingerprint": "aa23299329debd40f4b88bbe41983c6f0b798920fe0306bdb2bd12307011eff0", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/zeroize@1.9.1", "fingerprint": "ad04bc15c43493a874503f1f4e5228c67653134c34ae698ee27abc3ba5027fed", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT", "component": "pkg:cargo/zmij@1.0.23", "fingerprint": "cf39f12ea4d06ecb2c119337d3ddd79c7cc97ef7e7e900bb4beb745ac2696a0d", "state": "open" } ] } ], "dependency_manifest": { "ecosystem": "rust", "tool": "cargo", "tool_version": "1.99.0", "entries": [ { "name": "anstream", "version": "1.0.0", "purl": "pkg:cargo/anstream@1.0.0", "sha256": "824a212faf96e9acacdbd09febd34438f8f711fb84e09a8916013cd7815ca28d", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "anstyle", "version": "1.0.14", "purl": "pkg:cargo/anstyle@1.0.14", "sha256": "940b3a0ca603d1eade50a4846a2afffd5ef57a9feac2c0e2ec2e14f9ead76000", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "anstyle-parse", "version": "1.0.0", "purl": "pkg:cargo/anstyle-parse@1.0.0", "sha256": "52ce7f38b242319f7cabaa6813055467063ecdc9d355bbb4ce0c68908cd8130e", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "anstyle-query", "version": "1.1.5", "purl": "pkg:cargo/anstyle-query@1.1.5", "sha256": "40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "anstyle-wincon", "version": "3.0.11", "purl": "pkg:cargo/anstyle-wincon@3.0.11", "sha256": "291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "base64ct", "version": "1.8.3", "purl": "pkg:cargo/base64ct@1.8.3", "sha256": "2af50177e190e07a26ab74f8b1efbfe2ef87da2116221318cb1c2e82baf7de06", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "bitflags", "version": "2.13.2", "purl": "pkg:cargo/bitflags@2.13.2", "sha256": "3ded4057c258ba199e2d26386d3af3780957ecaee6c4ef4041c6b4b8b97c0b06", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "block-buffer", "version": "0.10.4", "purl": "pkg:cargo/block-buffer@0.10.4", "sha256": "3078c7629b62d3f0439517fa394996acacc5cbc91c5a20d8c658e77abd503a71", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "cfg-if", "version": "1.0.5", "purl": "pkg:cargo/cfg-if@1.0.5", "sha256": "4e7648175b45a9a48536d676f68d918270699102aa8dab5496df06904c914600", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "clap", "version": "4.6.7", "purl": "pkg:cargo/clap@4.6.7", "sha256": "aa8876b300ab35ba921adea3dfd70157a46249b33f95c9084ae5709785478946", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "clap_builder", "version": "4.6.7", "purl": "pkg:cargo/clap_builder@4.6.7", "sha256": "ec0797fb7aeb1406c84efac526901f7ec3ead2124f946b494e72879d4b54704d", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "clap_derive", "version": "4.6.7", "purl": "pkg:cargo/clap_derive@4.6.7", "sha256": "f9c751b79415d4e559e3d1fcf128e09e720eb673a06d26cf6f392d37d75b66e0", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "clap_lex", "version": "1.1.1", "purl": "pkg:cargo/clap_lex@1.1.1", "sha256": "1c133bc6a41be0d194c306b5506d15e6feeea7b1d6604bd3f8310dfb2ca96486", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "colorchoice", "version": "1.0.5", "purl": "pkg:cargo/colorchoice@1.0.5", "sha256": "1d07550c9036bf2ae0c684c4297d503f838287c83c53686d05370d0e139ae570", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "const-oid", "version": "0.9.6", "purl": "pkg:cargo/const-oid@0.9.6", "sha256": "c2459377285ad874054d797f3ccebf984978aa39129f6eafde5cdc8315b612f8", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "cpufeatures", "version": "0.2.17", "purl": "pkg:cargo/cpufeatures@0.2.17", "sha256": "59ed5838eebb26a2bb2e58f6d5b5316989ae9d08bab10e0e6d103e656d1b0280", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "crypto-common", "version": "0.1.7", "purl": "pkg:cargo/crypto-common@0.1.7", "sha256": "78c8292055d1c1df0cce5d180393dc8cce0abec0a7102adb6c7b1eef6016d60a", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "curve25519-dalek", "version": "4.1.3", "purl": "pkg:cargo/curve25519-dalek@4.1.3", "sha256": "97fb8b7c4503de7d6ae7b42ab72a5a59857b4c937ec27a3d4539dba95b5ab2be", "scope": "runtime", "licenses": [ "BSD-3-Clause" ] }, { "name": "curve25519-dalek-derive", "version": "0.1.1", "purl": "pkg:cargo/curve25519-dalek-derive@0.1.1", "sha256": "f46882e17999c6cc590af592290432be3bce0428cb0d5f8b6715e4dc7b383eb3", "scope": "runtime", "licenses": [ "MIT/Apache-2.0" ] }, { "name": "der", "version": "0.7.10", "purl": "pkg:cargo/der@0.7.10", "sha256": "e7c1832837b905bbfb5101e07cc24c8deddf52f93225eee6ead5f4d63d53ddcb", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "digest", "version": "0.10.7", "purl": "pkg:cargo/digest@0.10.7", "sha256": "9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "ed25519", "version": "2.2.3", "purl": "pkg:cargo/ed25519@2.2.3", "sha256": "115531babc129696a58c64a4fef0a8bf9e9698629fb97e9e40767d235cfbcd53", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "ed25519-dalek", "version": "2.2.0", "purl": "pkg:cargo/ed25519-dalek@2.2.0", "sha256": "70e796c081cee67dc755e1a36a0a172b897fab85fc3f6bc48307991f64e4eca9", "scope": "runtime", "licenses": [ "BSD-3-Clause" ] }, { "name": "errno", "version": "0.3.14", "purl": "pkg:cargo/errno@0.3.14", "sha256": "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "fastrand", "version": "2.5.0", "purl": "pkg:cargo/fastrand@2.5.0", "sha256": "da7c62ceae207dd37ea5b845da6a0696c799f85e97da1ab5b7910be3c1c80223", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "fiat-crypto", "version": "0.2.9", "purl": "pkg:cargo/fiat-crypto@0.2.9", "sha256": "28dea519a9695b9977216879a3ebfddf92f1c08c05d984f8996aecd6ecdc811d", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0 OR BSD-1-Clause" ] }, { "name": "generic-array", "version": "0.14.7", "purl": "pkg:cargo/generic-array@0.14.7", "sha256": "85649ca51fd72272d7821adaf274ad91c288277713d9c18820d8499a7ff69e9a", "scope": "runtime", "licenses": [ "MIT" ] }, { "name": "getrandom", "version": "0.2.17", "purl": "pkg:cargo/getrandom@0.2.17", "sha256": "ff2abc00be7fca6ebc474524697ae276ad847ad0a6b3faa4bcb027e9a4614ad0", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "getrandom", "version": "0.4.3", "purl": "pkg:cargo/getrandom@0.4.3", "sha256": "300e883d756b2e4ec94e02791f39b04b522276138852cfc41d9fb7e904106099", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "heck", "version": "0.5.0", "purl": "pkg:cargo/heck@0.5.0", "sha256": "2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "hex", "version": "0.4.3", "purl": "pkg:cargo/hex@0.4.3", "sha256": "7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "is_terminal_polyfill", "version": "1.70.2", "purl": "pkg:cargo/is_terminal_polyfill@1.70.2", "sha256": "a6cb138bb79a146c1bd460005623e142ef0181e3d0219cb493e02f7d08a35695", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "itoa", "version": "1.0.18", "purl": "pkg:cargo/itoa@1.0.18", "sha256": "8f42a60cbdf9a97f5d2305f08a87dc4e09308d1276d28c869c684d7777685682", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "libc", "version": "0.2.191", "purl": "pkg:cargo/libc@0.2.191", "sha256": "65cd87c9a6d60536580b316ad985726104730a5151c99845f2490428ef91240a", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "linux-raw-sys", "version": "0.12.1", "purl": "pkg:cargo/linux-raw-sys@0.12.1", "sha256": "32a66949e030da00e8c7d4434b251670a91556f4144941d37452769c25d58a53", "scope": "runtime", "licenses": [ "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT" ] }, { "name": "memchr", "version": "2.8.3", "purl": "pkg:cargo/memchr@2.8.3", "sha256": "cf8baf1c55e62ffcace7a9f06f4bd9cd3f0c4beb022d3b367256b91b87513d98", "scope": "runtime", "licenses": [ "Unlicense OR MIT" ] }, { "name": "once_cell", "version": "1.21.4", "purl": "pkg:cargo/once_cell@1.21.4", "sha256": "9f7c3e4beb33f85d45ae3e3a1792185706c8e16d043238c593331cc7cd313b50", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "once_cell_polyfill", "version": "1.70.2", "purl": "pkg:cargo/once_cell_polyfill@1.70.2", "sha256": "384b8ab6d37215f3c5301a95a4accb5d64aa607f1fcb26a11b5303878451b4fe", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "pkcs8", "version": "0.10.2", "purl": "pkg:cargo/pkcs8@0.10.2", "sha256": "f950b2377845cebe5cf8b5165cb3cc1a5e0fa5cfa3e1f7f55707d8fd82e0a7b7", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "ppv-lite86", "version": "0.2.21", "purl": "pkg:cargo/ppv-lite86@0.2.21", "sha256": "85eae3c4ed2f50dcfe72643da4befc30deadb458a9b590d720cde2f2b1e97da9", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "proc-macro2", "version": "1.0.107", "purl": "pkg:cargo/proc-macro2@1.0.107", "sha256": "985e7ec9bb745e6ce6535b544d84d6cd6f7ad8bd711c398938ae983b91a766d9", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "quote", "version": "1.0.47", "purl": "pkg:cargo/quote@1.0.47", "sha256": "1fbf4db142a473a8d80c26bbf18454ed458bf8d26c8219c331daecfdbd079001", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "r-efi", "version": "6.0.0", "purl": "pkg:cargo/r-efi@6.0.0", "sha256": "f8dcc9c7d52a811697d2151c701e0d08956f92b0e24136cf4cf27b57a6a0d9bf", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0 OR LGPL-2.1-or-later" ] }, { "name": "rand", "version": "0.8.8", "purl": "pkg:cargo/rand@0.8.8", "sha256": "e058c7de0b26af77780c769414d6257830bb240f3c38477dbc2c16e5f54d6d4c", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "rand_chacha", "version": "0.3.1", "purl": "pkg:cargo/rand_chacha@0.3.1", "sha256": "e6c10a63a0fa32252be49d21e7709d4d4baf8d231c2dbce1eaa8141b9b127d88", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "rand_core", "version": "0.6.4", "purl": "pkg:cargo/rand_core@0.6.4", "sha256": "ec0be4795e2f6a28069bec0b5ff3e2ac9bafc99e6a9a7dc3547996c5c816922c", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "rustc_version", "version": "0.4.1", "purl": "pkg:cargo/rustc_version@0.4.1", "sha256": "cfcb3a22ef46e85b45de6ee7e79d063319ebb6594faafcf1c225ea92ab6e9b92", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "rustix", "version": "1.1.5", "purl": "pkg:cargo/rustix@1.1.5", "sha256": "891efababe418670775f199f0d233d84843c227a0949a883ce15b37c78d6629d", "scope": "runtime", "licenses": [ "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT" ] }, { "name": "semver", "version": "1.0.28", "purl": "pkg:cargo/semver@1.0.28", "sha256": "8a7852d02fc848982e0c167ef163aaff9cd91dc640ba85e263cb1ce46fae51cd", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "serde", "version": "1.0.229", "purl": "pkg:cargo/serde@1.0.229", "sha256": "4148590afebada386688f18773da617792bf2ef03ffc1e4cbd2b1d45b023e0ba", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "serde_core", "version": "1.0.229", "purl": "pkg:cargo/serde_core@1.0.229", "sha256": "67dca2c9c51e58a4791a4b1ed58308b39c64224d349a935ab5039aa360942a48", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "serde_derive", "version": "1.0.229", "purl": "pkg:cargo/serde_derive@1.0.229", "sha256": "e7a5d71263a5a7d47b41f6b3f06ba276f10cc18b0931f1799f710578e2309348", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "serde_json", "version": "1.0.154", "purl": "pkg:cargo/serde_json@1.0.154", "sha256": "e7e9cc8b1b85264074fbcc02a88680c4096b1e47df8f739dceb03bf482f04bd6", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "sha2", "version": "0.10.9", "purl": "pkg:cargo/sha2@0.10.9", "sha256": "a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "signature", "version": "2.2.0", "purl": "pkg:cargo/signature@2.2.0", "sha256": "77549399552de45a898a580c1b41d445bf730df867cc44e6c0233bbc4b8329de", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "smallvec", "version": "1.6.0", "purl": "pkg:cargo/smallvec@1.6.0", "sha256": "1a55ca5f3b68e41c979bf8c46a6f1da892ca4db8f94023ce0bd32407573b1ac0", "scope": "runtime", "licenses": [ "MIT/Apache-2.0" ] }, { "name": "spki", "version": "0.7.3", "purl": "pkg:cargo/spki@0.7.3", "sha256": "d91ed6c858b01f942cd56b37a94b3e0a1798290327d1236e4d9cf4eaca44d29d", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "strsim", "version": "0.11.1", "purl": "pkg:cargo/strsim@0.11.1", "sha256": "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f", "scope": "runtime", "licenses": [ "MIT" ] }, { "name": "subtle", "version": "2.6.1", "purl": "pkg:cargo/subtle@2.6.1", "sha256": "13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292", "scope": "runtime", "licenses": [ "BSD-3-Clause" ] }, { "name": "syn", "version": "2.0.119", "purl": "pkg:cargo/syn@2.0.119", "sha256": "872831b642d1a07999a962a351ed35b955ea2cfc8f3862091e2a240a84f17297", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "syn", "version": "3.0.9", "purl": "pkg:cargo/syn@3.0.9", "sha256": "d78c8dee4c7bf0e14673097256fed6142ce9d3b85a408189d07482442145823b", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "tempfile", "version": "3.27.0", "purl": "pkg:cargo/tempfile@3.27.0", "sha256": "32497e9a4c7b38532efcdebeef879707aa9f794296a4f0244f6f69e9bc8574bd", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "typenum", "version": "1.20.1", "purl": "pkg:cargo/typenum@1.20.1", "sha256": "b6f5e870be6c3b371b77fe0ee0bafb859fa4964b4404c27de1d380043c4dda20", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "unicode-ident", "version": "1.0.27", "purl": "pkg:cargo/unicode-ident@1.0.27", "sha256": "a2c754d6c33795a1c324727428e5a7dedb5b06195f9890bdbcba760d3e246563", "scope": "runtime", "licenses": [ "(MIT OR Apache-2.0) AND Unicode-3.0" ] }, { "name": "utf8parse", "version": "0.2.2", "purl": "pkg:cargo/utf8parse@0.2.2", "sha256": "06abde3611657adf66d383f00b093d7faecc7fa57071cce2578660c9f1010821", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "version_check", "version": "0.9.5", "purl": "pkg:cargo/version_check@0.9.5", "sha256": "0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a", "scope": "runtime", "licenses": [ "MIT/Apache-2.0" ] }, { "name": "wasi", "version": "0.11.1+wasi-snapshot-preview1", "purl": "pkg:cargo/wasi@0.11.1+wasi-snapshot-preview1", "sha256": "ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b", "scope": "runtime", "licenses": [ "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT" ] }, { "name": "windows-link", "version": "0.2.1", "purl": "pkg:cargo/windows-link@0.2.1", "sha256": "f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "windows-sys", "version": "0.61.2", "purl": "pkg:cargo/windows-sys@0.61.2", "sha256": "ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "zerocopy", "version": "0.8.63", "purl": "pkg:cargo/zerocopy@0.8.63", "sha256": "e5fe1f8f1b06191a00962174c61aa5005e0bb391a6d80d07e24d115c01a92ed8", "scope": "runtime", "licenses": [ "BSD-2-Clause OR Apache-2.0 OR MIT" ] }, { "name": "zerocopy-derive", "version": "0.8.63", "purl": "pkg:cargo/zerocopy-derive@0.8.63", "sha256": "863ad3ac83293fb4d740aedbfdc9240dd8d1a50c1099acd76ce80ce7c7230c7f", "scope": "runtime", "licenses": [ "BSD-2-Clause OR Apache-2.0 OR MIT" ] }, { "name": "zeroize", "version": "1.9.1", "purl": "pkg:cargo/zeroize@1.9.1", "sha256": "e13084392c5e4bc371903e2935a5eaeed24905a7511356b883835e18a78f6879", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "zmij", "version": "1.0.23", "purl": "pkg:cargo/zmij@1.0.23", "sha256": "29666d0abbfad1e3dc4dcf6144730dd3a3ab225bbbdac83319345b1b44ccfc1b", "scope": "runtime", "licenses": [ "MIT" ] } ] } } }, { "attempt_no": 5, "verdict": "passed", "evidence_sha256": "b340543a188eab1f0c6ee4867be7e2abacdbb9959398a342d01c41cafd213ae6", "env_sha256": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "wall_seconds": 28.503497945, "result": { "job_id": "520d2155-f6c4-43c6-953c-1829b6dd5cc3", "verdict": "passed", "criteria": [ { "id": "build", "required": true, "passed": true, "commands": [ { "argv": [ "cargo", "build", "--workspace", "--release" ], "exit_code": 0, "timed_out": false, "duration_seconds": 18.089527049, "tail": " Compiling proc-macro2 v1.0.107\n Compiling unicode-ident v1.0.27\n Compiling quote v1.0.47\n Compiling version_check v0.9.5\n Compiling libc v0.2.191\n Compiling cfg-if v1.0.5\n Compiling typenum v1.20.1\n Compiling semver v1.0.28\n Compiling zerocopy v0.8.63\n Compiling serde_core v1.0.229\n Compiling utf8parse v0.2.2\n Compiling cpufeatures v0.2.17\n Compiling zmij v1.0.23\n Compiling colorchoice v1.0.5\n Compiling anstyle-query v1.1.5\n Compiling anstyle v1.0.14\n Compiling zeroize v1.9.1\n Compiling serde_json v1.0.154\n Compiling subtle v2.6.1\n Compiling serde v1.0.229\n Compiling is_terminal_polyfill v1.70.2\n Compiling signature v2.2.0\n Compiling heck v0.5.0\n Compiling itoa v1.0.18\n Compiling anstyle-parse v1.0.0\n Compiling strsim v0.11.1\n Compiling clap_lex v1.1.1\n Compiling memchr v2.8.3\n Compiling ed25519 v2.2.3\n Compiling hex v0.4.3\n Compiling smallvec v1.6.0\n Compiling anstream v1.0.0\n Compiling rustc_version v0.4.1\n Compiling generic-array v0.14.7\n Compiling clap_builder v4.6.7\n Compiling curve25519-dalek v4.1.3\n Compiling syn v3.0.9\n Compiling syn v2.0.119\n Compiling block-buffer v0.10.4\n Compiling crypto-common v0.1.7\n Compiling digest v0.10.7\n Compiling getrandom v0.2.17\n Compiling sha2 v0.10.9\n Compiling rand_core v0.6.4\n Compiling curve25519-dalek-derive v0.1.1\n Compiling serde_derive v1.0.229\n Compiling clap_derive v4.6.7\n Compiling ppv-lite86 v0.2.21\n Compiling rand_chacha v0.3.1\n Compiling ed25519-dalek v2.2.0\n Compiling rand v0.8.8\n Compiling clap v4.6.7\n Compiling falsegreen-ledger-core v0.1.0 (/var/lib/falsegreen/work/520d2155-f6c4-43c6-953c-1829b6dd5cc3/run/crates/falsegreen-ledger-core)\n Compiling falsegreen-ledger v0.1.0 (/var/lib/falsegreen/work/520d2155-f6c4-43c6-953c-1829b6dd5cc3/run/crates/falsegreen-ledger)\n Finished `release` profile [optimized] target(s) in 18.05s\n" } ] }, { "id": "tests", "required": true, "passed": true, "commands": [ { "argv": [ "cargo", "test", "--workspace" ], "exit_code": 0, "timed_out": false, "duration_seconds": 6.328202371, "tail": "\nrunning 0 tests\n\ntest result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s\n\n\nrunning 10 tests\ntest the_cli_help_lists_every_command ... ok\ntest a_policy_violation_exits_policy ... ok\ntest a_corrupt_shard_exits_corrupt ... ok\ntest the_export_import_roundtrip_is_hash_stable ... ok\ntest the_full_lifecycle_verifies_clean ... ok\ntest a_tampered_event_field_is_detected ... ok\ntest a_tampered_seal_signature_is_detected ... ok\ntest a_tampered_prev_hash_is_detected ... ok\ntest a_tampered_cross_shard_link_is_detected ... ok\ntest compaction_keeps_the_ledger_verifiable ... ok\n\ntest result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.24s\n\n\nrunning 41 tests\ntest chain::tests::sequence_gap_fails_link_check ... ok\ntest chain::tests::genesis_record_is_deterministic ... ok\ntest chain::tests::prev_hash_is_committed ... ok\ntest chain::tests::unknown_fields_rejected_in_record ... ok\ntest chain::tests::hash_changes_when_any_event_field_changes ... ok\ntest chain::tests::tampered_record_fails_hash_check ... ok\ntest event::tests::canonical_is_sorted_and_stable ... ok\ntest event::tests::context_null_is_canonicalized_as_null_and_rejected ... ok\ntest event::tests::optionals_omit_none_in_canonical_form ... ok\ntest event::tests::canonical_round_trips_through_json_with_shuffled_keys ... ok\ntest event::tests::validation_rejects_bad_timestamp ... ok\ntest event::tests::unknown_fields_are_rejected ... ok\ntest event::tests::validation_rejects_empty_required_fields ... ok\ntest integrity::tests::a_lone_leaf_is_its_own_root_and_odd_leaves_pair_with_themselves ... ok\ntest integrity::tests::malformed_keys_and_signatures_are_rejected ... ok\ntest integrity::tests::merkle_root_rejects_empty_and_non_hex ... ok\ntest policy::tests::an_event_can_violate_several_rules ... ok\ntest policy::tests::deny_rule_fires_on_match ... ok\ntest policy::tests::deny_rule_fires_only_on_a_match ... ok\ntest policy::tests::require_outcome_enforces_the_decision ... ok\ntest policy::tests::validation_rejects_malformed_policies ... ok\ntest integrity::tests::merkle_root_is_deterministic_and_order_sensitive ... ok\ntest store::tests::corrupt_line_is_a_parse_error ... ok\ntest store::tests::empty_append_is_a_noop ... ok\ntest integrity::tests::the_trusted_key_must_match_the_embedded_key ... ok\ntest store::tests::invalid_event_rejected ... ok\ntest compact::tests::compaction_refuses_unsealed_empty_and_already_compacted ... ok\ntest store::tests::seal_count_mismatch_rejected ... ok\ntest store::tests::init_and_append_continues_from_genesis ... ok\ntest store::tests::append_after_seal_starts_new_shard_linked_to_merkle_root ... ok\ntest verify::tests::the_report_is_canonical_json ... ok\ntest verify::tests::a_sequence_gap_is_caught ... ok\ntest verify::tests::policy_violations_land_in_the_report ... ok\ntest verify::tests::a_bad_seal_signature_is_caught ... ok\ntest verify::tests::a_tampered_event_is_caught ... ok\ntest integrity::tests::sign_and_verify_roundtrip ... ok\ntest verify::tests::a_clean_ledger_verifies ... ok\ntest verify::tests::a_tampered_record_hash_cascades_downstream ... ok\ntest compact::tests::the_chain_continues_from_the_original_root_after_compaction ... ok\ntest compact::tests::the_compacted_shard_verifies_and_reports_the_source_root ... ok\ntest integrity::tests::a_tampered_seal_field_fails_verification ... ok\n\ntest result: ok. 41 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s\n\n\nrunning 0 tests\n\ntest result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s\n\n Compiling proc-macro2 v1.0.107\n Compiling quote v1.0.47\n Compiling unicode-ident v1.0.27\n Compiling cfg-if v1.0.5\n Compiling libc v0.2.191\n Compiling version_check v0.9.5\n Compiling typenum v1.20.1\n Compiling semver v1.0.28\n Compiling serde_core v1.0.229\n Compiling zerocopy v0.8.63\n Compiling cpufeatures v0.2.17\n Compiling zmij v1.0.23\n Compiling subtle v2.6.1\n Compiling serde_json v1.0.154\n Compiling serde v1.0.229\n Compiling signature v2.2.0\n Compiling zeroize v1.9.1\n Compiling utf8parse v0.2.2\n Compiling rustix v1.1.5\n Compiling itoa v1.0.18\n Compiling memchr v2.8.3\n Compiling getrandom v0.4.3\n Compiling colorchoice v1.0.5\n Compiling ed25519 v2.2.3\n Compiling anstyle-parse v1.0.0\n Compiling anstyle-query v1.1.5\n Compiling anstyle v1.0.14\n Compiling smallvec v1.6.0\n Compiling bitflags v2.13.2\n Compiling linux-raw-sys v0.12.1\n Compiling hex v0.4.3\n Compiling is_terminal_polyfill v1.70.2\n Compiling rustc_version v0.4.1\n Compiling once_cell v1.21.4\n Compiling heck v0.5.0\n Compiling strsim v0.11.1\n Compiling clap_lex v1.1.1\n Compiling fastrand v2.5.0\n Compiling generic-array v0.14.7\n Compiling anstream v1.0.0\n Compiling curve25519-dalek v4.1.3\n Compiling clap_builder v4.6.7\n Compiling syn v3.0.9\n Compiling syn v2.0.119\n Compiling block-buffer v0.10.4\n Compiling crypto-common v0.1.7\n Compiling digest v0.10.7\n Compiling getrandom v0.2.17\n Compiling sha2 v0.10.9\n Compiling rand_core v0.6.4\n Compiling tempfile v3.27.0\n Compiling curve25519-dalek-derive v0.1.1\n Compiling serde_derive v1.0.229\n Compiling clap_derive v4.6.7\n Compiling ppv-lite86 v0.2.21\n Compiling rand_chacha v0.3.1\n Compiling rand v0.8.8\n Compiling ed25519-dalek v2.2.0\n Compiling clap v4.6.7\n Compiling falsegreen-ledger-core v0.1.0 (/var/lib/falsegreen/work/520d2155-f6c4-43c6-953c-1829b6dd5cc3/run/crates/falsegreen-ledger-core)\n Compiling falsegreen-ledger v0.1.0 (/var/lib/falsegreen/work/520d2155-f6c4-43c6-953c-1829b6dd5cc3/run/crates/falsegreen-ledger)\n Finished `test` profile [unoptimized + debuginfo] target(s) in 5.89s\n Running unittests src/main.rs (target/debug/deps/falsegreen_ledger-ab76082b4462b0b1)\n Running tests/integration.rs (target/debug/deps/integration-22dc6beef3e29bb7)\n Running unittests src/lib.rs (target/debug/deps/falsegreen_ledger_core-d00132f4be88bc4a)\n Doc-tests falsegreen_ledger_core\n" } ] }, { "id": "lint", "required": false, "passed": true, "commands": [ { "argv": [ "cargo", "clippy", "--workspace", "--all-targets", "--", "-D", "warnings" ], "exit_code": 0, "timed_out": false, "duration_seconds": 3.791691624, "tail": " Checking cfg-if v1.0.5\n Checking typenum v1.20.1\n Checking cpufeatures v0.2.17\n Checking utf8parse v0.2.2\n Checking subtle v2.6.1\n Checking signature v2.2.0\n Checking zeroize v1.9.1\n Checking anstyle v1.0.14\n Checking itoa v1.0.18\n Checking memchr v2.8.3\n Checking libc v0.2.191\n Checking is_terminal_polyfill v1.70.2\n Checking serde_core v1.0.229\n Checking zerocopy v0.8.63\n Checking zmij v1.0.23\n Checking colorchoice v1.0.5\n Checking anstyle-query v1.1.5\n Checking bitflags v2.13.2\n Checking smallvec v1.6.0\n Checking strsim v0.11.1\n Checking hex v0.4.3\n Checking clap_lex v1.1.1\n Checking linux-raw-sys v0.12.1\n Checking anstyle-parse v1.0.0\n Checking once_cell v1.21.4\n Checking ed25519 v2.2.3\n Checking fastrand v2.5.0\n Checking anstream v1.0.0\n Checking clap_builder v4.6.7\n Checking rustix v1.1.5\n Checking generic-array v0.14.7\n Checking getrandom v0.2.17\n Checking getrandom v0.4.3\n Checking rand_core v0.6.4\n Checking block-buffer v0.10.4\n Checking crypto-common v0.1.7\n Checking digest v0.10.7\n Checking sha2 v0.10.9\n Checking curve25519-dalek v4.1.3\n Checking clap v4.6.7\n Checking tempfile v3.27.0\n Checking serde_json v1.0.154\n Checking serde v1.0.229\n Checking ed25519-dalek v2.2.0\n Checking falsegreen-ledger-core v0.1.0 (/var/lib/falsegreen/work/520d2155-f6c4-43c6-953c-1829b6dd5cc3/run/crates/falsegreen-ledger-core)\n Checking ppv-lite86 v0.2.21\n Checking rand_chacha v0.3.1\n Checking rand v0.8.8\n Checking falsegreen-ledger v0.1.0 (/var/lib/falsegreen/work/520d2155-f6c4-43c6-953c-1829b6dd5cc3/run/crates/falsegreen-ledger)\n Finished `dev` profile [unoptimized + debuginfo] target(s) in 3.72s\n" }, { "argv": [ "cargo", "fmt", "--all", "--check" ], "exit_code": 0, "timed_out": false, "duration_seconds": 0.112730158, "tail": "" } ] } ], "wall_seconds": 28.503497945, "error": null, "env_sha256": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "environment": { "schema": 1, "eco": "rust", "toolchain": "rustc 1.99.0 (rustc)", "toolchain_version": "1.99.0", "fingerprint": "cb72048928286df9d194d6d7356350b373cefcc81d7ee1899729b6ebe14c8817", "artifacts": [ { "name": "anstream", "version": "1.0.0", "sha256": "824a212faf96e9acacdbd09febd34438f8f711fb84e09a8916013cd7815ca28d" }, { "name": "anstyle", "version": "1.0.14", "sha256": "940b3a0ca603d1eade50a4846a2afffd5ef57a9feac2c0e2ec2e14f9ead76000" }, { "name": "anstyle-parse", "version": "1.0.0", "sha256": "52ce7f38b242319f7cabaa6813055467063ecdc9d355bbb4ce0c68908cd8130e" }, { "name": "anstyle-query", "version": "1.1.5", "sha256": "40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc" }, { "name": "anstyle-wincon", "version": "3.0.11", "sha256": "291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d" }, { "name": "base64ct", "version": "1.8.3", "sha256": "2af50177e190e07a26ab74f8b1efbfe2ef87da2116221318cb1c2e82baf7de06" }, { "name": "bitflags", "version": "2.13.2", "sha256": "3ded4057c258ba199e2d26386d3af3780957ecaee6c4ef4041c6b4b8b97c0b06" }, { "name": "block-buffer", "version": "0.10.4", "sha256": "3078c7629b62d3f0439517fa394996acacc5cbc91c5a20d8c658e77abd503a71" }, { "name": "cfg-if", "version": "1.0.5", "sha256": "4e7648175b45a9a48536d676f68d918270699102aa8dab5496df06904c914600" }, { "name": "clap", "version": "4.6.7", "sha256": "aa8876b300ab35ba921adea3dfd70157a46249b33f95c9084ae5709785478946" }, { "name": "clap_builder", "version": "4.6.7", "sha256": "ec0797fb7aeb1406c84efac526901f7ec3ead2124f946b494e72879d4b54704d" }, { "name": "clap_derive", "version": "4.6.7", "sha256": "f9c751b79415d4e559e3d1fcf128e09e720eb673a06d26cf6f392d37d75b66e0" }, { "name": "clap_lex", "version": "1.1.1", "sha256": "1c133bc6a41be0d194c306b5506d15e6feeea7b1d6604bd3f8310dfb2ca96486" }, { "name": "colorchoice", "version": "1.0.5", "sha256": "1d07550c9036bf2ae0c684c4297d503f838287c83c53686d05370d0e139ae570" }, { "name": "const-oid", "version": "0.9.6", "sha256": "c2459377285ad874054d797f3ccebf984978aa39129f6eafde5cdc8315b612f8" }, { "name": "cpufeatures", "version": "0.2.17", "sha256": "59ed5838eebb26a2bb2e58f6d5b5316989ae9d08bab10e0e6d103e656d1b0280" }, { "name": "crypto-common", "version": "0.1.7", "sha256": "78c8292055d1c1df0cce5d180393dc8cce0abec0a7102adb6c7b1eef6016d60a" }, { "name": "curve25519-dalek", "version": "4.1.3", "sha256": "97fb8b7c4503de7d6ae7b42ab72a5a59857b4c937ec27a3d4539dba95b5ab2be" }, { "name": "curve25519-dalek-derive", "version": "0.1.1", "sha256": "f46882e17999c6cc590af592290432be3bce0428cb0d5f8b6715e4dc7b383eb3" }, { "name": "der", "version": "0.7.10", "sha256": "e7c1832837b905bbfb5101e07cc24c8deddf52f93225eee6ead5f4d63d53ddcb" }, { "name": "digest", "version": "0.10.7", "sha256": "9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292" }, { "name": "ed25519", "version": "2.2.3", "sha256": "115531babc129696a58c64a4fef0a8bf9e9698629fb97e9e40767d235cfbcd53" }, { "name": "ed25519-dalek", "version": "2.2.0", "sha256": "70e796c081cee67dc755e1a36a0a172b897fab85fc3f6bc48307991f64e4eca9" }, { "name": "errno", "version": "0.3.14", "sha256": "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb" }, { "name": "fastrand", "version": "2.5.0", "sha256": "da7c62ceae207dd37ea5b845da6a0696c799f85e97da1ab5b7910be3c1c80223" }, { "name": "fiat-crypto", "version": "0.2.9", "sha256": "28dea519a9695b9977216879a3ebfddf92f1c08c05d984f8996aecd6ecdc811d" }, { "name": "generic-array", "version": "0.14.7", "sha256": "85649ca51fd72272d7821adaf274ad91c288277713d9c18820d8499a7ff69e9a" }, { "name": "getrandom", "version": "0.2.17", "sha256": "ff2abc00be7fca6ebc474524697ae276ad847ad0a6b3faa4bcb027e9a4614ad0" }, { "name": "getrandom", "version": "0.4.3", "sha256": "300e883d756b2e4ec94e02791f39b04b522276138852cfc41d9fb7e904106099" }, { "name": "heck", "version": "0.5.0", "sha256": "2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea" }, { "name": "hex", "version": "0.4.3", "sha256": "7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70" }, { "name": "is_terminal_polyfill", "version": "1.70.2", "sha256": "a6cb138bb79a146c1bd460005623e142ef0181e3d0219cb493e02f7d08a35695" }, { "name": "itoa", "version": "1.0.18", "sha256": "8f42a60cbdf9a97f5d2305f08a87dc4e09308d1276d28c869c684d7777685682" }, { "name": "libc", "version": "0.2.191", "sha256": "65cd87c9a6d60536580b316ad985726104730a5151c99845f2490428ef91240a" }, { "name": "linux-raw-sys", "version": "0.12.1", "sha256": "32a66949e030da00e8c7d4434b251670a91556f4144941d37452769c25d58a53" }, { "name": "memchr", "version": "2.8.3", "sha256": "cf8baf1c55e62ffcace7a9f06f4bd9cd3f0c4beb022d3b367256b91b87513d98" }, { "name": "once_cell", "version": "1.21.4", "sha256": "9f7c3e4beb33f85d45ae3e3a1792185706c8e16d043238c593331cc7cd313b50" }, { "name": "once_cell_polyfill", "version": "1.70.2", "sha256": "384b8ab6d37215f3c5301a95a4accb5d64aa607f1fcb26a11b5303878451b4fe" }, { "name": "pkcs8", "version": "0.10.2", "sha256": "f950b2377845cebe5cf8b5165cb3cc1a5e0fa5cfa3e1f7f55707d8fd82e0a7b7" }, { "name": "ppv-lite86", "version": "0.2.21", "sha256": "85eae3c4ed2f50dcfe72643da4befc30deadb458a9b590d720cde2f2b1e97da9" }, { "name": "proc-macro2", "version": "1.0.107", "sha256": "985e7ec9bb745e6ce6535b544d84d6cd6f7ad8bd711c398938ae983b91a766d9" }, { "name": "quote", "version": "1.0.47", "sha256": "1fbf4db142a473a8d80c26bbf18454ed458bf8d26c8219c331daecfdbd079001" }, { "name": "r-efi", "version": "6.0.0", "sha256": "f8dcc9c7d52a811697d2151c701e0d08956f92b0e24136cf4cf27b57a6a0d9bf" }, { "name": "rand", "version": "0.8.8", "sha256": "e058c7de0b26af77780c769414d6257830bb240f3c38477dbc2c16e5f54d6d4c" }, { "name": "rand_chacha", "version": "0.3.1", "sha256": "e6c10a63a0fa32252be49d21e7709d4d4baf8d231c2dbce1eaa8141b9b127d88" }, { "name": "rand_core", "version": "0.6.4", "sha256": "ec0be4795e2f6a28069bec0b5ff3e2ac9bafc99e6a9a7dc3547996c5c816922c" }, { "name": "rustc_version", "version": "0.4.1", "sha256": "cfcb3a22ef46e85b45de6ee7e79d063319ebb6594faafcf1c225ea92ab6e9b92" }, { "name": "rustix", "version": "1.1.5", "sha256": "891efababe418670775f199f0d233d84843c227a0949a883ce15b37c78d6629d" }, { "name": "semver", "version": "1.0.28", "sha256": "8a7852d02fc848982e0c167ef163aaff9cd91dc640ba85e263cb1ce46fae51cd" }, { "name": "serde", "version": "1.0.229", "sha256": "4148590afebada386688f18773da617792bf2ef03ffc1e4cbd2b1d45b023e0ba" }, { "name": "serde_core", "version": "1.0.229", "sha256": "67dca2c9c51e58a4791a4b1ed58308b39c64224d349a935ab5039aa360942a48" }, { "name": "serde_derive", "version": "1.0.229", "sha256": "e7a5d71263a5a7d47b41f6b3f06ba276f10cc18b0931f1799f710578e2309348" }, { "name": "serde_json", "version": "1.0.154", "sha256": "e7e9cc8b1b85264074fbcc02a88680c4096b1e47df8f739dceb03bf482f04bd6" }, { "name": "sha2", "version": "0.10.9", "sha256": "a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283" }, { "name": "signature", "version": "2.2.0", "sha256": "77549399552de45a898a580c1b41d445bf730df867cc44e6c0233bbc4b8329de" }, { "name": "smallvec", "version": "1.6.0", "sha256": "1a55ca5f3b68e41c979bf8c46a6f1da892ca4db8f94023ce0bd32407573b1ac0" }, { "name": "spki", "version": "0.7.3", "sha256": "d91ed6c858b01f942cd56b37a94b3e0a1798290327d1236e4d9cf4eaca44d29d" }, { "name": "strsim", "version": "0.11.1", "sha256": "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f" }, { "name": "subtle", "version": "2.6.1", "sha256": "13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292" }, { "name": "syn", "version": "2.0.119", "sha256": "872831b642d1a07999a962a351ed35b955ea2cfc8f3862091e2a240a84f17297" }, { "name": "syn", "version": "3.0.9", "sha256": "d78c8dee4c7bf0e14673097256fed6142ce9d3b85a408189d07482442145823b" }, { "name": "tempfile", "version": "3.27.0", "sha256": "32497e9a4c7b38532efcdebeef879707aa9f794296a4f0244f6f69e9bc8574bd" }, { "name": "typenum", "version": "1.20.1", "sha256": "b6f5e870be6c3b371b77fe0ee0bafb859fa4964b4404c27de1d380043c4dda20" }, { "name": "unicode-ident", "version": "1.0.27", "sha256": "a2c754d6c33795a1c324727428e5a7dedb5b06195f9890bdbcba760d3e246563" }, { "name": "utf8parse", "version": "0.2.2", "sha256": "06abde3611657adf66d383f00b093d7faecc7fa57071cce2578660c9f1010821" }, { "name": "version_check", "version": "0.9.5", "sha256": "0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a" }, { "name": "wasi", "version": "0.11.1+wasi-snapshot-preview1", "sha256": "ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b" }, { "name": "windows-link", "version": "0.2.1", "sha256": "f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5" }, { "name": "windows-sys", "version": "0.61.2", "sha256": "ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc" }, { "name": "zerocopy", "version": "0.8.63", "sha256": "e5fe1f8f1b06191a00962174c61aa5005e0bb391a6d80d07e24d115c01a92ed8" }, { "name": "zerocopy-derive", "version": "0.8.63", "sha256": "863ad3ac83293fb4d740aedbfdc9240dd8d1a50c1099acd76ce80ce7c7230c7f" }, { "name": "zeroize", "version": "1.9.1", "sha256": "e13084392c5e4bc371903e2935a5eaeed24905a7511356b883835e18a78f6879" }, { "name": "zmij", "version": "1.0.23", "sha256": "29666d0abbfad1e3dc4dcf6144730dd3a3ab225bbbdac83319345b1b44ccfc1b" } ] }, "witness_invocations": [ { "tool": "osv-scanner", "version": "2.7.0", "binary_digest": "160c6253e2922e9e0a6a9771c5c4c40a4b3c6090b34a3cdd5e80c96cc2e4218b", "config_digest": "0c3d6fef8ea59e1de5610e13ccb1035a7232318288aaed517ee2feec9402455a", "invocation_digest": "6036f7d3e21918e45569b356ed470574ade4270c26180e109e0557600273242d", "input_subject_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "b177b795ea0b89bb9386474c102b3c09f16e21789bff61e488b3cd6f19aba3dd", "normalized_evidence_digest": "a01c9fbe2e0f89ba51e98a9f9adb3e2221181b02f05426888a8e8e1d4c6f99a0", "limitations": [ "osv-scanner checks registry-based ecosystems (crates.io in 0.6.0); git-sourced dependencies (lean [[require]], gpr) have no advisory database — Insufficient Evidence for them, never a silent pass" ], "evidence_class": "dependency_vulnerability", "observed_at": "2026-10-21T17:59:02.255671205+00:00", "findings": [ { "rule_namespace": "osv", "rule_id": "RUSTSEC-2021-0003", "severity": "high", "component": "pkg:crates.io/smallvec@1.6.0", "fingerprint": "33785582b0bffd15e2724184577c08f01121749519544d60019637759fc0278a", "state": "open" }, { "rule_namespace": "osv", "rule_id": "GHSA-43w2-9j62-hq99", "severity": "high", "component": "pkg:crates.io/smallvec@1.6.0", "fingerprint": "ba50c1802e51ced38a54ef5d84d292c2efbb3b72e0751e638b8539d27f3d1ebb", "state": "open" } ] }, { "tool": "semgrep", "version": "1.181.0", "binary_digest": "c29de7c43986faa3c3ca5a8acf1d115811e15ab305ba7657b79e775d40e16391", "config_digest": "206116bd213f0786f8378755ad48adbccfe30376afe8fe2ecdd24eb44161d009", "invocation_digest": "a6448210b7d47dd8c0d358927ef83b1ff34c334a69e14fb11ceb0bceae7d207a", "input_subject_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "80c185ac8e17503197e8195c202d98db3f0cd3865a37ba7065f37bdbf2a58d54", "normalized_evidence_digest": "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "limitations": [], "evidence_class": "static_analysis", "observed_at": "2026-10-21T17:59:02.255671205+00:00", "findings": [] }, { "tool": "gitleaks", "version": "8.30.1", "binary_digest": "88f91962aa2f93ac6ab281d553b9e125f5197bbbce38f9f2437f7299c32e5509", "config_digest": "e1f77c307b36a43d3707ab5fed4a4007f6d63d9302bcf0d5509cd3e52e32ed6f", "invocation_digest": "7879f05af65200bb6ebf605490f8dd5b0a1d94c8061eeb80e763a424570137d3", "input_subject_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "37517e5f3dc66819f61f5a7bb8ace1921282415f10551d2defa5c3eb0985b570", "normalized_evidence_digest": "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "limitations": [], "evidence_class": "secret", "observed_at": "2026-10-21T17:59:02.255671205+00:00", "findings": [] }, { "tool": "syft", "version": "1.54.1", "binary_digest": "dbf75864e7a7ff9e1fbf00552c31483f693188632a9f68f343cd7653dac513d6", "config_digest": "b6f045a568b2dd1dcd1a1723f4eb0b8f5863215301ced35067a5f7a53c07c7e6", "invocation_digest": "640ae5b6cead3af9aa9215ea868dcdb9016b7811941691179472c59d1bc80b95", "input_subject_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "a34f921203c4b738266aa76d64986f8f6eb7280f2382b10113e6d27be43b6aaf", "normalized_evidence_digest": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "limitations": [], "evidence_class": "supply_chain", "observed_at": "2026-10-21T17:59:02.255671205+00:00", "findings": [ { "rule_namespace": "syft", "rule_id": "anstream@1.0.0", "component": "pkg:cargo/anstream@1.0.0", "fingerprint": "1001468a98bf8f886f889f3b76dee0717eea1611dbab5c3ec415bc0a9d3f9853", "state": "open" }, { "rule_namespace": "syft", "rule_id": "anstyle@1.0.14", "component": "pkg:cargo/anstyle@1.0.14", "fingerprint": "b4423ac5d91607f895d2e4f6b3b58b3b98e3220e95d5a560719a38f26e88a9aa", "state": "open" }, { "rule_namespace": "syft", "rule_id": "anstyle-parse@1.0.0", "component": "pkg:cargo/anstyle-parse@1.0.0", "fingerprint": "86b1ca2b439dac8c8ccf11610d2f44a40fa2c28b49c7a4f67fffc5ad7e7a4c34", "state": "open" }, { "rule_namespace": "syft", "rule_id": "anstyle-query@1.1.5", "component": "pkg:cargo/anstyle-query@1.1.5", "fingerprint": "59e640d2af9d99361184e5dd537b90d2c59bda2eba7000d96ad1688025214430", "state": "open" }, { "rule_namespace": "syft", "rule_id": "anstyle-wincon@3.0.11", "component": "pkg:cargo/anstyle-wincon@3.0.11", "fingerprint": "3b50475de5d0ec3dd61737fa6a9f81887b3ee6ff55d9fd7afecaa6d985cd26e6", "state": "open" }, { "rule_namespace": "syft", "rule_id": "base64ct@1.8.3", "component": "pkg:cargo/base64ct@1.8.3", "fingerprint": "5656f108cca5b4825c10d9ceed24fec9707f89915b6d39bb2c2f79b59f6a1eaf", "state": "open" }, { "rule_namespace": "syft", "rule_id": "bitflags@2.13.2", "component": "pkg:cargo/bitflags@2.13.2", "fingerprint": "2f570cfac9dde16b280d8ce6521d29be556270814081e669ebb29f300aac7e82", "state": "open" }, { "rule_namespace": "syft", "rule_id": "block-buffer@0.10.4", "component": "pkg:cargo/block-buffer@0.10.4", "fingerprint": "2b4e003d5403bd7ccd2ef88c2dcfba20586172a36e9e5feb24203884290f3fb8", "state": "open" }, { "rule_namespace": "syft", "rule_id": "cfg-if@1.0.5", "component": "pkg:cargo/cfg-if@1.0.5", "fingerprint": "40e2ca0f72307e7f2b92a7626063d84ab55fa1db6f40e2fdaea4eb417bb3d9f6", "state": "open" }, { "rule_namespace": "syft", "rule_id": "clap@4.6.7", "component": "pkg:cargo/clap@4.6.7", "fingerprint": "8b5288edc94ee3c1804eb2664bb8a57974ed5bd708efaad6ab63165c19e80dfd", "state": "open" }, { "rule_namespace": "syft", "rule_id": "clap_builder@4.6.7", "component": "pkg:cargo/clap_builder@4.6.7", "fingerprint": "4b4192da7ea8835334cc519c92e9230c5aa48d6e8b5905d5dc735155981a1f5d", "state": "open" }, { "rule_namespace": "syft", "rule_id": "clap_derive@4.6.7", "component": "pkg:cargo/clap_derive@4.6.7", "fingerprint": "4d51f0052690cd07873e9f2360688e746bd74d01be8bce8eb1e09d4b5ee2869f", "state": "open" }, { "rule_namespace": "syft", "rule_id": "clap_lex@1.1.1", "component": "pkg:cargo/clap_lex@1.1.1", "fingerprint": "d5118fb3b03cf55c1b5d2058dc703e5287863abfafc62e948f8bd37c554eed93", "state": "open" }, { "rule_namespace": "syft", "rule_id": "colorchoice@1.0.5", "component": "pkg:cargo/colorchoice@1.0.5", "fingerprint": "333b5e3b16c10da6f952448b19c196e74ca809dd500e5b626c5e94eca9950908", "state": "open" }, { "rule_namespace": "syft", "rule_id": "const-oid@0.9.6", "component": "pkg:cargo/const-oid@0.9.6", "fingerprint": "5541a7190761ecc001f652cbea75f887d34a63857a9d4a833c6c04c4f66c9cc2", "state": "open" }, { "rule_namespace": "syft", "rule_id": "cpufeatures@0.2.17", "component": "pkg:cargo/cpufeatures@0.2.17", "fingerprint": "2c41be5a411d55d53a6e1ecaae69000d6cfafc653329b5a415c3833ca3d938a3", "state": "open" }, { "rule_namespace": "syft", "rule_id": "crypto-common@0.1.7", "component": "pkg:cargo/crypto-common@0.1.7", "fingerprint": "94ebb3d3a04823de45b978f7f2d92b817a60a7eb82d8c7b676a832d72e58684f", "state": "open" }, { "rule_namespace": "syft", "rule_id": "curve25519-dalek@4.1.3", "component": "pkg:cargo/curve25519-dalek@4.1.3", "fingerprint": "fe69847583a09dbb422ed424b8822f6081a5b9a9ea4a5a0659aeeae90a1f3b68", "state": "open" }, { "rule_namespace": "syft", "rule_id": "curve25519-dalek-derive@0.1.1", "component": "pkg:cargo/curve25519-dalek-derive@0.1.1", "fingerprint": "30988a4946cd7b5896513c53b8f46fef2f041b7a32a8444f2fbbbe35504b0d30", "state": "open" }, { "rule_namespace": "syft", "rule_id": "der@0.7.10", "component": "pkg:cargo/der@0.7.10", "fingerprint": "8163a7cb6df166afc2111e82c998716d8b3a803f1869d677792d321ac2c09c7e", "state": "open" }, { "rule_namespace": "syft", "rule_id": "digest@0.10.7", "component": "pkg:cargo/digest@0.10.7", "fingerprint": "f543d9aefa032f0994738474a351c2d2be5ba43859f3a3edd9a65494ee9238b8", "state": "open" }, { "rule_namespace": "syft", "rule_id": "ed25519@2.2.3", "component": "pkg:cargo/ed25519@2.2.3", "fingerprint": "1a02d28487a2543cf9326fab370709729bebc9627626b39581bd1df154e91dbd", "state": "open" }, { "rule_namespace": "syft", "rule_id": "ed25519-dalek@2.2.0", "component": "pkg:cargo/ed25519-dalek@2.2.0", "fingerprint": "5d7bc1f87b8a0a9b4d360efd55b594a08fa0a5fef8d15fcf5ad942263a934c2d", "state": "open" }, { "rule_namespace": "syft", "rule_id": "errno@0.3.14", "component": "pkg:cargo/errno@0.3.14", "fingerprint": "fe0c520b266d11e2ad249f8ded3c90b5f136fb9263021fc61136e8c181a8023f", "state": "open" }, { "rule_namespace": "syft", "rule_id": "falsegreen-ledger@0.1.0", "component": "", "fingerprint": "841d8d48762b69b0eac8a31c3cdc02cd1eacac1caf7d69c291615aecc96b9ba8", "state": "open" }, { "rule_namespace": "syft", "rule_id": "falsegreen-ledger-core@0.1.0", "component": "", "fingerprint": "99c0e29b042978b26ae2896dfffc0866c8638f5604b43b5a33122de2f9811c19", "state": "open" }, { "rule_namespace": "syft", "rule_id": "fastrand@2.5.0", "component": "pkg:cargo/fastrand@2.5.0", "fingerprint": "2b7ba02485a3d76cc19b17317882c1dd65511ed5ad95e9e70a0bb5d7f5dd4043", "state": "open" }, { "rule_namespace": "syft", "rule_id": "fiat-crypto@0.2.9", "component": "pkg:cargo/fiat-crypto@0.2.9", "fingerprint": "de9f033198ba6f74b0c4f8cc0f961ff4d5f3b764d3a1e60f0f68a66fcb26f54f", "state": "open" }, { "rule_namespace": "syft", "rule_id": "generic-array@0.14.7", "component": "pkg:cargo/generic-array@0.14.7", "fingerprint": "375236d1387d03ae58db25418fce92969adbd21eca601a82cd8dc683fe60f20f", "state": "open" }, { "rule_namespace": "syft", "rule_id": "getrandom@0.2.17", "component": "pkg:cargo/getrandom@0.2.17", "fingerprint": "80e36ea36c4959f0d1b4dd76769554760054be60923fa8eae72bc10d83b30b90", "state": "open" }, { "rule_namespace": "syft", "rule_id": "getrandom@0.4.3", "component": "pkg:cargo/getrandom@0.4.3", "fingerprint": "05b5d32e6e201ead770f640d3986020565688d70ca4bf6d323def662c9b10bc0", "state": "open" }, { "rule_namespace": "syft", "rule_id": "heck@0.5.0", "component": "pkg:cargo/heck@0.5.0", "fingerprint": "c5eb23be3fdbc8afafc1cca8b9c5767bab582488149444a86b1d000d74e3c97a", "state": "open" }, { "rule_namespace": "syft", "rule_id": "hex@0.4.3", "component": "pkg:cargo/hex@0.4.3", "fingerprint": "79f94666cd1756f5374c513addc3b9444043d08bb49050dae4998fc934de41af", "state": "open" }, { "rule_namespace": "syft", "rule_id": "is_terminal_polyfill@1.70.2", "component": "pkg:cargo/is_terminal_polyfill@1.70.2", "fingerprint": "b005b2478a3e5a28b543b644c46c0e2049ab156cd1ccd7133ea9f40a5626b62d", "state": "open" }, { "rule_namespace": "syft", "rule_id": "itoa@1.0.18", "component": "pkg:cargo/itoa@1.0.18", "fingerprint": "aec45ddec07a815da2a5c182001bfe6e554ed2a0b89259d327f793511a774c40", "state": "open" }, { "rule_namespace": "syft", "rule_id": "libc@0.2.191", "component": "pkg:cargo/libc@0.2.191", "fingerprint": "b0e83395a6df61531693965b5dc89908e48f1fc30363b236cdebf457b3b8d84a", "state": "open" }, { "rule_namespace": "syft", "rule_id": "linux-raw-sys@0.12.1", "component": "pkg:cargo/linux-raw-sys@0.12.1", "fingerprint": "7516ef772912bc7e53189e7272c2213556425bc370efc1936e07fd2f7141dab0", "state": "open" }, { "rule_namespace": "syft", "rule_id": "memchr@2.8.3", "component": "pkg:cargo/memchr@2.8.3", "fingerprint": "19c7f7c6470891a44bd18bae9b5a2d1d0a9674e609cb6b681b6d78594026b1c0", "state": "open" }, { "rule_namespace": "syft", "rule_id": "once_cell@1.21.4", "component": "pkg:cargo/once_cell@1.21.4", "fingerprint": "5df49b2099b0dc508144dd3ce7f17d8ef89e1ca37347a5a9732cc45bef8a0865", "state": "open" }, { "rule_namespace": "syft", "rule_id": "once_cell_polyfill@1.70.2", "component": "pkg:cargo/once_cell_polyfill@1.70.2", "fingerprint": "67dbadfb6f4218d894e3b81d8d454f1540509b7c38981b00170ce499b12f89cc", "state": "open" }, { "rule_namespace": "syft", "rule_id": "pkcs8@0.10.2", "component": "pkg:cargo/pkcs8@0.10.2", "fingerprint": "c47c76d7946c7de7d9e8ccb0ce88035f70f673c663ff4bc87d7186e2cd59e8fe", "state": "open" }, { "rule_namespace": "syft", "rule_id": "ppv-lite86@0.2.21", "component": "pkg:cargo/ppv-lite86@0.2.21", "fingerprint": "9947e5da4cc28604998b938686ba44e72cd4382ce0330b0b7457439028a32e72", "state": "open" }, { "rule_namespace": "syft", "rule_id": "proc-macro2@1.0.107", "component": "pkg:cargo/proc-macro2@1.0.107", "fingerprint": "8a7eb5f7e790f0c2621a0b8b0602d5e8df183461cc0627f75774260b6b3ade32", "state": "open" }, { "rule_namespace": "syft", "rule_id": "quote@1.0.47", "component": "pkg:cargo/quote@1.0.47", "fingerprint": "ba5b73c1936ffd2ab425cc8480b56e7b5f48125bec80e2b12a1a44baa9c1c558", "state": "open" }, { "rule_namespace": "syft", "rule_id": "r-efi@6.0.0", "component": "pkg:cargo/r-efi@6.0.0", "fingerprint": "122b7ca8782f044bbf34b34a6611015ab063c5941471a1f9edf52859953335ea", "state": "open" }, { "rule_namespace": "syft", "rule_id": "rand@0.8.8", "component": "pkg:cargo/rand@0.8.8", "fingerprint": "d75967c1358b7152e9dec7577066f5049015cdd77c70b9c353ec196342cef83b", "state": "open" }, { "rule_namespace": "syft", "rule_id": "rand_chacha@0.3.1", "component": "pkg:cargo/rand_chacha@0.3.1", "fingerprint": "98b4b52cb9630b79c95cd3ce370098fda6810c9893935c1623818e6c2bc6a950", "state": "open" }, { "rule_namespace": "syft", "rule_id": "rand_core@0.6.4", "component": "pkg:cargo/rand_core@0.6.4", "fingerprint": "881bc35797d5dbc04b02e40860ac237cc76ab1e8561cd4d39d3fc0a1c3155a12", "state": "open" }, { "rule_namespace": "syft", "rule_id": "rustc_version@0.4.1", "component": "pkg:cargo/rustc_version@0.4.1", "fingerprint": "b856fc7dc29ef6489b43403c317b31a5c2f7469df3e78eb38496d906f65a41f9", "state": "open" }, { "rule_namespace": "syft", "rule_id": "rustix@1.1.5", "component": "pkg:cargo/rustix@1.1.5", "fingerprint": "161a149e15f158acea456dd7572470352fcc38e9861cf74a7affcdbebb3be84c", "state": "open" }, { "rule_namespace": "syft", "rule_id": "semver@1.0.28", "component": "pkg:cargo/semver@1.0.28", "fingerprint": "adf8dd8c6eab8cbfba291126118409767783c7721216321d264e71566a86fb64", "state": "open" }, { "rule_namespace": "syft", "rule_id": "serde@1.0.229", "component": "pkg:cargo/serde@1.0.229", "fingerprint": "6d867eaaeef95071a1e043e0f22f4765333205c756611890f0f6ee0f0bf2844a", "state": "open" }, { "rule_namespace": "syft", "rule_id": "serde_core@1.0.229", "component": "pkg:cargo/serde_core@1.0.229", "fingerprint": "e510c18b9a78eaa008df3d1ced75890c6610e5b6802183c55c7bbe66f2b08705", "state": "open" }, { "rule_namespace": "syft", "rule_id": "serde_derive@1.0.229", "component": "pkg:cargo/serde_derive@1.0.229", "fingerprint": "000799b93838d093c6bbd43247666d235ecbfd735b93222d2cd26233f0fb28ec", "state": "open" }, { "rule_namespace": "syft", "rule_id": "serde_json@1.0.154", "component": "pkg:cargo/serde_json@1.0.154", "fingerprint": "349a0dd333a0d2897b42960e7efb1d0830ab09b3e9eeb1e2acdeb5a200f289e1", "state": "open" }, { "rule_namespace": "syft", "rule_id": "sha2@0.10.9", "component": "pkg:cargo/sha2@0.10.9", "fingerprint": "477b1f1b81c82609f675f2c5aeb53cfb9f1191376ff8845a5647e9c6b05388df", "state": "open" }, { "rule_namespace": "syft", "rule_id": "signature@2.2.0", "component": "pkg:cargo/signature@2.2.0", "fingerprint": "7d8fc0ddf33982f4c2b6ca2f3739dc5f209faca02c4d8a01cb67023acf125d9c", "state": "open" }, { "rule_namespace": "syft", "rule_id": "smallvec@1.6.0", "component": "pkg:cargo/smallvec@1.6.0", "fingerprint": "1b292519074e47f7a1b01edc1ec1476b2f282e47ec7640820c0bad1afd635a20", "state": "open" }, { "rule_namespace": "syft", "rule_id": "spki@0.7.3", "component": "pkg:cargo/spki@0.7.3", "fingerprint": "e7593fa9bc039e2db40a3a71927e7b104a79be42d02d04e04b1b373dad5f9354", "state": "open" }, { "rule_namespace": "syft", "rule_id": "strsim@0.11.1", "component": "pkg:cargo/strsim@0.11.1", "fingerprint": "7260c481b09f354b4c8d13996a46735f790af5206fa07ffa86f3d9601768719a", "state": "open" }, { "rule_namespace": "syft", "rule_id": "subtle@2.6.1", "component": "pkg:cargo/subtle@2.6.1", "fingerprint": "abf520278b97397636ae0d0fba9c430b656b0af89b288300d4c9e12cd1bad2a9", "state": "open" }, { "rule_namespace": "syft", "rule_id": "syn@2.0.119", "component": "pkg:cargo/syn@2.0.119", "fingerprint": "80bcee46aef1b69a610a3810a2f7dc3fec1a8cff8a4366bc2369f50b8543a5e0", "state": "open" }, { "rule_namespace": "syft", "rule_id": "syn@3.0.9", "component": "pkg:cargo/syn@3.0.9", "fingerprint": "114cde3e9bfa178c4b502cb01a87d49a704c293fc6d1a07270388d14b152c9c2", "state": "open" }, { "rule_namespace": "syft", "rule_id": "tempfile@3.27.0", "component": "pkg:cargo/tempfile@3.27.0", "fingerprint": "cc64344e2b0f434ddea53beb971184de5fd0a84c6a9739eff5255d69b2d42a3c", "state": "open" }, { "rule_namespace": "syft", "rule_id": "typenum@1.20.1", "component": "pkg:cargo/typenum@1.20.1", "fingerprint": "69fca6104cc42ad018ccf1e723d8e6cc55ad7d890cbeaf9f3073487edb4e9c81", "state": "open" }, { "rule_namespace": "syft", "rule_id": "unicode-ident@1.0.27", "component": "pkg:cargo/unicode-ident@1.0.27", "fingerprint": "c8f069b4043c8b0afcbf7d2f1d9fdb3681c8f8cc75ee03d318b515654ab1e21c", "state": "open" }, { "rule_namespace": "syft", "rule_id": "utf8parse@0.2.2", "component": "pkg:cargo/utf8parse@0.2.2", "fingerprint": "c28ef21ff55492434ef623166a53f268c1c02540b430df3967683388cacd9336", "state": "open" }, { "rule_namespace": "syft", "rule_id": "version_check@0.9.5", "component": "pkg:cargo/version_check@0.9.5", "fingerprint": "a37defdbf8011a14f68d31205b137179a3eec551816dc2a2b861965901eed251", "state": "open" }, { "rule_namespace": "syft", "rule_id": "wasi@0.11.1+wasi-snapshot-preview1", "component": "pkg:cargo/wasi@0.11.1%2Bwasi-snapshot-preview1", "fingerprint": "8224d335948f5ae82312adc7b5040e9331715f1f580a94ac77e55f15af60fb24", "state": "open" }, { "rule_namespace": "syft", "rule_id": "windows-link@0.2.1", "component": "pkg:cargo/windows-link@0.2.1", "fingerprint": "f2e9441ed9c64738dc6bd8be208ecb9b3f0f2eb8ea5ddeb4fa1303339bb340d6", "state": "open" }, { "rule_namespace": "syft", "rule_id": "windows-sys@0.61.2", "component": "pkg:cargo/windows-sys@0.61.2", "fingerprint": "b2713fc2f7bff729a27c0f62ee1be368d8344e0a7237e06edae435bfe00f9353", "state": "open" }, { "rule_namespace": "syft", "rule_id": "zerocopy@0.8.63", "component": "pkg:cargo/zerocopy@0.8.63", "fingerprint": "538de62743d2a698d49ae17957387bceef902f05602838b337eb33ef3a2018ca", "state": "open" }, { "rule_namespace": "syft", "rule_id": "zerocopy-derive@0.8.63", "component": "pkg:cargo/zerocopy-derive@0.8.63", "fingerprint": "c28066f0d74cc875b1313b642f5b65466e41ca5928021fdf354e3a5158e5f887", "state": "open" }, { "rule_namespace": "syft", "rule_id": "zeroize@1.9.1", "component": "pkg:cargo/zeroize@1.9.1", "fingerprint": "a9b132d8d889548f19dbf2f1ed6a078ca10079500e9a4e3e2c23e407a3c4c2bb", "state": "open" }, { "rule_namespace": "syft", "rule_id": "zmij@1.0.23", "component": "pkg:cargo/zmij@1.0.23", "fingerprint": "18a805aded02f77466f8ea530827dac33264f4eea283a1e3793fe895db3d0ad5", "state": "open" } ] }, { "tool": "dependency-manifest", "version": "1", "binary_digest": "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4", "config_digest": "2402cf6f9fd45d6c6d7b9bc10abdba72e36d61e88515a01d2cda19ee8d375b3b", "invocation_digest": "c06a9fb47f93566eaf8bf71937184db1c3907b74e56d044df829b0e80f701d59", "input_subject_digest": "0d0034d14e791fcb13b7db8875d18e7f884f2a4da9c393040ced7f5d2f34178e", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4", "normalized_evidence_digest": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "limitations": [ "license facts are the job dependency manifest's registry SPDX ids; the workspace's own code and git-sourced dependencies carry no registry license facts" ], "evidence_class": "license", "observed_at": "2026-10-21T17:59:02.255671205+00:00", "findings": [ { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/anstream@1.0.0", "fingerprint": "81c389e920feb226956ea5e7e905e055ef3190e347d2024731cba977530b1c28", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/anstyle@1.0.14", "fingerprint": "72cb9f765ade0582fd1b8d4e3ec30734124e9580702182e52b07ce552ace97b1", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/anstyle-parse@1.0.0", "fingerprint": "03dae4cdd1bc7ba73958bf1c617e4f5aa93a31d30b5efa57cb32af82f5010ef9", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/anstyle-query@1.1.5", "fingerprint": "847b1133ac62af0c80b617aa8a687925f44ff02a38077b59d57f8a3d2c9e7377", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/anstyle-wincon@3.0.11", "fingerprint": "930051eead4685b3c169c214c7e4bf568a6b18c75060c642828af9b1e4a92cb7", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/base64ct@1.8.3", "fingerprint": "c2936ea98513be3acbc17ec843a0b5a87f2ec66b23198a7e457cbfe82501de17", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/bitflags@2.13.2", "fingerprint": "5a267ea0d4b32ca26ee6285110e4831c63bc24aba4b4ef50a6ce820dab9bc9c7", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/block-buffer@0.10.4", "fingerprint": "65f5493f0209c5bb833a448c5a4f8d34ea9cbb19fd226d673fb6378da3d45d81", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/cfg-if@1.0.5", "fingerprint": "9c66873ce2b15cedf8971b5136299c6dbbdbdb00096f984baca5c60e43f20b86", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/clap@4.6.7", "fingerprint": "b6d470dc0b142702b891dd8112eb44dacb7f1e64144fc95e7c4d8188299612c5", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/clap_builder@4.6.7", "fingerprint": "57fd5416fc287aefb50fdd41cdf558dc3aab82e27a8e542cb21cb6641a034fbf", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/clap_derive@4.6.7", "fingerprint": "e4955ec9e34c975255437f60abb69c42ffe6c4faff7bd1b2c2f1f582a1266f6f", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/clap_lex@1.1.1", "fingerprint": "9c1ce04a546342b75e26dcedd88dfd64ed4c42c1e22db5d575ebd9b83bdab96f", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/colorchoice@1.0.5", "fingerprint": "0cd1130d559feb72b1789c9dfc5ca946a042b193f6efe22b205f7179ae628471", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/const-oid@0.9.6", "fingerprint": "dd86b6e6f0675712fca49ad744596692f3308ad888e80c2fe798ae86fcc44761", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/cpufeatures@0.2.17", "fingerprint": "04a7c96209fbd41f9a1817ea4d2a6e8677796fa4ec0dc537d76a9dec0036eb8f", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/crypto-common@0.1.7", "fingerprint": "745d756e8999f1a9a249aed77699c555941595329a4e4343de89ae96e1d0333a", "state": "open" }, { "rule_namespace": "license", "rule_id": "BSD-3-Clause", "component": "pkg:cargo/curve25519-dalek@4.1.3", "fingerprint": "0bb575d6587d75ee9592137d2931238680210aecc215909adba1e5f8072feb00", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT/Apache-2.0", "component": "pkg:cargo/curve25519-dalek-derive@0.1.1", "fingerprint": "2bd313068cc5979f66814611d0f2653764f5f02a5fea3659e6622b7141a9efb2", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/der@0.7.10", "fingerprint": "5581ac6ec26f13cf9bf99838842922d224f796330520c89e209f34f8263deca9", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/digest@0.10.7", "fingerprint": "66d845a56cbb7c318352a08f46d3b6991b4e15095a844109683d6395bea3a1c7", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/ed25519@2.2.3", "fingerprint": "b1ef1484de84840c7c0a2c51933966b0868f8da06be7d59e7b77a92b3dcd12c6", "state": "open" }, { "rule_namespace": "license", "rule_id": "BSD-3-Clause", "component": "pkg:cargo/ed25519-dalek@2.2.0", "fingerprint": "59ce4b8271427de2f3c94b79b2d666608dd0ab80f62ba57ba79decbe90460d6c", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/errno@0.3.14", "fingerprint": "b2cf2d50c9d7e3df66abaf43435835639e08034d0258c853bbb967068248c7c1", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/fastrand@2.5.0", "fingerprint": "68281187c66d4c9670acbf7a748a35df777f7796eace3eb74ecd3c0df1af2377", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0 OR BSD-1-Clause", "component": "pkg:cargo/fiat-crypto@0.2.9", "fingerprint": "ab0d3ee1c57f754c8e9f310625a0a15790a9d09e9ce260b33597c5215179f9fd", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT", "component": "pkg:cargo/generic-array@0.14.7", "fingerprint": "4100baa4894d6f4a883eefdffa6f2a3f3f8932c5f513fd1b463bea367b450a8b", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/getrandom@0.2.17", "fingerprint": "e0e248e843d9c977190d92d5e8671ff1fe633094bec2fd78deda8cc2b9ddd913", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/getrandom@0.4.3", "fingerprint": "d34eb7b77676d5fa2a2fb54ccbdcf812b2e95ece08d523b51a8112876b9e9f1b", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/heck@0.5.0", "fingerprint": "f15e7f9397ec2df7435dfa719bd9ed4ec07a7f9b63f63a6b0a1ded192a681875", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/hex@0.4.3", "fingerprint": "0880807ea598985ae4e2b054afdf19681651cc0555d47de97c81bf15d308e1c1", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/is_terminal_polyfill@1.70.2", "fingerprint": "ea5404a32d8fe5f4d7b7c150ae9c418bef44434084f9807f04760b247a1833b6", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/itoa@1.0.18", "fingerprint": "0b71ec3d77ef8519b86e537ff5fac2a87a1e23a1a94302a67b55044db9e38cb7", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/libc@0.2.191", "fingerprint": "9d9973caa830049a9211e8ed805b7dcf7f690659b71db96bf5c4593d7b2ca614", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT", "component": "pkg:cargo/linux-raw-sys@0.12.1", "fingerprint": "773523a49f8cd1a1df7385ad357b411d263186aa04cb952428f2225c95e692a2", "state": "open" }, { "rule_namespace": "license", "rule_id": "Unlicense OR MIT", "component": "pkg:cargo/memchr@2.8.3", "fingerprint": "bf1591437a6f99fe31f560f71637dd4271236182cf3fe1f2a57f545ab377d916", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/once_cell@1.21.4", "fingerprint": "bf0bc6b374808f7c6f3fd08c0a7d63965be10e3ff39ebcd785fcf0d624f8acb0", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/once_cell_polyfill@1.70.2", "fingerprint": "4e122c54241f8e08146c80b9e7aace82ab89579bab281e82a26ef89d5444df44", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/pkcs8@0.10.2", "fingerprint": "dcf79ef96b12576f3da49211f68cd786c965cbcb198cc01af73f3d5426884627", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/ppv-lite86@0.2.21", "fingerprint": "10dbed4778cb7f48cbbaaafe5a6bc2839b58297bde9f43d49cab1a639d5c927c", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/proc-macro2@1.0.107", "fingerprint": "1efce8992cf906cfadfccce323fa0ae6955df07a7460965cebb2a64de11dc74b", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/quote@1.0.47", "fingerprint": "ab119f6f830df1f8f8ca18f18a1b7e8166482bbc79b529b2b01f1ef8d351dc9d", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0 OR LGPL-2.1-or-later", "component": "pkg:cargo/r-efi@6.0.0", "fingerprint": "79b3757623de39a2d1e2cbc582531edb2232c2fedae78ae86266ff0a657e6692", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/rand@0.8.8", "fingerprint": "671dab68d2ada9d89ee44f0464a0e42d22a9c70a7b4862b87c34ef30801c0b99", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/rand_chacha@0.3.1", "fingerprint": "09545686bd0a3e470a4467c0216f6dd076ee18f9ccdc19e939a2a0c8338a130c", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/rand_core@0.6.4", "fingerprint": "5b4629e1e1e878c03195737d30e6f492dc34c5d799ba36c5c04b8192eece897e", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/rustc_version@0.4.1", "fingerprint": "6ed6e8818bc7dbe359728d9d8c8e843d5421d6999b5853490c9cf658d37e59e0", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT", "component": "pkg:cargo/rustix@1.1.5", "fingerprint": "70045df0de7040cc8e3f8920f8dbce683735be2f3505c999933268304eed3d01", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/semver@1.0.28", "fingerprint": "d1f1194d0512ca4c7a020f03728853a518bbdb6719bc6a3a7fc7caeda7f6bdfe", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/serde@1.0.229", "fingerprint": "e1eb81e653a288a15481d6312ab337b18d44e2d94d49f48ac7c8c3ec800a36f5", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/serde_core@1.0.229", "fingerprint": "4086d666853f837b329582f4ada668b8ee6eb0983c029a5fa7eacb4cd7b95ea7", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/serde_derive@1.0.229", "fingerprint": "4077d1047525fda030d22d1788a1c3aa36c56309be7434055545e4a5acc5435e", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/serde_json@1.0.154", "fingerprint": "2dc62cd2e94dfe2e326379ab19b563408bee14cbd79b7c9730b3cf913df685ee", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/sha2@0.10.9", "fingerprint": "8fffdf2de9a098e260c473f456893764abfb0da25c8edf8f28ef1d8b3b483857", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/signature@2.2.0", "fingerprint": "8409e8477eaa8b299157e472284dbb382c65babc4a10856896a0325c741bfc84", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT/Apache-2.0", "component": "pkg:cargo/smallvec@1.6.0", "fingerprint": "cfe55c94dcb01bd350011e0618de53cfeeccc9fedcf5a83cd1bd293d6dedb9f4", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/spki@0.7.3", "fingerprint": "6d2575dae8ab3515840e41bc7dd0289d19fe62354849d325d3f4876f96842a9b", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT", "component": "pkg:cargo/strsim@0.11.1", "fingerprint": "3803c2ce269d8937cb5ca282cfc7de1c38bec3947a7f800554d22c9b6af0b4ff", "state": "open" }, { "rule_namespace": "license", "rule_id": "BSD-3-Clause", "component": "pkg:cargo/subtle@2.6.1", "fingerprint": "b2905d01e0f0b65a50ff69518e7472eced519c61c4f31a958fedf47503a048c5", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/syn@2.0.119", "fingerprint": "ec75866e642d56853e0689f491ec83f5ca076a545a518dbc71cb657872de02ba", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/syn@3.0.9", "fingerprint": "50816f9296ebef556556bbf41104d9aff94dc3c3b78917993d062c356ece3a83", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/tempfile@3.27.0", "fingerprint": "fb7e166af30cc01cf8d9fa7bc5864a37ef17e94f0dcad6591c23c48b4f16a08f", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/typenum@1.20.1", "fingerprint": "64aa3bf3c0ae12c744475d6fbd6062f2bf93df107d8585dce88c78832b669779", "state": "open" }, { "rule_namespace": "license", "rule_id": "(MIT OR Apache-2.0) AND Unicode-3.0", "component": "pkg:cargo/unicode-ident@1.0.27", "fingerprint": "bbfb4a615f30648ef5a8eaf210033aa1baaab14fa0bc9482ac72ae7641a6e466", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/utf8parse@0.2.2", "fingerprint": "af63bfd1ce1cfe636db88caaa115b8843ca67e96b3dd93f523d84771bf40a073", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT/Apache-2.0", "component": "pkg:cargo/version_check@0.9.5", "fingerprint": "99b8a953eefdb41a40a9a077b9032a3b6a395900604be21a32da30658ce61f15", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT", "component": "pkg:cargo/wasi@0.11.1+wasi-snapshot-preview1", "fingerprint": "d9cbaa8941d43791ff495ffbc74a5ec516e48db88243ab8abce575acfe23e028", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/windows-link@0.2.1", "fingerprint": "6a884f0186ee68ed468285b3dee5325fccd3809ca04aafabffd42e588d76a3e0", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/windows-sys@0.61.2", "fingerprint": "169218fdfc26698b6fd1a352d504c2359a123be3ebf7d7b9e0c223406ce70d21", "state": "open" }, { "rule_namespace": "license", "rule_id": "BSD-2-Clause OR Apache-2.0 OR MIT", "component": "pkg:cargo/zerocopy@0.8.63", "fingerprint": "dca0f093c749462f428d68cecfb63c6f0b0443b944e3f93172bc7b85bea835ec", "state": "open" }, { "rule_namespace": "license", "rule_id": "BSD-2-Clause OR Apache-2.0 OR MIT", "component": "pkg:cargo/zerocopy-derive@0.8.63", "fingerprint": "aa23299329debd40f4b88bbe41983c6f0b798920fe0306bdb2bd12307011eff0", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/zeroize@1.9.1", "fingerprint": "ad04bc15c43493a874503f1f4e5228c67653134c34ae698ee27abc3ba5027fed", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT", "component": "pkg:cargo/zmij@1.0.23", "fingerprint": "cf39f12ea4d06ecb2c119337d3ddd79c7cc97ef7e7e900bb4beb745ac2696a0d", "state": "open" } ] } ], "dependency_manifest": { "ecosystem": "rust", "tool": "cargo", "tool_version": "1.99.0", "entries": [ { "name": "anstream", "version": "1.0.0", "purl": "pkg:cargo/anstream@1.0.0", "sha256": "824a212faf96e9acacdbd09febd34438f8f711fb84e09a8916013cd7815ca28d", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "anstyle", "version": "1.0.14", "purl": "pkg:cargo/anstyle@1.0.14", "sha256": "940b3a0ca603d1eade50a4846a2afffd5ef57a9feac2c0e2ec2e14f9ead76000", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "anstyle-parse", "version": "1.0.0", "purl": "pkg:cargo/anstyle-parse@1.0.0", "sha256": "52ce7f38b242319f7cabaa6813055467063ecdc9d355bbb4ce0c68908cd8130e", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "anstyle-query", "version": "1.1.5", "purl": "pkg:cargo/anstyle-query@1.1.5", "sha256": "40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "anstyle-wincon", "version": "3.0.11", "purl": "pkg:cargo/anstyle-wincon@3.0.11", "sha256": "291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "base64ct", "version": "1.8.3", "purl": "pkg:cargo/base64ct@1.8.3", "sha256": "2af50177e190e07a26ab74f8b1efbfe2ef87da2116221318cb1c2e82baf7de06", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "bitflags", "version": "2.13.2", "purl": "pkg:cargo/bitflags@2.13.2", "sha256": "3ded4057c258ba199e2d26386d3af3780957ecaee6c4ef4041c6b4b8b97c0b06", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "block-buffer", "version": "0.10.4", "purl": "pkg:cargo/block-buffer@0.10.4", "sha256": "3078c7629b62d3f0439517fa394996acacc5cbc91c5a20d8c658e77abd503a71", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "cfg-if", "version": "1.0.5", "purl": "pkg:cargo/cfg-if@1.0.5", "sha256": "4e7648175b45a9a48536d676f68d918270699102aa8dab5496df06904c914600", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "clap", "version": "4.6.7", "purl": "pkg:cargo/clap@4.6.7", "sha256": "aa8876b300ab35ba921adea3dfd70157a46249b33f95c9084ae5709785478946", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "clap_builder", "version": "4.6.7", "purl": "pkg:cargo/clap_builder@4.6.7", "sha256": "ec0797fb7aeb1406c84efac526901f7ec3ead2124f946b494e72879d4b54704d", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "clap_derive", "version": "4.6.7", "purl": "pkg:cargo/clap_derive@4.6.7", "sha256": "f9c751b79415d4e559e3d1fcf128e09e720eb673a06d26cf6f392d37d75b66e0", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "clap_lex", "version": "1.1.1", "purl": "pkg:cargo/clap_lex@1.1.1", "sha256": "1c133bc6a41be0d194c306b5506d15e6feeea7b1d6604bd3f8310dfb2ca96486", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "colorchoice", "version": "1.0.5", "purl": "pkg:cargo/colorchoice@1.0.5", "sha256": "1d07550c9036bf2ae0c684c4297d503f838287c83c53686d05370d0e139ae570", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "const-oid", "version": "0.9.6", "purl": "pkg:cargo/const-oid@0.9.6", "sha256": "c2459377285ad874054d797f3ccebf984978aa39129f6eafde5cdc8315b612f8", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "cpufeatures", "version": "0.2.17", "purl": "pkg:cargo/cpufeatures@0.2.17", "sha256": "59ed5838eebb26a2bb2e58f6d5b5316989ae9d08bab10e0e6d103e656d1b0280", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "crypto-common", "version": "0.1.7", "purl": "pkg:cargo/crypto-common@0.1.7", "sha256": "78c8292055d1c1df0cce5d180393dc8cce0abec0a7102adb6c7b1eef6016d60a", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "curve25519-dalek", "version": "4.1.3", "purl": "pkg:cargo/curve25519-dalek@4.1.3", "sha256": "97fb8b7c4503de7d6ae7b42ab72a5a59857b4c937ec27a3d4539dba95b5ab2be", "scope": "runtime", "licenses": [ "BSD-3-Clause" ] }, { "name": "curve25519-dalek-derive", "version": "0.1.1", "purl": "pkg:cargo/curve25519-dalek-derive@0.1.1", "sha256": "f46882e17999c6cc590af592290432be3bce0428cb0d5f8b6715e4dc7b383eb3", "scope": "runtime", "licenses": [ "MIT/Apache-2.0" ] }, { "name": "der", "version": "0.7.10", "purl": "pkg:cargo/der@0.7.10", "sha256": "e7c1832837b905bbfb5101e07cc24c8deddf52f93225eee6ead5f4d63d53ddcb", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "digest", "version": "0.10.7", "purl": "pkg:cargo/digest@0.10.7", "sha256": "9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "ed25519", "version": "2.2.3", "purl": "pkg:cargo/ed25519@2.2.3", "sha256": "115531babc129696a58c64a4fef0a8bf9e9698629fb97e9e40767d235cfbcd53", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "ed25519-dalek", "version": "2.2.0", "purl": "pkg:cargo/ed25519-dalek@2.2.0", "sha256": "70e796c081cee67dc755e1a36a0a172b897fab85fc3f6bc48307991f64e4eca9", "scope": "runtime", "licenses": [ "BSD-3-Clause" ] }, { "name": "errno", "version": "0.3.14", "purl": "pkg:cargo/errno@0.3.14", "sha256": "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "fastrand", "version": "2.5.0", "purl": "pkg:cargo/fastrand@2.5.0", "sha256": "da7c62ceae207dd37ea5b845da6a0696c799f85e97da1ab5b7910be3c1c80223", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "fiat-crypto", "version": "0.2.9", "purl": "pkg:cargo/fiat-crypto@0.2.9", "sha256": "28dea519a9695b9977216879a3ebfddf92f1c08c05d984f8996aecd6ecdc811d", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0 OR BSD-1-Clause" ] }, { "name": "generic-array", "version": "0.14.7", "purl": "pkg:cargo/generic-array@0.14.7", "sha256": "85649ca51fd72272d7821adaf274ad91c288277713d9c18820d8499a7ff69e9a", "scope": "runtime", "licenses": [ "MIT" ] }, { "name": "getrandom", "version": "0.2.17", "purl": "pkg:cargo/getrandom@0.2.17", "sha256": "ff2abc00be7fca6ebc474524697ae276ad847ad0a6b3faa4bcb027e9a4614ad0", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "getrandom", "version": "0.4.3", "purl": "pkg:cargo/getrandom@0.4.3", "sha256": "300e883d756b2e4ec94e02791f39b04b522276138852cfc41d9fb7e904106099", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "heck", "version": "0.5.0", "purl": "pkg:cargo/heck@0.5.0", "sha256": "2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "hex", "version": "0.4.3", "purl": "pkg:cargo/hex@0.4.3", "sha256": "7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "is_terminal_polyfill", "version": "1.70.2", "purl": "pkg:cargo/is_terminal_polyfill@1.70.2", "sha256": "a6cb138bb79a146c1bd460005623e142ef0181e3d0219cb493e02f7d08a35695", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "itoa", "version": "1.0.18", "purl": "pkg:cargo/itoa@1.0.18", "sha256": "8f42a60cbdf9a97f5d2305f08a87dc4e09308d1276d28c869c684d7777685682", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "libc", "version": "0.2.191", "purl": "pkg:cargo/libc@0.2.191", "sha256": "65cd87c9a6d60536580b316ad985726104730a5151c99845f2490428ef91240a", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "linux-raw-sys", "version": "0.12.1", "purl": "pkg:cargo/linux-raw-sys@0.12.1", "sha256": "32a66949e030da00e8c7d4434b251670a91556f4144941d37452769c25d58a53", "scope": "runtime", "licenses": [ "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT" ] }, { "name": "memchr", "version": "2.8.3", "purl": "pkg:cargo/memchr@2.8.3", "sha256": "cf8baf1c55e62ffcace7a9f06f4bd9cd3f0c4beb022d3b367256b91b87513d98", "scope": "runtime", "licenses": [ "Unlicense OR MIT" ] }, { "name": "once_cell", "version": "1.21.4", "purl": "pkg:cargo/once_cell@1.21.4", "sha256": "9f7c3e4beb33f85d45ae3e3a1792185706c8e16d043238c593331cc7cd313b50", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "once_cell_polyfill", "version": "1.70.2", "purl": "pkg:cargo/once_cell_polyfill@1.70.2", "sha256": "384b8ab6d37215f3c5301a95a4accb5d64aa607f1fcb26a11b5303878451b4fe", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "pkcs8", "version": "0.10.2", "purl": "pkg:cargo/pkcs8@0.10.2", "sha256": "f950b2377845cebe5cf8b5165cb3cc1a5e0fa5cfa3e1f7f55707d8fd82e0a7b7", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "ppv-lite86", "version": "0.2.21", "purl": "pkg:cargo/ppv-lite86@0.2.21", "sha256": "85eae3c4ed2f50dcfe72643da4befc30deadb458a9b590d720cde2f2b1e97da9", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "proc-macro2", "version": "1.0.107", "purl": "pkg:cargo/proc-macro2@1.0.107", "sha256": "985e7ec9bb745e6ce6535b544d84d6cd6f7ad8bd711c398938ae983b91a766d9", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "quote", "version": "1.0.47", "purl": "pkg:cargo/quote@1.0.47", "sha256": "1fbf4db142a473a8d80c26bbf18454ed458bf8d26c8219c331daecfdbd079001", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "r-efi", "version": "6.0.0", "purl": "pkg:cargo/r-efi@6.0.0", "sha256": "f8dcc9c7d52a811697d2151c701e0d08956f92b0e24136cf4cf27b57a6a0d9bf", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0 OR LGPL-2.1-or-later" ] }, { "name": "rand", "version": "0.8.8", "purl": "pkg:cargo/rand@0.8.8", "sha256": "e058c7de0b26af77780c769414d6257830bb240f3c38477dbc2c16e5f54d6d4c", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "rand_chacha", "version": "0.3.1", "purl": "pkg:cargo/rand_chacha@0.3.1", "sha256": "e6c10a63a0fa32252be49d21e7709d4d4baf8d231c2dbce1eaa8141b9b127d88", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "rand_core", "version": "0.6.4", "purl": "pkg:cargo/rand_core@0.6.4", "sha256": "ec0be4795e2f6a28069bec0b5ff3e2ac9bafc99e6a9a7dc3547996c5c816922c", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "rustc_version", "version": "0.4.1", "purl": "pkg:cargo/rustc_version@0.4.1", "sha256": "cfcb3a22ef46e85b45de6ee7e79d063319ebb6594faafcf1c225ea92ab6e9b92", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "rustix", "version": "1.1.5", "purl": "pkg:cargo/rustix@1.1.5", "sha256": "891efababe418670775f199f0d233d84843c227a0949a883ce15b37c78d6629d", "scope": "runtime", "licenses": [ "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT" ] }, { "name": "semver", "version": "1.0.28", "purl": "pkg:cargo/semver@1.0.28", "sha256": "8a7852d02fc848982e0c167ef163aaff9cd91dc640ba85e263cb1ce46fae51cd", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "serde", "version": "1.0.229", "purl": "pkg:cargo/serde@1.0.229", "sha256": "4148590afebada386688f18773da617792bf2ef03ffc1e4cbd2b1d45b023e0ba", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "serde_core", "version": "1.0.229", "purl": "pkg:cargo/serde_core@1.0.229", "sha256": "67dca2c9c51e58a4791a4b1ed58308b39c64224d349a935ab5039aa360942a48", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "serde_derive", "version": "1.0.229", "purl": "pkg:cargo/serde_derive@1.0.229", "sha256": "e7a5d71263a5a7d47b41f6b3f06ba276f10cc18b0931f1799f710578e2309348", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "serde_json", "version": "1.0.154", "purl": "pkg:cargo/serde_json@1.0.154", "sha256": "e7e9cc8b1b85264074fbcc02a88680c4096b1e47df8f739dceb03bf482f04bd6", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "sha2", "version": "0.10.9", "purl": "pkg:cargo/sha2@0.10.9", "sha256": "a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "signature", "version": "2.2.0", "purl": "pkg:cargo/signature@2.2.0", "sha256": "77549399552de45a898a580c1b41d445bf730df867cc44e6c0233bbc4b8329de", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "smallvec", "version": "1.6.0", "purl": "pkg:cargo/smallvec@1.6.0", "sha256": "1a55ca5f3b68e41c979bf8c46a6f1da892ca4db8f94023ce0bd32407573b1ac0", "scope": "runtime", "licenses": [ "MIT/Apache-2.0" ] }, { "name": "spki", "version": "0.7.3", "purl": "pkg:cargo/spki@0.7.3", "sha256": "d91ed6c858b01f942cd56b37a94b3e0a1798290327d1236e4d9cf4eaca44d29d", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "strsim", "version": "0.11.1", "purl": "pkg:cargo/strsim@0.11.1", "sha256": "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f", "scope": "runtime", "licenses": [ "MIT" ] }, { "name": "subtle", "version": "2.6.1", "purl": "pkg:cargo/subtle@2.6.1", "sha256": "13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292", "scope": "runtime", "licenses": [ "BSD-3-Clause" ] }, { "name": "syn", "version": "2.0.119", "purl": "pkg:cargo/syn@2.0.119", "sha256": "872831b642d1a07999a962a351ed35b955ea2cfc8f3862091e2a240a84f17297", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "syn", "version": "3.0.9", "purl": "pkg:cargo/syn@3.0.9", "sha256": "d78c8dee4c7bf0e14673097256fed6142ce9d3b85a408189d07482442145823b", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "tempfile", "version": "3.27.0", "purl": "pkg:cargo/tempfile@3.27.0", "sha256": "32497e9a4c7b38532efcdebeef879707aa9f794296a4f0244f6f69e9bc8574bd", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "typenum", "version": "1.20.1", "purl": "pkg:cargo/typenum@1.20.1", "sha256": "b6f5e870be6c3b371b77fe0ee0bafb859fa4964b4404c27de1d380043c4dda20", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "unicode-ident", "version": "1.0.27", "purl": "pkg:cargo/unicode-ident@1.0.27", "sha256": "a2c754d6c33795a1c324727428e5a7dedb5b06195f9890bdbcba760d3e246563", "scope": "runtime", "licenses": [ "(MIT OR Apache-2.0) AND Unicode-3.0" ] }, { "name": "utf8parse", "version": "0.2.2", "purl": "pkg:cargo/utf8parse@0.2.2", "sha256": "06abde3611657adf66d383f00b093d7faecc7fa57071cce2578660c9f1010821", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "version_check", "version": "0.9.5", "purl": "pkg:cargo/version_check@0.9.5", "sha256": "0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a", "scope": "runtime", "licenses": [ "MIT/Apache-2.0" ] }, { "name": "wasi", "version": "0.11.1+wasi-snapshot-preview1", "purl": "pkg:cargo/wasi@0.11.1+wasi-snapshot-preview1", "sha256": "ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b", "scope": "runtime", "licenses": [ "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT" ] }, { "name": "windows-link", "version": "0.2.1", "purl": "pkg:cargo/windows-link@0.2.1", "sha256": "f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "windows-sys", "version": "0.61.2", "purl": "pkg:cargo/windows-sys@0.61.2", "sha256": "ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "zerocopy", "version": "0.8.63", "purl": "pkg:cargo/zerocopy@0.8.63", "sha256": "e5fe1f8f1b06191a00962174c61aa5005e0bb391a6d80d07e24d115c01a92ed8", "scope": "runtime", "licenses": [ "BSD-2-Clause OR Apache-2.0 OR MIT" ] }, { "name": "zerocopy-derive", "version": "0.8.63", "purl": "pkg:cargo/zerocopy-derive@0.8.63", "sha256": "863ad3ac83293fb4d740aedbfdc9240dd8d1a50c1099acd76ce80ce7c7230c7f", "scope": "runtime", "licenses": [ "BSD-2-Clause OR Apache-2.0 OR MIT" ] }, { "name": "zeroize", "version": "1.9.1", "purl": "pkg:cargo/zeroize@1.9.1", "sha256": "e13084392c5e4bc371903e2935a5eaeed24905a7511356b883835e18a78f6879", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "zmij", "version": "1.0.23", "purl": "pkg:cargo/zmij@1.0.23", "sha256": "29666d0abbfad1e3dc4dcf6144730dd3a3ab225bbbdac83319345b1b44ccfc1b", "scope": "runtime", "licenses": [ "MIT" ] } ] } } }, { "attempt_no": 6, "verdict": "passed", "evidence_sha256": "b6f009951ddc54deceef124c4e83a14ee6e7a6607f166e64cb71600662f3cf05", "env_sha256": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "wall_seconds": 27.989049956, "result": { "job_id": "520d2155-f6c4-43c6-953c-1829b6dd5cc3", "verdict": "passed", "criteria": [ { "id": "build", "required": true, "passed": true, "commands": [ { "argv": [ "cargo", "build", "--workspace", "--release" ], "exit_code": 0, "timed_out": false, "duration_seconds": 17.367198034, "tail": " Compiling proc-macro2 v1.0.107\n Compiling quote v1.0.47\n Compiling unicode-ident v1.0.27\n Compiling version_check v0.9.5\n Compiling typenum v1.20.1\n Compiling libc v0.2.191\n Compiling cfg-if v1.0.5\n Compiling semver v1.0.28\n Compiling serde_core v1.0.229\n Compiling zerocopy v0.8.63\n Compiling zmij v1.0.23\n Compiling utf8parse v0.2.2\n Compiling cpufeatures v0.2.17\n Compiling serde v1.0.229\n Compiling signature v2.2.0\n Compiling is_terminal_polyfill v1.70.2\n Compiling colorchoice v1.0.5\n Compiling anstyle-query v1.1.5\n Compiling zeroize v1.9.1\n Compiling anstyle v1.0.14\n Compiling serde_json v1.0.154\n Compiling subtle v2.6.1\n Compiling itoa v1.0.18\n Compiling anstyle-parse v1.0.0\n Compiling heck v0.5.0\n Compiling strsim v0.11.1\n Compiling clap_lex v1.1.1\n Compiling ed25519 v2.2.3\n Compiling memchr v2.8.3\n Compiling smallvec v1.6.0\n Compiling hex v0.4.3\n Compiling anstream v1.0.0\n Compiling generic-array v0.14.7\n Compiling rustc_version v0.4.1\n Compiling clap_builder v4.6.7\n Compiling curve25519-dalek v4.1.3\n Compiling syn v3.0.9\n Compiling syn v2.0.119\n Compiling block-buffer v0.10.4\n Compiling crypto-common v0.1.7\n Compiling digest v0.10.7\n Compiling getrandom v0.2.17\n Compiling rand_core v0.6.4\n Compiling sha2 v0.10.9\n Compiling curve25519-dalek-derive v0.1.1\n Compiling serde_derive v1.0.229\n Compiling clap_derive v4.6.7\n Compiling ppv-lite86 v0.2.21\n Compiling rand_chacha v0.3.1\n Compiling clap v4.6.7\n Compiling ed25519-dalek v2.2.0\n Compiling rand v0.8.8\n Compiling falsegreen-ledger-core v0.1.0 (/var/lib/falsegreen/work/520d2155-f6c4-43c6-953c-1829b6dd5cc3/run/crates/falsegreen-ledger-core)\n Compiling falsegreen-ledger v0.1.0 (/var/lib/falsegreen/work/520d2155-f6c4-43c6-953c-1829b6dd5cc3/run/crates/falsegreen-ledger)\n Finished `release` profile [optimized] target(s) in 17.32s\n" } ] }, { "id": "tests", "required": true, "passed": true, "commands": [ { "argv": [ "cargo", "test", "--workspace" ], "exit_code": 0, "timed_out": false, "duration_seconds": 6.517360912, "tail": "\nrunning 0 tests\n\ntest result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s\n\n\nrunning 10 tests\ntest the_cli_help_lists_every_command ... ok\ntest a_policy_violation_exits_policy ... ok\ntest a_corrupt_shard_exits_corrupt ... ok\ntest the_export_import_roundtrip_is_hash_stable ... ok\ntest a_tampered_prev_hash_is_detected ... ok\ntest the_full_lifecycle_verifies_clean ... ok\ntest a_tampered_seal_signature_is_detected ... ok\ntest a_tampered_cross_shard_link_is_detected ... ok\ntest a_tampered_event_field_is_detected ... ok\ntest compaction_keeps_the_ledger_verifiable ... ok\n\ntest result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.23s\n\n\nrunning 41 tests\ntest chain::tests::genesis_record_is_deterministic ... ok\ntest chain::tests::sequence_gap_fails_link_check ... ok\ntest chain::tests::prev_hash_is_committed ... ok\ntest chain::tests::hash_changes_when_any_event_field_changes ... ok\ntest chain::tests::unknown_fields_rejected_in_record ... ok\ntest chain::tests::tampered_record_fails_hash_check ... ok\ntest event::tests::context_null_is_canonicalized_as_null_and_rejected ... ok\ntest event::tests::canonical_is_sorted_and_stable ... ok\ntest event::tests::validation_rejects_bad_timestamp ... ok\ntest event::tests::canonical_round_trips_through_json_with_shuffled_keys ... ok\ntest event::tests::optionals_omit_none_in_canonical_form ... ok\ntest event::tests::unknown_fields_are_rejected ... ok\ntest event::tests::validation_rejects_empty_required_fields ... ok\ntest integrity::tests::a_lone_leaf_is_its_own_root_and_odd_leaves_pair_with_themselves ... ok\ntest integrity::tests::malformed_keys_and_signatures_are_rejected ... ok\ntest integrity::tests::merkle_root_rejects_empty_and_non_hex ... ok\ntest policy::tests::an_event_can_violate_several_rules ... ok\ntest policy::tests::deny_rule_fires_on_match ... ok\ntest policy::tests::deny_rule_fires_only_on_a_match ... ok\ntest policy::tests::require_outcome_enforces_the_decision ... ok\ntest policy::tests::validation_rejects_malformed_policies ... ok\ntest integrity::tests::merkle_root_is_deterministic_and_order_sensitive ... ok\ntest store::tests::empty_append_is_a_noop ... ok\ntest store::tests::corrupt_line_is_a_parse_error ... ok\ntest store::tests::invalid_event_rejected ... ok\ntest integrity::tests::the_trusted_key_must_match_the_embedded_key ... ok\ntest store::tests::init_and_append_continues_from_genesis ... ok\ntest store::tests::seal_count_mismatch_rejected ... ok\ntest compact::tests::compaction_refuses_unsealed_empty_and_already_compacted ... ok\ntest verify::tests::the_report_is_canonical_json ... ok\ntest store::tests::append_after_seal_starts_new_shard_linked_to_merkle_root ... ok\ntest verify::tests::a_sequence_gap_is_caught ... ok\ntest compact::tests::the_compacted_shard_verifies_and_reports_the_source_root ... ok\ntest verify::tests::policy_violations_land_in_the_report ... ok\ntest verify::tests::a_bad_seal_signature_is_caught ... ok\ntest verify::tests::a_tampered_event_is_caught ... ok\ntest verify::tests::a_clean_ledger_verifies ... ok\ntest verify::tests::a_tampered_record_hash_cascades_downstream ... ok\ntest compact::tests::the_chain_continues_from_the_original_root_after_compaction ... ok\ntest integrity::tests::sign_and_verify_roundtrip ... ok\ntest integrity::tests::a_tampered_seal_field_fails_verification ... ok\n\ntest result: ok. 41 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s\n\n\nrunning 0 tests\n\ntest result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s\n\n Compiling proc-macro2 v1.0.107\n Compiling quote v1.0.47\n Compiling unicode-ident v1.0.27\n Compiling version_check v0.9.5\n Compiling libc v0.2.191\n Compiling cfg-if v1.0.5\n Compiling typenum v1.20.1\n Compiling semver v1.0.28\n Compiling serde_core v1.0.229\n Compiling zerocopy v0.8.63\n Compiling cpufeatures v0.2.17\n Compiling zmij v1.0.23\n Compiling zeroize v1.9.1\n Compiling subtle v2.6.1\n Compiling serde_json v1.0.154\n Compiling serde v1.0.229\n Compiling signature v2.2.0\n Compiling getrandom v0.4.3\n Compiling rustix v1.1.5\n Compiling itoa v1.0.18\n Compiling utf8parse v0.2.2\n Compiling memchr v2.8.3\n Compiling bitflags v2.13.2\n Compiling anstyle-query v1.1.5\n Compiling ed25519 v2.2.3\n Compiling anstyle-parse v1.0.0\n Compiling smallvec v1.6.0\n Compiling anstyle v1.0.14\n Compiling is_terminal_polyfill v1.70.2\n Compiling colorchoice v1.0.5\n Compiling hex v0.4.3\n Compiling linux-raw-sys v0.12.1\n Compiling heck v0.5.0\n Compiling strsim v0.11.1\n Compiling clap_lex v1.1.1\n Compiling rustc_version v0.4.1\n Compiling once_cell v1.21.4\n Compiling anstream v1.0.0\n Compiling fastrand v2.5.0\n Compiling generic-array v0.14.7\n Compiling curve25519-dalek v4.1.3\n Compiling clap_builder v4.6.7\n Compiling syn v3.0.9\n Compiling syn v2.0.119\n Compiling block-buffer v0.10.4\n Compiling crypto-common v0.1.7\n Compiling digest v0.10.7\n Compiling sha2 v0.10.9\n Compiling getrandom v0.2.17\n Compiling rand_core v0.6.4\n Compiling tempfile v3.27.0\n Compiling curve25519-dalek-derive v0.1.1\n Compiling serde_derive v1.0.229\n Compiling clap_derive v4.6.7\n Compiling ppv-lite86 v0.2.21\n Compiling rand_chacha v0.3.1\n Compiling rand v0.8.8\n Compiling ed25519-dalek v2.2.0\n Compiling clap v4.6.7\n Compiling falsegreen-ledger-core v0.1.0 (/var/lib/falsegreen/work/520d2155-f6c4-43c6-953c-1829b6dd5cc3/run/crates/falsegreen-ledger-core)\n Compiling falsegreen-ledger v0.1.0 (/var/lib/falsegreen/work/520d2155-f6c4-43c6-953c-1829b6dd5cc3/run/crates/falsegreen-ledger)\n Finished `test` profile [unoptimized + debuginfo] target(s) in 6.09s\n Running unittests src/main.rs (target/debug/deps/falsegreen_ledger-ab76082b4462b0b1)\n Running tests/integration.rs (target/debug/deps/integration-22dc6beef3e29bb7)\n Running unittests src/lib.rs (target/debug/deps/falsegreen_ledger_core-d00132f4be88bc4a)\n Doc-tests falsegreen_ledger_core\n" } ] }, { "id": "lint", "required": false, "passed": true, "commands": [ { "argv": [ "cargo", "clippy", "--workspace", "--all-targets", "--", "-D", "warnings" ], "exit_code": 0, "timed_out": false, "duration_seconds": 3.8132489, "tail": " Checking cfg-if v1.0.5\n Checking typenum v1.20.1\n Checking cpufeatures v0.2.17\n Checking utf8parse v0.2.2\n Checking subtle v2.6.1\n Checking libc v0.2.191\n Checking signature v2.2.0\n Checking zeroize v1.9.1\n Checking anstyle v1.0.14\n Checking itoa v1.0.18\n Checking is_terminal_polyfill v1.70.2\n Checking serde_core v1.0.229\n Checking zerocopy v0.8.63\n Checking zmij v1.0.23\n Checking colorchoice v1.0.5\n Checking memchr v2.8.3\n Checking anstyle-query v1.1.5\n Checking strsim v0.11.1\n Checking clap_lex v1.1.1\n Checking bitflags v2.13.2\n Checking smallvec v1.6.0\n Checking linux-raw-sys v0.12.1\n Checking hex v0.4.3\n Checking anstyle-parse v1.0.0\n Checking once_cell v1.21.4\n Checking fastrand v2.5.0\n Checking ed25519 v2.2.3\n Checking anstream v1.0.0\n Checking clap_builder v4.6.7\n Checking rustix v1.1.5\n Checking generic-array v0.14.7\n Checking getrandom v0.2.17\n Checking getrandom v0.4.3\n Checking rand_core v0.6.4\n Checking block-buffer v0.10.4\n Checking crypto-common v0.1.7\n Checking digest v0.10.7\n Checking sha2 v0.10.9\n Checking curve25519-dalek v4.1.3\n Checking tempfile v3.27.0\n Checking clap v4.6.7\n Checking serde_json v1.0.154\n Checking serde v1.0.229\n Checking ed25519-dalek v2.2.0\n Checking falsegreen-ledger-core v0.1.0 (/var/lib/falsegreen/work/520d2155-f6c4-43c6-953c-1829b6dd5cc3/run/crates/falsegreen-ledger-core)\n Checking ppv-lite86 v0.2.21\n Checking rand_chacha v0.3.1\n Checking rand v0.8.8\n Checking falsegreen-ledger v0.1.0 (/var/lib/falsegreen/work/520d2155-f6c4-43c6-953c-1829b6dd5cc3/run/crates/falsegreen-ledger)\n Finished `dev` profile [unoptimized + debuginfo] target(s) in 3.74s\n" }, { "argv": [ "cargo", "fmt", "--all", "--check" ], "exit_code": 0, "timed_out": false, "duration_seconds": 0.118966087, "tail": "" } ] } ], "wall_seconds": 27.989049956, "error": null, "env_sha256": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "environment": { "schema": 1, "eco": "rust", "toolchain": "rustc 1.99.0 (rustc)", "toolchain_version": "1.99.0", "fingerprint": "cb72048928286df9d194d6d7356350b373cefcc81d7ee1899729b6ebe14c8817", "artifacts": [ { "name": "anstream", "version": "1.0.0", "sha256": "824a212faf96e9acacdbd09febd34438f8f711fb84e09a8916013cd7815ca28d" }, { "name": "anstyle", "version": "1.0.14", "sha256": "940b3a0ca603d1eade50a4846a2afffd5ef57a9feac2c0e2ec2e14f9ead76000" }, { "name": "anstyle-parse", "version": "1.0.0", "sha256": "52ce7f38b242319f7cabaa6813055467063ecdc9d355bbb4ce0c68908cd8130e" }, { "name": "anstyle-query", "version": "1.1.5", "sha256": "40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc" }, { "name": "anstyle-wincon", "version": "3.0.11", "sha256": "291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d" }, { "name": "base64ct", "version": "1.8.3", "sha256": "2af50177e190e07a26ab74f8b1efbfe2ef87da2116221318cb1c2e82baf7de06" }, { "name": "bitflags", "version": "2.13.2", "sha256": "3ded4057c258ba199e2d26386d3af3780957ecaee6c4ef4041c6b4b8b97c0b06" }, { "name": "block-buffer", "version": "0.10.4", "sha256": "3078c7629b62d3f0439517fa394996acacc5cbc91c5a20d8c658e77abd503a71" }, { "name": "cfg-if", "version": "1.0.5", "sha256": "4e7648175b45a9a48536d676f68d918270699102aa8dab5496df06904c914600" }, { "name": "clap", "version": "4.6.7", "sha256": "aa8876b300ab35ba921adea3dfd70157a46249b33f95c9084ae5709785478946" }, { "name": "clap_builder", "version": "4.6.7", "sha256": "ec0797fb7aeb1406c84efac526901f7ec3ead2124f946b494e72879d4b54704d" }, { "name": "clap_derive", "version": "4.6.7", "sha256": "f9c751b79415d4e559e3d1fcf128e09e720eb673a06d26cf6f392d37d75b66e0" }, { "name": "clap_lex", "version": "1.1.1", "sha256": "1c133bc6a41be0d194c306b5506d15e6feeea7b1d6604bd3f8310dfb2ca96486" }, { "name": "colorchoice", "version": "1.0.5", "sha256": "1d07550c9036bf2ae0c684c4297d503f838287c83c53686d05370d0e139ae570" }, { "name": "const-oid", "version": "0.9.6", "sha256": "c2459377285ad874054d797f3ccebf984978aa39129f6eafde5cdc8315b612f8" }, { "name": "cpufeatures", "version": "0.2.17", "sha256": "59ed5838eebb26a2bb2e58f6d5b5316989ae9d08bab10e0e6d103e656d1b0280" }, { "name": "crypto-common", "version": "0.1.7", "sha256": "78c8292055d1c1df0cce5d180393dc8cce0abec0a7102adb6c7b1eef6016d60a" }, { "name": "curve25519-dalek", "version": "4.1.3", "sha256": "97fb8b7c4503de7d6ae7b42ab72a5a59857b4c937ec27a3d4539dba95b5ab2be" }, { "name": "curve25519-dalek-derive", "version": "0.1.1", "sha256": "f46882e17999c6cc590af592290432be3bce0428cb0d5f8b6715e4dc7b383eb3" }, { "name": "der", "version": "0.7.10", "sha256": "e7c1832837b905bbfb5101e07cc24c8deddf52f93225eee6ead5f4d63d53ddcb" }, { "name": "digest", "version": "0.10.7", "sha256": "9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292" }, { "name": "ed25519", "version": "2.2.3", "sha256": "115531babc129696a58c64a4fef0a8bf9e9698629fb97e9e40767d235cfbcd53" }, { "name": "ed25519-dalek", "version": "2.2.0", "sha256": "70e796c081cee67dc755e1a36a0a172b897fab85fc3f6bc48307991f64e4eca9" }, { "name": "errno", "version": "0.3.14", "sha256": "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb" }, { "name": "fastrand", "version": "2.5.0", "sha256": "da7c62ceae207dd37ea5b845da6a0696c799f85e97da1ab5b7910be3c1c80223" }, { "name": "fiat-crypto", "version": "0.2.9", "sha256": "28dea519a9695b9977216879a3ebfddf92f1c08c05d984f8996aecd6ecdc811d" }, { "name": "generic-array", "version": "0.14.7", "sha256": "85649ca51fd72272d7821adaf274ad91c288277713d9c18820d8499a7ff69e9a" }, { "name": "getrandom", "version": "0.2.17", "sha256": "ff2abc00be7fca6ebc474524697ae276ad847ad0a6b3faa4bcb027e9a4614ad0" }, { "name": "getrandom", "version": "0.4.3", "sha256": "300e883d756b2e4ec94e02791f39b04b522276138852cfc41d9fb7e904106099" }, { "name": "heck", "version": "0.5.0", "sha256": "2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea" }, { "name": "hex", "version": "0.4.3", "sha256": "7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70" }, { "name": "is_terminal_polyfill", "version": "1.70.2", "sha256": "a6cb138bb79a146c1bd460005623e142ef0181e3d0219cb493e02f7d08a35695" }, { "name": "itoa", "version": "1.0.18", "sha256": "8f42a60cbdf9a97f5d2305f08a87dc4e09308d1276d28c869c684d7777685682" }, { "name": "libc", "version": "0.2.191", "sha256": "65cd87c9a6d60536580b316ad985726104730a5151c99845f2490428ef91240a" }, { "name": "linux-raw-sys", "version": "0.12.1", "sha256": "32a66949e030da00e8c7d4434b251670a91556f4144941d37452769c25d58a53" }, { "name": "memchr", "version": "2.8.3", "sha256": "cf8baf1c55e62ffcace7a9f06f4bd9cd3f0c4beb022d3b367256b91b87513d98" }, { "name": "once_cell", "version": "1.21.4", "sha256": "9f7c3e4beb33f85d45ae3e3a1792185706c8e16d043238c593331cc7cd313b50" }, { "name": "once_cell_polyfill", "version": "1.70.2", "sha256": "384b8ab6d37215f3c5301a95a4accb5d64aa607f1fcb26a11b5303878451b4fe" }, { "name": "pkcs8", "version": "0.10.2", "sha256": "f950b2377845cebe5cf8b5165cb3cc1a5e0fa5cfa3e1f7f55707d8fd82e0a7b7" }, { "name": "ppv-lite86", "version": "0.2.21", "sha256": "85eae3c4ed2f50dcfe72643da4befc30deadb458a9b590d720cde2f2b1e97da9" }, { "name": "proc-macro2", "version": "1.0.107", "sha256": "985e7ec9bb745e6ce6535b544d84d6cd6f7ad8bd711c398938ae983b91a766d9" }, { "name": "quote", "version": "1.0.47", "sha256": "1fbf4db142a473a8d80c26bbf18454ed458bf8d26c8219c331daecfdbd079001" }, { "name": "r-efi", "version": "6.0.0", "sha256": "f8dcc9c7d52a811697d2151c701e0d08956f92b0e24136cf4cf27b57a6a0d9bf" }, { "name": "rand", "version": "0.8.8", "sha256": "e058c7de0b26af77780c769414d6257830bb240f3c38477dbc2c16e5f54d6d4c" }, { "name": "rand_chacha", "version": "0.3.1", "sha256": "e6c10a63a0fa32252be49d21e7709d4d4baf8d231c2dbce1eaa8141b9b127d88" }, { "name": "rand_core", "version": "0.6.4", "sha256": "ec0be4795e2f6a28069bec0b5ff3e2ac9bafc99e6a9a7dc3547996c5c816922c" }, { "name": "rustc_version", "version": "0.4.1", "sha256": "cfcb3a22ef46e85b45de6ee7e79d063319ebb6594faafcf1c225ea92ab6e9b92" }, { "name": "rustix", "version": "1.1.5", "sha256": "891efababe418670775f199f0d233d84843c227a0949a883ce15b37c78d6629d" }, { "name": "semver", "version": "1.0.28", "sha256": "8a7852d02fc848982e0c167ef163aaff9cd91dc640ba85e263cb1ce46fae51cd" }, { "name": "serde", "version": "1.0.229", "sha256": "4148590afebada386688f18773da617792bf2ef03ffc1e4cbd2b1d45b023e0ba" }, { "name": "serde_core", "version": "1.0.229", "sha256": "67dca2c9c51e58a4791a4b1ed58308b39c64224d349a935ab5039aa360942a48" }, { "name": "serde_derive", "version": "1.0.229", "sha256": "e7a5d71263a5a7d47b41f6b3f06ba276f10cc18b0931f1799f710578e2309348" }, { "name": "serde_json", "version": "1.0.154", "sha256": "e7e9cc8b1b85264074fbcc02a88680c4096b1e47df8f739dceb03bf482f04bd6" }, { "name": "sha2", "version": "0.10.9", "sha256": "a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283" }, { "name": "signature", "version": "2.2.0", "sha256": "77549399552de45a898a580c1b41d445bf730df867cc44e6c0233bbc4b8329de" }, { "name": "smallvec", "version": "1.6.0", "sha256": "1a55ca5f3b68e41c979bf8c46a6f1da892ca4db8f94023ce0bd32407573b1ac0" }, { "name": "spki", "version": "0.7.3", "sha256": "d91ed6c858b01f942cd56b37a94b3e0a1798290327d1236e4d9cf4eaca44d29d" }, { "name": "strsim", "version": "0.11.1", "sha256": "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f" }, { "name": "subtle", "version": "2.6.1", "sha256": "13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292" }, { "name": "syn", "version": "2.0.119", "sha256": "872831b642d1a07999a962a351ed35b955ea2cfc8f3862091e2a240a84f17297" }, { "name": "syn", "version": "3.0.9", "sha256": "d78c8dee4c7bf0e14673097256fed6142ce9d3b85a408189d07482442145823b" }, { "name": "tempfile", "version": "3.27.0", "sha256": "32497e9a4c7b38532efcdebeef879707aa9f794296a4f0244f6f69e9bc8574bd" }, { "name": "typenum", "version": "1.20.1", "sha256": "b6f5e870be6c3b371b77fe0ee0bafb859fa4964b4404c27de1d380043c4dda20" }, { "name": "unicode-ident", "version": "1.0.27", "sha256": "a2c754d6c33795a1c324727428e5a7dedb5b06195f9890bdbcba760d3e246563" }, { "name": "utf8parse", "version": "0.2.2", "sha256": "06abde3611657adf66d383f00b093d7faecc7fa57071cce2578660c9f1010821" }, { "name": "version_check", "version": "0.9.5", "sha256": "0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a" }, { "name": "wasi", "version": "0.11.1+wasi-snapshot-preview1", "sha256": "ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b" }, { "name": "windows-link", "version": "0.2.1", "sha256": "f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5" }, { "name": "windows-sys", "version": "0.61.2", "sha256": "ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc" }, { "name": "zerocopy", "version": "0.8.63", "sha256": "e5fe1f8f1b06191a00962174c61aa5005e0bb391a6d80d07e24d115c01a92ed8" }, { "name": "zerocopy-derive", "version": "0.8.63", "sha256": "863ad3ac83293fb4d740aedbfdc9240dd8d1a50c1099acd76ce80ce7c7230c7f" }, { "name": "zeroize", "version": "1.9.1", "sha256": "e13084392c5e4bc371903e2935a5eaeed24905a7511356b883835e18a78f6879" }, { "name": "zmij", "version": "1.0.23", "sha256": "29666d0abbfad1e3dc4dcf6144730dd3a3ab225bbbdac83319345b1b44ccfc1b" } ] }, "witness_invocations": [ { "tool": "osv-scanner", "version": "2.7.0", "binary_digest": "160c6253e2922e9e0a6a9771c5c4c40a4b3c6090b34a3cdd5e80c96cc2e4218b", "config_digest": "0c3d6fef8ea59e1de5610e13ccb1035a7232318288aaed517ee2feec9402455a", "invocation_digest": "d8074ab5c6d76d28eab05b4e1d0db1c91b68509d2e23c46c8eb87bbce42d9527", "input_subject_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "c647ccd86a5128d8c20e2dc28642f4927e1f23aeac4c91b87d19d40bd3422c0c", "normalized_evidence_digest": "a01c9fbe2e0f89ba51e98a9f9adb3e2221181b02f05426888a8e8e1d4c6f99a0", "limitations": [ "osv-scanner checks registry-based ecosystems (crates.io in 0.6.0); git-sourced dependencies (lean [[require]], gpr) have no advisory database — Insufficient Evidence for them, never a silent pass" ], "evidence_class": "dependency_vulnerability", "observed_at": "2026-10-21T18:00:06.581753282+00:00", "findings": [ { "rule_namespace": "osv", "rule_id": "RUSTSEC-2021-0003", "severity": "high", "component": "pkg:crates.io/smallvec@1.6.0", "fingerprint": "33785582b0bffd15e2724184577c08f01121749519544d60019637759fc0278a", "state": "open" }, { "rule_namespace": "osv", "rule_id": "GHSA-43w2-9j62-hq99", "severity": "high", "component": "pkg:crates.io/smallvec@1.6.0", "fingerprint": "ba50c1802e51ced38a54ef5d84d292c2efbb3b72e0751e638b8539d27f3d1ebb", "state": "open" } ] }, { "tool": "semgrep", "version": "1.181.0", "binary_digest": "c29de7c43986faa3c3ca5a8acf1d115811e15ab305ba7657b79e775d40e16391", "config_digest": "206116bd213f0786f8378755ad48adbccfe30376afe8fe2ecdd24eb44161d009", "invocation_digest": "949b441645a10c98195bd8c79e3e4ebb77f6fea3dc6ec6233b96f8e662814188", "input_subject_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "80c185ac8e17503197e8195c202d98db3f0cd3865a37ba7065f37bdbf2a58d54", "normalized_evidence_digest": "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "limitations": [], "evidence_class": "static_analysis", "observed_at": "2026-10-21T18:00:06.581753282+00:00", "findings": [] }, { "tool": "gitleaks", "version": "8.30.1", "binary_digest": "88f91962aa2f93ac6ab281d553b9e125f5197bbbce38f9f2437f7299c32e5509", "config_digest": "e1f77c307b36a43d3707ab5fed4a4007f6d63d9302bcf0d5509cd3e52e32ed6f", "invocation_digest": "f6434314eb3740ddf62f0ca3cfe902dc17a75f2bfb51629ada1f61e2b62a8198", "input_subject_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "37517e5f3dc66819f61f5a7bb8ace1921282415f10551d2defa5c3eb0985b570", "normalized_evidence_digest": "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "limitations": [], "evidence_class": "secret", "observed_at": "2026-10-21T18:00:06.581753282+00:00", "findings": [] }, { "tool": "syft", "version": "1.54.1", "binary_digest": "dbf75864e7a7ff9e1fbf00552c31483f693188632a9f68f343cd7653dac513d6", "config_digest": "b6f045a568b2dd1dcd1a1723f4eb0b8f5863215301ced35067a5f7a53c07c7e6", "invocation_digest": "ec8f4b83ce7d2adbba56c74237b66a33b80180a2ac61519992831a556636ff7a", "input_subject_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "3c58797cc506bca82dad01d1f4a4be3511ed99cf97f9687d3e9f884df3d08601", "normalized_evidence_digest": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "limitations": [], "evidence_class": "supply_chain", "observed_at": "2026-10-21T18:00:06.581753282+00:00", "findings": [ { "rule_namespace": "syft", "rule_id": "anstream@1.0.0", "component": "pkg:cargo/anstream@1.0.0", "fingerprint": "1001468a98bf8f886f889f3b76dee0717eea1611dbab5c3ec415bc0a9d3f9853", "state": "open" }, { "rule_namespace": "syft", "rule_id": "anstyle@1.0.14", "component": "pkg:cargo/anstyle@1.0.14", "fingerprint": "b4423ac5d91607f895d2e4f6b3b58b3b98e3220e95d5a560719a38f26e88a9aa", "state": "open" }, { "rule_namespace": "syft", "rule_id": "anstyle-parse@1.0.0", "component": "pkg:cargo/anstyle-parse@1.0.0", "fingerprint": "86b1ca2b439dac8c8ccf11610d2f44a40fa2c28b49c7a4f67fffc5ad7e7a4c34", "state": "open" }, { "rule_namespace": "syft", "rule_id": "anstyle-query@1.1.5", "component": "pkg:cargo/anstyle-query@1.1.5", "fingerprint": "59e640d2af9d99361184e5dd537b90d2c59bda2eba7000d96ad1688025214430", "state": "open" }, { "rule_namespace": "syft", "rule_id": "anstyle-wincon@3.0.11", "component": "pkg:cargo/anstyle-wincon@3.0.11", "fingerprint": "3b50475de5d0ec3dd61737fa6a9f81887b3ee6ff55d9fd7afecaa6d985cd26e6", "state": "open" }, { "rule_namespace": "syft", "rule_id": "base64ct@1.8.3", "component": "pkg:cargo/base64ct@1.8.3", "fingerprint": "5656f108cca5b4825c10d9ceed24fec9707f89915b6d39bb2c2f79b59f6a1eaf", "state": "open" }, { "rule_namespace": "syft", "rule_id": "bitflags@2.13.2", "component": "pkg:cargo/bitflags@2.13.2", "fingerprint": "2f570cfac9dde16b280d8ce6521d29be556270814081e669ebb29f300aac7e82", "state": "open" }, { "rule_namespace": "syft", "rule_id": "block-buffer@0.10.4", "component": "pkg:cargo/block-buffer@0.10.4", "fingerprint": "2b4e003d5403bd7ccd2ef88c2dcfba20586172a36e9e5feb24203884290f3fb8", "state": "open" }, { "rule_namespace": "syft", "rule_id": "cfg-if@1.0.5", "component": "pkg:cargo/cfg-if@1.0.5", "fingerprint": "40e2ca0f72307e7f2b92a7626063d84ab55fa1db6f40e2fdaea4eb417bb3d9f6", "state": "open" }, { "rule_namespace": "syft", "rule_id": "clap@4.6.7", "component": "pkg:cargo/clap@4.6.7", "fingerprint": "8b5288edc94ee3c1804eb2664bb8a57974ed5bd708efaad6ab63165c19e80dfd", "state": "open" }, { "rule_namespace": "syft", "rule_id": "clap_builder@4.6.7", "component": "pkg:cargo/clap_builder@4.6.7", "fingerprint": "4b4192da7ea8835334cc519c92e9230c5aa48d6e8b5905d5dc735155981a1f5d", "state": "open" }, { "rule_namespace": "syft", "rule_id": "clap_derive@4.6.7", "component": "pkg:cargo/clap_derive@4.6.7", "fingerprint": "4d51f0052690cd07873e9f2360688e746bd74d01be8bce8eb1e09d4b5ee2869f", "state": "open" }, { "rule_namespace": "syft", "rule_id": "clap_lex@1.1.1", "component": "pkg:cargo/clap_lex@1.1.1", "fingerprint": "d5118fb3b03cf55c1b5d2058dc703e5287863abfafc62e948f8bd37c554eed93", "state": "open" }, { "rule_namespace": "syft", "rule_id": "colorchoice@1.0.5", "component": "pkg:cargo/colorchoice@1.0.5", "fingerprint": "333b5e3b16c10da6f952448b19c196e74ca809dd500e5b626c5e94eca9950908", "state": "open" }, { "rule_namespace": "syft", "rule_id": "const-oid@0.9.6", "component": "pkg:cargo/const-oid@0.9.6", "fingerprint": "5541a7190761ecc001f652cbea75f887d34a63857a9d4a833c6c04c4f66c9cc2", "state": "open" }, { "rule_namespace": "syft", "rule_id": "cpufeatures@0.2.17", "component": "pkg:cargo/cpufeatures@0.2.17", "fingerprint": "2c41be5a411d55d53a6e1ecaae69000d6cfafc653329b5a415c3833ca3d938a3", "state": "open" }, { "rule_namespace": "syft", "rule_id": "crypto-common@0.1.7", "component": "pkg:cargo/crypto-common@0.1.7", "fingerprint": "94ebb3d3a04823de45b978f7f2d92b817a60a7eb82d8c7b676a832d72e58684f", "state": "open" }, { "rule_namespace": "syft", "rule_id": "curve25519-dalek@4.1.3", "component": "pkg:cargo/curve25519-dalek@4.1.3", "fingerprint": "fe69847583a09dbb422ed424b8822f6081a5b9a9ea4a5a0659aeeae90a1f3b68", "state": "open" }, { "rule_namespace": "syft", "rule_id": "curve25519-dalek-derive@0.1.1", "component": "pkg:cargo/curve25519-dalek-derive@0.1.1", "fingerprint": "30988a4946cd7b5896513c53b8f46fef2f041b7a32a8444f2fbbbe35504b0d30", "state": "open" }, { "rule_namespace": "syft", "rule_id": "der@0.7.10", "component": "pkg:cargo/der@0.7.10", "fingerprint": "8163a7cb6df166afc2111e82c998716d8b3a803f1869d677792d321ac2c09c7e", "state": "open" }, { "rule_namespace": "syft", "rule_id": "digest@0.10.7", "component": "pkg:cargo/digest@0.10.7", "fingerprint": "f543d9aefa032f0994738474a351c2d2be5ba43859f3a3edd9a65494ee9238b8", "state": "open" }, { "rule_namespace": "syft", "rule_id": "ed25519@2.2.3", "component": "pkg:cargo/ed25519@2.2.3", "fingerprint": "1a02d28487a2543cf9326fab370709729bebc9627626b39581bd1df154e91dbd", "state": "open" }, { "rule_namespace": "syft", "rule_id": "ed25519-dalek@2.2.0", "component": "pkg:cargo/ed25519-dalek@2.2.0", "fingerprint": "5d7bc1f87b8a0a9b4d360efd55b594a08fa0a5fef8d15fcf5ad942263a934c2d", "state": "open" }, { "rule_namespace": "syft", "rule_id": "errno@0.3.14", "component": "pkg:cargo/errno@0.3.14", "fingerprint": "fe0c520b266d11e2ad249f8ded3c90b5f136fb9263021fc61136e8c181a8023f", "state": "open" }, { "rule_namespace": "syft", "rule_id": "falsegreen-ledger@0.1.0", "component": "", "fingerprint": "841d8d48762b69b0eac8a31c3cdc02cd1eacac1caf7d69c291615aecc96b9ba8", "state": "open" }, { "rule_namespace": "syft", "rule_id": "falsegreen-ledger-core@0.1.0", "component": "", "fingerprint": "99c0e29b042978b26ae2896dfffc0866c8638f5604b43b5a33122de2f9811c19", "state": "open" }, { "rule_namespace": "syft", "rule_id": "fastrand@2.5.0", "component": "pkg:cargo/fastrand@2.5.0", "fingerprint": "2b7ba02485a3d76cc19b17317882c1dd65511ed5ad95e9e70a0bb5d7f5dd4043", "state": "open" }, { "rule_namespace": "syft", "rule_id": "fiat-crypto@0.2.9", "component": "pkg:cargo/fiat-crypto@0.2.9", "fingerprint": "de9f033198ba6f74b0c4f8cc0f961ff4d5f3b764d3a1e60f0f68a66fcb26f54f", "state": "open" }, { "rule_namespace": "syft", "rule_id": "generic-array@0.14.7", "component": "pkg:cargo/generic-array@0.14.7", "fingerprint": "375236d1387d03ae58db25418fce92969adbd21eca601a82cd8dc683fe60f20f", "state": "open" }, { "rule_namespace": "syft", "rule_id": "getrandom@0.2.17", "component": "pkg:cargo/getrandom@0.2.17", "fingerprint": "80e36ea36c4959f0d1b4dd76769554760054be60923fa8eae72bc10d83b30b90", "state": "open" }, { "rule_namespace": "syft", "rule_id": "getrandom@0.4.3", "component": "pkg:cargo/getrandom@0.4.3", "fingerprint": "05b5d32e6e201ead770f640d3986020565688d70ca4bf6d323def662c9b10bc0", "state": "open" }, { "rule_namespace": "syft", "rule_id": "heck@0.5.0", "component": "pkg:cargo/heck@0.5.0", "fingerprint": "c5eb23be3fdbc8afafc1cca8b9c5767bab582488149444a86b1d000d74e3c97a", "state": "open" }, { "rule_namespace": "syft", "rule_id": "hex@0.4.3", "component": "pkg:cargo/hex@0.4.3", "fingerprint": "79f94666cd1756f5374c513addc3b9444043d08bb49050dae4998fc934de41af", "state": "open" }, { "rule_namespace": "syft", "rule_id": "is_terminal_polyfill@1.70.2", "component": "pkg:cargo/is_terminal_polyfill@1.70.2", "fingerprint": "b005b2478a3e5a28b543b644c46c0e2049ab156cd1ccd7133ea9f40a5626b62d", "state": "open" }, { "rule_namespace": "syft", "rule_id": "itoa@1.0.18", "component": "pkg:cargo/itoa@1.0.18", "fingerprint": "aec45ddec07a815da2a5c182001bfe6e554ed2a0b89259d327f793511a774c40", "state": "open" }, { "rule_namespace": "syft", "rule_id": "libc@0.2.191", "component": "pkg:cargo/libc@0.2.191", "fingerprint": "b0e83395a6df61531693965b5dc89908e48f1fc30363b236cdebf457b3b8d84a", "state": "open" }, { "rule_namespace": "syft", "rule_id": "linux-raw-sys@0.12.1", "component": "pkg:cargo/linux-raw-sys@0.12.1", "fingerprint": "7516ef772912bc7e53189e7272c2213556425bc370efc1936e07fd2f7141dab0", "state": "open" }, { "rule_namespace": "syft", "rule_id": "memchr@2.8.3", "component": "pkg:cargo/memchr@2.8.3", "fingerprint": "19c7f7c6470891a44bd18bae9b5a2d1d0a9674e609cb6b681b6d78594026b1c0", "state": "open" }, { "rule_namespace": "syft", "rule_id": "once_cell@1.21.4", "component": "pkg:cargo/once_cell@1.21.4", "fingerprint": "5df49b2099b0dc508144dd3ce7f17d8ef89e1ca37347a5a9732cc45bef8a0865", "state": "open" }, { "rule_namespace": "syft", "rule_id": "once_cell_polyfill@1.70.2", "component": "pkg:cargo/once_cell_polyfill@1.70.2", "fingerprint": "67dbadfb6f4218d894e3b81d8d454f1540509b7c38981b00170ce499b12f89cc", "state": "open" }, { "rule_namespace": "syft", "rule_id": "pkcs8@0.10.2", "component": "pkg:cargo/pkcs8@0.10.2", "fingerprint": "c47c76d7946c7de7d9e8ccb0ce88035f70f673c663ff4bc87d7186e2cd59e8fe", "state": "open" }, { "rule_namespace": "syft", "rule_id": "ppv-lite86@0.2.21", "component": "pkg:cargo/ppv-lite86@0.2.21", "fingerprint": "9947e5da4cc28604998b938686ba44e72cd4382ce0330b0b7457439028a32e72", "state": "open" }, { "rule_namespace": "syft", "rule_id": "proc-macro2@1.0.107", "component": "pkg:cargo/proc-macro2@1.0.107", "fingerprint": "8a7eb5f7e790f0c2621a0b8b0602d5e8df183461cc0627f75774260b6b3ade32", "state": "open" }, { "rule_namespace": "syft", "rule_id": "quote@1.0.47", "component": "pkg:cargo/quote@1.0.47", "fingerprint": "ba5b73c1936ffd2ab425cc8480b56e7b5f48125bec80e2b12a1a44baa9c1c558", "state": "open" }, { "rule_namespace": "syft", "rule_id": "r-efi@6.0.0", "component": "pkg:cargo/r-efi@6.0.0", "fingerprint": "122b7ca8782f044bbf34b34a6611015ab063c5941471a1f9edf52859953335ea", "state": "open" }, { "rule_namespace": "syft", "rule_id": "rand@0.8.8", "component": "pkg:cargo/rand@0.8.8", "fingerprint": "d75967c1358b7152e9dec7577066f5049015cdd77c70b9c353ec196342cef83b", "state": "open" }, { "rule_namespace": "syft", "rule_id": "rand_chacha@0.3.1", "component": "pkg:cargo/rand_chacha@0.3.1", "fingerprint": "98b4b52cb9630b79c95cd3ce370098fda6810c9893935c1623818e6c2bc6a950", "state": "open" }, { "rule_namespace": "syft", "rule_id": "rand_core@0.6.4", "component": "pkg:cargo/rand_core@0.6.4", "fingerprint": "881bc35797d5dbc04b02e40860ac237cc76ab1e8561cd4d39d3fc0a1c3155a12", "state": "open" }, { "rule_namespace": "syft", "rule_id": "rustc_version@0.4.1", "component": "pkg:cargo/rustc_version@0.4.1", "fingerprint": "b856fc7dc29ef6489b43403c317b31a5c2f7469df3e78eb38496d906f65a41f9", "state": "open" }, { "rule_namespace": "syft", "rule_id": "rustix@1.1.5", "component": "pkg:cargo/rustix@1.1.5", "fingerprint": "161a149e15f158acea456dd7572470352fcc38e9861cf74a7affcdbebb3be84c", "state": "open" }, { "rule_namespace": "syft", "rule_id": "semver@1.0.28", "component": "pkg:cargo/semver@1.0.28", "fingerprint": "adf8dd8c6eab8cbfba291126118409767783c7721216321d264e71566a86fb64", "state": "open" }, { "rule_namespace": "syft", "rule_id": "serde@1.0.229", "component": "pkg:cargo/serde@1.0.229", "fingerprint": "6d867eaaeef95071a1e043e0f22f4765333205c756611890f0f6ee0f0bf2844a", "state": "open" }, { "rule_namespace": "syft", "rule_id": "serde_core@1.0.229", "component": "pkg:cargo/serde_core@1.0.229", "fingerprint": "e510c18b9a78eaa008df3d1ced75890c6610e5b6802183c55c7bbe66f2b08705", "state": "open" }, { "rule_namespace": "syft", "rule_id": "serde_derive@1.0.229", "component": "pkg:cargo/serde_derive@1.0.229", "fingerprint": "000799b93838d093c6bbd43247666d235ecbfd735b93222d2cd26233f0fb28ec", "state": "open" }, { "rule_namespace": "syft", "rule_id": "serde_json@1.0.154", "component": "pkg:cargo/serde_json@1.0.154", "fingerprint": "349a0dd333a0d2897b42960e7efb1d0830ab09b3e9eeb1e2acdeb5a200f289e1", "state": "open" }, { "rule_namespace": "syft", "rule_id": "sha2@0.10.9", "component": "pkg:cargo/sha2@0.10.9", "fingerprint": "477b1f1b81c82609f675f2c5aeb53cfb9f1191376ff8845a5647e9c6b05388df", "state": "open" }, { "rule_namespace": "syft", "rule_id": "signature@2.2.0", "component": "pkg:cargo/signature@2.2.0", "fingerprint": "7d8fc0ddf33982f4c2b6ca2f3739dc5f209faca02c4d8a01cb67023acf125d9c", "state": "open" }, { "rule_namespace": "syft", "rule_id": "smallvec@1.6.0", "component": "pkg:cargo/smallvec@1.6.0", "fingerprint": "1b292519074e47f7a1b01edc1ec1476b2f282e47ec7640820c0bad1afd635a20", "state": "open" }, { "rule_namespace": "syft", "rule_id": "spki@0.7.3", "component": "pkg:cargo/spki@0.7.3", "fingerprint": "e7593fa9bc039e2db40a3a71927e7b104a79be42d02d04e04b1b373dad5f9354", "state": "open" }, { "rule_namespace": "syft", "rule_id": "strsim@0.11.1", "component": "pkg:cargo/strsim@0.11.1", "fingerprint": "7260c481b09f354b4c8d13996a46735f790af5206fa07ffa86f3d9601768719a", "state": "open" }, { "rule_namespace": "syft", "rule_id": "subtle@2.6.1", "component": "pkg:cargo/subtle@2.6.1", "fingerprint": "abf520278b97397636ae0d0fba9c430b656b0af89b288300d4c9e12cd1bad2a9", "state": "open" }, { "rule_namespace": "syft", "rule_id": "syn@2.0.119", "component": "pkg:cargo/syn@2.0.119", "fingerprint": "80bcee46aef1b69a610a3810a2f7dc3fec1a8cff8a4366bc2369f50b8543a5e0", "state": "open" }, { "rule_namespace": "syft", "rule_id": "syn@3.0.9", "component": "pkg:cargo/syn@3.0.9", "fingerprint": "114cde3e9bfa178c4b502cb01a87d49a704c293fc6d1a07270388d14b152c9c2", "state": "open" }, { "rule_namespace": "syft", "rule_id": "tempfile@3.27.0", "component": "pkg:cargo/tempfile@3.27.0", "fingerprint": "cc64344e2b0f434ddea53beb971184de5fd0a84c6a9739eff5255d69b2d42a3c", "state": "open" }, { "rule_namespace": "syft", "rule_id": "typenum@1.20.1", "component": "pkg:cargo/typenum@1.20.1", "fingerprint": "69fca6104cc42ad018ccf1e723d8e6cc55ad7d890cbeaf9f3073487edb4e9c81", "state": "open" }, { "rule_namespace": "syft", "rule_id": "unicode-ident@1.0.27", "component": "pkg:cargo/unicode-ident@1.0.27", "fingerprint": "c8f069b4043c8b0afcbf7d2f1d9fdb3681c8f8cc75ee03d318b515654ab1e21c", "state": "open" }, { "rule_namespace": "syft", "rule_id": "utf8parse@0.2.2", "component": "pkg:cargo/utf8parse@0.2.2", "fingerprint": "c28ef21ff55492434ef623166a53f268c1c02540b430df3967683388cacd9336", "state": "open" }, { "rule_namespace": "syft", "rule_id": "version_check@0.9.5", "component": "pkg:cargo/version_check@0.9.5", "fingerprint": "a37defdbf8011a14f68d31205b137179a3eec551816dc2a2b861965901eed251", "state": "open" }, { "rule_namespace": "syft", "rule_id": "wasi@0.11.1+wasi-snapshot-preview1", "component": "pkg:cargo/wasi@0.11.1%2Bwasi-snapshot-preview1", "fingerprint": "8224d335948f5ae82312adc7b5040e9331715f1f580a94ac77e55f15af60fb24", "state": "open" }, { "rule_namespace": "syft", "rule_id": "windows-link@0.2.1", "component": "pkg:cargo/windows-link@0.2.1", "fingerprint": "f2e9441ed9c64738dc6bd8be208ecb9b3f0f2eb8ea5ddeb4fa1303339bb340d6", "state": "open" }, { "rule_namespace": "syft", "rule_id": "windows-sys@0.61.2", "component": "pkg:cargo/windows-sys@0.61.2", "fingerprint": "b2713fc2f7bff729a27c0f62ee1be368d8344e0a7237e06edae435bfe00f9353", "state": "open" }, { "rule_namespace": "syft", "rule_id": "zerocopy@0.8.63", "component": "pkg:cargo/zerocopy@0.8.63", "fingerprint": "538de62743d2a698d49ae17957387bceef902f05602838b337eb33ef3a2018ca", "state": "open" }, { "rule_namespace": "syft", "rule_id": "zerocopy-derive@0.8.63", "component": "pkg:cargo/zerocopy-derive@0.8.63", "fingerprint": "c28066f0d74cc875b1313b642f5b65466e41ca5928021fdf354e3a5158e5f887", "state": "open" }, { "rule_namespace": "syft", "rule_id": "zeroize@1.9.1", "component": "pkg:cargo/zeroize@1.9.1", "fingerprint": "a9b132d8d889548f19dbf2f1ed6a078ca10079500e9a4e3e2c23e407a3c4c2bb", "state": "open" }, { "rule_namespace": "syft", "rule_id": "zmij@1.0.23", "component": "pkg:cargo/zmij@1.0.23", "fingerprint": "18a805aded02f77466f8ea530827dac33264f4eea283a1e3793fe895db3d0ad5", "state": "open" } ] }, { "tool": "dependency-manifest", "version": "1", "binary_digest": "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4", "config_digest": "2402cf6f9fd45d6c6d7b9bc10abdba72e36d61e88515a01d2cda19ee8d375b3b", "invocation_digest": "9868ab0d587c0a92ce3b85b8c1d3d916f3c6ac04983c8e805abcbc47ddcdfc3e", "input_subject_digest": "0cb7c13b10d359ba5965e6dc9285a64043fa73a95985c7facde439fecd6b1e86", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4", "normalized_evidence_digest": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "limitations": [ "license facts are the job dependency manifest's registry SPDX ids; the workspace's own code and git-sourced dependencies carry no registry license facts" ], "evidence_class": "license", "observed_at": "2026-10-21T18:00:06.581753282+00:00", "findings": [ { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/anstream@1.0.0", "fingerprint": "81c389e920feb226956ea5e7e905e055ef3190e347d2024731cba977530b1c28", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/anstyle@1.0.14", "fingerprint": "72cb9f765ade0582fd1b8d4e3ec30734124e9580702182e52b07ce552ace97b1", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/anstyle-parse@1.0.0", "fingerprint": "03dae4cdd1bc7ba73958bf1c617e4f5aa93a31d30b5efa57cb32af82f5010ef9", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/anstyle-query@1.1.5", "fingerprint": "847b1133ac62af0c80b617aa8a687925f44ff02a38077b59d57f8a3d2c9e7377", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/anstyle-wincon@3.0.11", "fingerprint": "930051eead4685b3c169c214c7e4bf568a6b18c75060c642828af9b1e4a92cb7", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/base64ct@1.8.3", "fingerprint": "c2936ea98513be3acbc17ec843a0b5a87f2ec66b23198a7e457cbfe82501de17", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/bitflags@2.13.2", "fingerprint": "5a267ea0d4b32ca26ee6285110e4831c63bc24aba4b4ef50a6ce820dab9bc9c7", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/block-buffer@0.10.4", "fingerprint": "65f5493f0209c5bb833a448c5a4f8d34ea9cbb19fd226d673fb6378da3d45d81", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/cfg-if@1.0.5", "fingerprint": "9c66873ce2b15cedf8971b5136299c6dbbdbdb00096f984baca5c60e43f20b86", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/clap@4.6.7", "fingerprint": "b6d470dc0b142702b891dd8112eb44dacb7f1e64144fc95e7c4d8188299612c5", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/clap_builder@4.6.7", "fingerprint": "57fd5416fc287aefb50fdd41cdf558dc3aab82e27a8e542cb21cb6641a034fbf", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/clap_derive@4.6.7", "fingerprint": "e4955ec9e34c975255437f60abb69c42ffe6c4faff7bd1b2c2f1f582a1266f6f", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/clap_lex@1.1.1", "fingerprint": "9c1ce04a546342b75e26dcedd88dfd64ed4c42c1e22db5d575ebd9b83bdab96f", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/colorchoice@1.0.5", "fingerprint": "0cd1130d559feb72b1789c9dfc5ca946a042b193f6efe22b205f7179ae628471", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/const-oid@0.9.6", "fingerprint": "dd86b6e6f0675712fca49ad744596692f3308ad888e80c2fe798ae86fcc44761", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/cpufeatures@0.2.17", "fingerprint": "04a7c96209fbd41f9a1817ea4d2a6e8677796fa4ec0dc537d76a9dec0036eb8f", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/crypto-common@0.1.7", "fingerprint": "745d756e8999f1a9a249aed77699c555941595329a4e4343de89ae96e1d0333a", "state": "open" }, { "rule_namespace": "license", "rule_id": "BSD-3-Clause", "component": "pkg:cargo/curve25519-dalek@4.1.3", "fingerprint": "0bb575d6587d75ee9592137d2931238680210aecc215909adba1e5f8072feb00", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT/Apache-2.0", "component": "pkg:cargo/curve25519-dalek-derive@0.1.1", "fingerprint": "2bd313068cc5979f66814611d0f2653764f5f02a5fea3659e6622b7141a9efb2", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/der@0.7.10", "fingerprint": "5581ac6ec26f13cf9bf99838842922d224f796330520c89e209f34f8263deca9", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/digest@0.10.7", "fingerprint": "66d845a56cbb7c318352a08f46d3b6991b4e15095a844109683d6395bea3a1c7", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/ed25519@2.2.3", "fingerprint": "b1ef1484de84840c7c0a2c51933966b0868f8da06be7d59e7b77a92b3dcd12c6", "state": "open" }, { "rule_namespace": "license", "rule_id": "BSD-3-Clause", "component": "pkg:cargo/ed25519-dalek@2.2.0", "fingerprint": "59ce4b8271427de2f3c94b79b2d666608dd0ab80f62ba57ba79decbe90460d6c", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/errno@0.3.14", "fingerprint": "b2cf2d50c9d7e3df66abaf43435835639e08034d0258c853bbb967068248c7c1", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/fastrand@2.5.0", "fingerprint": "68281187c66d4c9670acbf7a748a35df777f7796eace3eb74ecd3c0df1af2377", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0 OR BSD-1-Clause", "component": "pkg:cargo/fiat-crypto@0.2.9", "fingerprint": "ab0d3ee1c57f754c8e9f310625a0a15790a9d09e9ce260b33597c5215179f9fd", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT", "component": "pkg:cargo/generic-array@0.14.7", "fingerprint": "4100baa4894d6f4a883eefdffa6f2a3f3f8932c5f513fd1b463bea367b450a8b", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/getrandom@0.2.17", "fingerprint": "e0e248e843d9c977190d92d5e8671ff1fe633094bec2fd78deda8cc2b9ddd913", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/getrandom@0.4.3", "fingerprint": "d34eb7b77676d5fa2a2fb54ccbdcf812b2e95ece08d523b51a8112876b9e9f1b", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/heck@0.5.0", "fingerprint": "f15e7f9397ec2df7435dfa719bd9ed4ec07a7f9b63f63a6b0a1ded192a681875", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/hex@0.4.3", "fingerprint": "0880807ea598985ae4e2b054afdf19681651cc0555d47de97c81bf15d308e1c1", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/is_terminal_polyfill@1.70.2", "fingerprint": "ea5404a32d8fe5f4d7b7c150ae9c418bef44434084f9807f04760b247a1833b6", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/itoa@1.0.18", "fingerprint": "0b71ec3d77ef8519b86e537ff5fac2a87a1e23a1a94302a67b55044db9e38cb7", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/libc@0.2.191", "fingerprint": "9d9973caa830049a9211e8ed805b7dcf7f690659b71db96bf5c4593d7b2ca614", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT", "component": "pkg:cargo/linux-raw-sys@0.12.1", "fingerprint": "773523a49f8cd1a1df7385ad357b411d263186aa04cb952428f2225c95e692a2", "state": "open" }, { "rule_namespace": "license", "rule_id": "Unlicense OR MIT", "component": "pkg:cargo/memchr@2.8.3", "fingerprint": "bf1591437a6f99fe31f560f71637dd4271236182cf3fe1f2a57f545ab377d916", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/once_cell@1.21.4", "fingerprint": "bf0bc6b374808f7c6f3fd08c0a7d63965be10e3ff39ebcd785fcf0d624f8acb0", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/once_cell_polyfill@1.70.2", "fingerprint": "4e122c54241f8e08146c80b9e7aace82ab89579bab281e82a26ef89d5444df44", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/pkcs8@0.10.2", "fingerprint": "dcf79ef96b12576f3da49211f68cd786c965cbcb198cc01af73f3d5426884627", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/ppv-lite86@0.2.21", "fingerprint": "10dbed4778cb7f48cbbaaafe5a6bc2839b58297bde9f43d49cab1a639d5c927c", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/proc-macro2@1.0.107", "fingerprint": "1efce8992cf906cfadfccce323fa0ae6955df07a7460965cebb2a64de11dc74b", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/quote@1.0.47", "fingerprint": "ab119f6f830df1f8f8ca18f18a1b7e8166482bbc79b529b2b01f1ef8d351dc9d", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0 OR LGPL-2.1-or-later", "component": "pkg:cargo/r-efi@6.0.0", "fingerprint": "79b3757623de39a2d1e2cbc582531edb2232c2fedae78ae86266ff0a657e6692", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/rand@0.8.8", "fingerprint": "671dab68d2ada9d89ee44f0464a0e42d22a9c70a7b4862b87c34ef30801c0b99", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/rand_chacha@0.3.1", "fingerprint": "09545686bd0a3e470a4467c0216f6dd076ee18f9ccdc19e939a2a0c8338a130c", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/rand_core@0.6.4", "fingerprint": "5b4629e1e1e878c03195737d30e6f492dc34c5d799ba36c5c04b8192eece897e", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/rustc_version@0.4.1", "fingerprint": "6ed6e8818bc7dbe359728d9d8c8e843d5421d6999b5853490c9cf658d37e59e0", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT", "component": "pkg:cargo/rustix@1.1.5", "fingerprint": "70045df0de7040cc8e3f8920f8dbce683735be2f3505c999933268304eed3d01", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/semver@1.0.28", "fingerprint": "d1f1194d0512ca4c7a020f03728853a518bbdb6719bc6a3a7fc7caeda7f6bdfe", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/serde@1.0.229", "fingerprint": "e1eb81e653a288a15481d6312ab337b18d44e2d94d49f48ac7c8c3ec800a36f5", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/serde_core@1.0.229", "fingerprint": "4086d666853f837b329582f4ada668b8ee6eb0983c029a5fa7eacb4cd7b95ea7", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/serde_derive@1.0.229", "fingerprint": "4077d1047525fda030d22d1788a1c3aa36c56309be7434055545e4a5acc5435e", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/serde_json@1.0.154", "fingerprint": "2dc62cd2e94dfe2e326379ab19b563408bee14cbd79b7c9730b3cf913df685ee", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/sha2@0.10.9", "fingerprint": "8fffdf2de9a098e260c473f456893764abfb0da25c8edf8f28ef1d8b3b483857", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/signature@2.2.0", "fingerprint": "8409e8477eaa8b299157e472284dbb382c65babc4a10856896a0325c741bfc84", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT/Apache-2.0", "component": "pkg:cargo/smallvec@1.6.0", "fingerprint": "cfe55c94dcb01bd350011e0618de53cfeeccc9fedcf5a83cd1bd293d6dedb9f4", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/spki@0.7.3", "fingerprint": "6d2575dae8ab3515840e41bc7dd0289d19fe62354849d325d3f4876f96842a9b", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT", "component": "pkg:cargo/strsim@0.11.1", "fingerprint": "3803c2ce269d8937cb5ca282cfc7de1c38bec3947a7f800554d22c9b6af0b4ff", "state": "open" }, { "rule_namespace": "license", "rule_id": "BSD-3-Clause", "component": "pkg:cargo/subtle@2.6.1", "fingerprint": "b2905d01e0f0b65a50ff69518e7472eced519c61c4f31a958fedf47503a048c5", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/syn@2.0.119", "fingerprint": "ec75866e642d56853e0689f491ec83f5ca076a545a518dbc71cb657872de02ba", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/syn@3.0.9", "fingerprint": "50816f9296ebef556556bbf41104d9aff94dc3c3b78917993d062c356ece3a83", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/tempfile@3.27.0", "fingerprint": "fb7e166af30cc01cf8d9fa7bc5864a37ef17e94f0dcad6591c23c48b4f16a08f", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/typenum@1.20.1", "fingerprint": "64aa3bf3c0ae12c744475d6fbd6062f2bf93df107d8585dce88c78832b669779", "state": "open" }, { "rule_namespace": "license", "rule_id": "(MIT OR Apache-2.0) AND Unicode-3.0", "component": "pkg:cargo/unicode-ident@1.0.27", "fingerprint": "bbfb4a615f30648ef5a8eaf210033aa1baaab14fa0bc9482ac72ae7641a6e466", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/utf8parse@0.2.2", "fingerprint": "af63bfd1ce1cfe636db88caaa115b8843ca67e96b3dd93f523d84771bf40a073", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT/Apache-2.0", "component": "pkg:cargo/version_check@0.9.5", "fingerprint": "99b8a953eefdb41a40a9a077b9032a3b6a395900604be21a32da30658ce61f15", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT", "component": "pkg:cargo/wasi@0.11.1+wasi-snapshot-preview1", "fingerprint": "d9cbaa8941d43791ff495ffbc74a5ec516e48db88243ab8abce575acfe23e028", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/windows-link@0.2.1", "fingerprint": "6a884f0186ee68ed468285b3dee5325fccd3809ca04aafabffd42e588d76a3e0", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/windows-sys@0.61.2", "fingerprint": "169218fdfc26698b6fd1a352d504c2359a123be3ebf7d7b9e0c223406ce70d21", "state": "open" }, { "rule_namespace": "license", "rule_id": "BSD-2-Clause OR Apache-2.0 OR MIT", "component": "pkg:cargo/zerocopy@0.8.63", "fingerprint": "dca0f093c749462f428d68cecfb63c6f0b0443b944e3f93172bc7b85bea835ec", "state": "open" }, { "rule_namespace": "license", "rule_id": "BSD-2-Clause OR Apache-2.0 OR MIT", "component": "pkg:cargo/zerocopy-derive@0.8.63", "fingerprint": "aa23299329debd40f4b88bbe41983c6f0b798920fe0306bdb2bd12307011eff0", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/zeroize@1.9.1", "fingerprint": "ad04bc15c43493a874503f1f4e5228c67653134c34ae698ee27abc3ba5027fed", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT", "component": "pkg:cargo/zmij@1.0.23", "fingerprint": "cf39f12ea4d06ecb2c119337d3ddd79c7cc97ef7e7e900bb4beb745ac2696a0d", "state": "open" } ] } ], "dependency_manifest": { "ecosystem": "rust", "tool": "cargo", "tool_version": "1.99.0", "entries": [ { "name": "anstream", "version": "1.0.0", "purl": "pkg:cargo/anstream@1.0.0", "sha256": "824a212faf96e9acacdbd09febd34438f8f711fb84e09a8916013cd7815ca28d", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "anstyle", "version": "1.0.14", "purl": "pkg:cargo/anstyle@1.0.14", "sha256": "940b3a0ca603d1eade50a4846a2afffd5ef57a9feac2c0e2ec2e14f9ead76000", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "anstyle-parse", "version": "1.0.0", "purl": "pkg:cargo/anstyle-parse@1.0.0", "sha256": "52ce7f38b242319f7cabaa6813055467063ecdc9d355bbb4ce0c68908cd8130e", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "anstyle-query", "version": "1.1.5", "purl": "pkg:cargo/anstyle-query@1.1.5", "sha256": "40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "anstyle-wincon", "version": "3.0.11", "purl": "pkg:cargo/anstyle-wincon@3.0.11", "sha256": "291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "base64ct", "version": "1.8.3", "purl": "pkg:cargo/base64ct@1.8.3", "sha256": "2af50177e190e07a26ab74f8b1efbfe2ef87da2116221318cb1c2e82baf7de06", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "bitflags", "version": "2.13.2", "purl": "pkg:cargo/bitflags@2.13.2", "sha256": "3ded4057c258ba199e2d26386d3af3780957ecaee6c4ef4041c6b4b8b97c0b06", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "block-buffer", "version": "0.10.4", "purl": "pkg:cargo/block-buffer@0.10.4", "sha256": "3078c7629b62d3f0439517fa394996acacc5cbc91c5a20d8c658e77abd503a71", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "cfg-if", "version": "1.0.5", "purl": "pkg:cargo/cfg-if@1.0.5", "sha256": "4e7648175b45a9a48536d676f68d918270699102aa8dab5496df06904c914600", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "clap", "version": "4.6.7", "purl": "pkg:cargo/clap@4.6.7", "sha256": "aa8876b300ab35ba921adea3dfd70157a46249b33f95c9084ae5709785478946", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "clap_builder", "version": "4.6.7", "purl": "pkg:cargo/clap_builder@4.6.7", "sha256": "ec0797fb7aeb1406c84efac526901f7ec3ead2124f946b494e72879d4b54704d", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "clap_derive", "version": "4.6.7", "purl": "pkg:cargo/clap_derive@4.6.7", "sha256": "f9c751b79415d4e559e3d1fcf128e09e720eb673a06d26cf6f392d37d75b66e0", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "clap_lex", "version": "1.1.1", "purl": "pkg:cargo/clap_lex@1.1.1", "sha256": "1c133bc6a41be0d194c306b5506d15e6feeea7b1d6604bd3f8310dfb2ca96486", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "colorchoice", "version": "1.0.5", "purl": "pkg:cargo/colorchoice@1.0.5", "sha256": "1d07550c9036bf2ae0c684c4297d503f838287c83c53686d05370d0e139ae570", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "const-oid", "version": "0.9.6", "purl": "pkg:cargo/const-oid@0.9.6", "sha256": "c2459377285ad874054d797f3ccebf984978aa39129f6eafde5cdc8315b612f8", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "cpufeatures", "version": "0.2.17", "purl": "pkg:cargo/cpufeatures@0.2.17", "sha256": "59ed5838eebb26a2bb2e58f6d5b5316989ae9d08bab10e0e6d103e656d1b0280", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "crypto-common", "version": "0.1.7", "purl": "pkg:cargo/crypto-common@0.1.7", "sha256": "78c8292055d1c1df0cce5d180393dc8cce0abec0a7102adb6c7b1eef6016d60a", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "curve25519-dalek", "version": "4.1.3", "purl": "pkg:cargo/curve25519-dalek@4.1.3", "sha256": "97fb8b7c4503de7d6ae7b42ab72a5a59857b4c937ec27a3d4539dba95b5ab2be", "scope": "runtime", "licenses": [ "BSD-3-Clause" ] }, { "name": "curve25519-dalek-derive", "version": "0.1.1", "purl": "pkg:cargo/curve25519-dalek-derive@0.1.1", "sha256": "f46882e17999c6cc590af592290432be3bce0428cb0d5f8b6715e4dc7b383eb3", "scope": "runtime", "licenses": [ "MIT/Apache-2.0" ] }, { "name": "der", "version": "0.7.10", "purl": "pkg:cargo/der@0.7.10", "sha256": "e7c1832837b905bbfb5101e07cc24c8deddf52f93225eee6ead5f4d63d53ddcb", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "digest", "version": "0.10.7", "purl": "pkg:cargo/digest@0.10.7", "sha256": "9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "ed25519", "version": "2.2.3", "purl": "pkg:cargo/ed25519@2.2.3", "sha256": "115531babc129696a58c64a4fef0a8bf9e9698629fb97e9e40767d235cfbcd53", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "ed25519-dalek", "version": "2.2.0", "purl": "pkg:cargo/ed25519-dalek@2.2.0", "sha256": "70e796c081cee67dc755e1a36a0a172b897fab85fc3f6bc48307991f64e4eca9", "scope": "runtime", "licenses": [ "BSD-3-Clause" ] }, { "name": "errno", "version": "0.3.14", "purl": "pkg:cargo/errno@0.3.14", "sha256": "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "fastrand", "version": "2.5.0", "purl": "pkg:cargo/fastrand@2.5.0", "sha256": "da7c62ceae207dd37ea5b845da6a0696c799f85e97da1ab5b7910be3c1c80223", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "fiat-crypto", "version": "0.2.9", "purl": "pkg:cargo/fiat-crypto@0.2.9", "sha256": "28dea519a9695b9977216879a3ebfddf92f1c08c05d984f8996aecd6ecdc811d", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0 OR BSD-1-Clause" ] }, { "name": "generic-array", "version": "0.14.7", "purl": "pkg:cargo/generic-array@0.14.7", "sha256": "85649ca51fd72272d7821adaf274ad91c288277713d9c18820d8499a7ff69e9a", "scope": "runtime", "licenses": [ "MIT" ] }, { "name": "getrandom", "version": "0.2.17", "purl": "pkg:cargo/getrandom@0.2.17", "sha256": "ff2abc00be7fca6ebc474524697ae276ad847ad0a6b3faa4bcb027e9a4614ad0", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "getrandom", "version": "0.4.3", "purl": "pkg:cargo/getrandom@0.4.3", "sha256": "300e883d756b2e4ec94e02791f39b04b522276138852cfc41d9fb7e904106099", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "heck", "version": "0.5.0", "purl": "pkg:cargo/heck@0.5.0", "sha256": "2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "hex", "version": "0.4.3", "purl": "pkg:cargo/hex@0.4.3", "sha256": "7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "is_terminal_polyfill", "version": "1.70.2", "purl": "pkg:cargo/is_terminal_polyfill@1.70.2", "sha256": "a6cb138bb79a146c1bd460005623e142ef0181e3d0219cb493e02f7d08a35695", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "itoa", "version": "1.0.18", "purl": "pkg:cargo/itoa@1.0.18", "sha256": "8f42a60cbdf9a97f5d2305f08a87dc4e09308d1276d28c869c684d7777685682", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "libc", "version": "0.2.191", "purl": "pkg:cargo/libc@0.2.191", "sha256": "65cd87c9a6d60536580b316ad985726104730a5151c99845f2490428ef91240a", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "linux-raw-sys", "version": "0.12.1", "purl": "pkg:cargo/linux-raw-sys@0.12.1", "sha256": "32a66949e030da00e8c7d4434b251670a91556f4144941d37452769c25d58a53", "scope": "runtime", "licenses": [ "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT" ] }, { "name": "memchr", "version": "2.8.3", "purl": "pkg:cargo/memchr@2.8.3", "sha256": "cf8baf1c55e62ffcace7a9f06f4bd9cd3f0c4beb022d3b367256b91b87513d98", "scope": "runtime", "licenses": [ "Unlicense OR MIT" ] }, { "name": "once_cell", "version": "1.21.4", "purl": "pkg:cargo/once_cell@1.21.4", "sha256": "9f7c3e4beb33f85d45ae3e3a1792185706c8e16d043238c593331cc7cd313b50", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "once_cell_polyfill", "version": "1.70.2", "purl": "pkg:cargo/once_cell_polyfill@1.70.2", "sha256": "384b8ab6d37215f3c5301a95a4accb5d64aa607f1fcb26a11b5303878451b4fe", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "pkcs8", "version": "0.10.2", "purl": "pkg:cargo/pkcs8@0.10.2", "sha256": "f950b2377845cebe5cf8b5165cb3cc1a5e0fa5cfa3e1f7f55707d8fd82e0a7b7", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "ppv-lite86", "version": "0.2.21", "purl": "pkg:cargo/ppv-lite86@0.2.21", "sha256": "85eae3c4ed2f50dcfe72643da4befc30deadb458a9b590d720cde2f2b1e97da9", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "proc-macro2", "version": "1.0.107", "purl": "pkg:cargo/proc-macro2@1.0.107", "sha256": "985e7ec9bb745e6ce6535b544d84d6cd6f7ad8bd711c398938ae983b91a766d9", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "quote", "version": "1.0.47", "purl": "pkg:cargo/quote@1.0.47", "sha256": "1fbf4db142a473a8d80c26bbf18454ed458bf8d26c8219c331daecfdbd079001", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "r-efi", "version": "6.0.0", "purl": "pkg:cargo/r-efi@6.0.0", "sha256": "f8dcc9c7d52a811697d2151c701e0d08956f92b0e24136cf4cf27b57a6a0d9bf", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0 OR LGPL-2.1-or-later" ] }, { "name": "rand", "version": "0.8.8", "purl": "pkg:cargo/rand@0.8.8", "sha256": "e058c7de0b26af77780c769414d6257830bb240f3c38477dbc2c16e5f54d6d4c", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "rand_chacha", "version": "0.3.1", "purl": "pkg:cargo/rand_chacha@0.3.1", "sha256": "e6c10a63a0fa32252be49d21e7709d4d4baf8d231c2dbce1eaa8141b9b127d88", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "rand_core", "version": "0.6.4", "purl": "pkg:cargo/rand_core@0.6.4", "sha256": "ec0be4795e2f6a28069bec0b5ff3e2ac9bafc99e6a9a7dc3547996c5c816922c", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "rustc_version", "version": "0.4.1", "purl": "pkg:cargo/rustc_version@0.4.1", "sha256": "cfcb3a22ef46e85b45de6ee7e79d063319ebb6594faafcf1c225ea92ab6e9b92", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "rustix", "version": "1.1.5", "purl": "pkg:cargo/rustix@1.1.5", "sha256": "891efababe418670775f199f0d233d84843c227a0949a883ce15b37c78d6629d", "scope": "runtime", "licenses": [ "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT" ] }, { "name": "semver", "version": "1.0.28", "purl": "pkg:cargo/semver@1.0.28", "sha256": "8a7852d02fc848982e0c167ef163aaff9cd91dc640ba85e263cb1ce46fae51cd", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "serde", "version": "1.0.229", "purl": "pkg:cargo/serde@1.0.229", "sha256": "4148590afebada386688f18773da617792bf2ef03ffc1e4cbd2b1d45b023e0ba", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "serde_core", "version": "1.0.229", "purl": "pkg:cargo/serde_core@1.0.229", "sha256": "67dca2c9c51e58a4791a4b1ed58308b39c64224d349a935ab5039aa360942a48", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "serde_derive", "version": "1.0.229", "purl": "pkg:cargo/serde_derive@1.0.229", "sha256": "e7a5d71263a5a7d47b41f6b3f06ba276f10cc18b0931f1799f710578e2309348", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "serde_json", "version": "1.0.154", "purl": "pkg:cargo/serde_json@1.0.154", "sha256": "e7e9cc8b1b85264074fbcc02a88680c4096b1e47df8f739dceb03bf482f04bd6", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "sha2", "version": "0.10.9", "purl": "pkg:cargo/sha2@0.10.9", "sha256": "a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "signature", "version": "2.2.0", "purl": "pkg:cargo/signature@2.2.0", "sha256": "77549399552de45a898a580c1b41d445bf730df867cc44e6c0233bbc4b8329de", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "smallvec", "version": "1.6.0", "purl": "pkg:cargo/smallvec@1.6.0", "sha256": "1a55ca5f3b68e41c979bf8c46a6f1da892ca4db8f94023ce0bd32407573b1ac0", "scope": "runtime", "licenses": [ "MIT/Apache-2.0" ] }, { "name": "spki", "version": "0.7.3", "purl": "pkg:cargo/spki@0.7.3", "sha256": "d91ed6c858b01f942cd56b37a94b3e0a1798290327d1236e4d9cf4eaca44d29d", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "strsim", "version": "0.11.1", "purl": "pkg:cargo/strsim@0.11.1", "sha256": "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f", "scope": "runtime", "licenses": [ "MIT" ] }, { "name": "subtle", "version": "2.6.1", "purl": "pkg:cargo/subtle@2.6.1", "sha256": "13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292", "scope": "runtime", "licenses": [ "BSD-3-Clause" ] }, { "name": "syn", "version": "2.0.119", "purl": "pkg:cargo/syn@2.0.119", "sha256": "872831b642d1a07999a962a351ed35b955ea2cfc8f3862091e2a240a84f17297", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "syn", "version": "3.0.9", "purl": "pkg:cargo/syn@3.0.9", "sha256": "d78c8dee4c7bf0e14673097256fed6142ce9d3b85a408189d07482442145823b", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "tempfile", "version": "3.27.0", "purl": "pkg:cargo/tempfile@3.27.0", "sha256": "32497e9a4c7b38532efcdebeef879707aa9f794296a4f0244f6f69e9bc8574bd", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "typenum", "version": "1.20.1", "purl": "pkg:cargo/typenum@1.20.1", "sha256": "b6f5e870be6c3b371b77fe0ee0bafb859fa4964b4404c27de1d380043c4dda20", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "unicode-ident", "version": "1.0.27", "purl": "pkg:cargo/unicode-ident@1.0.27", "sha256": "a2c754d6c33795a1c324727428e5a7dedb5b06195f9890bdbcba760d3e246563", "scope": "runtime", "licenses": [ "(MIT OR Apache-2.0) AND Unicode-3.0" ] }, { "name": "utf8parse", "version": "0.2.2", "purl": "pkg:cargo/utf8parse@0.2.2", "sha256": "06abde3611657adf66d383f00b093d7faecc7fa57071cce2578660c9f1010821", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "version_check", "version": "0.9.5", "purl": "pkg:cargo/version_check@0.9.5", "sha256": "0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a", "scope": "runtime", "licenses": [ "MIT/Apache-2.0" ] }, { "name": "wasi", "version": "0.11.1+wasi-snapshot-preview1", "purl": "pkg:cargo/wasi@0.11.1+wasi-snapshot-preview1", "sha256": "ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b", "scope": "runtime", "licenses": [ "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT" ] }, { "name": "windows-link", "version": "0.2.1", "purl": "pkg:cargo/windows-link@0.2.1", "sha256": "f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "windows-sys", "version": "0.61.2", "purl": "pkg:cargo/windows-sys@0.61.2", "sha256": "ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "zerocopy", "version": "0.8.63", "purl": "pkg:cargo/zerocopy@0.8.63", "sha256": "e5fe1f8f1b06191a00962174c61aa5005e0bb391a6d80d07e24d115c01a92ed8", "scope": "runtime", "licenses": [ "BSD-2-Clause OR Apache-2.0 OR MIT" ] }, { "name": "zerocopy-derive", "version": "0.8.63", "purl": "pkg:cargo/zerocopy-derive@0.8.63", "sha256": "863ad3ac83293fb4d740aedbfdc9240dd8d1a50c1099acd76ce80ce7c7230c7f", "scope": "runtime", "licenses": [ "BSD-2-Clause OR Apache-2.0 OR MIT" ] }, { "name": "zeroize", "version": "1.9.1", "purl": "pkg:cargo/zeroize@1.9.1", "sha256": "e13084392c5e4bc371903e2935a5eaeed24905a7511356b883835e18a78f6879", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "zmij", "version": "1.0.23", "purl": "pkg:cargo/zmij@1.0.23", "sha256": "29666d0abbfad1e3dc4dcf6144730dd3a3ab225bbbdac83319345b1b44ccfc1b", "scope": "runtime", "licenses": [ "MIT" ] } ] } } }, { "attempt_no": 7, "verdict": "passed", "evidence_sha256": "d100b31a6a216c922204527fbf4031ff672999d612504c82d648992a3d175473", "env_sha256": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "wall_seconds": 29.36425496, "result": { "job_id": "520d2155-f6c4-43c6-953c-1829b6dd5cc3", "verdict": "passed", "criteria": [ { "id": "build", "required": true, "passed": true, "commands": [ { "argv": [ "cargo", "build", "--workspace", "--release" ], "exit_code": 0, "timed_out": false, "duration_seconds": 18.780679283, "tail": " Compiling proc-macro2 v1.0.107\n Compiling quote v1.0.47\n Compiling unicode-ident v1.0.27\n Compiling version_check v0.9.5\n Compiling libc v0.2.191\n Compiling cfg-if v1.0.5\n Compiling typenum v1.20.1\n Compiling semver v1.0.28\n Compiling serde_core v1.0.229\n Compiling zerocopy v0.8.63\n Compiling cpufeatures v0.2.17\n Compiling utf8parse v0.2.2\n Compiling zmij v1.0.23\n Compiling is_terminal_polyfill v1.70.2\n Compiling serde v1.0.229\n Compiling serde_json v1.0.154\n Compiling subtle v2.6.1\n Compiling colorchoice v1.0.5\n Compiling anstyle-query v1.1.5\n Compiling anstyle v1.0.14\n Compiling signature v2.2.0\n Compiling zeroize v1.9.1\n Compiling clap_lex v1.1.1\n Compiling anstyle-parse v1.0.0\n Compiling itoa v1.0.18\n Compiling memchr v2.8.3\n Compiling heck v0.5.0\n Compiling strsim v0.11.1\n Compiling ed25519 v2.2.3\n Compiling smallvec v1.6.0\n Compiling hex v0.4.3\n Compiling anstream v1.0.0\n Compiling rustc_version v0.4.1\n Compiling generic-array v0.14.7\n Compiling clap_builder v4.6.7\n Compiling curve25519-dalek v4.1.3\n Compiling syn v3.0.9\n Compiling syn v2.0.119\n Compiling block-buffer v0.10.4\n Compiling crypto-common v0.1.7\n Compiling digest v0.10.7\n Compiling getrandom v0.2.17\n Compiling sha2 v0.10.9\n Compiling rand_core v0.6.4\n Compiling curve25519-dalek-derive v0.1.1\n Compiling serde_derive v1.0.229\n Compiling clap_derive v4.6.7\n Compiling ppv-lite86 v0.2.21\n Compiling ed25519-dalek v2.2.0\n Compiling rand_chacha v0.3.1\n Compiling clap v4.6.7\n Compiling rand v0.8.8\n Compiling falsegreen-ledger-core v0.1.0 (/var/lib/falsegreen/work/520d2155-f6c4-43c6-953c-1829b6dd5cc3/run/crates/falsegreen-ledger-core)\n Compiling falsegreen-ledger v0.1.0 (/var/lib/falsegreen/work/520d2155-f6c4-43c6-953c-1829b6dd5cc3/run/crates/falsegreen-ledger)\n Finished `release` profile [optimized] target(s) in 18.74s\n" } ] }, { "id": "tests", "required": true, "passed": true, "commands": [ { "argv": [ "cargo", "test", "--workspace" ], "exit_code": 0, "timed_out": false, "duration_seconds": 6.349002921, "tail": "\nrunning 0 tests\n\ntest result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s\n\n\nrunning 10 tests\ntest the_cli_help_lists_every_command ... ok\ntest a_corrupt_shard_exits_corrupt ... ok\ntest a_policy_violation_exits_policy ... ok\ntest the_export_import_roundtrip_is_hash_stable ... ok\ntest the_full_lifecycle_verifies_clean ... ok\ntest a_tampered_cross_shard_link_is_detected ... ok\ntest a_tampered_event_field_is_detected ... ok\ntest a_tampered_prev_hash_is_detected ... ok\ntest a_tampered_seal_signature_is_detected ... ok\ntest compaction_keeps_the_ledger_verifiable ... ok\n\ntest result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.22s\n\n\nrunning 41 tests\ntest chain::tests::genesis_record_is_deterministic ... ok\ntest chain::tests::sequence_gap_fails_link_check ... ok\ntest chain::tests::tampered_record_fails_hash_check ... ok\ntest chain::tests::prev_hash_is_committed ... ok\ntest chain::tests::hash_changes_when_any_event_field_changes ... ok\ntest chain::tests::unknown_fields_rejected_in_record ... ok\ntest event::tests::canonical_is_sorted_and_stable ... ok\ntest event::tests::context_null_is_canonicalized_as_null_and_rejected ... ok\ntest event::tests::optionals_omit_none_in_canonical_form ... ok\ntest event::tests::canonical_round_trips_through_json_with_shuffled_keys ... ok\ntest event::tests::validation_rejects_bad_timestamp ... ok\ntest event::tests::unknown_fields_are_rejected ... ok\ntest event::tests::validation_rejects_empty_required_fields ... ok\ntest integrity::tests::a_lone_leaf_is_its_own_root_and_odd_leaves_pair_with_themselves ... ok\ntest integrity::tests::merkle_root_rejects_empty_and_non_hex ... ok\ntest integrity::tests::malformed_keys_and_signatures_are_rejected ... ok\ntest policy::tests::deny_rule_fires_on_match ... ok\ntest policy::tests::require_outcome_enforces_the_decision ... ok\ntest policy::tests::deny_rule_fires_only_on_a_match ... ok\ntest policy::tests::an_event_can_violate_several_rules ... ok\ntest policy::tests::validation_rejects_malformed_policies ... ok\ntest integrity::tests::the_trusted_key_must_match_the_embedded_key ... ok\ntest integrity::tests::merkle_root_is_deterministic_and_order_sensitive ... ok\ntest store::tests::empty_append_is_a_noop ... ok\ntest store::tests::invalid_event_rejected ... ok\ntest compact::tests::compaction_refuses_unsealed_empty_and_already_compacted ... ok\ntest store::tests::seal_count_mismatch_rejected ... ok\ntest store::tests::init_and_append_continues_from_genesis ... ok\ntest verify::tests::the_report_is_canonical_json ... ok\ntest store::tests::corrupt_line_is_a_parse_error ... ok\ntest verify::tests::a_sequence_gap_is_caught ... ok\ntest store::tests::append_after_seal_starts_new_shard_linked_to_merkle_root ... ok\ntest verify::tests::a_bad_seal_signature_is_caught ... ok\ntest verify::tests::a_tampered_record_hash_cascades_downstream ... ok\ntest verify::tests::a_tampered_event_is_caught ... ok\ntest integrity::tests::sign_and_verify_roundtrip ... ok\ntest verify::tests::a_clean_ledger_verifies ... ok\ntest verify::tests::policy_violations_land_in_the_report ... ok\ntest compact::tests::the_chain_continues_from_the_original_root_after_compaction ... ok\ntest compact::tests::the_compacted_shard_verifies_and_reports_the_source_root ... ok\ntest integrity::tests::a_tampered_seal_field_fails_verification ... ok\n\ntest result: ok. 41 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s\n\n\nrunning 0 tests\n\ntest result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s\n\n Compiling proc-macro2 v1.0.107\n Compiling unicode-ident v1.0.27\n Compiling quote v1.0.47\n Compiling libc v0.2.191\n Compiling version_check v0.9.5\n Compiling cfg-if v1.0.5\n Compiling typenum v1.20.1\n Compiling semver v1.0.28\n Compiling serde_core v1.0.229\n Compiling zerocopy v0.8.63\n Compiling zmij v1.0.23\n Compiling cpufeatures v0.2.17\n Compiling subtle v2.6.1\n Compiling serde_json v1.0.154\n Compiling serde v1.0.229\n Compiling signature v2.2.0\n Compiling zeroize v1.9.1\n Compiling rustix v1.1.5\n Compiling itoa v1.0.18\n Compiling memchr v2.8.3\n Compiling utf8parse v0.2.2\n Compiling getrandom v0.4.3\n Compiling smallvec v1.6.0\n Compiling bitflags v2.13.2\n Compiling ed25519 v2.2.3\n Compiling anstyle-parse v1.0.0\n Compiling linux-raw-sys v0.12.1\n Compiling hex v0.4.3\n Compiling anstyle-query v1.1.5\n Compiling rustc_version v0.4.1\n Compiling anstyle v1.0.14\n Compiling is_terminal_polyfill v1.70.2\n Compiling colorchoice v1.0.5\n Compiling generic-array v0.14.7\n Compiling once_cell v1.21.4\n Compiling heck v0.5.0\n Compiling strsim v0.11.1\n Compiling clap_lex v1.1.1\n Compiling fastrand v2.5.0\n Compiling anstream v1.0.0\n Compiling curve25519-dalek v4.1.3\n Compiling clap_builder v4.6.7\n Compiling syn v3.0.9\n Compiling syn v2.0.119\n Compiling block-buffer v0.10.4\n Compiling crypto-common v0.1.7\n Compiling digest v0.10.7\n Compiling sha2 v0.10.9\n Compiling getrandom v0.2.17\n Compiling rand_core v0.6.4\n Compiling tempfile v3.27.0\n Compiling curve25519-dalek-derive v0.1.1\n Compiling serde_derive v1.0.229\n Compiling clap_derive v4.6.7\n Compiling ppv-lite86 v0.2.21\n Compiling rand_chacha v0.3.1\n Compiling rand v0.8.8\n Compiling ed25519-dalek v2.2.0\n Compiling clap v4.6.7\n Compiling falsegreen-ledger-core v0.1.0 (/var/lib/falsegreen/work/520d2155-f6c4-43c6-953c-1829b6dd5cc3/run/crates/falsegreen-ledger-core)\n Compiling falsegreen-ledger v0.1.0 (/var/lib/falsegreen/work/520d2155-f6c4-43c6-953c-1829b6dd5cc3/run/crates/falsegreen-ledger)\n Finished `test` profile [unoptimized + debuginfo] target(s) in 5.96s\n Running unittests src/main.rs (target/debug/deps/falsegreen_ledger-ab76082b4462b0b1)\n Running tests/integration.rs (target/debug/deps/integration-22dc6beef3e29bb7)\n Running unittests src/lib.rs (target/debug/deps/falsegreen_ledger_core-d00132f4be88bc4a)\n Doc-tests falsegreen_ledger_core\n" } ] }, { "id": "lint", "required": false, "passed": true, "commands": [ { "argv": [ "cargo", "clippy", "--workspace", "--all-targets", "--", "-D", "warnings" ], "exit_code": 0, "timed_out": false, "duration_seconds": 3.954270263, "tail": " Checking cfg-if v1.0.5\n Checking typenum v1.20.1\n Checking cpufeatures v0.2.17\n Checking subtle v2.6.1\n Checking signature v2.2.0\n Checking utf8parse v0.2.2\n Checking zeroize v1.9.1\n Checking itoa v1.0.18\n Checking anstyle-query v1.1.5\n Checking anstyle v1.0.14\n Checking memchr v2.8.3\n Checking libc v0.2.191\n Checking zerocopy v0.8.63\n Checking serde_core v1.0.229\n Checking zmij v1.0.23\n Checking is_terminal_polyfill v1.70.2\n Checking colorchoice v1.0.5\n Checking bitflags v2.13.2\n Checking smallvec v1.6.0\n Checking hex v0.4.3\n Checking linux-raw-sys v0.12.1\n Checking strsim v0.11.1\n Checking ed25519 v2.2.3\n Checking anstyle-parse v1.0.0\n Checking clap_lex v1.1.1\n Checking once_cell v1.21.4\n Checking fastrand v2.5.0\n Checking anstream v1.0.0\n Checking clap_builder v4.6.7\n Checking rustix v1.1.5\n Checking generic-array v0.14.7\n Checking getrandom v0.2.17\n Checking getrandom v0.4.3\n Checking rand_core v0.6.4\n Checking block-buffer v0.10.4\n Checking crypto-common v0.1.7\n Checking digest v0.10.7\n Checking curve25519-dalek v4.1.3\n Checking sha2 v0.10.9\n Checking clap v4.6.7\n Checking tempfile v3.27.0\n Checking serde_json v1.0.154\n Checking serde v1.0.229\n Checking ed25519-dalek v2.2.0\n Checking falsegreen-ledger-core v0.1.0 (/var/lib/falsegreen/work/520d2155-f6c4-43c6-953c-1829b6dd5cc3/run/crates/falsegreen-ledger-core)\n Checking ppv-lite86 v0.2.21\n Checking rand_chacha v0.3.1\n Checking rand v0.8.8\n Checking falsegreen-ledger v0.1.0 (/var/lib/falsegreen/work/520d2155-f6c4-43c6-953c-1829b6dd5cc3/run/crates/falsegreen-ledger)\n Finished `dev` profile [unoptimized + debuginfo] target(s) in 3.89s\n" }, { "argv": [ "cargo", "fmt", "--all", "--check" ], "exit_code": 0, "timed_out": false, "duration_seconds": 0.109026083, "tail": "" } ] } ], "wall_seconds": 29.36425496, "error": null, "env_sha256": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "environment": { "schema": 1, "eco": "rust", "toolchain": "rustc 1.99.0 (rustc)", "toolchain_version": "1.99.0", "fingerprint": "cb72048928286df9d194d6d7356350b373cefcc81d7ee1899729b6ebe14c8817", "artifacts": [ { "name": "anstream", "version": "1.0.0", "sha256": "824a212faf96e9acacdbd09febd34438f8f711fb84e09a8916013cd7815ca28d" }, { "name": "anstyle", "version": "1.0.14", "sha256": "940b3a0ca603d1eade50a4846a2afffd5ef57a9feac2c0e2ec2e14f9ead76000" }, { "name": "anstyle-parse", "version": "1.0.0", "sha256": "52ce7f38b242319f7cabaa6813055467063ecdc9d355bbb4ce0c68908cd8130e" }, { "name": "anstyle-query", "version": "1.1.5", "sha256": "40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc" }, { "name": "anstyle-wincon", "version": "3.0.11", "sha256": "291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d" }, { "name": "base64ct", "version": "1.8.3", "sha256": "2af50177e190e07a26ab74f8b1efbfe2ef87da2116221318cb1c2e82baf7de06" }, { "name": "bitflags", "version": "2.13.2", "sha256": "3ded4057c258ba199e2d26386d3af3780957ecaee6c4ef4041c6b4b8b97c0b06" }, { "name": "block-buffer", "version": "0.10.4", "sha256": "3078c7629b62d3f0439517fa394996acacc5cbc91c5a20d8c658e77abd503a71" }, { "name": "cfg-if", "version": "1.0.5", "sha256": "4e7648175b45a9a48536d676f68d918270699102aa8dab5496df06904c914600" }, { "name": "clap", "version": "4.6.7", "sha256": "aa8876b300ab35ba921adea3dfd70157a46249b33f95c9084ae5709785478946" }, { "name": "clap_builder", "version": "4.6.7", "sha256": "ec0797fb7aeb1406c84efac526901f7ec3ead2124f946b494e72879d4b54704d" }, { "name": "clap_derive", "version": "4.6.7", "sha256": "f9c751b79415d4e559e3d1fcf128e09e720eb673a06d26cf6f392d37d75b66e0" }, { "name": "clap_lex", "version": "1.1.1", "sha256": "1c133bc6a41be0d194c306b5506d15e6feeea7b1d6604bd3f8310dfb2ca96486" }, { "name": "colorchoice", "version": "1.0.5", "sha256": "1d07550c9036bf2ae0c684c4297d503f838287c83c53686d05370d0e139ae570" }, { "name": "const-oid", "version": "0.9.6", "sha256": "c2459377285ad874054d797f3ccebf984978aa39129f6eafde5cdc8315b612f8" }, { "name": "cpufeatures", "version": "0.2.17", "sha256": "59ed5838eebb26a2bb2e58f6d5b5316989ae9d08bab10e0e6d103e656d1b0280" }, { "name": "crypto-common", "version": "0.1.7", "sha256": "78c8292055d1c1df0cce5d180393dc8cce0abec0a7102adb6c7b1eef6016d60a" }, { "name": "curve25519-dalek", "version": "4.1.3", "sha256": "97fb8b7c4503de7d6ae7b42ab72a5a59857b4c937ec27a3d4539dba95b5ab2be" }, { "name": "curve25519-dalek-derive", "version": "0.1.1", "sha256": "f46882e17999c6cc590af592290432be3bce0428cb0d5f8b6715e4dc7b383eb3" }, { "name": "der", "version": "0.7.10", "sha256": "e7c1832837b905bbfb5101e07cc24c8deddf52f93225eee6ead5f4d63d53ddcb" }, { "name": "digest", "version": "0.10.7", "sha256": "9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292" }, { "name": "ed25519", "version": "2.2.3", "sha256": "115531babc129696a58c64a4fef0a8bf9e9698629fb97e9e40767d235cfbcd53" }, { "name": "ed25519-dalek", "version": "2.2.0", "sha256": "70e796c081cee67dc755e1a36a0a172b897fab85fc3f6bc48307991f64e4eca9" }, { "name": "errno", "version": "0.3.14", "sha256": "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb" }, { "name": "fastrand", "version": "2.5.0", "sha256": "da7c62ceae207dd37ea5b845da6a0696c799f85e97da1ab5b7910be3c1c80223" }, { "name": "fiat-crypto", "version": "0.2.9", "sha256": "28dea519a9695b9977216879a3ebfddf92f1c08c05d984f8996aecd6ecdc811d" }, { "name": "generic-array", "version": "0.14.7", "sha256": "85649ca51fd72272d7821adaf274ad91c288277713d9c18820d8499a7ff69e9a" }, { "name": "getrandom", "version": "0.2.17", "sha256": "ff2abc00be7fca6ebc474524697ae276ad847ad0a6b3faa4bcb027e9a4614ad0" }, { "name": "getrandom", "version": "0.4.3", "sha256": "300e883d756b2e4ec94e02791f39b04b522276138852cfc41d9fb7e904106099" }, { "name": "heck", "version": "0.5.0", "sha256": "2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea" }, { "name": "hex", "version": "0.4.3", "sha256": "7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70" }, { "name": "is_terminal_polyfill", "version": "1.70.2", "sha256": "a6cb138bb79a146c1bd460005623e142ef0181e3d0219cb493e02f7d08a35695" }, { "name": "itoa", "version": "1.0.18", "sha256": "8f42a60cbdf9a97f5d2305f08a87dc4e09308d1276d28c869c684d7777685682" }, { "name": "libc", "version": "0.2.191", "sha256": "65cd87c9a6d60536580b316ad985726104730a5151c99845f2490428ef91240a" }, { "name": "linux-raw-sys", "version": "0.12.1", "sha256": "32a66949e030da00e8c7d4434b251670a91556f4144941d37452769c25d58a53" }, { "name": "memchr", "version": "2.8.3", "sha256": "cf8baf1c55e62ffcace7a9f06f4bd9cd3f0c4beb022d3b367256b91b87513d98" }, { "name": "once_cell", "version": "1.21.4", "sha256": "9f7c3e4beb33f85d45ae3e3a1792185706c8e16d043238c593331cc7cd313b50" }, { "name": "once_cell_polyfill", "version": "1.70.2", "sha256": "384b8ab6d37215f3c5301a95a4accb5d64aa607f1fcb26a11b5303878451b4fe" }, { "name": "pkcs8", "version": "0.10.2", "sha256": "f950b2377845cebe5cf8b5165cb3cc1a5e0fa5cfa3e1f7f55707d8fd82e0a7b7" }, { "name": "ppv-lite86", "version": "0.2.21", "sha256": "85eae3c4ed2f50dcfe72643da4befc30deadb458a9b590d720cde2f2b1e97da9" }, { "name": "proc-macro2", "version": "1.0.107", "sha256": "985e7ec9bb745e6ce6535b544d84d6cd6f7ad8bd711c398938ae983b91a766d9" }, { "name": "quote", "version": "1.0.47", "sha256": "1fbf4db142a473a8d80c26bbf18454ed458bf8d26c8219c331daecfdbd079001" }, { "name": "r-efi", "version": "6.0.0", "sha256": "f8dcc9c7d52a811697d2151c701e0d08956f92b0e24136cf4cf27b57a6a0d9bf" }, { "name": "rand", "version": "0.8.8", "sha256": "e058c7de0b26af77780c769414d6257830bb240f3c38477dbc2c16e5f54d6d4c" }, { "name": "rand_chacha", "version": "0.3.1", "sha256": "e6c10a63a0fa32252be49d21e7709d4d4baf8d231c2dbce1eaa8141b9b127d88" }, { "name": "rand_core", "version": "0.6.4", "sha256": "ec0be4795e2f6a28069bec0b5ff3e2ac9bafc99e6a9a7dc3547996c5c816922c" }, { "name": "rustc_version", "version": "0.4.1", "sha256": "cfcb3a22ef46e85b45de6ee7e79d063319ebb6594faafcf1c225ea92ab6e9b92" }, { "name": "rustix", "version": "1.1.5", "sha256": "891efababe418670775f199f0d233d84843c227a0949a883ce15b37c78d6629d" }, { "name": "semver", "version": "1.0.28", "sha256": "8a7852d02fc848982e0c167ef163aaff9cd91dc640ba85e263cb1ce46fae51cd" }, { "name": "serde", "version": "1.0.229", "sha256": "4148590afebada386688f18773da617792bf2ef03ffc1e4cbd2b1d45b023e0ba" }, { "name": "serde_core", "version": "1.0.229", "sha256": "67dca2c9c51e58a4791a4b1ed58308b39c64224d349a935ab5039aa360942a48" }, { "name": "serde_derive", "version": "1.0.229", "sha256": "e7a5d71263a5a7d47b41f6b3f06ba276f10cc18b0931f1799f710578e2309348" }, { "name": "serde_json", "version": "1.0.154", "sha256": "e7e9cc8b1b85264074fbcc02a88680c4096b1e47df8f739dceb03bf482f04bd6" }, { "name": "sha2", "version": "0.10.9", "sha256": "a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283" }, { "name": "signature", "version": "2.2.0", "sha256": "77549399552de45a898a580c1b41d445bf730df867cc44e6c0233bbc4b8329de" }, { "name": "smallvec", "version": "1.6.0", "sha256": "1a55ca5f3b68e41c979bf8c46a6f1da892ca4db8f94023ce0bd32407573b1ac0" }, { "name": "spki", "version": "0.7.3", "sha256": "d91ed6c858b01f942cd56b37a94b3e0a1798290327d1236e4d9cf4eaca44d29d" }, { "name": "strsim", "version": "0.11.1", "sha256": "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f" }, { "name": "subtle", "version": "2.6.1", "sha256": "13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292" }, { "name": "syn", "version": "2.0.119", "sha256": "872831b642d1a07999a962a351ed35b955ea2cfc8f3862091e2a240a84f17297" }, { "name": "syn", "version": "3.0.9", "sha256": "d78c8dee4c7bf0e14673097256fed6142ce9d3b85a408189d07482442145823b" }, { "name": "tempfile", "version": "3.27.0", "sha256": "32497e9a4c7b38532efcdebeef879707aa9f794296a4f0244f6f69e9bc8574bd" }, { "name": "typenum", "version": "1.20.1", "sha256": "b6f5e870be6c3b371b77fe0ee0bafb859fa4964b4404c27de1d380043c4dda20" }, { "name": "unicode-ident", "version": "1.0.27", "sha256": "a2c754d6c33795a1c324727428e5a7dedb5b06195f9890bdbcba760d3e246563" }, { "name": "utf8parse", "version": "0.2.2", "sha256": "06abde3611657adf66d383f00b093d7faecc7fa57071cce2578660c9f1010821" }, { "name": "version_check", "version": "0.9.5", "sha256": "0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a" }, { "name": "wasi", "version": "0.11.1+wasi-snapshot-preview1", "sha256": "ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b" }, { "name": "windows-link", "version": "0.2.1", "sha256": "f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5" }, { "name": "windows-sys", "version": "0.61.2", "sha256": "ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc" }, { "name": "zerocopy", "version": "0.8.63", "sha256": "e5fe1f8f1b06191a00962174c61aa5005e0bb391a6d80d07e24d115c01a92ed8" }, { "name": "zerocopy-derive", "version": "0.8.63", "sha256": "863ad3ac83293fb4d740aedbfdc9240dd8d1a50c1099acd76ce80ce7c7230c7f" }, { "name": "zeroize", "version": "1.9.1", "sha256": "e13084392c5e4bc371903e2935a5eaeed24905a7511356b883835e18a78f6879" }, { "name": "zmij", "version": "1.0.23", "sha256": "29666d0abbfad1e3dc4dcf6144730dd3a3ab225bbbdac83319345b1b44ccfc1b" } ] }, "witness_invocations": [ { "tool": "osv-scanner", "version": "2.7.0", "binary_digest": "160c6253e2922e9e0a6a9771c5c4c40a4b3c6090b34a3cdd5e80c96cc2e4218b", "config_digest": "0c3d6fef8ea59e1de5610e13ccb1035a7232318288aaed517ee2feec9402455a", "invocation_digest": "a047c4a358b9c3a2c1e5ede3b32650bd79e95455b6d64deb09329794ad43f932", "input_subject_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "e4c0fda20522604529803debe233864ee89f505f6cce118fcdee9011e7558643", "normalized_evidence_digest": "a01c9fbe2e0f89ba51e98a9f9adb3e2221181b02f05426888a8e8e1d4c6f99a0", "limitations": [ "osv-scanner checks registry-based ecosystems (crates.io in 0.6.0); git-sourced dependencies (lean [[require]], gpr) have no advisory database — Insufficient Evidence for them, never a silent pass" ], "evidence_class": "dependency_vulnerability", "observed_at": "2026-10-21T18:01:12.276776289+00:00", "findings": [ { "rule_namespace": "osv", "rule_id": "RUSTSEC-2021-0003", "severity": "high", "component": "pkg:crates.io/smallvec@1.6.0", "fingerprint": "33785582b0bffd15e2724184577c08f01121749519544d60019637759fc0278a", "state": "open" }, { "rule_namespace": "osv", "rule_id": "GHSA-43w2-9j62-hq99", "severity": "high", "component": "pkg:crates.io/smallvec@1.6.0", "fingerprint": "ba50c1802e51ced38a54ef5d84d292c2efbb3b72e0751e638b8539d27f3d1ebb", "state": "open" } ] }, { "tool": "semgrep", "version": "1.181.0", "binary_digest": "c29de7c43986faa3c3ca5a8acf1d115811e15ab305ba7657b79e775d40e16391", "config_digest": "206116bd213f0786f8378755ad48adbccfe30376afe8fe2ecdd24eb44161d009", "invocation_digest": "8b463d1c7e0e24912eaca187664be878873a6b1ab113eb374c68b4cc561fff34", "input_subject_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "80c185ac8e17503197e8195c202d98db3f0cd3865a37ba7065f37bdbf2a58d54", "normalized_evidence_digest": "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "limitations": [], "evidence_class": "static_analysis", "observed_at": "2026-10-21T18:01:12.276776289+00:00", "findings": [] }, { "tool": "gitleaks", "version": "8.30.1", "binary_digest": "88f91962aa2f93ac6ab281d553b9e125f5197bbbce38f9f2437f7299c32e5509", "config_digest": "e1f77c307b36a43d3707ab5fed4a4007f6d63d9302bcf0d5509cd3e52e32ed6f", "invocation_digest": "c5e131c50d8d0e88fd6e1b54056a35838f6fb3e10f894c64c4ad60ff638715dd", "input_subject_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "37517e5f3dc66819f61f5a7bb8ace1921282415f10551d2defa5c3eb0985b570", "normalized_evidence_digest": "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "limitations": [], "evidence_class": "secret", "observed_at": "2026-10-21T18:01:12.276776289+00:00", "findings": [] }, { "tool": "syft", "version": "1.54.1", "binary_digest": "dbf75864e7a7ff9e1fbf00552c31483f693188632a9f68f343cd7653dac513d6", "config_digest": "b6f045a568b2dd1dcd1a1723f4eb0b8f5863215301ced35067a5f7a53c07c7e6", "invocation_digest": "c6a55d436349f372334a6d45337472ffa0c394e59bd33692f874de57ea530091", "input_subject_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "b0e317ced4463683d9517a04a19a26ebbfc921360f8ad0410768a93712d94eb2", "normalized_evidence_digest": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "limitations": [], "evidence_class": "supply_chain", "observed_at": "2026-10-21T18:01:12.276776289+00:00", "findings": [ { "rule_namespace": "syft", "rule_id": "anstream@1.0.0", "component": "pkg:cargo/anstream@1.0.0", "fingerprint": "1001468a98bf8f886f889f3b76dee0717eea1611dbab5c3ec415bc0a9d3f9853", "state": "open" }, { "rule_namespace": "syft", "rule_id": "anstyle@1.0.14", "component": "pkg:cargo/anstyle@1.0.14", "fingerprint": "b4423ac5d91607f895d2e4f6b3b58b3b98e3220e95d5a560719a38f26e88a9aa", "state": "open" }, { "rule_namespace": "syft", "rule_id": "anstyle-parse@1.0.0", "component": "pkg:cargo/anstyle-parse@1.0.0", "fingerprint": "86b1ca2b439dac8c8ccf11610d2f44a40fa2c28b49c7a4f67fffc5ad7e7a4c34", "state": "open" }, { "rule_namespace": "syft", "rule_id": "anstyle-query@1.1.5", "component": "pkg:cargo/anstyle-query@1.1.5", "fingerprint": "59e640d2af9d99361184e5dd537b90d2c59bda2eba7000d96ad1688025214430", "state": "open" }, { "rule_namespace": "syft", "rule_id": "anstyle-wincon@3.0.11", "component": "pkg:cargo/anstyle-wincon@3.0.11", "fingerprint": "3b50475de5d0ec3dd61737fa6a9f81887b3ee6ff55d9fd7afecaa6d985cd26e6", "state": "open" }, { "rule_namespace": "syft", "rule_id": "base64ct@1.8.3", "component": "pkg:cargo/base64ct@1.8.3", "fingerprint": "5656f108cca5b4825c10d9ceed24fec9707f89915b6d39bb2c2f79b59f6a1eaf", "state": "open" }, { "rule_namespace": "syft", "rule_id": "bitflags@2.13.2", "component": "pkg:cargo/bitflags@2.13.2", "fingerprint": "2f570cfac9dde16b280d8ce6521d29be556270814081e669ebb29f300aac7e82", "state": "open" }, { "rule_namespace": "syft", "rule_id": "block-buffer@0.10.4", "component": "pkg:cargo/block-buffer@0.10.4", "fingerprint": "2b4e003d5403bd7ccd2ef88c2dcfba20586172a36e9e5feb24203884290f3fb8", "state": "open" }, { "rule_namespace": "syft", "rule_id": "cfg-if@1.0.5", "component": "pkg:cargo/cfg-if@1.0.5", "fingerprint": "40e2ca0f72307e7f2b92a7626063d84ab55fa1db6f40e2fdaea4eb417bb3d9f6", "state": "open" }, { "rule_namespace": "syft", "rule_id": "clap@4.6.7", "component": "pkg:cargo/clap@4.6.7", "fingerprint": "8b5288edc94ee3c1804eb2664bb8a57974ed5bd708efaad6ab63165c19e80dfd", "state": "open" }, { "rule_namespace": "syft", "rule_id": "clap_builder@4.6.7", "component": "pkg:cargo/clap_builder@4.6.7", "fingerprint": "4b4192da7ea8835334cc519c92e9230c5aa48d6e8b5905d5dc735155981a1f5d", "state": "open" }, { "rule_namespace": "syft", "rule_id": "clap_derive@4.6.7", "component": "pkg:cargo/clap_derive@4.6.7", "fingerprint": "4d51f0052690cd07873e9f2360688e746bd74d01be8bce8eb1e09d4b5ee2869f", "state": "open" }, { "rule_namespace": "syft", "rule_id": "clap_lex@1.1.1", "component": "pkg:cargo/clap_lex@1.1.1", "fingerprint": "d5118fb3b03cf55c1b5d2058dc703e5287863abfafc62e948f8bd37c554eed93", "state": "open" }, { "rule_namespace": "syft", "rule_id": "colorchoice@1.0.5", "component": "pkg:cargo/colorchoice@1.0.5", "fingerprint": "333b5e3b16c10da6f952448b19c196e74ca809dd500e5b626c5e94eca9950908", "state": "open" }, { "rule_namespace": "syft", "rule_id": "const-oid@0.9.6", "component": "pkg:cargo/const-oid@0.9.6", "fingerprint": "5541a7190761ecc001f652cbea75f887d34a63857a9d4a833c6c04c4f66c9cc2", "state": "open" }, { "rule_namespace": "syft", "rule_id": "cpufeatures@0.2.17", "component": "pkg:cargo/cpufeatures@0.2.17", "fingerprint": "2c41be5a411d55d53a6e1ecaae69000d6cfafc653329b5a415c3833ca3d938a3", "state": "open" }, { "rule_namespace": "syft", "rule_id": "crypto-common@0.1.7", "component": "pkg:cargo/crypto-common@0.1.7", "fingerprint": "94ebb3d3a04823de45b978f7f2d92b817a60a7eb82d8c7b676a832d72e58684f", "state": "open" }, { "rule_namespace": "syft", "rule_id": "curve25519-dalek@4.1.3", "component": "pkg:cargo/curve25519-dalek@4.1.3", "fingerprint": "fe69847583a09dbb422ed424b8822f6081a5b9a9ea4a5a0659aeeae90a1f3b68", "state": "open" }, { "rule_namespace": "syft", "rule_id": "curve25519-dalek-derive@0.1.1", "component": "pkg:cargo/curve25519-dalek-derive@0.1.1", "fingerprint": "30988a4946cd7b5896513c53b8f46fef2f041b7a32a8444f2fbbbe35504b0d30", "state": "open" }, { "rule_namespace": "syft", "rule_id": "der@0.7.10", "component": "pkg:cargo/der@0.7.10", "fingerprint": "8163a7cb6df166afc2111e82c998716d8b3a803f1869d677792d321ac2c09c7e", "state": "open" }, { "rule_namespace": "syft", "rule_id": "digest@0.10.7", "component": "pkg:cargo/digest@0.10.7", "fingerprint": "f543d9aefa032f0994738474a351c2d2be5ba43859f3a3edd9a65494ee9238b8", "state": "open" }, { "rule_namespace": "syft", "rule_id": "ed25519@2.2.3", "component": "pkg:cargo/ed25519@2.2.3", "fingerprint": "1a02d28487a2543cf9326fab370709729bebc9627626b39581bd1df154e91dbd", "state": "open" }, { "rule_namespace": "syft", "rule_id": "ed25519-dalek@2.2.0", "component": "pkg:cargo/ed25519-dalek@2.2.0", "fingerprint": "5d7bc1f87b8a0a9b4d360efd55b594a08fa0a5fef8d15fcf5ad942263a934c2d", "state": "open" }, { "rule_namespace": "syft", "rule_id": "errno@0.3.14", "component": "pkg:cargo/errno@0.3.14", "fingerprint": "fe0c520b266d11e2ad249f8ded3c90b5f136fb9263021fc61136e8c181a8023f", "state": "open" }, { "rule_namespace": "syft", "rule_id": "falsegreen-ledger@0.1.0", "component": "", "fingerprint": "841d8d48762b69b0eac8a31c3cdc02cd1eacac1caf7d69c291615aecc96b9ba8", "state": "open" }, { "rule_namespace": "syft", "rule_id": "falsegreen-ledger-core@0.1.0", "component": "", "fingerprint": "99c0e29b042978b26ae2896dfffc0866c8638f5604b43b5a33122de2f9811c19", "state": "open" }, { "rule_namespace": "syft", "rule_id": "fastrand@2.5.0", "component": "pkg:cargo/fastrand@2.5.0", "fingerprint": "2b7ba02485a3d76cc19b17317882c1dd65511ed5ad95e9e70a0bb5d7f5dd4043", "state": "open" }, { "rule_namespace": "syft", "rule_id": "fiat-crypto@0.2.9", "component": "pkg:cargo/fiat-crypto@0.2.9", "fingerprint": "de9f033198ba6f74b0c4f8cc0f961ff4d5f3b764d3a1e60f0f68a66fcb26f54f", "state": "open" }, { "rule_namespace": "syft", "rule_id": "generic-array@0.14.7", "component": "pkg:cargo/generic-array@0.14.7", "fingerprint": "375236d1387d03ae58db25418fce92969adbd21eca601a82cd8dc683fe60f20f", "state": "open" }, { "rule_namespace": "syft", "rule_id": "getrandom@0.2.17", "component": "pkg:cargo/getrandom@0.2.17", "fingerprint": "80e36ea36c4959f0d1b4dd76769554760054be60923fa8eae72bc10d83b30b90", "state": "open" }, { "rule_namespace": "syft", "rule_id": "getrandom@0.4.3", "component": "pkg:cargo/getrandom@0.4.3", "fingerprint": "05b5d32e6e201ead770f640d3986020565688d70ca4bf6d323def662c9b10bc0", "state": "open" }, { "rule_namespace": "syft", "rule_id": "heck@0.5.0", "component": "pkg:cargo/heck@0.5.0", "fingerprint": "c5eb23be3fdbc8afafc1cca8b9c5767bab582488149444a86b1d000d74e3c97a", "state": "open" }, { "rule_namespace": "syft", "rule_id": "hex@0.4.3", "component": "pkg:cargo/hex@0.4.3", "fingerprint": "79f94666cd1756f5374c513addc3b9444043d08bb49050dae4998fc934de41af", "state": "open" }, { "rule_namespace": "syft", "rule_id": "is_terminal_polyfill@1.70.2", "component": "pkg:cargo/is_terminal_polyfill@1.70.2", "fingerprint": "b005b2478a3e5a28b543b644c46c0e2049ab156cd1ccd7133ea9f40a5626b62d", "state": "open" }, { "rule_namespace": "syft", "rule_id": "itoa@1.0.18", "component": "pkg:cargo/itoa@1.0.18", "fingerprint": "aec45ddec07a815da2a5c182001bfe6e554ed2a0b89259d327f793511a774c40", "state": "open" }, { "rule_namespace": "syft", "rule_id": "libc@0.2.191", "component": "pkg:cargo/libc@0.2.191", "fingerprint": "b0e83395a6df61531693965b5dc89908e48f1fc30363b236cdebf457b3b8d84a", "state": "open" }, { "rule_namespace": "syft", "rule_id": "linux-raw-sys@0.12.1", "component": "pkg:cargo/linux-raw-sys@0.12.1", "fingerprint": "7516ef772912bc7e53189e7272c2213556425bc370efc1936e07fd2f7141dab0", "state": "open" }, { "rule_namespace": "syft", "rule_id": "memchr@2.8.3", "component": "pkg:cargo/memchr@2.8.3", "fingerprint": "19c7f7c6470891a44bd18bae9b5a2d1d0a9674e609cb6b681b6d78594026b1c0", "state": "open" }, { "rule_namespace": "syft", "rule_id": "once_cell@1.21.4", "component": "pkg:cargo/once_cell@1.21.4", "fingerprint": "5df49b2099b0dc508144dd3ce7f17d8ef89e1ca37347a5a9732cc45bef8a0865", "state": "open" }, { "rule_namespace": "syft", "rule_id": "once_cell_polyfill@1.70.2", "component": "pkg:cargo/once_cell_polyfill@1.70.2", "fingerprint": "67dbadfb6f4218d894e3b81d8d454f1540509b7c38981b00170ce499b12f89cc", "state": "open" }, { "rule_namespace": "syft", "rule_id": "pkcs8@0.10.2", "component": "pkg:cargo/pkcs8@0.10.2", "fingerprint": "c47c76d7946c7de7d9e8ccb0ce88035f70f673c663ff4bc87d7186e2cd59e8fe", "state": "open" }, { "rule_namespace": "syft", "rule_id": "ppv-lite86@0.2.21", "component": "pkg:cargo/ppv-lite86@0.2.21", "fingerprint": "9947e5da4cc28604998b938686ba44e72cd4382ce0330b0b7457439028a32e72", "state": "open" }, { "rule_namespace": "syft", "rule_id": "proc-macro2@1.0.107", "component": "pkg:cargo/proc-macro2@1.0.107", "fingerprint": "8a7eb5f7e790f0c2621a0b8b0602d5e8df183461cc0627f75774260b6b3ade32", "state": "open" }, { "rule_namespace": "syft", "rule_id": "quote@1.0.47", "component": "pkg:cargo/quote@1.0.47", "fingerprint": "ba5b73c1936ffd2ab425cc8480b56e7b5f48125bec80e2b12a1a44baa9c1c558", "state": "open" }, { "rule_namespace": "syft", "rule_id": "r-efi@6.0.0", "component": "pkg:cargo/r-efi@6.0.0", "fingerprint": "122b7ca8782f044bbf34b34a6611015ab063c5941471a1f9edf52859953335ea", "state": "open" }, { "rule_namespace": "syft", "rule_id": "rand@0.8.8", "component": "pkg:cargo/rand@0.8.8", "fingerprint": "d75967c1358b7152e9dec7577066f5049015cdd77c70b9c353ec196342cef83b", "state": "open" }, { "rule_namespace": "syft", "rule_id": "rand_chacha@0.3.1", "component": "pkg:cargo/rand_chacha@0.3.1", "fingerprint": "98b4b52cb9630b79c95cd3ce370098fda6810c9893935c1623818e6c2bc6a950", "state": "open" }, { "rule_namespace": "syft", "rule_id": "rand_core@0.6.4", "component": "pkg:cargo/rand_core@0.6.4", "fingerprint": "881bc35797d5dbc04b02e40860ac237cc76ab1e8561cd4d39d3fc0a1c3155a12", "state": "open" }, { "rule_namespace": "syft", "rule_id": "rustc_version@0.4.1", "component": "pkg:cargo/rustc_version@0.4.1", "fingerprint": "b856fc7dc29ef6489b43403c317b31a5c2f7469df3e78eb38496d906f65a41f9", "state": "open" }, { "rule_namespace": "syft", "rule_id": "rustix@1.1.5", "component": "pkg:cargo/rustix@1.1.5", "fingerprint": "161a149e15f158acea456dd7572470352fcc38e9861cf74a7affcdbebb3be84c", "state": "open" }, { "rule_namespace": "syft", "rule_id": "semver@1.0.28", "component": "pkg:cargo/semver@1.0.28", "fingerprint": "adf8dd8c6eab8cbfba291126118409767783c7721216321d264e71566a86fb64", "state": "open" }, { "rule_namespace": "syft", "rule_id": "serde@1.0.229", "component": "pkg:cargo/serde@1.0.229", "fingerprint": "6d867eaaeef95071a1e043e0f22f4765333205c756611890f0f6ee0f0bf2844a", "state": "open" }, { "rule_namespace": "syft", "rule_id": "serde_core@1.0.229", "component": "pkg:cargo/serde_core@1.0.229", "fingerprint": "e510c18b9a78eaa008df3d1ced75890c6610e5b6802183c55c7bbe66f2b08705", "state": "open" }, { "rule_namespace": "syft", "rule_id": "serde_derive@1.0.229", "component": "pkg:cargo/serde_derive@1.0.229", "fingerprint": "000799b93838d093c6bbd43247666d235ecbfd735b93222d2cd26233f0fb28ec", "state": "open" }, { "rule_namespace": "syft", "rule_id": "serde_json@1.0.154", "component": "pkg:cargo/serde_json@1.0.154", "fingerprint": "349a0dd333a0d2897b42960e7efb1d0830ab09b3e9eeb1e2acdeb5a200f289e1", "state": "open" }, { "rule_namespace": "syft", "rule_id": "sha2@0.10.9", "component": "pkg:cargo/sha2@0.10.9", "fingerprint": "477b1f1b81c82609f675f2c5aeb53cfb9f1191376ff8845a5647e9c6b05388df", "state": "open" }, { "rule_namespace": "syft", "rule_id": "signature@2.2.0", "component": "pkg:cargo/signature@2.2.0", "fingerprint": "7d8fc0ddf33982f4c2b6ca2f3739dc5f209faca02c4d8a01cb67023acf125d9c", "state": "open" }, { "rule_namespace": "syft", "rule_id": "smallvec@1.6.0", "component": "pkg:cargo/smallvec@1.6.0", "fingerprint": "1b292519074e47f7a1b01edc1ec1476b2f282e47ec7640820c0bad1afd635a20", "state": "open" }, { "rule_namespace": "syft", "rule_id": "spki@0.7.3", "component": "pkg:cargo/spki@0.7.3", "fingerprint": "e7593fa9bc039e2db40a3a71927e7b104a79be42d02d04e04b1b373dad5f9354", "state": "open" }, { "rule_namespace": "syft", "rule_id": "strsim@0.11.1", "component": "pkg:cargo/strsim@0.11.1", "fingerprint": "7260c481b09f354b4c8d13996a46735f790af5206fa07ffa86f3d9601768719a", "state": "open" }, { "rule_namespace": "syft", "rule_id": "subtle@2.6.1", "component": "pkg:cargo/subtle@2.6.1", "fingerprint": "abf520278b97397636ae0d0fba9c430b656b0af89b288300d4c9e12cd1bad2a9", "state": "open" }, { "rule_namespace": "syft", "rule_id": "syn@2.0.119", "component": "pkg:cargo/syn@2.0.119", "fingerprint": "80bcee46aef1b69a610a3810a2f7dc3fec1a8cff8a4366bc2369f50b8543a5e0", "state": "open" }, { "rule_namespace": "syft", "rule_id": "syn@3.0.9", "component": "pkg:cargo/syn@3.0.9", "fingerprint": "114cde3e9bfa178c4b502cb01a87d49a704c293fc6d1a07270388d14b152c9c2", "state": "open" }, { "rule_namespace": "syft", "rule_id": "tempfile@3.27.0", "component": "pkg:cargo/tempfile@3.27.0", "fingerprint": "cc64344e2b0f434ddea53beb971184de5fd0a84c6a9739eff5255d69b2d42a3c", "state": "open" }, { "rule_namespace": "syft", "rule_id": "typenum@1.20.1", "component": "pkg:cargo/typenum@1.20.1", "fingerprint": "69fca6104cc42ad018ccf1e723d8e6cc55ad7d890cbeaf9f3073487edb4e9c81", "state": "open" }, { "rule_namespace": "syft", "rule_id": "unicode-ident@1.0.27", "component": "pkg:cargo/unicode-ident@1.0.27", "fingerprint": "c8f069b4043c8b0afcbf7d2f1d9fdb3681c8f8cc75ee03d318b515654ab1e21c", "state": "open" }, { "rule_namespace": "syft", "rule_id": "utf8parse@0.2.2", "component": "pkg:cargo/utf8parse@0.2.2", "fingerprint": "c28ef21ff55492434ef623166a53f268c1c02540b430df3967683388cacd9336", "state": "open" }, { "rule_namespace": "syft", "rule_id": "version_check@0.9.5", "component": "pkg:cargo/version_check@0.9.5", "fingerprint": "a37defdbf8011a14f68d31205b137179a3eec551816dc2a2b861965901eed251", "state": "open" }, { "rule_namespace": "syft", "rule_id": "wasi@0.11.1+wasi-snapshot-preview1", "component": "pkg:cargo/wasi@0.11.1%2Bwasi-snapshot-preview1", "fingerprint": "8224d335948f5ae82312adc7b5040e9331715f1f580a94ac77e55f15af60fb24", "state": "open" }, { "rule_namespace": "syft", "rule_id": "windows-link@0.2.1", "component": "pkg:cargo/windows-link@0.2.1", "fingerprint": "f2e9441ed9c64738dc6bd8be208ecb9b3f0f2eb8ea5ddeb4fa1303339bb340d6", "state": "open" }, { "rule_namespace": "syft", "rule_id": "windows-sys@0.61.2", "component": "pkg:cargo/windows-sys@0.61.2", "fingerprint": "b2713fc2f7bff729a27c0f62ee1be368d8344e0a7237e06edae435bfe00f9353", "state": "open" }, { "rule_namespace": "syft", "rule_id": "zerocopy@0.8.63", "component": "pkg:cargo/zerocopy@0.8.63", "fingerprint": "538de62743d2a698d49ae17957387bceef902f05602838b337eb33ef3a2018ca", "state": "open" }, { "rule_namespace": "syft", "rule_id": "zerocopy-derive@0.8.63", "component": "pkg:cargo/zerocopy-derive@0.8.63", "fingerprint": "c28066f0d74cc875b1313b642f5b65466e41ca5928021fdf354e3a5158e5f887", "state": "open" }, { "rule_namespace": "syft", "rule_id": "zeroize@1.9.1", "component": "pkg:cargo/zeroize@1.9.1", "fingerprint": "a9b132d8d889548f19dbf2f1ed6a078ca10079500e9a4e3e2c23e407a3c4c2bb", "state": "open" }, { "rule_namespace": "syft", "rule_id": "zmij@1.0.23", "component": "pkg:cargo/zmij@1.0.23", "fingerprint": "18a805aded02f77466f8ea530827dac33264f4eea283a1e3793fe895db3d0ad5", "state": "open" } ] }, { "tool": "dependency-manifest", "version": "1", "binary_digest": "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4", "config_digest": "2402cf6f9fd45d6c6d7b9bc10abdba72e36d61e88515a01d2cda19ee8d375b3b", "invocation_digest": "4c7cabee6de971dd4182bcc75fc73df8bf572878ca3b709a1616bd3785b31b51", "input_subject_digest": "de6b2e18c7c9cf41b4b6389af49aac4728bb34db020bfe3fa770ceb6b17f6872", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4", "normalized_evidence_digest": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "limitations": [ "license facts are the job dependency manifest's registry SPDX ids; the workspace's own code and git-sourced dependencies carry no registry license facts" ], "evidence_class": "license", "observed_at": "2026-10-21T18:01:12.276776289+00:00", "findings": [ { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/anstream@1.0.0", "fingerprint": "81c389e920feb226956ea5e7e905e055ef3190e347d2024731cba977530b1c28", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/anstyle@1.0.14", "fingerprint": "72cb9f765ade0582fd1b8d4e3ec30734124e9580702182e52b07ce552ace97b1", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/anstyle-parse@1.0.0", "fingerprint": "03dae4cdd1bc7ba73958bf1c617e4f5aa93a31d30b5efa57cb32af82f5010ef9", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/anstyle-query@1.1.5", "fingerprint": "847b1133ac62af0c80b617aa8a687925f44ff02a38077b59d57f8a3d2c9e7377", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/anstyle-wincon@3.0.11", "fingerprint": "930051eead4685b3c169c214c7e4bf568a6b18c75060c642828af9b1e4a92cb7", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/base64ct@1.8.3", "fingerprint": "c2936ea98513be3acbc17ec843a0b5a87f2ec66b23198a7e457cbfe82501de17", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/bitflags@2.13.2", "fingerprint": "5a267ea0d4b32ca26ee6285110e4831c63bc24aba4b4ef50a6ce820dab9bc9c7", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/block-buffer@0.10.4", "fingerprint": "65f5493f0209c5bb833a448c5a4f8d34ea9cbb19fd226d673fb6378da3d45d81", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/cfg-if@1.0.5", "fingerprint": "9c66873ce2b15cedf8971b5136299c6dbbdbdb00096f984baca5c60e43f20b86", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/clap@4.6.7", "fingerprint": "b6d470dc0b142702b891dd8112eb44dacb7f1e64144fc95e7c4d8188299612c5", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/clap_builder@4.6.7", "fingerprint": "57fd5416fc287aefb50fdd41cdf558dc3aab82e27a8e542cb21cb6641a034fbf", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/clap_derive@4.6.7", "fingerprint": "e4955ec9e34c975255437f60abb69c42ffe6c4faff7bd1b2c2f1f582a1266f6f", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/clap_lex@1.1.1", "fingerprint": "9c1ce04a546342b75e26dcedd88dfd64ed4c42c1e22db5d575ebd9b83bdab96f", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/colorchoice@1.0.5", "fingerprint": "0cd1130d559feb72b1789c9dfc5ca946a042b193f6efe22b205f7179ae628471", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/const-oid@0.9.6", "fingerprint": "dd86b6e6f0675712fca49ad744596692f3308ad888e80c2fe798ae86fcc44761", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/cpufeatures@0.2.17", "fingerprint": "04a7c96209fbd41f9a1817ea4d2a6e8677796fa4ec0dc537d76a9dec0036eb8f", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/crypto-common@0.1.7", "fingerprint": "745d756e8999f1a9a249aed77699c555941595329a4e4343de89ae96e1d0333a", "state": "open" }, { "rule_namespace": "license", "rule_id": "BSD-3-Clause", "component": "pkg:cargo/curve25519-dalek@4.1.3", "fingerprint": "0bb575d6587d75ee9592137d2931238680210aecc215909adba1e5f8072feb00", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT/Apache-2.0", "component": "pkg:cargo/curve25519-dalek-derive@0.1.1", "fingerprint": "2bd313068cc5979f66814611d0f2653764f5f02a5fea3659e6622b7141a9efb2", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/der@0.7.10", "fingerprint": "5581ac6ec26f13cf9bf99838842922d224f796330520c89e209f34f8263deca9", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/digest@0.10.7", "fingerprint": "66d845a56cbb7c318352a08f46d3b6991b4e15095a844109683d6395bea3a1c7", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/ed25519@2.2.3", "fingerprint": "b1ef1484de84840c7c0a2c51933966b0868f8da06be7d59e7b77a92b3dcd12c6", "state": "open" }, { "rule_namespace": "license", "rule_id": "BSD-3-Clause", "component": "pkg:cargo/ed25519-dalek@2.2.0", "fingerprint": "59ce4b8271427de2f3c94b79b2d666608dd0ab80f62ba57ba79decbe90460d6c", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/errno@0.3.14", "fingerprint": "b2cf2d50c9d7e3df66abaf43435835639e08034d0258c853bbb967068248c7c1", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/fastrand@2.5.0", "fingerprint": "68281187c66d4c9670acbf7a748a35df777f7796eace3eb74ecd3c0df1af2377", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0 OR BSD-1-Clause", "component": "pkg:cargo/fiat-crypto@0.2.9", "fingerprint": "ab0d3ee1c57f754c8e9f310625a0a15790a9d09e9ce260b33597c5215179f9fd", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT", "component": "pkg:cargo/generic-array@0.14.7", "fingerprint": "4100baa4894d6f4a883eefdffa6f2a3f3f8932c5f513fd1b463bea367b450a8b", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/getrandom@0.2.17", "fingerprint": "e0e248e843d9c977190d92d5e8671ff1fe633094bec2fd78deda8cc2b9ddd913", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/getrandom@0.4.3", "fingerprint": "d34eb7b77676d5fa2a2fb54ccbdcf812b2e95ece08d523b51a8112876b9e9f1b", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/heck@0.5.0", "fingerprint": "f15e7f9397ec2df7435dfa719bd9ed4ec07a7f9b63f63a6b0a1ded192a681875", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/hex@0.4.3", "fingerprint": "0880807ea598985ae4e2b054afdf19681651cc0555d47de97c81bf15d308e1c1", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/is_terminal_polyfill@1.70.2", "fingerprint": "ea5404a32d8fe5f4d7b7c150ae9c418bef44434084f9807f04760b247a1833b6", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/itoa@1.0.18", "fingerprint": "0b71ec3d77ef8519b86e537ff5fac2a87a1e23a1a94302a67b55044db9e38cb7", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/libc@0.2.191", "fingerprint": "9d9973caa830049a9211e8ed805b7dcf7f690659b71db96bf5c4593d7b2ca614", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT", "component": "pkg:cargo/linux-raw-sys@0.12.1", "fingerprint": "773523a49f8cd1a1df7385ad357b411d263186aa04cb952428f2225c95e692a2", "state": "open" }, { "rule_namespace": "license", "rule_id": "Unlicense OR MIT", "component": "pkg:cargo/memchr@2.8.3", "fingerprint": "bf1591437a6f99fe31f560f71637dd4271236182cf3fe1f2a57f545ab377d916", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/once_cell@1.21.4", "fingerprint": "bf0bc6b374808f7c6f3fd08c0a7d63965be10e3ff39ebcd785fcf0d624f8acb0", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/once_cell_polyfill@1.70.2", "fingerprint": "4e122c54241f8e08146c80b9e7aace82ab89579bab281e82a26ef89d5444df44", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/pkcs8@0.10.2", "fingerprint": "dcf79ef96b12576f3da49211f68cd786c965cbcb198cc01af73f3d5426884627", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/ppv-lite86@0.2.21", "fingerprint": "10dbed4778cb7f48cbbaaafe5a6bc2839b58297bde9f43d49cab1a639d5c927c", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/proc-macro2@1.0.107", "fingerprint": "1efce8992cf906cfadfccce323fa0ae6955df07a7460965cebb2a64de11dc74b", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/quote@1.0.47", "fingerprint": "ab119f6f830df1f8f8ca18f18a1b7e8166482bbc79b529b2b01f1ef8d351dc9d", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0 OR LGPL-2.1-or-later", "component": "pkg:cargo/r-efi@6.0.0", "fingerprint": "79b3757623de39a2d1e2cbc582531edb2232c2fedae78ae86266ff0a657e6692", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/rand@0.8.8", "fingerprint": "671dab68d2ada9d89ee44f0464a0e42d22a9c70a7b4862b87c34ef30801c0b99", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/rand_chacha@0.3.1", "fingerprint": "09545686bd0a3e470a4467c0216f6dd076ee18f9ccdc19e939a2a0c8338a130c", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/rand_core@0.6.4", "fingerprint": "5b4629e1e1e878c03195737d30e6f492dc34c5d799ba36c5c04b8192eece897e", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/rustc_version@0.4.1", "fingerprint": "6ed6e8818bc7dbe359728d9d8c8e843d5421d6999b5853490c9cf658d37e59e0", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT", "component": "pkg:cargo/rustix@1.1.5", "fingerprint": "70045df0de7040cc8e3f8920f8dbce683735be2f3505c999933268304eed3d01", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/semver@1.0.28", "fingerprint": "d1f1194d0512ca4c7a020f03728853a518bbdb6719bc6a3a7fc7caeda7f6bdfe", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/serde@1.0.229", "fingerprint": "e1eb81e653a288a15481d6312ab337b18d44e2d94d49f48ac7c8c3ec800a36f5", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/serde_core@1.0.229", "fingerprint": "4086d666853f837b329582f4ada668b8ee6eb0983c029a5fa7eacb4cd7b95ea7", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/serde_derive@1.0.229", "fingerprint": "4077d1047525fda030d22d1788a1c3aa36c56309be7434055545e4a5acc5435e", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/serde_json@1.0.154", "fingerprint": "2dc62cd2e94dfe2e326379ab19b563408bee14cbd79b7c9730b3cf913df685ee", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/sha2@0.10.9", "fingerprint": "8fffdf2de9a098e260c473f456893764abfb0da25c8edf8f28ef1d8b3b483857", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/signature@2.2.0", "fingerprint": "8409e8477eaa8b299157e472284dbb382c65babc4a10856896a0325c741bfc84", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT/Apache-2.0", "component": "pkg:cargo/smallvec@1.6.0", "fingerprint": "cfe55c94dcb01bd350011e0618de53cfeeccc9fedcf5a83cd1bd293d6dedb9f4", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/spki@0.7.3", "fingerprint": "6d2575dae8ab3515840e41bc7dd0289d19fe62354849d325d3f4876f96842a9b", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT", "component": "pkg:cargo/strsim@0.11.1", "fingerprint": "3803c2ce269d8937cb5ca282cfc7de1c38bec3947a7f800554d22c9b6af0b4ff", "state": "open" }, { "rule_namespace": "license", "rule_id": "BSD-3-Clause", "component": "pkg:cargo/subtle@2.6.1", "fingerprint": "b2905d01e0f0b65a50ff69518e7472eced519c61c4f31a958fedf47503a048c5", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/syn@2.0.119", "fingerprint": "ec75866e642d56853e0689f491ec83f5ca076a545a518dbc71cb657872de02ba", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/syn@3.0.9", "fingerprint": "50816f9296ebef556556bbf41104d9aff94dc3c3b78917993d062c356ece3a83", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/tempfile@3.27.0", "fingerprint": "fb7e166af30cc01cf8d9fa7bc5864a37ef17e94f0dcad6591c23c48b4f16a08f", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/typenum@1.20.1", "fingerprint": "64aa3bf3c0ae12c744475d6fbd6062f2bf93df107d8585dce88c78832b669779", "state": "open" }, { "rule_namespace": "license", "rule_id": "(MIT OR Apache-2.0) AND Unicode-3.0", "component": "pkg:cargo/unicode-ident@1.0.27", "fingerprint": "bbfb4a615f30648ef5a8eaf210033aa1baaab14fa0bc9482ac72ae7641a6e466", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/utf8parse@0.2.2", "fingerprint": "af63bfd1ce1cfe636db88caaa115b8843ca67e96b3dd93f523d84771bf40a073", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT/Apache-2.0", "component": "pkg:cargo/version_check@0.9.5", "fingerprint": "99b8a953eefdb41a40a9a077b9032a3b6a395900604be21a32da30658ce61f15", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT", "component": "pkg:cargo/wasi@0.11.1+wasi-snapshot-preview1", "fingerprint": "d9cbaa8941d43791ff495ffbc74a5ec516e48db88243ab8abce575acfe23e028", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/windows-link@0.2.1", "fingerprint": "6a884f0186ee68ed468285b3dee5325fccd3809ca04aafabffd42e588d76a3e0", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/windows-sys@0.61.2", "fingerprint": "169218fdfc26698b6fd1a352d504c2359a123be3ebf7d7b9e0c223406ce70d21", "state": "open" }, { "rule_namespace": "license", "rule_id": "BSD-2-Clause OR Apache-2.0 OR MIT", "component": "pkg:cargo/zerocopy@0.8.63", "fingerprint": "dca0f093c749462f428d68cecfb63c6f0b0443b944e3f93172bc7b85bea835ec", "state": "open" }, { "rule_namespace": "license", "rule_id": "BSD-2-Clause OR Apache-2.0 OR MIT", "component": "pkg:cargo/zerocopy-derive@0.8.63", "fingerprint": "aa23299329debd40f4b88bbe41983c6f0b798920fe0306bdb2bd12307011eff0", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/zeroize@1.9.1", "fingerprint": "ad04bc15c43493a874503f1f4e5228c67653134c34ae698ee27abc3ba5027fed", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT", "component": "pkg:cargo/zmij@1.0.23", "fingerprint": "cf39f12ea4d06ecb2c119337d3ddd79c7cc97ef7e7e900bb4beb745ac2696a0d", "state": "open" } ] } ], "dependency_manifest": { "ecosystem": "rust", "tool": "cargo", "tool_version": "1.99.0", "entries": [ { "name": "anstream", "version": "1.0.0", "purl": "pkg:cargo/anstream@1.0.0", "sha256": "824a212faf96e9acacdbd09febd34438f8f711fb84e09a8916013cd7815ca28d", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "anstyle", "version": "1.0.14", "purl": "pkg:cargo/anstyle@1.0.14", "sha256": "940b3a0ca603d1eade50a4846a2afffd5ef57a9feac2c0e2ec2e14f9ead76000", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "anstyle-parse", "version": "1.0.0", "purl": "pkg:cargo/anstyle-parse@1.0.0", "sha256": "52ce7f38b242319f7cabaa6813055467063ecdc9d355bbb4ce0c68908cd8130e", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "anstyle-query", "version": "1.1.5", "purl": "pkg:cargo/anstyle-query@1.1.5", "sha256": "40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "anstyle-wincon", "version": "3.0.11", "purl": "pkg:cargo/anstyle-wincon@3.0.11", "sha256": "291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "base64ct", "version": "1.8.3", "purl": "pkg:cargo/base64ct@1.8.3", "sha256": "2af50177e190e07a26ab74f8b1efbfe2ef87da2116221318cb1c2e82baf7de06", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "bitflags", "version": "2.13.2", "purl": "pkg:cargo/bitflags@2.13.2", "sha256": "3ded4057c258ba199e2d26386d3af3780957ecaee6c4ef4041c6b4b8b97c0b06", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "block-buffer", "version": "0.10.4", "purl": "pkg:cargo/block-buffer@0.10.4", "sha256": "3078c7629b62d3f0439517fa394996acacc5cbc91c5a20d8c658e77abd503a71", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "cfg-if", "version": "1.0.5", "purl": "pkg:cargo/cfg-if@1.0.5", "sha256": "4e7648175b45a9a48536d676f68d918270699102aa8dab5496df06904c914600", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "clap", "version": "4.6.7", "purl": "pkg:cargo/clap@4.6.7", "sha256": "aa8876b300ab35ba921adea3dfd70157a46249b33f95c9084ae5709785478946", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "clap_builder", "version": "4.6.7", "purl": "pkg:cargo/clap_builder@4.6.7", "sha256": "ec0797fb7aeb1406c84efac526901f7ec3ead2124f946b494e72879d4b54704d", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "clap_derive", "version": "4.6.7", "purl": "pkg:cargo/clap_derive@4.6.7", "sha256": "f9c751b79415d4e559e3d1fcf128e09e720eb673a06d26cf6f392d37d75b66e0", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "clap_lex", "version": "1.1.1", "purl": "pkg:cargo/clap_lex@1.1.1", "sha256": "1c133bc6a41be0d194c306b5506d15e6feeea7b1d6604bd3f8310dfb2ca96486", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "colorchoice", "version": "1.0.5", "purl": "pkg:cargo/colorchoice@1.0.5", "sha256": "1d07550c9036bf2ae0c684c4297d503f838287c83c53686d05370d0e139ae570", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "const-oid", "version": "0.9.6", "purl": "pkg:cargo/const-oid@0.9.6", "sha256": "c2459377285ad874054d797f3ccebf984978aa39129f6eafde5cdc8315b612f8", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "cpufeatures", "version": "0.2.17", "purl": "pkg:cargo/cpufeatures@0.2.17", "sha256": "59ed5838eebb26a2bb2e58f6d5b5316989ae9d08bab10e0e6d103e656d1b0280", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "crypto-common", "version": "0.1.7", "purl": "pkg:cargo/crypto-common@0.1.7", "sha256": "78c8292055d1c1df0cce5d180393dc8cce0abec0a7102adb6c7b1eef6016d60a", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "curve25519-dalek", "version": "4.1.3", "purl": "pkg:cargo/curve25519-dalek@4.1.3", "sha256": "97fb8b7c4503de7d6ae7b42ab72a5a59857b4c937ec27a3d4539dba95b5ab2be", "scope": "runtime", "licenses": [ "BSD-3-Clause" ] }, { "name": "curve25519-dalek-derive", "version": "0.1.1", "purl": "pkg:cargo/curve25519-dalek-derive@0.1.1", "sha256": "f46882e17999c6cc590af592290432be3bce0428cb0d5f8b6715e4dc7b383eb3", "scope": "runtime", "licenses": [ "MIT/Apache-2.0" ] }, { "name": "der", "version": "0.7.10", "purl": "pkg:cargo/der@0.7.10", "sha256": "e7c1832837b905bbfb5101e07cc24c8deddf52f93225eee6ead5f4d63d53ddcb", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "digest", "version": "0.10.7", "purl": "pkg:cargo/digest@0.10.7", "sha256": "9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "ed25519", "version": "2.2.3", "purl": "pkg:cargo/ed25519@2.2.3", "sha256": "115531babc129696a58c64a4fef0a8bf9e9698629fb97e9e40767d235cfbcd53", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "ed25519-dalek", "version": "2.2.0", "purl": "pkg:cargo/ed25519-dalek@2.2.0", "sha256": "70e796c081cee67dc755e1a36a0a172b897fab85fc3f6bc48307991f64e4eca9", "scope": "runtime", "licenses": [ "BSD-3-Clause" ] }, { "name": "errno", "version": "0.3.14", "purl": "pkg:cargo/errno@0.3.14", "sha256": "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "fastrand", "version": "2.5.0", "purl": "pkg:cargo/fastrand@2.5.0", "sha256": "da7c62ceae207dd37ea5b845da6a0696c799f85e97da1ab5b7910be3c1c80223", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "fiat-crypto", "version": "0.2.9", "purl": "pkg:cargo/fiat-crypto@0.2.9", "sha256": "28dea519a9695b9977216879a3ebfddf92f1c08c05d984f8996aecd6ecdc811d", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0 OR BSD-1-Clause" ] }, { "name": "generic-array", "version": "0.14.7", "purl": "pkg:cargo/generic-array@0.14.7", "sha256": "85649ca51fd72272d7821adaf274ad91c288277713d9c18820d8499a7ff69e9a", "scope": "runtime", "licenses": [ "MIT" ] }, { "name": "getrandom", "version": "0.2.17", "purl": "pkg:cargo/getrandom@0.2.17", "sha256": "ff2abc00be7fca6ebc474524697ae276ad847ad0a6b3faa4bcb027e9a4614ad0", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "getrandom", "version": "0.4.3", "purl": "pkg:cargo/getrandom@0.4.3", "sha256": "300e883d756b2e4ec94e02791f39b04b522276138852cfc41d9fb7e904106099", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "heck", "version": "0.5.0", "purl": "pkg:cargo/heck@0.5.0", "sha256": "2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "hex", "version": "0.4.3", "purl": "pkg:cargo/hex@0.4.3", "sha256": "7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "is_terminal_polyfill", "version": "1.70.2", "purl": "pkg:cargo/is_terminal_polyfill@1.70.2", "sha256": "a6cb138bb79a146c1bd460005623e142ef0181e3d0219cb493e02f7d08a35695", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "itoa", "version": "1.0.18", "purl": "pkg:cargo/itoa@1.0.18", "sha256": "8f42a60cbdf9a97f5d2305f08a87dc4e09308d1276d28c869c684d7777685682", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "libc", "version": "0.2.191", "purl": "pkg:cargo/libc@0.2.191", "sha256": "65cd87c9a6d60536580b316ad985726104730a5151c99845f2490428ef91240a", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "linux-raw-sys", "version": "0.12.1", "purl": "pkg:cargo/linux-raw-sys@0.12.1", "sha256": "32a66949e030da00e8c7d4434b251670a91556f4144941d37452769c25d58a53", "scope": "runtime", "licenses": [ "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT" ] }, { "name": "memchr", "version": "2.8.3", "purl": "pkg:cargo/memchr@2.8.3", "sha256": "cf8baf1c55e62ffcace7a9f06f4bd9cd3f0c4beb022d3b367256b91b87513d98", "scope": "runtime", "licenses": [ "Unlicense OR MIT" ] }, { "name": "once_cell", "version": "1.21.4", "purl": "pkg:cargo/once_cell@1.21.4", "sha256": "9f7c3e4beb33f85d45ae3e3a1792185706c8e16d043238c593331cc7cd313b50", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "once_cell_polyfill", "version": "1.70.2", "purl": "pkg:cargo/once_cell_polyfill@1.70.2", "sha256": "384b8ab6d37215f3c5301a95a4accb5d64aa607f1fcb26a11b5303878451b4fe", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "pkcs8", "version": "0.10.2", "purl": "pkg:cargo/pkcs8@0.10.2", "sha256": "f950b2377845cebe5cf8b5165cb3cc1a5e0fa5cfa3e1f7f55707d8fd82e0a7b7", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "ppv-lite86", "version": "0.2.21", "purl": "pkg:cargo/ppv-lite86@0.2.21", "sha256": "85eae3c4ed2f50dcfe72643da4befc30deadb458a9b590d720cde2f2b1e97da9", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "proc-macro2", "version": "1.0.107", "purl": "pkg:cargo/proc-macro2@1.0.107", "sha256": "985e7ec9bb745e6ce6535b544d84d6cd6f7ad8bd711c398938ae983b91a766d9", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "quote", "version": "1.0.47", "purl": "pkg:cargo/quote@1.0.47", "sha256": "1fbf4db142a473a8d80c26bbf18454ed458bf8d26c8219c331daecfdbd079001", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "r-efi", "version": "6.0.0", "purl": "pkg:cargo/r-efi@6.0.0", "sha256": "f8dcc9c7d52a811697d2151c701e0d08956f92b0e24136cf4cf27b57a6a0d9bf", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0 OR LGPL-2.1-or-later" ] }, { "name": "rand", "version": "0.8.8", "purl": "pkg:cargo/rand@0.8.8", "sha256": "e058c7de0b26af77780c769414d6257830bb240f3c38477dbc2c16e5f54d6d4c", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "rand_chacha", "version": "0.3.1", "purl": "pkg:cargo/rand_chacha@0.3.1", "sha256": "e6c10a63a0fa32252be49d21e7709d4d4baf8d231c2dbce1eaa8141b9b127d88", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "rand_core", "version": "0.6.4", "purl": "pkg:cargo/rand_core@0.6.4", "sha256": "ec0be4795e2f6a28069bec0b5ff3e2ac9bafc99e6a9a7dc3547996c5c816922c", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "rustc_version", "version": "0.4.1", "purl": "pkg:cargo/rustc_version@0.4.1", "sha256": "cfcb3a22ef46e85b45de6ee7e79d063319ebb6594faafcf1c225ea92ab6e9b92", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "rustix", "version": "1.1.5", "purl": "pkg:cargo/rustix@1.1.5", "sha256": "891efababe418670775f199f0d233d84843c227a0949a883ce15b37c78d6629d", "scope": "runtime", "licenses": [ "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT" ] }, { "name": "semver", "version": "1.0.28", "purl": "pkg:cargo/semver@1.0.28", "sha256": "8a7852d02fc848982e0c167ef163aaff9cd91dc640ba85e263cb1ce46fae51cd", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "serde", "version": "1.0.229", "purl": "pkg:cargo/serde@1.0.229", "sha256": "4148590afebada386688f18773da617792bf2ef03ffc1e4cbd2b1d45b023e0ba", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "serde_core", "version": "1.0.229", "purl": "pkg:cargo/serde_core@1.0.229", "sha256": "67dca2c9c51e58a4791a4b1ed58308b39c64224d349a935ab5039aa360942a48", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "serde_derive", "version": "1.0.229", "purl": "pkg:cargo/serde_derive@1.0.229", "sha256": "e7a5d71263a5a7d47b41f6b3f06ba276f10cc18b0931f1799f710578e2309348", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "serde_json", "version": "1.0.154", "purl": "pkg:cargo/serde_json@1.0.154", "sha256": "e7e9cc8b1b85264074fbcc02a88680c4096b1e47df8f739dceb03bf482f04bd6", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "sha2", "version": "0.10.9", "purl": "pkg:cargo/sha2@0.10.9", "sha256": "a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "signature", "version": "2.2.0", "purl": "pkg:cargo/signature@2.2.0", "sha256": "77549399552de45a898a580c1b41d445bf730df867cc44e6c0233bbc4b8329de", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "smallvec", "version": "1.6.0", "purl": "pkg:cargo/smallvec@1.6.0", "sha256": "1a55ca5f3b68e41c979bf8c46a6f1da892ca4db8f94023ce0bd32407573b1ac0", "scope": "runtime", "licenses": [ "MIT/Apache-2.0" ] }, { "name": "spki", "version": "0.7.3", "purl": "pkg:cargo/spki@0.7.3", "sha256": "d91ed6c858b01f942cd56b37a94b3e0a1798290327d1236e4d9cf4eaca44d29d", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "strsim", "version": "0.11.1", "purl": "pkg:cargo/strsim@0.11.1", "sha256": "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f", "scope": "runtime", "licenses": [ "MIT" ] }, { "name": "subtle", "version": "2.6.1", "purl": "pkg:cargo/subtle@2.6.1", "sha256": "13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292", "scope": "runtime", "licenses": [ "BSD-3-Clause" ] }, { "name": "syn", "version": "2.0.119", "purl": "pkg:cargo/syn@2.0.119", "sha256": "872831b642d1a07999a962a351ed35b955ea2cfc8f3862091e2a240a84f17297", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "syn", "version": "3.0.9", "purl": "pkg:cargo/syn@3.0.9", "sha256": "d78c8dee4c7bf0e14673097256fed6142ce9d3b85a408189d07482442145823b", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "tempfile", "version": "3.27.0", "purl": "pkg:cargo/tempfile@3.27.0", "sha256": "32497e9a4c7b38532efcdebeef879707aa9f794296a4f0244f6f69e9bc8574bd", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "typenum", "version": "1.20.1", "purl": "pkg:cargo/typenum@1.20.1", "sha256": "b6f5e870be6c3b371b77fe0ee0bafb859fa4964b4404c27de1d380043c4dda20", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "unicode-ident", "version": "1.0.27", "purl": "pkg:cargo/unicode-ident@1.0.27", "sha256": "a2c754d6c33795a1c324727428e5a7dedb5b06195f9890bdbcba760d3e246563", "scope": "runtime", "licenses": [ "(MIT OR Apache-2.0) AND Unicode-3.0" ] }, { "name": "utf8parse", "version": "0.2.2", "purl": "pkg:cargo/utf8parse@0.2.2", "sha256": "06abde3611657adf66d383f00b093d7faecc7fa57071cce2578660c9f1010821", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "version_check", "version": "0.9.5", "purl": "pkg:cargo/version_check@0.9.5", "sha256": "0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a", "scope": "runtime", "licenses": [ "MIT/Apache-2.0" ] }, { "name": "wasi", "version": "0.11.1+wasi-snapshot-preview1", "purl": "pkg:cargo/wasi@0.11.1+wasi-snapshot-preview1", "sha256": "ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b", "scope": "runtime", "licenses": [ "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT" ] }, { "name": "windows-link", "version": "0.2.1", "purl": "pkg:cargo/windows-link@0.2.1", "sha256": "f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "windows-sys", "version": "0.61.2", "purl": "pkg:cargo/windows-sys@0.61.2", "sha256": "ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "zerocopy", "version": "0.8.63", "purl": "pkg:cargo/zerocopy@0.8.63", "sha256": "e5fe1f8f1b06191a00962174c61aa5005e0bb391a6d80d07e24d115c01a92ed8", "scope": "runtime", "licenses": [ "BSD-2-Clause OR Apache-2.0 OR MIT" ] }, { "name": "zerocopy-derive", "version": "0.8.63", "purl": "pkg:cargo/zerocopy-derive@0.8.63", "sha256": "863ad3ac83293fb4d740aedbfdc9240dd8d1a50c1099acd76ce80ce7c7230c7f", "scope": "runtime", "licenses": [ "BSD-2-Clause OR Apache-2.0 OR MIT" ] }, { "name": "zeroize", "version": "1.9.1", "purl": "pkg:cargo/zeroize@1.9.1", "sha256": "e13084392c5e4bc371903e2935a5eaeed24905a7511356b883835e18a78f6879", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "zmij", "version": "1.0.23", "purl": "pkg:cargo/zmij@1.0.23", "sha256": "29666d0abbfad1e3dc4dcf6144730dd3a3ab225bbbdac83319345b1b44ccfc1b", "scope": "runtime", "licenses": [ "MIT" ] } ] } } }, { "attempt_no": 8, "verdict": "passed", "evidence_sha256": "0fe18a19569e23dc174744f0545c3fd427e971b5874afcd96f009cc11706e142", "env_sha256": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "wall_seconds": 27.088021102, "result": { "job_id": "520d2155-f6c4-43c6-953c-1829b6dd5cc3", "verdict": "passed", "criteria": [ { "id": "build", "required": true, "passed": true, "commands": [ { "argv": [ "cargo", "build", "--workspace", "--release" ], "exit_code": 0, "timed_out": false, "duration_seconds": 16.611087073, "tail": " Compiling proc-macro2 v1.0.107\n Compiling quote v1.0.47\n Compiling unicode-ident v1.0.27\n Compiling version_check v0.9.5\n Compiling libc v0.2.191\n Compiling cfg-if v1.0.5\n Compiling typenum v1.20.1\n Compiling semver v1.0.28\n Compiling serde_core v1.0.229\n Compiling zerocopy v0.8.63\n Compiling utf8parse v0.2.2\n Compiling cpufeatures v0.2.17\n Compiling zmij v1.0.23\n Compiling colorchoice v1.0.5\n Compiling anstyle-query v1.1.5\n Compiling serde v1.0.229\n Compiling anstyle v1.0.14\n Compiling subtle v2.6.1\n Compiling serde_json v1.0.154\n Compiling signature v2.2.0\n Compiling zeroize v1.9.1\n Compiling is_terminal_polyfill v1.70.2\n Compiling itoa v1.0.18\n Compiling anstyle-parse v1.0.0\n Compiling memchr v2.8.3\n Compiling heck v0.5.0\n Compiling strsim v0.11.1\n Compiling clap_lex v1.1.1\n Compiling ed25519 v2.2.3\n Compiling smallvec v1.6.0\n Compiling hex v0.4.3\n Compiling rustc_version v0.4.1\n Compiling anstream v1.0.0\n Compiling generic-array v0.14.7\n Compiling curve25519-dalek v4.1.3\n Compiling clap_builder v4.6.7\n Compiling syn v3.0.9\n Compiling syn v2.0.119\n Compiling getrandom v0.2.17\n Compiling block-buffer v0.10.4\n Compiling crypto-common v0.1.7\n Compiling rand_core v0.6.4\n Compiling digest v0.10.7\n Compiling sha2 v0.10.9\n Compiling serde_derive v1.0.229\n Compiling clap_derive v4.6.7\n Compiling curve25519-dalek-derive v0.1.1\n Compiling ppv-lite86 v0.2.21\n Compiling rand_chacha v0.3.1\n Compiling clap v4.6.7\n Compiling ed25519-dalek v2.2.0\n Compiling rand v0.8.8\n Compiling falsegreen-ledger-core v0.1.0 (/var/lib/falsegreen/work/520d2155-f6c4-43c6-953c-1829b6dd5cc3/run/crates/falsegreen-ledger-core)\n Compiling falsegreen-ledger v0.1.0 (/var/lib/falsegreen/work/520d2155-f6c4-43c6-953c-1829b6dd5cc3/run/crates/falsegreen-ledger)\n Finished `release` profile [optimized] target(s) in 16.57s\n" } ] }, { "id": "tests", "required": true, "passed": true, "commands": [ { "argv": [ "cargo", "test", "--workspace" ], "exit_code": 0, "timed_out": false, "duration_seconds": 6.35502591, "tail": "\nrunning 0 tests\n\ntest result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s\n\n\nrunning 10 tests\ntest the_cli_help_lists_every_command ... ok\ntest a_policy_violation_exits_policy ... ok\ntest a_corrupt_shard_exits_corrupt ... ok\ntest the_export_import_roundtrip_is_hash_stable ... ok\ntest the_full_lifecycle_verifies_clean ... ok\ntest a_tampered_seal_signature_is_detected ... ok\ntest a_tampered_event_field_is_detected ... ok\ntest a_tampered_cross_shard_link_is_detected ... ok\ntest a_tampered_prev_hash_is_detected ... ok\ntest compaction_keeps_the_ledger_verifiable ... ok\n\ntest result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.23s\n\n\nrunning 41 tests\ntest chain::tests::genesis_record_is_deterministic ... ok\ntest chain::tests::sequence_gap_fails_link_check ... ok\ntest chain::tests::tampered_record_fails_hash_check ... ok\ntest chain::tests::prev_hash_is_committed ... ok\ntest chain::tests::unknown_fields_rejected_in_record ... ok\ntest chain::tests::hash_changes_when_any_event_field_changes ... ok\ntest event::tests::canonical_is_sorted_and_stable ... ok\ntest event::tests::canonical_round_trips_through_json_with_shuffled_keys ... ok\ntest event::tests::context_null_is_canonicalized_as_null_and_rejected ... ok\ntest event::tests::optionals_omit_none_in_canonical_form ... ok\ntest event::tests::validation_rejects_bad_timestamp ... ok\ntest event::tests::unknown_fields_are_rejected ... ok\ntest event::tests::validation_rejects_empty_required_fields ... ok\ntest integrity::tests::a_lone_leaf_is_its_own_root_and_odd_leaves_pair_with_themselves ... ok\ntest integrity::tests::merkle_root_rejects_empty_and_non_hex ... ok\ntest policy::tests::an_event_can_violate_several_rules ... ok\ntest integrity::tests::malformed_keys_and_signatures_are_rejected ... ok\ntest policy::tests::require_outcome_enforces_the_decision ... ok\ntest integrity::tests::merkle_root_is_deterministic_and_order_sensitive ... ok\ntest policy::tests::deny_rule_fires_only_on_a_match ... ok\ntest policy::tests::deny_rule_fires_on_match ... ok\ntest policy::tests::validation_rejects_malformed_policies ... ok\ntest store::tests::corrupt_line_is_a_parse_error ... ok\ntest store::tests::empty_append_is_a_noop ... ok\ntest store::tests::invalid_event_rejected ... ok\ntest integrity::tests::the_trusted_key_must_match_the_embedded_key ... ok\ntest store::tests::init_and_append_continues_from_genesis ... ok\ntest store::tests::seal_count_mismatch_rejected ... ok\ntest verify::tests::the_report_is_canonical_json ... ok\ntest compact::tests::compaction_refuses_unsealed_empty_and_already_compacted ... ok\ntest verify::tests::a_sequence_gap_is_caught ... ok\ntest store::tests::append_after_seal_starts_new_shard_linked_to_merkle_root ... ok\ntest verify::tests::a_clean_ledger_verifies ... ok\ntest compact::tests::the_chain_continues_from_the_original_root_after_compaction ... ok\ntest verify::tests::policy_violations_land_in_the_report ... ok\ntest verify::tests::a_tampered_event_is_caught ... ok\ntest verify::tests::a_tampered_record_hash_cascades_downstream ... ok\ntest verify::tests::a_bad_seal_signature_is_caught ... ok\ntest compact::tests::the_compacted_shard_verifies_and_reports_the_source_root ... ok\ntest integrity::tests::sign_and_verify_roundtrip ... ok\ntest integrity::tests::a_tampered_seal_field_fails_verification ... ok\n\ntest result: ok. 41 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s\n\n\nrunning 0 tests\n\ntest result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s\n\n Compiling proc-macro2 v1.0.107\n Compiling quote v1.0.47\n Compiling unicode-ident v1.0.27\n Compiling cfg-if v1.0.5\n Compiling version_check v0.9.5\n Compiling libc v0.2.191\n Compiling typenum v1.20.1\n Compiling semver v1.0.28\n Compiling zerocopy v0.8.63\n Compiling serde_core v1.0.229\n Compiling zmij v1.0.23\n Compiling cpufeatures v0.2.17\n Compiling zeroize v1.9.1\n Compiling subtle v2.6.1\n Compiling serde_json v1.0.154\n Compiling serde v1.0.229\n Compiling signature v2.2.0\n Compiling memchr v2.8.3\n Compiling getrandom v0.4.3\n Compiling rustix v1.1.5\n Compiling utf8parse v0.2.2\n Compiling itoa v1.0.18\n Compiling linux-raw-sys v0.12.1\n Compiling hex v0.4.3\n Compiling ed25519 v2.2.3\n Compiling anstyle-parse v1.0.0\n Compiling colorchoice v1.0.5\n Compiling is_terminal_polyfill v1.70.2\n Compiling anstyle-query v1.1.5\n Compiling anstyle v1.0.14\n Compiling smallvec v1.6.0\n Compiling bitflags v2.13.2\n Compiling fastrand v2.5.0\n Compiling heck v0.5.0\n Compiling strsim v0.11.1\n Compiling generic-array v0.14.7\n Compiling rustc_version v0.4.1\n Compiling clap_lex v1.1.1\n Compiling once_cell v1.21.4\n Compiling anstream v1.0.0\n Compiling curve25519-dalek v4.1.3\n Compiling clap_builder v4.6.7\n Compiling syn v3.0.9\n Compiling syn v2.0.119\n Compiling block-buffer v0.10.4\n Compiling crypto-common v0.1.7\n Compiling getrandom v0.2.17\n Compiling digest v0.10.7\n Compiling rand_core v0.6.4\n Compiling sha2 v0.10.9\n Compiling tempfile v3.27.0\n Compiling curve25519-dalek-derive v0.1.1\n Compiling serde_derive v1.0.229\n Compiling clap_derive v4.6.7\n Compiling ppv-lite86 v0.2.21\n Compiling rand_chacha v0.3.1\n Compiling rand v0.8.8\n Compiling clap v4.6.7\n Compiling ed25519-dalek v2.2.0\n Compiling falsegreen-ledger-core v0.1.0 (/var/lib/falsegreen/work/520d2155-f6c4-43c6-953c-1829b6dd5cc3/run/crates/falsegreen-ledger-core)\n Compiling falsegreen-ledger v0.1.0 (/var/lib/falsegreen/work/520d2155-f6c4-43c6-953c-1829b6dd5cc3/run/crates/falsegreen-ledger)\n Finished `test` profile [unoptimized + debuginfo] target(s) in 5.94s\n Running unittests src/main.rs (target/debug/deps/falsegreen_ledger-ab76082b4462b0b1)\n Running tests/integration.rs (target/debug/deps/integration-22dc6beef3e29bb7)\n Running unittests src/lib.rs (target/debug/deps/falsegreen_ledger_core-d00132f4be88bc4a)\n Doc-tests falsegreen_ledger_core\n" } ] }, { "id": "lint", "required": false, "passed": true, "commands": [ { "argv": [ "cargo", "clippy", "--workspace", "--all-targets", "--", "-D", "warnings" ], "exit_code": 0, "timed_out": false, "duration_seconds": 3.833828088, "tail": " Checking cfg-if v1.0.5\n Checking typenum v1.20.1\n Checking cpufeatures v0.2.17\n Checking zeroize v1.9.1\n Checking subtle v2.6.1\n Checking signature v2.2.0\n Checking utf8parse v0.2.2\n Checking is_terminal_polyfill v1.70.2\n Checking colorchoice v1.0.5\n Checking itoa v1.0.18\n Checking libc v0.2.191\n Checking memchr v2.8.3\n Checking serde_core v1.0.229\n Checking zerocopy v0.8.63\n Checking zmij v1.0.23\n Checking anstyle-query v1.1.5\n Checking anstyle v1.0.14\n Checking strsim v0.11.1\n Checking clap_lex v1.1.1\n Checking bitflags v2.13.2\n Checking smallvec v1.6.0\n Checking linux-raw-sys v0.12.1\n Checking hex v0.4.3\n Checking once_cell v1.21.4\n Checking fastrand v2.5.0\n Checking anstyle-parse v1.0.0\n Checking ed25519 v2.2.3\n Checking anstream v1.0.0\n Checking clap_builder v4.6.7\n Checking rustix v1.1.5\n Checking generic-array v0.14.7\n Checking getrandom v0.2.17\n Checking getrandom v0.4.3\n Checking block-buffer v0.10.4\n Checking crypto-common v0.1.7\n Checking rand_core v0.6.4\n Checking digest v0.10.7\n Checking sha2 v0.10.9\n Checking curve25519-dalek v4.1.3\n Checking clap v4.6.7\n Checking serde v1.0.229\n Checking serde_json v1.0.154\n Checking tempfile v3.27.0\n Checking ed25519-dalek v2.2.0\n Checking falsegreen-ledger-core v0.1.0 (/var/lib/falsegreen/work/520d2155-f6c4-43c6-953c-1829b6dd5cc3/run/crates/falsegreen-ledger-core)\n Checking ppv-lite86 v0.2.21\n Checking rand_chacha v0.3.1\n Checking rand v0.8.8\n Checking falsegreen-ledger v0.1.0 (/var/lib/falsegreen/work/520d2155-f6c4-43c6-953c-1829b6dd5cc3/run/crates/falsegreen-ledger)\n Finished `dev` profile [unoptimized + debuginfo] target(s) in 3.76s\n" }, { "argv": [ "cargo", "fmt", "--all", "--check" ], "exit_code": 0, "timed_out": false, "duration_seconds": 0.112225786, "tail": "" } ] } ], "wall_seconds": 27.088021102, "error": null, "env_sha256": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "environment": { "schema": 1, "eco": "rust", "toolchain": "rustc 1.99.0 (rustc)", "toolchain_version": "1.99.0", "fingerprint": "cb72048928286df9d194d6d7356350b373cefcc81d7ee1899729b6ebe14c8817", "artifacts": [ { "name": "anstream", "version": "1.0.0", "sha256": "824a212faf96e9acacdbd09febd34438f8f711fb84e09a8916013cd7815ca28d" }, { "name": "anstyle", "version": "1.0.14", "sha256": "940b3a0ca603d1eade50a4846a2afffd5ef57a9feac2c0e2ec2e14f9ead76000" }, { "name": "anstyle-parse", "version": "1.0.0", "sha256": "52ce7f38b242319f7cabaa6813055467063ecdc9d355bbb4ce0c68908cd8130e" }, { "name": "anstyle-query", "version": "1.1.5", "sha256": "40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc" }, { "name": "anstyle-wincon", "version": "3.0.11", "sha256": "291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d" }, { "name": "base64ct", "version": "1.8.3", "sha256": "2af50177e190e07a26ab74f8b1efbfe2ef87da2116221318cb1c2e82baf7de06" }, { "name": "bitflags", "version": "2.13.2", "sha256": "3ded4057c258ba199e2d26386d3af3780957ecaee6c4ef4041c6b4b8b97c0b06" }, { "name": "block-buffer", "version": "0.10.4", "sha256": "3078c7629b62d3f0439517fa394996acacc5cbc91c5a20d8c658e77abd503a71" }, { "name": "cfg-if", "version": "1.0.5", "sha256": "4e7648175b45a9a48536d676f68d918270699102aa8dab5496df06904c914600" }, { "name": "clap", "version": "4.6.7", "sha256": "aa8876b300ab35ba921adea3dfd70157a46249b33f95c9084ae5709785478946" }, { "name": "clap_builder", "version": "4.6.7", "sha256": "ec0797fb7aeb1406c84efac526901f7ec3ead2124f946b494e72879d4b54704d" }, { "name": "clap_derive", "version": "4.6.7", "sha256": "f9c751b79415d4e559e3d1fcf128e09e720eb673a06d26cf6f392d37d75b66e0" }, { "name": "clap_lex", "version": "1.1.1", "sha256": "1c133bc6a41be0d194c306b5506d15e6feeea7b1d6604bd3f8310dfb2ca96486" }, { "name": "colorchoice", "version": "1.0.5", "sha256": "1d07550c9036bf2ae0c684c4297d503f838287c83c53686d05370d0e139ae570" }, { "name": "const-oid", "version": "0.9.6", "sha256": "c2459377285ad874054d797f3ccebf984978aa39129f6eafde5cdc8315b612f8" }, { "name": "cpufeatures", "version": "0.2.17", "sha256": "59ed5838eebb26a2bb2e58f6d5b5316989ae9d08bab10e0e6d103e656d1b0280" }, { "name": "crypto-common", "version": "0.1.7", "sha256": "78c8292055d1c1df0cce5d180393dc8cce0abec0a7102adb6c7b1eef6016d60a" }, { "name": "curve25519-dalek", "version": "4.1.3", "sha256": "97fb8b7c4503de7d6ae7b42ab72a5a59857b4c937ec27a3d4539dba95b5ab2be" }, { "name": "curve25519-dalek-derive", "version": "0.1.1", "sha256": "f46882e17999c6cc590af592290432be3bce0428cb0d5f8b6715e4dc7b383eb3" }, { "name": "der", "version": "0.7.10", "sha256": "e7c1832837b905bbfb5101e07cc24c8deddf52f93225eee6ead5f4d63d53ddcb" }, { "name": "digest", "version": "0.10.7", "sha256": "9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292" }, { "name": "ed25519", "version": "2.2.3", "sha256": "115531babc129696a58c64a4fef0a8bf9e9698629fb97e9e40767d235cfbcd53" }, { "name": "ed25519-dalek", "version": "2.2.0", "sha256": "70e796c081cee67dc755e1a36a0a172b897fab85fc3f6bc48307991f64e4eca9" }, { "name": "errno", "version": "0.3.14", "sha256": "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb" }, { "name": "fastrand", "version": "2.5.0", "sha256": "da7c62ceae207dd37ea5b845da6a0696c799f85e97da1ab5b7910be3c1c80223" }, { "name": "fiat-crypto", "version": "0.2.9", "sha256": "28dea519a9695b9977216879a3ebfddf92f1c08c05d984f8996aecd6ecdc811d" }, { "name": "generic-array", "version": "0.14.7", "sha256": "85649ca51fd72272d7821adaf274ad91c288277713d9c18820d8499a7ff69e9a" }, { "name": "getrandom", "version": "0.2.17", "sha256": "ff2abc00be7fca6ebc474524697ae276ad847ad0a6b3faa4bcb027e9a4614ad0" }, { "name": "getrandom", "version": "0.4.3", "sha256": "300e883d756b2e4ec94e02791f39b04b522276138852cfc41d9fb7e904106099" }, { "name": "heck", "version": "0.5.0", "sha256": "2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea" }, { "name": "hex", "version": "0.4.3", "sha256": "7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70" }, { "name": "is_terminal_polyfill", "version": "1.70.2", "sha256": "a6cb138bb79a146c1bd460005623e142ef0181e3d0219cb493e02f7d08a35695" }, { "name": "itoa", "version": "1.0.18", "sha256": "8f42a60cbdf9a97f5d2305f08a87dc4e09308d1276d28c869c684d7777685682" }, { "name": "libc", "version": "0.2.191", "sha256": "65cd87c9a6d60536580b316ad985726104730a5151c99845f2490428ef91240a" }, { "name": "linux-raw-sys", "version": "0.12.1", "sha256": "32a66949e030da00e8c7d4434b251670a91556f4144941d37452769c25d58a53" }, { "name": "memchr", "version": "2.8.3", "sha256": "cf8baf1c55e62ffcace7a9f06f4bd9cd3f0c4beb022d3b367256b91b87513d98" }, { "name": "once_cell", "version": "1.21.4", "sha256": "9f7c3e4beb33f85d45ae3e3a1792185706c8e16d043238c593331cc7cd313b50" }, { "name": "once_cell_polyfill", "version": "1.70.2", "sha256": "384b8ab6d37215f3c5301a95a4accb5d64aa607f1fcb26a11b5303878451b4fe" }, { "name": "pkcs8", "version": "0.10.2", "sha256": "f950b2377845cebe5cf8b5165cb3cc1a5e0fa5cfa3e1f7f55707d8fd82e0a7b7" }, { "name": "ppv-lite86", "version": "0.2.21", "sha256": "85eae3c4ed2f50dcfe72643da4befc30deadb458a9b590d720cde2f2b1e97da9" }, { "name": "proc-macro2", "version": "1.0.107", "sha256": "985e7ec9bb745e6ce6535b544d84d6cd6f7ad8bd711c398938ae983b91a766d9" }, { "name": "quote", "version": "1.0.47", "sha256": "1fbf4db142a473a8d80c26bbf18454ed458bf8d26c8219c331daecfdbd079001" }, { "name": "r-efi", "version": "6.0.0", "sha256": "f8dcc9c7d52a811697d2151c701e0d08956f92b0e24136cf4cf27b57a6a0d9bf" }, { "name": "rand", "version": "0.8.8", "sha256": "e058c7de0b26af77780c769414d6257830bb240f3c38477dbc2c16e5f54d6d4c" }, { "name": "rand_chacha", "version": "0.3.1", "sha256": "e6c10a63a0fa32252be49d21e7709d4d4baf8d231c2dbce1eaa8141b9b127d88" }, { "name": "rand_core", "version": "0.6.4", "sha256": "ec0be4795e2f6a28069bec0b5ff3e2ac9bafc99e6a9a7dc3547996c5c816922c" }, { "name": "rustc_version", "version": "0.4.1", "sha256": "cfcb3a22ef46e85b45de6ee7e79d063319ebb6594faafcf1c225ea92ab6e9b92" }, { "name": "rustix", "version": "1.1.5", "sha256": "891efababe418670775f199f0d233d84843c227a0949a883ce15b37c78d6629d" }, { "name": "semver", "version": "1.0.28", "sha256": "8a7852d02fc848982e0c167ef163aaff9cd91dc640ba85e263cb1ce46fae51cd" }, { "name": "serde", "version": "1.0.229", "sha256": "4148590afebada386688f18773da617792bf2ef03ffc1e4cbd2b1d45b023e0ba" }, { "name": "serde_core", "version": "1.0.229", "sha256": "67dca2c9c51e58a4791a4b1ed58308b39c64224d349a935ab5039aa360942a48" }, { "name": "serde_derive", "version": "1.0.229", "sha256": "e7a5d71263a5a7d47b41f6b3f06ba276f10cc18b0931f1799f710578e2309348" }, { "name": "serde_json", "version": "1.0.154", "sha256": "e7e9cc8b1b85264074fbcc02a88680c4096b1e47df8f739dceb03bf482f04bd6" }, { "name": "sha2", "version": "0.10.9", "sha256": "a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283" }, { "name": "signature", "version": "2.2.0", "sha256": "77549399552de45a898a580c1b41d445bf730df867cc44e6c0233bbc4b8329de" }, { "name": "smallvec", "version": "1.6.0", "sha256": "1a55ca5f3b68e41c979bf8c46a6f1da892ca4db8f94023ce0bd32407573b1ac0" }, { "name": "spki", "version": "0.7.3", "sha256": "d91ed6c858b01f942cd56b37a94b3e0a1798290327d1236e4d9cf4eaca44d29d" }, { "name": "strsim", "version": "0.11.1", "sha256": "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f" }, { "name": "subtle", "version": "2.6.1", "sha256": "13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292" }, { "name": "syn", "version": "2.0.119", "sha256": "872831b642d1a07999a962a351ed35b955ea2cfc8f3862091e2a240a84f17297" }, { "name": "syn", "version": "3.0.9", "sha256": "d78c8dee4c7bf0e14673097256fed6142ce9d3b85a408189d07482442145823b" }, { "name": "tempfile", "version": "3.27.0", "sha256": "32497e9a4c7b38532efcdebeef879707aa9f794296a4f0244f6f69e9bc8574bd" }, { "name": "typenum", "version": "1.20.1", "sha256": "b6f5e870be6c3b371b77fe0ee0bafb859fa4964b4404c27de1d380043c4dda20" }, { "name": "unicode-ident", "version": "1.0.27", "sha256": "a2c754d6c33795a1c324727428e5a7dedb5b06195f9890bdbcba760d3e246563" }, { "name": "utf8parse", "version": "0.2.2", "sha256": "06abde3611657adf66d383f00b093d7faecc7fa57071cce2578660c9f1010821" }, { "name": "version_check", "version": "0.9.5", "sha256": "0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a" }, { "name": "wasi", "version": "0.11.1+wasi-snapshot-preview1", "sha256": "ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b" }, { "name": "windows-link", "version": "0.2.1", "sha256": "f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5" }, { "name": "windows-sys", "version": "0.61.2", "sha256": "ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc" }, { "name": "zerocopy", "version": "0.8.63", "sha256": "e5fe1f8f1b06191a00962174c61aa5005e0bb391a6d80d07e24d115c01a92ed8" }, { "name": "zerocopy-derive", "version": "0.8.63", "sha256": "863ad3ac83293fb4d740aedbfdc9240dd8d1a50c1099acd76ce80ce7c7230c7f" }, { "name": "zeroize", "version": "1.9.1", "sha256": "e13084392c5e4bc371903e2935a5eaeed24905a7511356b883835e18a78f6879" }, { "name": "zmij", "version": "1.0.23", "sha256": "29666d0abbfad1e3dc4dcf6144730dd3a3ab225bbbdac83319345b1b44ccfc1b" } ] }, "witness_invocations": [ { "tool": "osv-scanner", "version": "2.7.0", "binary_digest": "160c6253e2922e9e0a6a9771c5c4c40a4b3c6090b34a3cdd5e80c96cc2e4218b", "config_digest": "0c3d6fef8ea59e1de5610e13ccb1035a7232318288aaed517ee2feec9402455a", "invocation_digest": "ccd91f56f4900e7561b4ac09ffcd8f32a89fd4ee9a01d47d046ffe8a44d6b13d", "input_subject_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "5ae553c6dbf38762a5b61997c8ab3c964845e6f2033cc5886f39707289c42d22", "normalized_evidence_digest": "a01c9fbe2e0f89ba51e98a9f9adb3e2221181b02f05426888a8e8e1d4c6f99a0", "limitations": [ "osv-scanner checks registry-based ecosystems (crates.io in 0.6.0); git-sourced dependencies (lean [[require]], gpr) have no advisory database — Insufficient Evidence for them, never a silent pass" ], "evidence_class": "dependency_vulnerability", "observed_at": "2026-10-21T18:02:17.656150282+00:00", "findings": [ { "rule_namespace": "osv", "rule_id": "RUSTSEC-2021-0003", "severity": "high", "component": "pkg:crates.io/smallvec@1.6.0", "fingerprint": "33785582b0bffd15e2724184577c08f01121749519544d60019637759fc0278a", "state": "open" }, { "rule_namespace": "osv", "rule_id": "GHSA-43w2-9j62-hq99", "severity": "high", "component": "pkg:crates.io/smallvec@1.6.0", "fingerprint": "ba50c1802e51ced38a54ef5d84d292c2efbb3b72e0751e638b8539d27f3d1ebb", "state": "open" } ] }, { "tool": "semgrep", "version": "1.181.0", "binary_digest": "c29de7c43986faa3c3ca5a8acf1d115811e15ab305ba7657b79e775d40e16391", "config_digest": "206116bd213f0786f8378755ad48adbccfe30376afe8fe2ecdd24eb44161d009", "invocation_digest": "f3dfe0ed2197c2c55812c31eb6a20c881e8fc0e28e8e6fdc69e149337e14a88f", "input_subject_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "80c185ac8e17503197e8195c202d98db3f0cd3865a37ba7065f37bdbf2a58d54", "normalized_evidence_digest": "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "limitations": [], "evidence_class": "static_analysis", "observed_at": "2026-10-21T18:02:17.656150282+00:00", "findings": [] }, { "tool": "gitleaks", "version": "8.30.1", "binary_digest": "88f91962aa2f93ac6ab281d553b9e125f5197bbbce38f9f2437f7299c32e5509", "config_digest": "e1f77c307b36a43d3707ab5fed4a4007f6d63d9302bcf0d5509cd3e52e32ed6f", "invocation_digest": "497dd2010d6a321cfa4645d9c366e8d2e8bc923e320c1bed1834e7c3ec0c54e5", "input_subject_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "37517e5f3dc66819f61f5a7bb8ace1921282415f10551d2defa5c3eb0985b570", "normalized_evidence_digest": "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "limitations": [], "evidence_class": "secret", "observed_at": "2026-10-21T18:02:17.656150282+00:00", "findings": [] }, { "tool": "syft", "version": "1.54.1", "binary_digest": "dbf75864e7a7ff9e1fbf00552c31483f693188632a9f68f343cd7653dac513d6", "config_digest": "b6f045a568b2dd1dcd1a1723f4eb0b8f5863215301ced35067a5f7a53c07c7e6", "invocation_digest": "22eee92de7a91a923a00982dc2fa798362f2df94202d1750cdc71125a0dddb5c", "input_subject_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942", "normalized_evidence_digest": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "limitations": [], "evidence_class": "supply_chain", "observed_at": "2026-10-21T18:02:17.656150282+00:00", "findings": [ { "rule_namespace": "syft", "rule_id": "anstream@1.0.0", "component": "pkg:cargo/anstream@1.0.0", "fingerprint": "1001468a98bf8f886f889f3b76dee0717eea1611dbab5c3ec415bc0a9d3f9853", "state": "open" }, { "rule_namespace": "syft", "rule_id": "anstyle@1.0.14", "component": "pkg:cargo/anstyle@1.0.14", "fingerprint": "b4423ac5d91607f895d2e4f6b3b58b3b98e3220e95d5a560719a38f26e88a9aa", "state": "open" }, { "rule_namespace": "syft", "rule_id": "anstyle-parse@1.0.0", "component": "pkg:cargo/anstyle-parse@1.0.0", "fingerprint": "86b1ca2b439dac8c8ccf11610d2f44a40fa2c28b49c7a4f67fffc5ad7e7a4c34", "state": "open" }, { "rule_namespace": "syft", "rule_id": "anstyle-query@1.1.5", "component": "pkg:cargo/anstyle-query@1.1.5", "fingerprint": "59e640d2af9d99361184e5dd537b90d2c59bda2eba7000d96ad1688025214430", "state": "open" }, { "rule_namespace": "syft", "rule_id": "anstyle-wincon@3.0.11", "component": "pkg:cargo/anstyle-wincon@3.0.11", "fingerprint": "3b50475de5d0ec3dd61737fa6a9f81887b3ee6ff55d9fd7afecaa6d985cd26e6", "state": "open" }, { "rule_namespace": "syft", "rule_id": "base64ct@1.8.3", "component": "pkg:cargo/base64ct@1.8.3", "fingerprint": "5656f108cca5b4825c10d9ceed24fec9707f89915b6d39bb2c2f79b59f6a1eaf", "state": "open" }, { "rule_namespace": "syft", "rule_id": "bitflags@2.13.2", "component": "pkg:cargo/bitflags@2.13.2", "fingerprint": "2f570cfac9dde16b280d8ce6521d29be556270814081e669ebb29f300aac7e82", "state": "open" }, { "rule_namespace": "syft", "rule_id": "block-buffer@0.10.4", "component": "pkg:cargo/block-buffer@0.10.4", "fingerprint": "2b4e003d5403bd7ccd2ef88c2dcfba20586172a36e9e5feb24203884290f3fb8", "state": "open" }, { "rule_namespace": "syft", "rule_id": "cfg-if@1.0.5", "component": "pkg:cargo/cfg-if@1.0.5", "fingerprint": "40e2ca0f72307e7f2b92a7626063d84ab55fa1db6f40e2fdaea4eb417bb3d9f6", "state": "open" }, { "rule_namespace": "syft", "rule_id": "clap@4.6.7", "component": "pkg:cargo/clap@4.6.7", "fingerprint": "8b5288edc94ee3c1804eb2664bb8a57974ed5bd708efaad6ab63165c19e80dfd", "state": "open" }, { "rule_namespace": "syft", "rule_id": "clap_builder@4.6.7", "component": "pkg:cargo/clap_builder@4.6.7", "fingerprint": "4b4192da7ea8835334cc519c92e9230c5aa48d6e8b5905d5dc735155981a1f5d", "state": "open" }, { "rule_namespace": "syft", "rule_id": "clap_derive@4.6.7", "component": "pkg:cargo/clap_derive@4.6.7", "fingerprint": "4d51f0052690cd07873e9f2360688e746bd74d01be8bce8eb1e09d4b5ee2869f", "state": "open" }, { "rule_namespace": "syft", "rule_id": "clap_lex@1.1.1", "component": "pkg:cargo/clap_lex@1.1.1", "fingerprint": "d5118fb3b03cf55c1b5d2058dc703e5287863abfafc62e948f8bd37c554eed93", "state": "open" }, { "rule_namespace": "syft", "rule_id": "colorchoice@1.0.5", "component": "pkg:cargo/colorchoice@1.0.5", "fingerprint": "333b5e3b16c10da6f952448b19c196e74ca809dd500e5b626c5e94eca9950908", "state": "open" }, { "rule_namespace": "syft", "rule_id": "const-oid@0.9.6", "component": "pkg:cargo/const-oid@0.9.6", "fingerprint": "5541a7190761ecc001f652cbea75f887d34a63857a9d4a833c6c04c4f66c9cc2", "state": "open" }, { "rule_namespace": "syft", "rule_id": "cpufeatures@0.2.17", "component": "pkg:cargo/cpufeatures@0.2.17", "fingerprint": "2c41be5a411d55d53a6e1ecaae69000d6cfafc653329b5a415c3833ca3d938a3", "state": "open" }, { "rule_namespace": "syft", "rule_id": "crypto-common@0.1.7", "component": "pkg:cargo/crypto-common@0.1.7", "fingerprint": "94ebb3d3a04823de45b978f7f2d92b817a60a7eb82d8c7b676a832d72e58684f", "state": "open" }, { "rule_namespace": "syft", "rule_id": "curve25519-dalek@4.1.3", "component": "pkg:cargo/curve25519-dalek@4.1.3", "fingerprint": "fe69847583a09dbb422ed424b8822f6081a5b9a9ea4a5a0659aeeae90a1f3b68", "state": "open" }, { "rule_namespace": "syft", "rule_id": "curve25519-dalek-derive@0.1.1", "component": "pkg:cargo/curve25519-dalek-derive@0.1.1", "fingerprint": "30988a4946cd7b5896513c53b8f46fef2f041b7a32a8444f2fbbbe35504b0d30", "state": "open" }, { "rule_namespace": "syft", "rule_id": "der@0.7.10", "component": "pkg:cargo/der@0.7.10", "fingerprint": "8163a7cb6df166afc2111e82c998716d8b3a803f1869d677792d321ac2c09c7e", "state": "open" }, { "rule_namespace": "syft", "rule_id": "digest@0.10.7", "component": "pkg:cargo/digest@0.10.7", "fingerprint": "f543d9aefa032f0994738474a351c2d2be5ba43859f3a3edd9a65494ee9238b8", "state": "open" }, { "rule_namespace": "syft", "rule_id": "ed25519@2.2.3", "component": "pkg:cargo/ed25519@2.2.3", "fingerprint": "1a02d28487a2543cf9326fab370709729bebc9627626b39581bd1df154e91dbd", "state": "open" }, { "rule_namespace": "syft", "rule_id": "ed25519-dalek@2.2.0", "component": "pkg:cargo/ed25519-dalek@2.2.0", "fingerprint": "5d7bc1f87b8a0a9b4d360efd55b594a08fa0a5fef8d15fcf5ad942263a934c2d", "state": "open" }, { "rule_namespace": "syft", "rule_id": "errno@0.3.14", "component": "pkg:cargo/errno@0.3.14", "fingerprint": "fe0c520b266d11e2ad249f8ded3c90b5f136fb9263021fc61136e8c181a8023f", "state": "open" }, { "rule_namespace": "syft", "rule_id": "falsegreen-ledger@0.1.0", "component": "", "fingerprint": "841d8d48762b69b0eac8a31c3cdc02cd1eacac1caf7d69c291615aecc96b9ba8", "state": "open" }, { "rule_namespace": "syft", "rule_id": "falsegreen-ledger-core@0.1.0", "component": "", "fingerprint": "99c0e29b042978b26ae2896dfffc0866c8638f5604b43b5a33122de2f9811c19", "state": "open" }, { "rule_namespace": "syft", "rule_id": "fastrand@2.5.0", "component": "pkg:cargo/fastrand@2.5.0", "fingerprint": "2b7ba02485a3d76cc19b17317882c1dd65511ed5ad95e9e70a0bb5d7f5dd4043", "state": "open" }, { "rule_namespace": "syft", "rule_id": "fiat-crypto@0.2.9", "component": "pkg:cargo/fiat-crypto@0.2.9", "fingerprint": "de9f033198ba6f74b0c4f8cc0f961ff4d5f3b764d3a1e60f0f68a66fcb26f54f", "state": "open" }, { "rule_namespace": "syft", "rule_id": "generic-array@0.14.7", "component": "pkg:cargo/generic-array@0.14.7", "fingerprint": "375236d1387d03ae58db25418fce92969adbd21eca601a82cd8dc683fe60f20f", "state": "open" }, { "rule_namespace": "syft", "rule_id": "getrandom@0.2.17", "component": "pkg:cargo/getrandom@0.2.17", "fingerprint": "80e36ea36c4959f0d1b4dd76769554760054be60923fa8eae72bc10d83b30b90", "state": "open" }, { "rule_namespace": "syft", "rule_id": "getrandom@0.4.3", "component": "pkg:cargo/getrandom@0.4.3", "fingerprint": "05b5d32e6e201ead770f640d3986020565688d70ca4bf6d323def662c9b10bc0", "state": "open" }, { "rule_namespace": "syft", "rule_id": "heck@0.5.0", "component": "pkg:cargo/heck@0.5.0", "fingerprint": "c5eb23be3fdbc8afafc1cca8b9c5767bab582488149444a86b1d000d74e3c97a", "state": "open" }, { "rule_namespace": "syft", "rule_id": "hex@0.4.3", "component": "pkg:cargo/hex@0.4.3", "fingerprint": "79f94666cd1756f5374c513addc3b9444043d08bb49050dae4998fc934de41af", "state": "open" }, { "rule_namespace": "syft", "rule_id": "is_terminal_polyfill@1.70.2", "component": "pkg:cargo/is_terminal_polyfill@1.70.2", "fingerprint": "b005b2478a3e5a28b543b644c46c0e2049ab156cd1ccd7133ea9f40a5626b62d", "state": "open" }, { "rule_namespace": "syft", "rule_id": "itoa@1.0.18", "component": "pkg:cargo/itoa@1.0.18", "fingerprint": "aec45ddec07a815da2a5c182001bfe6e554ed2a0b89259d327f793511a774c40", "state": "open" }, { "rule_namespace": "syft", "rule_id": "libc@0.2.191", "component": "pkg:cargo/libc@0.2.191", "fingerprint": "b0e83395a6df61531693965b5dc89908e48f1fc30363b236cdebf457b3b8d84a", "state": "open" }, { "rule_namespace": "syft", "rule_id": "linux-raw-sys@0.12.1", "component": "pkg:cargo/linux-raw-sys@0.12.1", "fingerprint": "7516ef772912bc7e53189e7272c2213556425bc370efc1936e07fd2f7141dab0", "state": "open" }, { "rule_namespace": "syft", "rule_id": "memchr@2.8.3", "component": "pkg:cargo/memchr@2.8.3", "fingerprint": "19c7f7c6470891a44bd18bae9b5a2d1d0a9674e609cb6b681b6d78594026b1c0", "state": "open" }, { "rule_namespace": "syft", "rule_id": "once_cell@1.21.4", "component": "pkg:cargo/once_cell@1.21.4", "fingerprint": "5df49b2099b0dc508144dd3ce7f17d8ef89e1ca37347a5a9732cc45bef8a0865", "state": "open" }, { "rule_namespace": "syft", "rule_id": "once_cell_polyfill@1.70.2", "component": "pkg:cargo/once_cell_polyfill@1.70.2", "fingerprint": "67dbadfb6f4218d894e3b81d8d454f1540509b7c38981b00170ce499b12f89cc", "state": "open" }, { "rule_namespace": "syft", "rule_id": "pkcs8@0.10.2", "component": "pkg:cargo/pkcs8@0.10.2", "fingerprint": "c47c76d7946c7de7d9e8ccb0ce88035f70f673c663ff4bc87d7186e2cd59e8fe", "state": "open" }, { "rule_namespace": "syft", "rule_id": "ppv-lite86@0.2.21", "component": "pkg:cargo/ppv-lite86@0.2.21", "fingerprint": "9947e5da4cc28604998b938686ba44e72cd4382ce0330b0b7457439028a32e72", "state": "open" }, { "rule_namespace": "syft", "rule_id": "proc-macro2@1.0.107", "component": "pkg:cargo/proc-macro2@1.0.107", "fingerprint": "8a7eb5f7e790f0c2621a0b8b0602d5e8df183461cc0627f75774260b6b3ade32", "state": "open" }, { "rule_namespace": "syft", "rule_id": "quote@1.0.47", "component": "pkg:cargo/quote@1.0.47", "fingerprint": "ba5b73c1936ffd2ab425cc8480b56e7b5f48125bec80e2b12a1a44baa9c1c558", "state": "open" }, { "rule_namespace": "syft", "rule_id": "r-efi@6.0.0", "component": "pkg:cargo/r-efi@6.0.0", "fingerprint": "122b7ca8782f044bbf34b34a6611015ab063c5941471a1f9edf52859953335ea", "state": "open" }, { "rule_namespace": "syft", "rule_id": "rand@0.8.8", "component": "pkg:cargo/rand@0.8.8", "fingerprint": "d75967c1358b7152e9dec7577066f5049015cdd77c70b9c353ec196342cef83b", "state": "open" }, { "rule_namespace": "syft", "rule_id": "rand_chacha@0.3.1", "component": "pkg:cargo/rand_chacha@0.3.1", "fingerprint": "98b4b52cb9630b79c95cd3ce370098fda6810c9893935c1623818e6c2bc6a950", "state": "open" }, { "rule_namespace": "syft", "rule_id": "rand_core@0.6.4", "component": "pkg:cargo/rand_core@0.6.4", "fingerprint": "881bc35797d5dbc04b02e40860ac237cc76ab1e8561cd4d39d3fc0a1c3155a12", "state": "open" }, { "rule_namespace": "syft", "rule_id": "rustc_version@0.4.1", "component": "pkg:cargo/rustc_version@0.4.1", "fingerprint": "b856fc7dc29ef6489b43403c317b31a5c2f7469df3e78eb38496d906f65a41f9", "state": "open" }, { "rule_namespace": "syft", "rule_id": "rustix@1.1.5", "component": "pkg:cargo/rustix@1.1.5", "fingerprint": "161a149e15f158acea456dd7572470352fcc38e9861cf74a7affcdbebb3be84c", "state": "open" }, { "rule_namespace": "syft", "rule_id": "semver@1.0.28", "component": "pkg:cargo/semver@1.0.28", "fingerprint": "adf8dd8c6eab8cbfba291126118409767783c7721216321d264e71566a86fb64", "state": "open" }, { "rule_namespace": "syft", "rule_id": "serde@1.0.229", "component": "pkg:cargo/serde@1.0.229", "fingerprint": "6d867eaaeef95071a1e043e0f22f4765333205c756611890f0f6ee0f0bf2844a", "state": "open" }, { "rule_namespace": "syft", "rule_id": "serde_core@1.0.229", "component": "pkg:cargo/serde_core@1.0.229", "fingerprint": "e510c18b9a78eaa008df3d1ced75890c6610e5b6802183c55c7bbe66f2b08705", "state": "open" }, { "rule_namespace": "syft", "rule_id": "serde_derive@1.0.229", "component": "pkg:cargo/serde_derive@1.0.229", "fingerprint": "000799b93838d093c6bbd43247666d235ecbfd735b93222d2cd26233f0fb28ec", "state": "open" }, { "rule_namespace": "syft", "rule_id": "serde_json@1.0.154", "component": "pkg:cargo/serde_json@1.0.154", "fingerprint": "349a0dd333a0d2897b42960e7efb1d0830ab09b3e9eeb1e2acdeb5a200f289e1", "state": "open" }, { "rule_namespace": "syft", "rule_id": "sha2@0.10.9", "component": "pkg:cargo/sha2@0.10.9", "fingerprint": "477b1f1b81c82609f675f2c5aeb53cfb9f1191376ff8845a5647e9c6b05388df", "state": "open" }, { "rule_namespace": "syft", "rule_id": "signature@2.2.0", "component": "pkg:cargo/signature@2.2.0", "fingerprint": "7d8fc0ddf33982f4c2b6ca2f3739dc5f209faca02c4d8a01cb67023acf125d9c", "state": "open" }, { "rule_namespace": "syft", "rule_id": "smallvec@1.6.0", "component": "pkg:cargo/smallvec@1.6.0", "fingerprint": "1b292519074e47f7a1b01edc1ec1476b2f282e47ec7640820c0bad1afd635a20", "state": "open" }, { "rule_namespace": "syft", "rule_id": "spki@0.7.3", "component": "pkg:cargo/spki@0.7.3", "fingerprint": "e7593fa9bc039e2db40a3a71927e7b104a79be42d02d04e04b1b373dad5f9354", "state": "open" }, { "rule_namespace": "syft", "rule_id": "strsim@0.11.1", "component": "pkg:cargo/strsim@0.11.1", "fingerprint": "7260c481b09f354b4c8d13996a46735f790af5206fa07ffa86f3d9601768719a", "state": "open" }, { "rule_namespace": "syft", "rule_id": "subtle@2.6.1", "component": "pkg:cargo/subtle@2.6.1", "fingerprint": "abf520278b97397636ae0d0fba9c430b656b0af89b288300d4c9e12cd1bad2a9", "state": "open" }, { "rule_namespace": "syft", "rule_id": "syn@2.0.119", "component": "pkg:cargo/syn@2.0.119", "fingerprint": "80bcee46aef1b69a610a3810a2f7dc3fec1a8cff8a4366bc2369f50b8543a5e0", "state": "open" }, { "rule_namespace": "syft", "rule_id": "syn@3.0.9", "component": "pkg:cargo/syn@3.0.9", "fingerprint": "114cde3e9bfa178c4b502cb01a87d49a704c293fc6d1a07270388d14b152c9c2", "state": "open" }, { "rule_namespace": "syft", "rule_id": "tempfile@3.27.0", "component": "pkg:cargo/tempfile@3.27.0", "fingerprint": "cc64344e2b0f434ddea53beb971184de5fd0a84c6a9739eff5255d69b2d42a3c", "state": "open" }, { "rule_namespace": "syft", "rule_id": "typenum@1.20.1", "component": "pkg:cargo/typenum@1.20.1", "fingerprint": "69fca6104cc42ad018ccf1e723d8e6cc55ad7d890cbeaf9f3073487edb4e9c81", "state": "open" }, { "rule_namespace": "syft", "rule_id": "unicode-ident@1.0.27", "component": "pkg:cargo/unicode-ident@1.0.27", "fingerprint": "c8f069b4043c8b0afcbf7d2f1d9fdb3681c8f8cc75ee03d318b515654ab1e21c", "state": "open" }, { "rule_namespace": "syft", "rule_id": "utf8parse@0.2.2", "component": "pkg:cargo/utf8parse@0.2.2", "fingerprint": "c28ef21ff55492434ef623166a53f268c1c02540b430df3967683388cacd9336", "state": "open" }, { "rule_namespace": "syft", "rule_id": "version_check@0.9.5", "component": "pkg:cargo/version_check@0.9.5", "fingerprint": "a37defdbf8011a14f68d31205b137179a3eec551816dc2a2b861965901eed251", "state": "open" }, { "rule_namespace": "syft", "rule_id": "wasi@0.11.1+wasi-snapshot-preview1", "component": "pkg:cargo/wasi@0.11.1%2Bwasi-snapshot-preview1", "fingerprint": "8224d335948f5ae82312adc7b5040e9331715f1f580a94ac77e55f15af60fb24", "state": "open" }, { "rule_namespace": "syft", "rule_id": "windows-link@0.2.1", "component": "pkg:cargo/windows-link@0.2.1", "fingerprint": "f2e9441ed9c64738dc6bd8be208ecb9b3f0f2eb8ea5ddeb4fa1303339bb340d6", "state": "open" }, { "rule_namespace": "syft", "rule_id": "windows-sys@0.61.2", "component": "pkg:cargo/windows-sys@0.61.2", "fingerprint": "b2713fc2f7bff729a27c0f62ee1be368d8344e0a7237e06edae435bfe00f9353", "state": "open" }, { "rule_namespace": "syft", "rule_id": "zerocopy@0.8.63", "component": "pkg:cargo/zerocopy@0.8.63", "fingerprint": "538de62743d2a698d49ae17957387bceef902f05602838b337eb33ef3a2018ca", "state": "open" }, { "rule_namespace": "syft", "rule_id": "zerocopy-derive@0.8.63", "component": "pkg:cargo/zerocopy-derive@0.8.63", "fingerprint": "c28066f0d74cc875b1313b642f5b65466e41ca5928021fdf354e3a5158e5f887", "state": "open" }, { "rule_namespace": "syft", "rule_id": "zeroize@1.9.1", "component": "pkg:cargo/zeroize@1.9.1", "fingerprint": "a9b132d8d889548f19dbf2f1ed6a078ca10079500e9a4e3e2c23e407a3c4c2bb", "state": "open" }, { "rule_namespace": "syft", "rule_id": "zmij@1.0.23", "component": "pkg:cargo/zmij@1.0.23", "fingerprint": "18a805aded02f77466f8ea530827dac33264f4eea283a1e3793fe895db3d0ad5", "state": "open" } ] }, { "tool": "dependency-manifest", "version": "1", "binary_digest": "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4", "config_digest": "2402cf6f9fd45d6c6d7b9bc10abdba72e36d61e88515a01d2cda19ee8d375b3b", "invocation_digest": "41dd72d0f0c625cedddffd7035ef794b142f250ac3553faa884b254c6bb66b42", "input_subject_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4", "normalized_evidence_digest": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "limitations": [ "license facts are the job dependency manifest's registry SPDX ids; the workspace's own code and git-sourced dependencies carry no registry license facts" ], "evidence_class": "license", "observed_at": "2026-10-21T18:02:17.656150282+00:00", "findings": [ { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/anstream@1.0.0", "fingerprint": "81c389e920feb226956ea5e7e905e055ef3190e347d2024731cba977530b1c28", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/anstyle@1.0.14", "fingerprint": "72cb9f765ade0582fd1b8d4e3ec30734124e9580702182e52b07ce552ace97b1", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/anstyle-parse@1.0.0", "fingerprint": "03dae4cdd1bc7ba73958bf1c617e4f5aa93a31d30b5efa57cb32af82f5010ef9", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/anstyle-query@1.1.5", "fingerprint": "847b1133ac62af0c80b617aa8a687925f44ff02a38077b59d57f8a3d2c9e7377", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/anstyle-wincon@3.0.11", "fingerprint": "930051eead4685b3c169c214c7e4bf568a6b18c75060c642828af9b1e4a92cb7", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/base64ct@1.8.3", "fingerprint": "c2936ea98513be3acbc17ec843a0b5a87f2ec66b23198a7e457cbfe82501de17", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/bitflags@2.13.2", "fingerprint": "5a267ea0d4b32ca26ee6285110e4831c63bc24aba4b4ef50a6ce820dab9bc9c7", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/block-buffer@0.10.4", "fingerprint": "65f5493f0209c5bb833a448c5a4f8d34ea9cbb19fd226d673fb6378da3d45d81", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/cfg-if@1.0.5", "fingerprint": "9c66873ce2b15cedf8971b5136299c6dbbdbdb00096f984baca5c60e43f20b86", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/clap@4.6.7", "fingerprint": "b6d470dc0b142702b891dd8112eb44dacb7f1e64144fc95e7c4d8188299612c5", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/clap_builder@4.6.7", "fingerprint": "57fd5416fc287aefb50fdd41cdf558dc3aab82e27a8e542cb21cb6641a034fbf", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/clap_derive@4.6.7", "fingerprint": "e4955ec9e34c975255437f60abb69c42ffe6c4faff7bd1b2c2f1f582a1266f6f", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/clap_lex@1.1.1", "fingerprint": "9c1ce04a546342b75e26dcedd88dfd64ed4c42c1e22db5d575ebd9b83bdab96f", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/colorchoice@1.0.5", "fingerprint": "0cd1130d559feb72b1789c9dfc5ca946a042b193f6efe22b205f7179ae628471", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/const-oid@0.9.6", "fingerprint": "dd86b6e6f0675712fca49ad744596692f3308ad888e80c2fe798ae86fcc44761", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/cpufeatures@0.2.17", "fingerprint": "04a7c96209fbd41f9a1817ea4d2a6e8677796fa4ec0dc537d76a9dec0036eb8f", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/crypto-common@0.1.7", "fingerprint": "745d756e8999f1a9a249aed77699c555941595329a4e4343de89ae96e1d0333a", "state": "open" }, { "rule_namespace": "license", "rule_id": "BSD-3-Clause", "component": "pkg:cargo/curve25519-dalek@4.1.3", "fingerprint": "0bb575d6587d75ee9592137d2931238680210aecc215909adba1e5f8072feb00", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT/Apache-2.0", "component": "pkg:cargo/curve25519-dalek-derive@0.1.1", "fingerprint": "2bd313068cc5979f66814611d0f2653764f5f02a5fea3659e6622b7141a9efb2", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/der@0.7.10", "fingerprint": "5581ac6ec26f13cf9bf99838842922d224f796330520c89e209f34f8263deca9", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/digest@0.10.7", "fingerprint": "66d845a56cbb7c318352a08f46d3b6991b4e15095a844109683d6395bea3a1c7", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/ed25519@2.2.3", "fingerprint": "b1ef1484de84840c7c0a2c51933966b0868f8da06be7d59e7b77a92b3dcd12c6", "state": "open" }, { "rule_namespace": "license", "rule_id": "BSD-3-Clause", "component": "pkg:cargo/ed25519-dalek@2.2.0", "fingerprint": "59ce4b8271427de2f3c94b79b2d666608dd0ab80f62ba57ba79decbe90460d6c", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/errno@0.3.14", "fingerprint": "b2cf2d50c9d7e3df66abaf43435835639e08034d0258c853bbb967068248c7c1", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/fastrand@2.5.0", "fingerprint": "68281187c66d4c9670acbf7a748a35df777f7796eace3eb74ecd3c0df1af2377", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0 OR BSD-1-Clause", "component": "pkg:cargo/fiat-crypto@0.2.9", "fingerprint": "ab0d3ee1c57f754c8e9f310625a0a15790a9d09e9ce260b33597c5215179f9fd", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT", "component": "pkg:cargo/generic-array@0.14.7", "fingerprint": "4100baa4894d6f4a883eefdffa6f2a3f3f8932c5f513fd1b463bea367b450a8b", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/getrandom@0.2.17", "fingerprint": "e0e248e843d9c977190d92d5e8671ff1fe633094bec2fd78deda8cc2b9ddd913", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/getrandom@0.4.3", "fingerprint": "d34eb7b77676d5fa2a2fb54ccbdcf812b2e95ece08d523b51a8112876b9e9f1b", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/heck@0.5.0", "fingerprint": "f15e7f9397ec2df7435dfa719bd9ed4ec07a7f9b63f63a6b0a1ded192a681875", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/hex@0.4.3", "fingerprint": "0880807ea598985ae4e2b054afdf19681651cc0555d47de97c81bf15d308e1c1", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/is_terminal_polyfill@1.70.2", "fingerprint": "ea5404a32d8fe5f4d7b7c150ae9c418bef44434084f9807f04760b247a1833b6", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/itoa@1.0.18", "fingerprint": "0b71ec3d77ef8519b86e537ff5fac2a87a1e23a1a94302a67b55044db9e38cb7", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/libc@0.2.191", "fingerprint": "9d9973caa830049a9211e8ed805b7dcf7f690659b71db96bf5c4593d7b2ca614", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT", "component": "pkg:cargo/linux-raw-sys@0.12.1", "fingerprint": "773523a49f8cd1a1df7385ad357b411d263186aa04cb952428f2225c95e692a2", "state": "open" }, { "rule_namespace": "license", "rule_id": "Unlicense OR MIT", "component": "pkg:cargo/memchr@2.8.3", "fingerprint": "bf1591437a6f99fe31f560f71637dd4271236182cf3fe1f2a57f545ab377d916", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/once_cell@1.21.4", "fingerprint": "bf0bc6b374808f7c6f3fd08c0a7d63965be10e3ff39ebcd785fcf0d624f8acb0", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/once_cell_polyfill@1.70.2", "fingerprint": "4e122c54241f8e08146c80b9e7aace82ab89579bab281e82a26ef89d5444df44", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/pkcs8@0.10.2", "fingerprint": "dcf79ef96b12576f3da49211f68cd786c965cbcb198cc01af73f3d5426884627", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/ppv-lite86@0.2.21", "fingerprint": "10dbed4778cb7f48cbbaaafe5a6bc2839b58297bde9f43d49cab1a639d5c927c", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/proc-macro2@1.0.107", "fingerprint": "1efce8992cf906cfadfccce323fa0ae6955df07a7460965cebb2a64de11dc74b", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/quote@1.0.47", "fingerprint": "ab119f6f830df1f8f8ca18f18a1b7e8166482bbc79b529b2b01f1ef8d351dc9d", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0 OR LGPL-2.1-or-later", "component": "pkg:cargo/r-efi@6.0.0", "fingerprint": "79b3757623de39a2d1e2cbc582531edb2232c2fedae78ae86266ff0a657e6692", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/rand@0.8.8", "fingerprint": "671dab68d2ada9d89ee44f0464a0e42d22a9c70a7b4862b87c34ef30801c0b99", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/rand_chacha@0.3.1", "fingerprint": "09545686bd0a3e470a4467c0216f6dd076ee18f9ccdc19e939a2a0c8338a130c", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/rand_core@0.6.4", "fingerprint": "5b4629e1e1e878c03195737d30e6f492dc34c5d799ba36c5c04b8192eece897e", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/rustc_version@0.4.1", "fingerprint": "6ed6e8818bc7dbe359728d9d8c8e843d5421d6999b5853490c9cf658d37e59e0", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT", "component": "pkg:cargo/rustix@1.1.5", "fingerprint": "70045df0de7040cc8e3f8920f8dbce683735be2f3505c999933268304eed3d01", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/semver@1.0.28", "fingerprint": "d1f1194d0512ca4c7a020f03728853a518bbdb6719bc6a3a7fc7caeda7f6bdfe", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/serde@1.0.229", "fingerprint": "e1eb81e653a288a15481d6312ab337b18d44e2d94d49f48ac7c8c3ec800a36f5", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/serde_core@1.0.229", "fingerprint": "4086d666853f837b329582f4ada668b8ee6eb0983c029a5fa7eacb4cd7b95ea7", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/serde_derive@1.0.229", "fingerprint": "4077d1047525fda030d22d1788a1c3aa36c56309be7434055545e4a5acc5435e", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/serde_json@1.0.154", "fingerprint": "2dc62cd2e94dfe2e326379ab19b563408bee14cbd79b7c9730b3cf913df685ee", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/sha2@0.10.9", "fingerprint": "8fffdf2de9a098e260c473f456893764abfb0da25c8edf8f28ef1d8b3b483857", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/signature@2.2.0", "fingerprint": "8409e8477eaa8b299157e472284dbb382c65babc4a10856896a0325c741bfc84", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT/Apache-2.0", "component": "pkg:cargo/smallvec@1.6.0", "fingerprint": "cfe55c94dcb01bd350011e0618de53cfeeccc9fedcf5a83cd1bd293d6dedb9f4", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/spki@0.7.3", "fingerprint": "6d2575dae8ab3515840e41bc7dd0289d19fe62354849d325d3f4876f96842a9b", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT", "component": "pkg:cargo/strsim@0.11.1", "fingerprint": "3803c2ce269d8937cb5ca282cfc7de1c38bec3947a7f800554d22c9b6af0b4ff", "state": "open" }, { "rule_namespace": "license", "rule_id": "BSD-3-Clause", "component": "pkg:cargo/subtle@2.6.1", "fingerprint": "b2905d01e0f0b65a50ff69518e7472eced519c61c4f31a958fedf47503a048c5", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/syn@2.0.119", "fingerprint": "ec75866e642d56853e0689f491ec83f5ca076a545a518dbc71cb657872de02ba", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/syn@3.0.9", "fingerprint": "50816f9296ebef556556bbf41104d9aff94dc3c3b78917993d062c356ece3a83", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/tempfile@3.27.0", "fingerprint": "fb7e166af30cc01cf8d9fa7bc5864a37ef17e94f0dcad6591c23c48b4f16a08f", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/typenum@1.20.1", "fingerprint": "64aa3bf3c0ae12c744475d6fbd6062f2bf93df107d8585dce88c78832b669779", "state": "open" }, { "rule_namespace": "license", "rule_id": "(MIT OR Apache-2.0) AND Unicode-3.0", "component": "pkg:cargo/unicode-ident@1.0.27", "fingerprint": "bbfb4a615f30648ef5a8eaf210033aa1baaab14fa0bc9482ac72ae7641a6e466", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/utf8parse@0.2.2", "fingerprint": "af63bfd1ce1cfe636db88caaa115b8843ca67e96b3dd93f523d84771bf40a073", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT/Apache-2.0", "component": "pkg:cargo/version_check@0.9.5", "fingerprint": "99b8a953eefdb41a40a9a077b9032a3b6a395900604be21a32da30658ce61f15", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT", "component": "pkg:cargo/wasi@0.11.1+wasi-snapshot-preview1", "fingerprint": "d9cbaa8941d43791ff495ffbc74a5ec516e48db88243ab8abce575acfe23e028", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/windows-link@0.2.1", "fingerprint": "6a884f0186ee68ed468285b3dee5325fccd3809ca04aafabffd42e588d76a3e0", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT OR Apache-2.0", "component": "pkg:cargo/windows-sys@0.61.2", "fingerprint": "169218fdfc26698b6fd1a352d504c2359a123be3ebf7d7b9e0c223406ce70d21", "state": "open" }, { "rule_namespace": "license", "rule_id": "BSD-2-Clause OR Apache-2.0 OR MIT", "component": "pkg:cargo/zerocopy@0.8.63", "fingerprint": "dca0f093c749462f428d68cecfb63c6f0b0443b944e3f93172bc7b85bea835ec", "state": "open" }, { "rule_namespace": "license", "rule_id": "BSD-2-Clause OR Apache-2.0 OR MIT", "component": "pkg:cargo/zerocopy-derive@0.8.63", "fingerprint": "aa23299329debd40f4b88bbe41983c6f0b798920fe0306bdb2bd12307011eff0", "state": "open" }, { "rule_namespace": "license", "rule_id": "Apache-2.0 OR MIT", "component": "pkg:cargo/zeroize@1.9.1", "fingerprint": "ad04bc15c43493a874503f1f4e5228c67653134c34ae698ee27abc3ba5027fed", "state": "open" }, { "rule_namespace": "license", "rule_id": "MIT", "component": "pkg:cargo/zmij@1.0.23", "fingerprint": "cf39f12ea4d06ecb2c119337d3ddd79c7cc97ef7e7e900bb4beb745ac2696a0d", "state": "open" } ] } ], "dependency_manifest": { "ecosystem": "rust", "tool": "cargo", "tool_version": "1.99.0", "entries": [ { "name": "anstream", "version": "1.0.0", "purl": "pkg:cargo/anstream@1.0.0", "sha256": "824a212faf96e9acacdbd09febd34438f8f711fb84e09a8916013cd7815ca28d", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "anstyle", "version": "1.0.14", "purl": "pkg:cargo/anstyle@1.0.14", "sha256": "940b3a0ca603d1eade50a4846a2afffd5ef57a9feac2c0e2ec2e14f9ead76000", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "anstyle-parse", "version": "1.0.0", "purl": "pkg:cargo/anstyle-parse@1.0.0", "sha256": "52ce7f38b242319f7cabaa6813055467063ecdc9d355bbb4ce0c68908cd8130e", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "anstyle-query", "version": "1.1.5", "purl": "pkg:cargo/anstyle-query@1.1.5", "sha256": "40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "anstyle-wincon", "version": "3.0.11", "purl": "pkg:cargo/anstyle-wincon@3.0.11", "sha256": "291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "base64ct", "version": "1.8.3", "purl": "pkg:cargo/base64ct@1.8.3", "sha256": "2af50177e190e07a26ab74f8b1efbfe2ef87da2116221318cb1c2e82baf7de06", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "bitflags", "version": "2.13.2", "purl": "pkg:cargo/bitflags@2.13.2", "sha256": "3ded4057c258ba199e2d26386d3af3780957ecaee6c4ef4041c6b4b8b97c0b06", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "block-buffer", "version": "0.10.4", "purl": "pkg:cargo/block-buffer@0.10.4", "sha256": "3078c7629b62d3f0439517fa394996acacc5cbc91c5a20d8c658e77abd503a71", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "cfg-if", "version": "1.0.5", "purl": "pkg:cargo/cfg-if@1.0.5", "sha256": "4e7648175b45a9a48536d676f68d918270699102aa8dab5496df06904c914600", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "clap", "version": "4.6.7", "purl": "pkg:cargo/clap@4.6.7", "sha256": "aa8876b300ab35ba921adea3dfd70157a46249b33f95c9084ae5709785478946", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "clap_builder", "version": "4.6.7", "purl": "pkg:cargo/clap_builder@4.6.7", "sha256": "ec0797fb7aeb1406c84efac526901f7ec3ead2124f946b494e72879d4b54704d", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "clap_derive", "version": "4.6.7", "purl": "pkg:cargo/clap_derive@4.6.7", "sha256": "f9c751b79415d4e559e3d1fcf128e09e720eb673a06d26cf6f392d37d75b66e0", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "clap_lex", "version": "1.1.1", "purl": "pkg:cargo/clap_lex@1.1.1", "sha256": "1c133bc6a41be0d194c306b5506d15e6feeea7b1d6604bd3f8310dfb2ca96486", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "colorchoice", "version": "1.0.5", "purl": "pkg:cargo/colorchoice@1.0.5", "sha256": "1d07550c9036bf2ae0c684c4297d503f838287c83c53686d05370d0e139ae570", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "const-oid", "version": "0.9.6", "purl": "pkg:cargo/const-oid@0.9.6", "sha256": "c2459377285ad874054d797f3ccebf984978aa39129f6eafde5cdc8315b612f8", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "cpufeatures", "version": "0.2.17", "purl": "pkg:cargo/cpufeatures@0.2.17", "sha256": "59ed5838eebb26a2bb2e58f6d5b5316989ae9d08bab10e0e6d103e656d1b0280", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "crypto-common", "version": "0.1.7", "purl": "pkg:cargo/crypto-common@0.1.7", "sha256": "78c8292055d1c1df0cce5d180393dc8cce0abec0a7102adb6c7b1eef6016d60a", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "curve25519-dalek", "version": "4.1.3", "purl": "pkg:cargo/curve25519-dalek@4.1.3", "sha256": "97fb8b7c4503de7d6ae7b42ab72a5a59857b4c937ec27a3d4539dba95b5ab2be", "scope": "runtime", "licenses": [ "BSD-3-Clause" ] }, { "name": "curve25519-dalek-derive", "version": "0.1.1", "purl": "pkg:cargo/curve25519-dalek-derive@0.1.1", "sha256": "f46882e17999c6cc590af592290432be3bce0428cb0d5f8b6715e4dc7b383eb3", "scope": "runtime", "licenses": [ "MIT/Apache-2.0" ] }, { "name": "der", "version": "0.7.10", "purl": "pkg:cargo/der@0.7.10", "sha256": "e7c1832837b905bbfb5101e07cc24c8deddf52f93225eee6ead5f4d63d53ddcb", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "digest", "version": "0.10.7", "purl": "pkg:cargo/digest@0.10.7", "sha256": "9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "ed25519", "version": "2.2.3", "purl": "pkg:cargo/ed25519@2.2.3", "sha256": "115531babc129696a58c64a4fef0a8bf9e9698629fb97e9e40767d235cfbcd53", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "ed25519-dalek", "version": "2.2.0", "purl": "pkg:cargo/ed25519-dalek@2.2.0", "sha256": "70e796c081cee67dc755e1a36a0a172b897fab85fc3f6bc48307991f64e4eca9", "scope": "runtime", "licenses": [ "BSD-3-Clause" ] }, { "name": "errno", "version": "0.3.14", "purl": "pkg:cargo/errno@0.3.14", "sha256": "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "fastrand", "version": "2.5.0", "purl": "pkg:cargo/fastrand@2.5.0", "sha256": "da7c62ceae207dd37ea5b845da6a0696c799f85e97da1ab5b7910be3c1c80223", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "fiat-crypto", "version": "0.2.9", "purl": "pkg:cargo/fiat-crypto@0.2.9", "sha256": "28dea519a9695b9977216879a3ebfddf92f1c08c05d984f8996aecd6ecdc811d", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0 OR BSD-1-Clause" ] }, { "name": "generic-array", "version": "0.14.7", "purl": "pkg:cargo/generic-array@0.14.7", "sha256": "85649ca51fd72272d7821adaf274ad91c288277713d9c18820d8499a7ff69e9a", "scope": "runtime", "licenses": [ "MIT" ] }, { "name": "getrandom", "version": "0.2.17", "purl": "pkg:cargo/getrandom@0.2.17", "sha256": "ff2abc00be7fca6ebc474524697ae276ad847ad0a6b3faa4bcb027e9a4614ad0", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "getrandom", "version": "0.4.3", "purl": "pkg:cargo/getrandom@0.4.3", "sha256": "300e883d756b2e4ec94e02791f39b04b522276138852cfc41d9fb7e904106099", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "heck", "version": "0.5.0", "purl": "pkg:cargo/heck@0.5.0", "sha256": "2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "hex", "version": "0.4.3", "purl": "pkg:cargo/hex@0.4.3", "sha256": "7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "is_terminal_polyfill", "version": "1.70.2", "purl": "pkg:cargo/is_terminal_polyfill@1.70.2", "sha256": "a6cb138bb79a146c1bd460005623e142ef0181e3d0219cb493e02f7d08a35695", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "itoa", "version": "1.0.18", "purl": "pkg:cargo/itoa@1.0.18", "sha256": "8f42a60cbdf9a97f5d2305f08a87dc4e09308d1276d28c869c684d7777685682", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "libc", "version": "0.2.191", "purl": "pkg:cargo/libc@0.2.191", "sha256": "65cd87c9a6d60536580b316ad985726104730a5151c99845f2490428ef91240a", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "linux-raw-sys", "version": "0.12.1", "purl": "pkg:cargo/linux-raw-sys@0.12.1", "sha256": "32a66949e030da00e8c7d4434b251670a91556f4144941d37452769c25d58a53", "scope": "runtime", "licenses": [ "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT" ] }, { "name": "memchr", "version": "2.8.3", "purl": "pkg:cargo/memchr@2.8.3", "sha256": "cf8baf1c55e62ffcace7a9f06f4bd9cd3f0c4beb022d3b367256b91b87513d98", "scope": "runtime", "licenses": [ "Unlicense OR MIT" ] }, { "name": "once_cell", "version": "1.21.4", "purl": "pkg:cargo/once_cell@1.21.4", "sha256": "9f7c3e4beb33f85d45ae3e3a1792185706c8e16d043238c593331cc7cd313b50", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "once_cell_polyfill", "version": "1.70.2", "purl": "pkg:cargo/once_cell_polyfill@1.70.2", "sha256": "384b8ab6d37215f3c5301a95a4accb5d64aa607f1fcb26a11b5303878451b4fe", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "pkcs8", "version": "0.10.2", "purl": "pkg:cargo/pkcs8@0.10.2", "sha256": "f950b2377845cebe5cf8b5165cb3cc1a5e0fa5cfa3e1f7f55707d8fd82e0a7b7", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "ppv-lite86", "version": "0.2.21", "purl": "pkg:cargo/ppv-lite86@0.2.21", "sha256": "85eae3c4ed2f50dcfe72643da4befc30deadb458a9b590d720cde2f2b1e97da9", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "proc-macro2", "version": "1.0.107", "purl": "pkg:cargo/proc-macro2@1.0.107", "sha256": "985e7ec9bb745e6ce6535b544d84d6cd6f7ad8bd711c398938ae983b91a766d9", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "quote", "version": "1.0.47", "purl": "pkg:cargo/quote@1.0.47", "sha256": "1fbf4db142a473a8d80c26bbf18454ed458bf8d26c8219c331daecfdbd079001", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "r-efi", "version": "6.0.0", "purl": "pkg:cargo/r-efi@6.0.0", "sha256": "f8dcc9c7d52a811697d2151c701e0d08956f92b0e24136cf4cf27b57a6a0d9bf", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0 OR LGPL-2.1-or-later" ] }, { "name": "rand", "version": "0.8.8", "purl": "pkg:cargo/rand@0.8.8", "sha256": "e058c7de0b26af77780c769414d6257830bb240f3c38477dbc2c16e5f54d6d4c", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "rand_chacha", "version": "0.3.1", "purl": "pkg:cargo/rand_chacha@0.3.1", "sha256": "e6c10a63a0fa32252be49d21e7709d4d4baf8d231c2dbce1eaa8141b9b127d88", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "rand_core", "version": "0.6.4", "purl": "pkg:cargo/rand_core@0.6.4", "sha256": "ec0be4795e2f6a28069bec0b5ff3e2ac9bafc99e6a9a7dc3547996c5c816922c", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "rustc_version", "version": "0.4.1", "purl": "pkg:cargo/rustc_version@0.4.1", "sha256": "cfcb3a22ef46e85b45de6ee7e79d063319ebb6594faafcf1c225ea92ab6e9b92", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "rustix", "version": "1.1.5", "purl": "pkg:cargo/rustix@1.1.5", "sha256": "891efababe418670775f199f0d233d84843c227a0949a883ce15b37c78d6629d", "scope": "runtime", "licenses": [ "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT" ] }, { "name": "semver", "version": "1.0.28", "purl": "pkg:cargo/semver@1.0.28", "sha256": "8a7852d02fc848982e0c167ef163aaff9cd91dc640ba85e263cb1ce46fae51cd", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "serde", "version": "1.0.229", "purl": "pkg:cargo/serde@1.0.229", "sha256": "4148590afebada386688f18773da617792bf2ef03ffc1e4cbd2b1d45b023e0ba", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "serde_core", "version": "1.0.229", "purl": "pkg:cargo/serde_core@1.0.229", "sha256": "67dca2c9c51e58a4791a4b1ed58308b39c64224d349a935ab5039aa360942a48", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "serde_derive", "version": "1.0.229", "purl": "pkg:cargo/serde_derive@1.0.229", "sha256": "e7a5d71263a5a7d47b41f6b3f06ba276f10cc18b0931f1799f710578e2309348", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "serde_json", "version": "1.0.154", "purl": "pkg:cargo/serde_json@1.0.154", "sha256": "e7e9cc8b1b85264074fbcc02a88680c4096b1e47df8f739dceb03bf482f04bd6", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "sha2", "version": "0.10.9", "purl": "pkg:cargo/sha2@0.10.9", "sha256": "a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "signature", "version": "2.2.0", "purl": "pkg:cargo/signature@2.2.0", "sha256": "77549399552de45a898a580c1b41d445bf730df867cc44e6c0233bbc4b8329de", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "smallvec", "version": "1.6.0", "purl": "pkg:cargo/smallvec@1.6.0", "sha256": "1a55ca5f3b68e41c979bf8c46a6f1da892ca4db8f94023ce0bd32407573b1ac0", "scope": "runtime", "licenses": [ "MIT/Apache-2.0" ] }, { "name": "spki", "version": "0.7.3", "purl": "pkg:cargo/spki@0.7.3", "sha256": "d91ed6c858b01f942cd56b37a94b3e0a1798290327d1236e4d9cf4eaca44d29d", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "strsim", "version": "0.11.1", "purl": "pkg:cargo/strsim@0.11.1", "sha256": "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f", "scope": "runtime", "licenses": [ "MIT" ] }, { "name": "subtle", "version": "2.6.1", "purl": "pkg:cargo/subtle@2.6.1", "sha256": "13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292", "scope": "runtime", "licenses": [ "BSD-3-Clause" ] }, { "name": "syn", "version": "2.0.119", "purl": "pkg:cargo/syn@2.0.119", "sha256": "872831b642d1a07999a962a351ed35b955ea2cfc8f3862091e2a240a84f17297", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "syn", "version": "3.0.9", "purl": "pkg:cargo/syn@3.0.9", "sha256": "d78c8dee4c7bf0e14673097256fed6142ce9d3b85a408189d07482442145823b", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "tempfile", "version": "3.27.0", "purl": "pkg:cargo/tempfile@3.27.0", "sha256": "32497e9a4c7b38532efcdebeef879707aa9f794296a4f0244f6f69e9bc8574bd", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "typenum", "version": "1.20.1", "purl": "pkg:cargo/typenum@1.20.1", "sha256": "b6f5e870be6c3b371b77fe0ee0bafb859fa4964b4404c27de1d380043c4dda20", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "unicode-ident", "version": "1.0.27", "purl": "pkg:cargo/unicode-ident@1.0.27", "sha256": "a2c754d6c33795a1c324727428e5a7dedb5b06195f9890bdbcba760d3e246563", "scope": "runtime", "licenses": [ "(MIT OR Apache-2.0) AND Unicode-3.0" ] }, { "name": "utf8parse", "version": "0.2.2", "purl": "pkg:cargo/utf8parse@0.2.2", "sha256": "06abde3611657adf66d383f00b093d7faecc7fa57071cce2578660c9f1010821", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "version_check", "version": "0.9.5", "purl": "pkg:cargo/version_check@0.9.5", "sha256": "0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a", "scope": "runtime", "licenses": [ "MIT/Apache-2.0" ] }, { "name": "wasi", "version": "0.11.1+wasi-snapshot-preview1", "purl": "pkg:cargo/wasi@0.11.1+wasi-snapshot-preview1", "sha256": "ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b", "scope": "runtime", "licenses": [ "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT" ] }, { "name": "windows-link", "version": "0.2.1", "purl": "pkg:cargo/windows-link@0.2.1", "sha256": "f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "windows-sys", "version": "0.61.2", "purl": "pkg:cargo/windows-sys@0.61.2", "sha256": "ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc", "scope": "runtime", "licenses": [ "MIT OR Apache-2.0" ] }, { "name": "zerocopy", "version": "0.8.63", "purl": "pkg:cargo/zerocopy@0.8.63", "sha256": "e5fe1f8f1b06191a00962174c61aa5005e0bb391a6d80d07e24d115c01a92ed8", "scope": "runtime", "licenses": [ "BSD-2-Clause OR Apache-2.0 OR MIT" ] }, { "name": "zerocopy-derive", "version": "0.8.63", "purl": "pkg:cargo/zerocopy-derive@0.8.63", "sha256": "863ad3ac83293fb4d740aedbfdc9240dd8d1a50c1099acd76ce80ce7c7230c7f", "scope": "runtime", "licenses": [ "BSD-2-Clause OR Apache-2.0 OR MIT" ] }, { "name": "zeroize", "version": "1.9.1", "purl": "pkg:cargo/zeroize@1.9.1", "sha256": "e13084392c5e4bc371903e2935a5eaeed24905a7511356b883835e18a78f6879", "scope": "runtime", "licenses": [ "Apache-2.0 OR MIT" ] }, { "name": "zmij", "version": "1.0.23", "purl": "pkg:cargo/zmij@1.0.23", "sha256": "29666d0abbfad1e3dc4dcf6144730dd3a3ab225bbbdac83319345b1b44ccfc1b", "scope": "runtime", "licenses": [ "MIT" ] } ] } } } ], "verification_ms": 565579, "security": { "policy": { "id": "falsegreen-platform", "version": "1", "digest": "372d3c74758acb113c1bef14b20b08b326a7703dd57d943247de6541743c0fad", "required": [ "dependency_vulnerability", "static_analysis", "secret", "supply_chain", "license" ], "minimum_witnesses": 1, "fail_on_severities": [ "critical", "high" ], "unknown_severity": "insufficient", "secrets_fail_on_any_unexcepted": true, "required_standards": [], "unavailable_behavior": "insufficient" }, "language": "", "classes": [ { "class": "dependency_vulnerability", "required": true, "status": "fail", "witness_refs": [ "a01c9fbe2e0f89ba51e98a9f9adb3e2221181b02f05426888a8e8e1d4c6f99a0" ], "reasons": [ "vulnerability snapshot is stale (observed 2026-10-21T17:30:12Z, freshness bound 24h)", "finding 5046f75b49bcc91e972fe6e37dff89bd730acac66b5c0835cdfea59610c6a9a5 severity `high` is frozen-fail (osv/RUSTSEC-2021-0003)", "finding 538efbca6ab37d1de7206475fd690628e0d69cbb5b3b1d27719f69b6caaf43f7 severity `high` is frozen-fail (osv/GHSA-43w2-9j62-hq99)" ] }, { "class": "static_analysis", "required": true, "status": "pass", "witness_refs": [ "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945" ], "reasons": [] }, { "class": "secret", "required": true, "status": "pass", "witness_refs": [ "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945" ], "reasons": [] }, { "class": "supply_chain", "required": true, "status": "pass", "witness_refs": [ "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db" ], "reasons": [] }, { "class": "license", "required": true, "status": "not_assessed", "witness_refs": [ "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a" ], "reasons": [ "no licence policy frozen — the licence facts are inventory, nothing was asserted" ] } ], "findings": [ { "id": "5046f75b49bcc91e972fe6e37dff89bd730acac66b5c0835cdfea59610c6a9a5", "class": "dependency_vulnerability", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:crates.io/smallvec@1.6.0" }, "rule": { "namespace": "osv", "id": "RUSTSEC-2021-0003" }, "severity": { "value": "high" }, "state": "open", "evidence_refs": [ "5ae553c6dbf38762a5b61997c8ab3c964845e6f2033cc5886f39707289c42d22" ], "witness_tool_ref": "a01c9fbe2e0f89ba51e98a9f9adb3e2221181b02f05426888a8e8e1d4c6f99a0", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "538efbca6ab37d1de7206475fd690628e0d69cbb5b3b1d27719f69b6caaf43f7", "class": "dependency_vulnerability", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:crates.io/smallvec@1.6.0" }, "rule": { "namespace": "osv", "id": "GHSA-43w2-9j62-hq99" }, "severity": { "value": "high" }, "state": "open", "evidence_refs": [ "5ae553c6dbf38762a5b61997c8ab3c964845e6f2033cc5886f39707289c42d22" ], "witness_tool_ref": "a01c9fbe2e0f89ba51e98a9f9adb3e2221181b02f05426888a8e8e1d4c6f99a0", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "585dc8dd419afdf4e9bf3c874f2701e31d5f3338bc9b4203dc562020a35876ec", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/anstream@1.0.0" }, "rule": { "namespace": "syft", "id": "anstream@1.0.0" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "5812a90517ca8a7be4835875c4821ace43a4835c915372e2902c66fdb38fdc43", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/anstyle@1.0.14" }, "rule": { "namespace": "syft", "id": "anstyle@1.0.14" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "0c2acffbd95840f484ecf5ead5dbf02d3043c8cd99e95cffcecb6dd06aad1689", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/anstyle-parse@1.0.0" }, "rule": { "namespace": "syft", "id": "anstyle-parse@1.0.0" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "38e530b1f35c1f97754741dcb41c150fc5f37b19537d0a862f1cf412d5d5eb77", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/anstyle-query@1.1.5" }, "rule": { "namespace": "syft", "id": "anstyle-query@1.1.5" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "43a7bbf00d060e71d216d2dba5a8507586b4879c8c606cb5701f4721a1340984", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/anstyle-wincon@3.0.11" }, "rule": { "namespace": "syft", "id": "anstyle-wincon@3.0.11" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "b53200027bb397c19303a57035a312ff9896f23494778cfe8417bf3b566802b7", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/base64ct@1.8.3" }, "rule": { "namespace": "syft", "id": "base64ct@1.8.3" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "a27f471935b3ca54a96a87c1168029f17d49df469b5d7fb9768f5be6a479cb5a", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/bitflags@2.13.2" }, "rule": { "namespace": "syft", "id": "bitflags@2.13.2" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "d954449ff474a768cbba77304caa220f9361597bbb1fdcfa4f395dc2ff3ab6a3", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/block-buffer@0.10.4" }, "rule": { "namespace": "syft", "id": "block-buffer@0.10.4" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "298a3dc87ed455182e39269edd7bcb85eb69d2fdfaed33bb248b55ce4ef400bf", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/cfg-if@1.0.5" }, "rule": { "namespace": "syft", "id": "cfg-if@1.0.5" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "c945fdb692b50e54a5707923beed9b74cc8840b872dda759232c54f54faf3e13", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/clap@4.6.7" }, "rule": { "namespace": "syft", "id": "clap@4.6.7" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "4c660220014879503df0995f4e53893f079ed601c9ca4351754a91d944cd5747", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/clap_builder@4.6.7" }, "rule": { "namespace": "syft", "id": "clap_builder@4.6.7" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "8bb04af9d989b5eb357e0b7a5a47760babc2e2e30e6622131f0b704e82099de2", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/clap_derive@4.6.7" }, "rule": { "namespace": "syft", "id": "clap_derive@4.6.7" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "0806d9370588be53df7d7e7b13b4cd97fe96353945c1a2e612f0cb42e6b0a9fa", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/clap_lex@1.1.1" }, "rule": { "namespace": "syft", "id": "clap_lex@1.1.1" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "564bee5e0ca4f5b0b9d5c7f3c80949c2379225cc93896b64d7cf40572e67f707", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/colorchoice@1.0.5" }, "rule": { "namespace": "syft", "id": "colorchoice@1.0.5" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "e67b364fc025909689d2318cd8edbb4eff67f8550970a92413e57be11015fa73", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/const-oid@0.9.6" }, "rule": { "namespace": "syft", "id": "const-oid@0.9.6" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "6d706f34a5c990989290bf9a40545e25199499f4d7896fb17db92c9f5704d9dd", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/cpufeatures@0.2.17" }, "rule": { "namespace": "syft", "id": "cpufeatures@0.2.17" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "145a268fb83cc9efa6d7dbc1f2c7a5bb878887bd309a7a13c70db7c26a3dd4a6", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/crypto-common@0.1.7" }, "rule": { "namespace": "syft", "id": "crypto-common@0.1.7" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "787a89ac66a8ee454e76700ba05fd7449ee2e0a02adba4d5703b4e43a3ad63ee", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/curve25519-dalek@4.1.3" }, "rule": { "namespace": "syft", "id": "curve25519-dalek@4.1.3" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "e363a3158ed291249701f7a913b490cfd8e21da33cc9bf6cadf72aebdb110e38", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/curve25519-dalek-derive@0.1.1" }, "rule": { "namespace": "syft", "id": "curve25519-dalek-derive@0.1.1" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "5751ef29264c20e19c6275a8edbcb5fe4e9fd09f069d6478509958c3c665a5e5", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/der@0.7.10" }, "rule": { "namespace": "syft", "id": "der@0.7.10" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "abddfb4ca732e056419f5daea9c997464fb39a808c74315e77618f63aad577b5", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/digest@0.10.7" }, "rule": { "namespace": "syft", "id": "digest@0.10.7" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "09b4b23b72b30909f311f514c3047c3b683412752ce0f30b550c35f69175ccb1", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/ed25519@2.2.3" }, "rule": { "namespace": "syft", "id": "ed25519@2.2.3" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "5e9cb7bd671ff507af20938bceec17825515186a8d16aaaebdc53f2962c62f4d", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/ed25519-dalek@2.2.0" }, "rule": { "namespace": "syft", "id": "ed25519-dalek@2.2.0" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "ebfe761a2619776f2942064a3f4868f3e0008f237546af684b50af44dfc3b099", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/errno@0.3.14" }, "rule": { "namespace": "syft", "id": "errno@0.3.14" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "305b6e419555a415bf2c3931f34c2f2a305b322905e7d62a155a394c36a7f9ee", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "" }, "rule": { "namespace": "syft", "id": "falsegreen-ledger@0.1.0" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "037fe54909861dd855fbdb0b49d679ac7e8db1fef9f31cee62b92f74ea406033", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "" }, "rule": { "namespace": "syft", "id": "falsegreen-ledger-core@0.1.0" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "6114365595d08a3bfc7e5d101289c1511fd658287c777c4ec53b73a764a8419f", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/fastrand@2.5.0" }, "rule": { "namespace": "syft", "id": "fastrand@2.5.0" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "8c813dcb9098a7c8941eb1aaffa3513c58020c83e085b04e6767488e300c6c97", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/fiat-crypto@0.2.9" }, "rule": { "namespace": "syft", "id": "fiat-crypto@0.2.9" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "5e9894b399a2c47a307185031536daaee5ded5c707a623024827a381aad89903", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/generic-array@0.14.7" }, "rule": { "namespace": "syft", "id": "generic-array@0.14.7" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "992e1c30dd219f9cf75f520e5d8dbf0588faae5d1a6bc9f2607da898d9f5c847", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/getrandom@0.2.17" }, "rule": { "namespace": "syft", "id": "getrandom@0.2.17" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "11a15cd49953aaee1017644804d1c3f9e5c0f2dece9366168276bff362fc0d24", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/getrandom@0.4.3" }, "rule": { "namespace": "syft", "id": "getrandom@0.4.3" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "c2a49ee05fb8e39068222324fb06d7af16937aff1e9a9ea99a8e17acc514f457", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/heck@0.5.0" }, "rule": { "namespace": "syft", "id": "heck@0.5.0" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "e29ecb67830b5145d857685e3f25db579bbcf432c785c6d223baf8bea97d1a9d", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/hex@0.4.3" }, "rule": { "namespace": "syft", "id": "hex@0.4.3" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "b3d93215b7294d3158ac885a5f44df493b9205f88c1d1b8730891332fd3b7030", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/is_terminal_polyfill@1.70.2" }, "rule": { "namespace": "syft", "id": "is_terminal_polyfill@1.70.2" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "2198026ba7738261a15516b44aed3a688f8b546c317b64b35c08cd6141612cd3", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/itoa@1.0.18" }, "rule": { "namespace": "syft", "id": "itoa@1.0.18" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "61aaeff62260c1d967d95422d89a28bc19dd0e5a930b6c9dfd3f031a4999dd7f", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/libc@0.2.191" }, "rule": { "namespace": "syft", "id": "libc@0.2.191" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "9638a8b320f9ef1e348eb212d7b9b5aff9cff37075971380c717f44f8c144d91", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/linux-raw-sys@0.12.1" }, "rule": { "namespace": "syft", "id": "linux-raw-sys@0.12.1" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "e2d6e087930e3834218a876fdb280683d5efcdaf50ae2eab592e1e22f97d815d", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/memchr@2.8.3" }, "rule": { "namespace": "syft", "id": "memchr@2.8.3" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "06cfdd42abb0c9e4d1075d601a05b33ad12f4e0770c117f758e768a380957b48", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/once_cell@1.21.4" }, "rule": { "namespace": "syft", "id": "once_cell@1.21.4" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "25d8ffe4413b6cf3ccf7a0646d5136789bd33d4b513d6ef17a7f8549d27ff3c4", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/once_cell_polyfill@1.70.2" }, "rule": { "namespace": "syft", "id": "once_cell_polyfill@1.70.2" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "426f5a3c744e86d89a996166238d634b5159d615a2642460863a26de9ebe1afe", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/pkcs8@0.10.2" }, "rule": { "namespace": "syft", "id": "pkcs8@0.10.2" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "c694e303f6d517d79b9440f754fd2092277919227356a55095046c9b6938a128", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/ppv-lite86@0.2.21" }, "rule": { "namespace": "syft", "id": "ppv-lite86@0.2.21" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "83840aaef8208540db5387d039d782fb6638ce97e06bd3f18ce20661ab601f55", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/proc-macro2@1.0.107" }, "rule": { "namespace": "syft", "id": "proc-macro2@1.0.107" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "7ec44be48b990fd8c38cb446e9e2cde3c7a02c7b35c9e4514bf7974c9def81eb", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/quote@1.0.47" }, "rule": { "namespace": "syft", "id": "quote@1.0.47" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "e5bc87872cb19c9a211895bbde8092b0512f0338b0bde534dade96b289166a5b", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/r-efi@6.0.0" }, "rule": { "namespace": "syft", "id": "r-efi@6.0.0" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "f119984d74172df79e8ed614888308c422e4e3e76e09acdd7c7df03156c6ebab", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/rand@0.8.8" }, "rule": { "namespace": "syft", "id": "rand@0.8.8" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "da733f873e8e22258550231003a3cc91d78301c5807ea9c5c6c953bdfc93a386", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/rand_chacha@0.3.1" }, "rule": { "namespace": "syft", "id": "rand_chacha@0.3.1" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "303db3e1caa7ec327fb3d438d968f3ece32234dbb594a8d0ef3addca9bcb61de", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/rand_core@0.6.4" }, "rule": { "namespace": "syft", "id": "rand_core@0.6.4" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "8c2b4d1a270f8c039f231929858e0a81f04e4168eaa9e3884e96d2cf67fa0b9f", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/rustc_version@0.4.1" }, "rule": { "namespace": "syft", "id": "rustc_version@0.4.1" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "94f78cc0a41219cf8bd76e72370c1e3f7a25a1c5d3682c962ebcac51f96e6107", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/rustix@1.1.5" }, "rule": { "namespace": "syft", "id": "rustix@1.1.5" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "9e26a95ae3dfd058f160efaaad125c58e9e4df33de1cd9e89f238a5af96e1d8d", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/semver@1.0.28" }, "rule": { "namespace": "syft", "id": "semver@1.0.28" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "6b250dfbe70ae2dd0686b791c854ea29d60fcced5847ef1097b33776640b726b", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/serde@1.0.229" }, "rule": { "namespace": "syft", "id": "serde@1.0.229" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "0907c849ff021995b320333d903013c3e35609e44fdd439d0185cdd6b2b42b33", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/serde_core@1.0.229" }, "rule": { "namespace": "syft", "id": "serde_core@1.0.229" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "eea06b68ab5dfabe29545176a15ca67d241e54bcf1a54c735e99406c378c3b0d", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/serde_derive@1.0.229" }, "rule": { "namespace": "syft", "id": "serde_derive@1.0.229" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "567f9a6ec6dd74ea27cceeecd20cc8f83ec2bad60cb4992da15e71fa478e3c8b", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/serde_json@1.0.154" }, "rule": { "namespace": "syft", "id": "serde_json@1.0.154" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "1dc35a3d9010bd6a84e1fe0d75e39d2f1507e7d761fba360a6a011b297aff75b", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/sha2@0.10.9" }, "rule": { "namespace": "syft", "id": "sha2@0.10.9" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "039783866d8dc87a18a205702b098ce8341f6e3032a121b65f5888dbc79dbf86", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/signature@2.2.0" }, "rule": { "namespace": "syft", "id": "signature@2.2.0" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "64738dd926f6eb4044f0de2fde1b326703bbc228579b56e08373f9fb8b6936c3", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/smallvec@1.6.0" }, "rule": { "namespace": "syft", "id": "smallvec@1.6.0" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "b1b266ef80a1dcba71b6ea153bd32e5b3d9e89c33461e3638c6b56ecea92fde9", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/spki@0.7.3" }, "rule": { "namespace": "syft", "id": "spki@0.7.3" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "a2d0f5f6f8ebcca0da8bbf2c323fb2013afa905a47a570b6c73442bc9a5b8620", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/strsim@0.11.1" }, "rule": { "namespace": "syft", "id": "strsim@0.11.1" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "6ef75c868a28b31d2d9bdd28764b8c3e232fbcdb70190659f0ecebb57c8e2a3e", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/subtle@2.6.1" }, "rule": { "namespace": "syft", "id": "subtle@2.6.1" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "172012ad51c91dc3a2e8a3a4c30026893420917739d047e5dc8918d5af26e93e", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/syn@2.0.119" }, "rule": { "namespace": "syft", "id": "syn@2.0.119" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "4cf5b83b5e47207b200be1c28233d037d4896752b572d0edb52975dc429e0b1c", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/syn@3.0.9" }, "rule": { "namespace": "syft", "id": "syn@3.0.9" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "96826fe9035d6551629c4e2a5e7d6f2df945796fac5128adf613901f231612ce", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/tempfile@3.27.0" }, "rule": { "namespace": "syft", "id": "tempfile@3.27.0" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "4cabb90893a6e49358a09f507c1134173b15a041a74b54cf9d4c1d93ce6d2e82", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/typenum@1.20.1" }, "rule": { "namespace": "syft", "id": "typenum@1.20.1" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "cdf512d7b7b4b6aad7b87252ee1d8aa13deced196dc20e86af4c693914775db0", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/unicode-ident@1.0.27" }, "rule": { "namespace": "syft", "id": "unicode-ident@1.0.27" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "493be846b106eef3741941ff4fbf118d156cd42bcbf90ef0820faff50ed6aeb4", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/utf8parse@0.2.2" }, "rule": { "namespace": "syft", "id": "utf8parse@0.2.2" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "4113c0d164e406e3897d48a025ec03de3591018065c023d609aa9a1a24a8535e", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/version_check@0.9.5" }, "rule": { "namespace": "syft", "id": "version_check@0.9.5" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "2908eeb04b59a653d934e0cdb89832021bfaa96dec7ff3dafcffbf192d06ba0b", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/wasi@0.11.1%2Bwasi-snapshot-preview1" }, "rule": { "namespace": "syft", "id": "wasi@0.11.1+wasi-snapshot-preview1" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "6e216a5e2b506734f75006b2f0a084aa655272534631ff3e365dae942872f46e", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/windows-link@0.2.1" }, "rule": { "namespace": "syft", "id": "windows-link@0.2.1" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "9077dd0b2b86b914f0b095c8d6bcc189167ee95b7021993b57088bd5e25c724f", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/windows-sys@0.61.2" }, "rule": { "namespace": "syft", "id": "windows-sys@0.61.2" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "e88bf689d1aa0a4bcdfaefe867dd26346df4be90d067004b93b7d73fb75cfe38", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/zerocopy@0.8.63" }, "rule": { "namespace": "syft", "id": "zerocopy@0.8.63" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "2f618422a7648ae74d807312d3a397d16eef2a47e85b7a412fe58ff50268a109", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/zerocopy-derive@0.8.63" }, "rule": { "namespace": "syft", "id": "zerocopy-derive@0.8.63" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "3cfb926e0c9258ea27f8d32a2de899d498b245fbd099dff9cbf872a3d9832914", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/zeroize@1.9.1" }, "rule": { "namespace": "syft", "id": "zeroize@1.9.1" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "57cc8ce7a77d7b267625f03e149331e422afd6e028ace34137fe11514f19b0e4", "class": "supply_chain", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/zmij@1.0.23" }, "rule": { "namespace": "syft", "id": "zmij@1.0.23" }, "state": "open", "evidence_refs": [ "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942" ], "witness_tool_ref": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "3cb3f72855ec8da34228f8a8b8b49d110c5f6296126a0396e384b78dff93858b", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/anstream@1.0.0" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "105d7e1b0ce045f5eaecf4886b2a3a53f11740059022390aeed0641349be6370", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/anstyle@1.0.14" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "6a1bdd16582f18fdb1fa91303573db6370cbc6c6791e13662c519f3bf67e2b58", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/anstyle-parse@1.0.0" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "c32d140352b51004cc522860ec69e78b1648a34309a6a9be6f3bcdf6b34c3ea8", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/anstyle-query@1.1.5" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "4e5f3b8af12d986d540eb760ff9cd8b6855eaad28f2aad327cfb27528eddab32", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/anstyle-wincon@3.0.11" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "d87de0e2410e4ce9c1b03a1c509b3ddf5960b0936f81d4647ba1c5d6d89fc86b", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/base64ct@1.8.3" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "0ae447b9c774db7ecc15622af01746eae86cf6f47a4192ff75afdbb184bd4f0d", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/bitflags@2.13.2" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "88f6dcc043cb942462a57d4e8de3f5e67de6a2bcfe84ec10f2977e7df83f3f70", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/block-buffer@0.10.4" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "6dc467fded10560a16e1a85aae690fdd4d560ab3a7854ff858b0790cbced7ab2", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/cfg-if@1.0.5" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "d62527e65bfebf56c615db5a8b57a52ebb14d9d01d5737b36026ffcd385e020f", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/clap@4.6.7" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "5022223658ce227834152beda2f8039c2f620048d573cdfafca1df7435cd10a4", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/clap_builder@4.6.7" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "b4acb80d59203342fec461529a44fbdf49e70bc6ca659f541896faa542ea43c5", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/clap_derive@4.6.7" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "f18f5e7c89578e9678c5c7348530bcd16566d209feb0453558bd4177a56e4519", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/clap_lex@1.1.1" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "3aa7445371bcced37f805b8b93e9c78dc9638f3ebccedb2087fd6a4bf369b408", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/colorchoice@1.0.5" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "e23a545bde38131ecd1958e9a627d1c94d4e1e13ac04f45d6d19ea0ba3ffa3d6", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/const-oid@0.9.6" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "524744fd861891b779e920a35054e452215c00ca7ad2ecd0c314ce8176be8972", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/cpufeatures@0.2.17" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "7f21367b3adac10c420edf92206d55530b768dbb37f26d97ab71624f4897a4ef", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/crypto-common@0.1.7" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "fe2c38830f0c36aa5c2b7e92c8ce6e5f5ffce3359ea8c601e5c38043e1bdf8a2", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/curve25519-dalek@4.1.3" }, "rule": { "namespace": "license", "id": "BSD-3-Clause" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "22e858ebe1e0cd3085665c0b1ddb0258c163e74d25bd86359b4b5f2a6c9ac9a4", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/curve25519-dalek-derive@0.1.1" }, "rule": { "namespace": "license", "id": "MIT/Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "1d544f0845dcc666855e99dd2b294924d14fc9a59ee95d04ab545ef5a456563a", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/der@0.7.10" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "52412f24e374c82ecd63af7620df4b525ebf66faccde3420a82407886bd0c284", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/digest@0.10.7" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "ae41ba9e474899a525f07dedebf70d5b4d90f42b867dade39a918ff0dc56cdbd", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/ed25519@2.2.3" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "bfba5b2b48789d0999e04341c49eb12720a3312e6c03ae463dc733e6fbb7f47a", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/ed25519-dalek@2.2.0" }, "rule": { "namespace": "license", "id": "BSD-3-Clause" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "3e1257c111ee0929dbe8413202dd62d02da5e23805b3c7b82ee7db2e60e2e5bf", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/errno@0.3.14" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "413b301a14873d3fa09cfbeb904a1753aff90083f7faf45c9fa10ae41e514c95", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/fastrand@2.5.0" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "ca89f09616c15bc6e6aac2d3d9a826d665ed042c69fe8093e11ca0e11215fa88", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/fiat-crypto@0.2.9" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0 OR BSD-1-Clause" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "b56a6ad063aa5b2a36eb7f5ca9f3d6a67d4edee01d6b1bf01994bd1049382aa1", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/generic-array@0.14.7" }, "rule": { "namespace": "license", "id": "MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "a2e087ff1e664313a70e2e8ce7eed24cea66820e3750c483ddf3f4d1e254d8bf", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/getrandom@0.2.17" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "e8a05789f8c7ca2d56115d6721959efab7dee18603092589b99cc0603b4e4931", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/getrandom@0.4.3" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "a045045ab5f79bbc6d89c842641627a66ef7838cf2c4a6956b7cdb1c8adcce1f", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/heck@0.5.0" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "2bfc1148428c407eb319a7e6c10fde0605121ffa1716eaa1db0ddd9d8aad5e7b", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/hex@0.4.3" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "1607bce4d21887f6c3c6cd523cd4781bb966af2914910df1bf0813f5ca357718", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/is_terminal_polyfill@1.70.2" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "44e4a8a96ba5fffac1618980329c98bbaae8b6acc5365659a688553c4c36f5cd", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/itoa@1.0.18" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "90ce55778cfac3e0f098de0b24f5e2e035d65d0b28f7c09647bf2a433f0ced65", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/libc@0.2.191" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "92fa2f521dd2cabdf45f3ba7d0efa52f4d91674015be492d2f7fd994d1843c9b", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/linux-raw-sys@0.12.1" }, "rule": { "namespace": "license", "id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "71154f949e7c2014f20dbe7d654741451e3def11140bc8612e413c799d1d8c28", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/memchr@2.8.3" }, "rule": { "namespace": "license", "id": "Unlicense OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "72d443496cd2f5431e7f4347680d3790fed414966236ac9d635539cddfc310d7", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/once_cell@1.21.4" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "d0ca8c614318f904a95eef3273640692f921fbea88f4681b46a944098a7f4767", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/once_cell_polyfill@1.70.2" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "33502fd83559ad67d44c080bde985d7528478ab1397cfd11a8218d36537c4e31", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/pkcs8@0.10.2" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "f36a59e9dbd1511f0ef2b47db501e35a66e0dd081a18f992255f811a35b17415", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/ppv-lite86@0.2.21" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "875825c505903cfb9b602a23e74f0edf7eb1621583ed9e583c410103af3d402d", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/proc-macro2@1.0.107" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "d94338e54aeaf7fdb9048fc5ec3defa5504f99aab2210cec5156b23ac309f0fd", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/quote@1.0.47" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "73c9c8606efa4200ec16f7e1121489b31dba86fe5c2093dd9907af8d742ee0d3", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/r-efi@6.0.0" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0 OR LGPL-2.1-or-later" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "583bffa666173cd89ec5435a820a182f195e80ec3430f14ae356e22996f0c604", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/rand@0.8.8" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "c25b8b5f19fbb27189204b7c69f7d0bb55b519b678667bf698371f8884cc9037", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/rand_chacha@0.3.1" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "9b2b8375abad347b471c42d1cf7a4c0535119bbe425e5485aad498ec17f767c4", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/rand_core@0.6.4" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "175e264aed60c77f52af0e9e671e8ac55bec5e6e45abdc84a5ebcb3ec8228a32", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/rustc_version@0.4.1" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "0af9738feb17c972c978f5fb2a9d015e97b728ba66aa088f9c16113be8df3a91", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/rustix@1.1.5" }, "rule": { "namespace": "license", "id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "2dba13d7eff3023b8735741b2cebfcf48401ab80634cc83fa074d62e0029c6e5", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/semver@1.0.28" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "b7f56764e7744f74cad3387a716a5246077d8c6e9f0089883df0dbb8288aeb5d", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/serde@1.0.229" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "881652ce03c9fbb009ba2d5e92cacd9454e5366d43e3712ab99c1a0bb52cb0c8", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/serde_core@1.0.229" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "7d3cf8ea302039c6b559c6537f587340c694b5e20193dbc5bcb157a006d26b8a", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/serde_derive@1.0.229" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "da48400504894d432651db8f2dc88973bc202459db2f7d825ad79be718e1475d", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/serde_json@1.0.154" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "4e1769b1e32b9db38c1c88b395bbb79d75dbc84ccebcd482bc8e372323612ea5", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/sha2@0.10.9" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "7d786c3589077e405f9f6eefb654a291c2151ab077bdf2fd98c88ca1872cb009", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/signature@2.2.0" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "137f488cae7954a76b606a56914e8a17efe4b31f2b08ac1e0f518150c86ca603", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/smallvec@1.6.0" }, "rule": { "namespace": "license", "id": "MIT/Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "2da68b323dc569bcbc497ed8b2cfb0120654e76776cf3c35f8d3e950f5747bc0", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/spki@0.7.3" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "190387b967c5696b7e77e95e77baff38bd4c4cf266e724c09cc8cc70dc665da5", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/strsim@0.11.1" }, "rule": { "namespace": "license", "id": "MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "f09ee24c509b49380459f50c80591806cd7c73ad6c6c2dc99229670041fee674", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/subtle@2.6.1" }, "rule": { "namespace": "license", "id": "BSD-3-Clause" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "88cca70db371b2eb5db003aa26dca694e18d04d14f10fea6bb7b77c9d8a5915c", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/syn@2.0.119" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "15bedfcd4863b93f38b7d0bc2bd56e41531843d5c2953974ebb947a686aebc48", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/syn@3.0.9" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "1c2df16adcb1e41856c04a70f745f44ed8efe15e1f2423e4d6a024902014f96c", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/tempfile@3.27.0" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "7ce501395a51a046ddd2de234813e8610fecb37a279dd7581b6a230876216f09", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/typenum@1.20.1" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "10ebd1e19e81d1b55e547bcf583a4da0d086d5d47b86817360bc2d6fa1daecc8", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/unicode-ident@1.0.27" }, "rule": { "namespace": "license", "id": "(MIT OR Apache-2.0) AND Unicode-3.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "2a48ac251537ab5616cb3a1c8b7c09ed5253e442bcb585a6a812cc2e12df9a99", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/utf8parse@0.2.2" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "a178fed10f746a25a38e1a123cff01f7148bdfc82f2d75d55aa653a382c86dcb", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/version_check@0.9.5" }, "rule": { "namespace": "license", "id": "MIT/Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "b505efbcbc2188a627d169bdbdc34901dec4f22b50255975c9c07961ddf3391d", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/wasi@0.11.1+wasi-snapshot-preview1" }, "rule": { "namespace": "license", "id": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "7cc0ff2a3a61ff414a371dabeaef2dfd080dc6981383f0d056f5807f9f7f7716", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/windows-link@0.2.1" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "88f3e265d85daf89a5f53123d8cb24aa877f866f5a9e0798e3fcbfba44e07401", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/windows-sys@0.61.2" }, "rule": { "namespace": "license", "id": "MIT OR Apache-2.0" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "ccde7aa1c7e4a197172dbdd8d438652d4e46433fa65f363abd51fd3f4d5e042a", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/zerocopy@0.8.63" }, "rule": { "namespace": "license", "id": "BSD-2-Clause OR Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "155008951dcca3c42ca968720dec1ba279f3836ef1c6921e7384a41ced42b7fb", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/zerocopy-derive@0.8.63" }, "rule": { "namespace": "license", "id": "BSD-2-Clause OR Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "44f17f90be8e27066147ced08a81acf0709bf297e99ffb794be4f91f07a37819", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/zeroize@1.9.1" }, "rule": { "namespace": "license", "id": "Apache-2.0 OR MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" }, { "id": "9c06bc92074e46c9fad575585278ef5b558d6f9e86471f5f1afb991819aab2c7", "class": "license", "subject": { "specimen_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "component_id": "pkg:cargo/zmij@1.0.23" }, "rule": { "namespace": "license", "id": "MIT" }, "state": "open", "evidence_refs": [ "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4" ], "witness_tool_ref": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "first_observed_at": "2026-10-21T18:02:17.656150282Z" } ], "witnesses": [ { "tool": "osv-scanner", "version": "2.7.0", "binary_digest": "160c6253e2922e9e0a6a9771c5c4c40a4b3c6090b34a3cdd5e80c96cc2e4218b", "config_digest": "0c3d6fef8ea59e1de5610e13ccb1035a7232318288aaed517ee2feec9402455a", "invocation_digest": "ccd91f56f4900e7561b4ac09ffcd8f32a89fd4ee9a01d47d046ffe8a44d6b13d", "input_subject_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "5ae553c6dbf38762a5b61997c8ab3c964845e6f2033cc5886f39707289c42d22", "normalized_evidence_digest": "a01c9fbe2e0f89ba51e98a9f9adb3e2221181b02f05426888a8e8e1d4c6f99a0", "limitations": [ "osv-scanner checks registry-based ecosystems (crates.io in 0.6.0); git-sourced dependencies (lean [[require]], gpr) have no advisory database — Insufficient Evidence for them, never a silent pass" ], "evidence_class": "dependency_vulnerability", "observed_at": "2026-10-21T18:02:17.656150282Z" }, { "tool": "semgrep", "version": "1.181.0", "binary_digest": "c29de7c43986faa3c3ca5a8acf1d115811e15ab305ba7657b79e775d40e16391", "config_digest": "206116bd213f0786f8378755ad48adbccfe30376afe8fe2ecdd24eb44161d009", "invocation_digest": "f3dfe0ed2197c2c55812c31eb6a20c881e8fc0e28e8e6fdc69e149337e14a88f", "input_subject_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "80c185ac8e17503197e8195c202d98db3f0cd3865a37ba7065f37bdbf2a58d54", "normalized_evidence_digest": "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "limitations": [], "evidence_class": "static_analysis", "observed_at": "2026-10-21T18:02:17.656150282Z" }, { "tool": "gitleaks", "version": "8.30.1", "binary_digest": "88f91962aa2f93ac6ab281d553b9e125f5197bbbce38f9f2437f7299c32e5509", "config_digest": "e1f77c307b36a43d3707ab5fed4a4007f6d63d9302bcf0d5509cd3e52e32ed6f", "invocation_digest": "497dd2010d6a321cfa4645d9c366e8d2e8bc923e320c1bed1834e7c3ec0c54e5", "input_subject_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "37517e5f3dc66819f61f5a7bb8ace1921282415f10551d2defa5c3eb0985b570", "normalized_evidence_digest": "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "limitations": [], "evidence_class": "secret", "observed_at": "2026-10-21T18:02:17.656150282Z" }, { "tool": "syft", "version": "1.54.1", "binary_digest": "dbf75864e7a7ff9e1fbf00552c31483f693188632a9f68f343cd7653dac513d6", "config_digest": "b6f045a568b2dd1dcd1a1723f4eb0b8f5863215301ced35067a5f7a53c07c7e6", "invocation_digest": "22eee92de7a91a923a00982dc2fa798362f2df94202d1750cdc71125a0dddb5c", "input_subject_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "3f4dbf1bb971bbec147a341523a09da81717f2733ea126ce1b66c602232da942", "normalized_evidence_digest": "3937dc44d8582e51fb19db430a2c5f492d7e100e139a21e2406ee3a1337af3db", "limitations": [], "evidence_class": "supply_chain", "observed_at": "2026-10-21T18:02:17.656150282Z" }, { "tool": "dependency-manifest", "version": "1", "binary_digest": "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4", "config_digest": "2402cf6f9fd45d6c6d7b9bc10abdba72e36d61e88515a01d2cda19ee8d375b3b", "invocation_digest": "41dd72d0f0c625cedddffd7035ef794b142f250ac3553faa884b254c6bb66b42", "input_subject_digest": "e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d", "environment_identity": "f94232bb359ccba42a8dbf82c6ce4ee702015af403e42ac2920c636e91ab6552", "raw_output_digest": "d8f93a45a05abb563c79898a4f5ac7a0e0d43adf6678dac9821246ce243d80d4", "normalized_evidence_digest": "72a4359e426472cbbf1b37eb82c2ad795a690ae6533a2fd35fac57947066c92a", "limitations": [ "license facts are the job dependency manifest's registry SPDX ids; the workspace's own code and git-sourced dependencies carry no registry license facts" ], "evidence_class": "license", "observed_at": "2026-10-21T18:02:17.656150282Z" } ], "vulnerability_snapshot": { "source_identity": "osv.dev", "snapshot_identity": "osv-dev-20261021-457e10c8", "observed_at": "2026-10-21T17:30:12Z", "freshness_hours": 24 }, "exceptions": [], "open_findings": 2, "satisfied": false, "evaluated_at": "2026-10-26T05:58:17.902953173Z" }, "standards": [], "exports": [ { "format": "spdx-3.0", "digest": "bbb47aae1a3bc88a815c3d1c5b8e0b84de6e8dc1b969bcc3bf99163a3166e8a3", "ref": "report-artifact:sbom:spdx-3.0", "content": "{\"@context\":{\"spdx\":\"https://spdx.org/rdf/terms#\"},\"spdx:comment\":\"72f2b9330af73dd9488a9ab86f37d02ab16e96b71482f8ae599975d97aa0104a\",\"spdx:created\":\"2026-10-26T05:58:17.902953173+00:00\",\"spdx:creator\":[\"Tool: cargo/1.99.0\"],\"spdx:documentDescribes\":[\"SPDXRef-Root-e8006c3f\"],\"spdx:hasExtract\":[{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"urn:fg:specimen:e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d\",\"spdx:type\":\"FIRST_PARTY_IDENTIFIER\"}],\"spdx:id\":\"SPDXRef-Root-e8006c3f\",\"spdx:name\":\"falsegreen-specimen-e8006c3f\",\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"SoftwarePackage\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/anstream@1.0.0\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"824a212faf96e9acacdbd09febd34438f8f711fb84e09a8916013cd7815ca28d\"}],\"spdx:id\":\"pkg:cargo/anstream@1.0.0\",\"spdx:name\":\"anstream\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"824a212faf96e9acacdbd09febd34438f8f711fb84e09a8916013cd7815ca28d\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"1.0.0\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/anstyle@1.0.14\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"940b3a0ca603d1eade50a4846a2afffd5ef57a9feac2c0e2ec2e14f9ead76000\"}],\"spdx:id\":\"pkg:cargo/anstyle@1.0.14\",\"spdx:name\":\"anstyle\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"940b3a0ca603d1eade50a4846a2afffd5ef57a9feac2c0e2ec2e14f9ead76000\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"1.0.14\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/anstyle-parse@1.0.0\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"52ce7f38b242319f7cabaa6813055467063ecdc9d355bbb4ce0c68908cd8130e\"}],\"spdx:id\":\"pkg:cargo/anstyle-parse@1.0.0\",\"spdx:name\":\"anstyle-parse\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"52ce7f38b242319f7cabaa6813055467063ecdc9d355bbb4ce0c68908cd8130e\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"1.0.0\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/anstyle-query@1.1.5\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc\"}],\"spdx:id\":\"pkg:cargo/anstyle-query@1.1.5\",\"spdx:name\":\"anstyle-query\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"1.1.5\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/anstyle-wincon@3.0.11\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d\"}],\"spdx:id\":\"pkg:cargo/anstyle-wincon@3.0.11\",\"spdx:name\":\"anstyle-wincon\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"3.0.11\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/base64ct@1.8.3\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-Apache-2.0 OR MIT\",\"spdx:licenseId\":\"Apache-2.0 OR MIT\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"2af50177e190e07a26ab74f8b1efbfe2ef87da2116221318cb1c2e82baf7de06\"}],\"spdx:id\":\"pkg:cargo/base64ct@1.8.3\",\"spdx:name\":\"base64ct\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"2af50177e190e07a26ab74f8b1efbfe2ef87da2116221318cb1c2e82baf7de06\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"1.8.3\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/bitflags@2.13.2\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"3ded4057c258ba199e2d26386d3af3780957ecaee6c4ef4041c6b4b8b97c0b06\"}],\"spdx:id\":\"pkg:cargo/bitflags@2.13.2\",\"spdx:name\":\"bitflags\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"3ded4057c258ba199e2d26386d3af3780957ecaee6c4ef4041c6b4b8b97c0b06\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"2.13.2\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/block-buffer@0.10.4\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"3078c7629b62d3f0439517fa394996acacc5cbc91c5a20d8c658e77abd503a71\"}],\"spdx:id\":\"pkg:cargo/block-buffer@0.10.4\",\"spdx:name\":\"block-buffer\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"3078c7629b62d3f0439517fa394996acacc5cbc91c5a20d8c658e77abd503a71\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.10.4\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/cfg-if@1.0.5\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"4e7648175b45a9a48536d676f68d918270699102aa8dab5496df06904c914600\"}],\"spdx:id\":\"pkg:cargo/cfg-if@1.0.5\",\"spdx:name\":\"cfg-if\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"4e7648175b45a9a48536d676f68d918270699102aa8dab5496df06904c914600\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"1.0.5\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/clap@4.6.7\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"aa8876b300ab35ba921adea3dfd70157a46249b33f95c9084ae5709785478946\"}],\"spdx:id\":\"pkg:cargo/clap@4.6.7\",\"spdx:name\":\"clap\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"aa8876b300ab35ba921adea3dfd70157a46249b33f95c9084ae5709785478946\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"4.6.7\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/clap_builder@4.6.7\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"ec0797fb7aeb1406c84efac526901f7ec3ead2124f946b494e72879d4b54704d\"}],\"spdx:id\":\"pkg:cargo/clap_builder@4.6.7\",\"spdx:name\":\"clap_builder\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"ec0797fb7aeb1406c84efac526901f7ec3ead2124f946b494e72879d4b54704d\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"4.6.7\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/clap_derive@4.6.7\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"f9c751b79415d4e559e3d1fcf128e09e720eb673a06d26cf6f392d37d75b66e0\"}],\"spdx:id\":\"pkg:cargo/clap_derive@4.6.7\",\"spdx:name\":\"clap_derive\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"f9c751b79415d4e559e3d1fcf128e09e720eb673a06d26cf6f392d37d75b66e0\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"4.6.7\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/clap_lex@1.1.1\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"1c133bc6a41be0d194c306b5506d15e6feeea7b1d6604bd3f8310dfb2ca96486\"}],\"spdx:id\":\"pkg:cargo/clap_lex@1.1.1\",\"spdx:name\":\"clap_lex\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"1c133bc6a41be0d194c306b5506d15e6feeea7b1d6604bd3f8310dfb2ca96486\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"1.1.1\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/colorchoice@1.0.5\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"1d07550c9036bf2ae0c684c4297d503f838287c83c53686d05370d0e139ae570\"}],\"spdx:id\":\"pkg:cargo/colorchoice@1.0.5\",\"spdx:name\":\"colorchoice\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"1d07550c9036bf2ae0c684c4297d503f838287c83c53686d05370d0e139ae570\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"1.0.5\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/const-oid@0.9.6\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-Apache-2.0 OR MIT\",\"spdx:licenseId\":\"Apache-2.0 OR MIT\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"c2459377285ad874054d797f3ccebf984978aa39129f6eafde5cdc8315b612f8\"}],\"spdx:id\":\"pkg:cargo/const-oid@0.9.6\",\"spdx:name\":\"const-oid\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"c2459377285ad874054d797f3ccebf984978aa39129f6eafde5cdc8315b612f8\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.9.6\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/cpufeatures@0.2.17\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"59ed5838eebb26a2bb2e58f6d5b5316989ae9d08bab10e0e6d103e656d1b0280\"}],\"spdx:id\":\"pkg:cargo/cpufeatures@0.2.17\",\"spdx:name\":\"cpufeatures\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"59ed5838eebb26a2bb2e58f6d5b5316989ae9d08bab10e0e6d103e656d1b0280\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.2.17\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/crypto-common@0.1.7\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"78c8292055d1c1df0cce5d180393dc8cce0abec0a7102adb6c7b1eef6016d60a\"}],\"spdx:id\":\"pkg:cargo/crypto-common@0.1.7\",\"spdx:name\":\"crypto-common\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"78c8292055d1c1df0cce5d180393dc8cce0abec0a7102adb6c7b1eef6016d60a\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.1.7\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/curve25519-dalek@4.1.3\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-BSD-3-Clause\",\"spdx:licenseId\":\"BSD-3-Clause\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"97fb8b7c4503de7d6ae7b42ab72a5a59857b4c937ec27a3d4539dba95b5ab2be\"}],\"spdx:id\":\"pkg:cargo/curve25519-dalek@4.1.3\",\"spdx:name\":\"curve25519-dalek\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"97fb8b7c4503de7d6ae7b42ab72a5a59857b4c937ec27a3d4539dba95b5ab2be\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"4.1.3\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/curve25519-dalek-derive@0.1.1\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT/Apache-2.0\",\"spdx:licenseId\":\"MIT/Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"f46882e17999c6cc590af592290432be3bce0428cb0d5f8b6715e4dc7b383eb3\"}],\"spdx:id\":\"pkg:cargo/curve25519-dalek-derive@0.1.1\",\"spdx:name\":\"curve25519-dalek-derive\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"f46882e17999c6cc590af592290432be3bce0428cb0d5f8b6715e4dc7b383eb3\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.1.1\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/der@0.7.10\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-Apache-2.0 OR MIT\",\"spdx:licenseId\":\"Apache-2.0 OR MIT\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"e7c1832837b905bbfb5101e07cc24c8deddf52f93225eee6ead5f4d63d53ddcb\"}],\"spdx:id\":\"pkg:cargo/der@0.7.10\",\"spdx:name\":\"der\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"e7c1832837b905bbfb5101e07cc24c8deddf52f93225eee6ead5f4d63d53ddcb\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.7.10\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/digest@0.10.7\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292\"}],\"spdx:id\":\"pkg:cargo/digest@0.10.7\",\"spdx:name\":\"digest\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.10.7\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/ed25519@2.2.3\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-Apache-2.0 OR MIT\",\"spdx:licenseId\":\"Apache-2.0 OR MIT\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"115531babc129696a58c64a4fef0a8bf9e9698629fb97e9e40767d235cfbcd53\"}],\"spdx:id\":\"pkg:cargo/ed25519@2.2.3\",\"spdx:name\":\"ed25519\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"115531babc129696a58c64a4fef0a8bf9e9698629fb97e9e40767d235cfbcd53\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"2.2.3\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/ed25519-dalek@2.2.0\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-BSD-3-Clause\",\"spdx:licenseId\":\"BSD-3-Clause\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"70e796c081cee67dc755e1a36a0a172b897fab85fc3f6bc48307991f64e4eca9\"}],\"spdx:id\":\"pkg:cargo/ed25519-dalek@2.2.0\",\"spdx:name\":\"ed25519-dalek\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"70e796c081cee67dc755e1a36a0a172b897fab85fc3f6bc48307991f64e4eca9\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"2.2.0\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/errno@0.3.14\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb\"}],\"spdx:id\":\"pkg:cargo/errno@0.3.14\",\"spdx:name\":\"errno\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.3.14\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/fastrand@2.5.0\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-Apache-2.0 OR MIT\",\"spdx:licenseId\":\"Apache-2.0 OR MIT\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"da7c62ceae207dd37ea5b845da6a0696c799f85e97da1ab5b7910be3c1c80223\"}],\"spdx:id\":\"pkg:cargo/fastrand@2.5.0\",\"spdx:name\":\"fastrand\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"da7c62ceae207dd37ea5b845da6a0696c799f85e97da1ab5b7910be3c1c80223\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"2.5.0\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/fiat-crypto@0.2.9\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0 OR BSD-1-Clause\",\"spdx:licenseId\":\"MIT OR Apache-2.0 OR BSD-1-Clause\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"28dea519a9695b9977216879a3ebfddf92f1c08c05d984f8996aecd6ecdc811d\"}],\"spdx:id\":\"pkg:cargo/fiat-crypto@0.2.9\",\"spdx:name\":\"fiat-crypto\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"28dea519a9695b9977216879a3ebfddf92f1c08c05d984f8996aecd6ecdc811d\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.2.9\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/generic-array@0.14.7\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT\",\"spdx:licenseId\":\"MIT\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"85649ca51fd72272d7821adaf274ad91c288277713d9c18820d8499a7ff69e9a\"}],\"spdx:id\":\"pkg:cargo/generic-array@0.14.7\",\"spdx:name\":\"generic-array\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"85649ca51fd72272d7821adaf274ad91c288277713d9c18820d8499a7ff69e9a\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.14.7\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/getrandom@0.2.17\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"ff2abc00be7fca6ebc474524697ae276ad847ad0a6b3faa4bcb027e9a4614ad0\"}],\"spdx:id\":\"pkg:cargo/getrandom@0.2.17\",\"spdx:name\":\"getrandom\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"ff2abc00be7fca6ebc474524697ae276ad847ad0a6b3faa4bcb027e9a4614ad0\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.2.17\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/getrandom@0.4.3\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"300e883d756b2e4ec94e02791f39b04b522276138852cfc41d9fb7e904106099\"}],\"spdx:id\":\"pkg:cargo/getrandom@0.4.3\",\"spdx:name\":\"getrandom\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"300e883d756b2e4ec94e02791f39b04b522276138852cfc41d9fb7e904106099\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.4.3\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/heck@0.5.0\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea\"}],\"spdx:id\":\"pkg:cargo/heck@0.5.0\",\"spdx:name\":\"heck\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.5.0\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/hex@0.4.3\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70\"}],\"spdx:id\":\"pkg:cargo/hex@0.4.3\",\"spdx:name\":\"hex\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.4.3\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/is_terminal_polyfill@1.70.2\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"a6cb138bb79a146c1bd460005623e142ef0181e3d0219cb493e02f7d08a35695\"}],\"spdx:id\":\"pkg:cargo/is_terminal_polyfill@1.70.2\",\"spdx:name\":\"is_terminal_polyfill\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"a6cb138bb79a146c1bd460005623e142ef0181e3d0219cb493e02f7d08a35695\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"1.70.2\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/itoa@1.0.18\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"8f42a60cbdf9a97f5d2305f08a87dc4e09308d1276d28c869c684d7777685682\"}],\"spdx:id\":\"pkg:cargo/itoa@1.0.18\",\"spdx:name\":\"itoa\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"8f42a60cbdf9a97f5d2305f08a87dc4e09308d1276d28c869c684d7777685682\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"1.0.18\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/libc@0.2.191\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"65cd87c9a6d60536580b316ad985726104730a5151c99845f2490428ef91240a\"}],\"spdx:id\":\"pkg:cargo/libc@0.2.191\",\"spdx:name\":\"libc\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"65cd87c9a6d60536580b316ad985726104730a5151c99845f2490428ef91240a\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.2.191\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/linux-raw-sys@0.12.1\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT\",\"spdx:licenseId\":\"Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"32a66949e030da00e8c7d4434b251670a91556f4144941d37452769c25d58a53\"}],\"spdx:id\":\"pkg:cargo/linux-raw-sys@0.12.1\",\"spdx:name\":\"linux-raw-sys\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"32a66949e030da00e8c7d4434b251670a91556f4144941d37452769c25d58a53\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.12.1\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/memchr@2.8.3\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-Unlicense OR MIT\",\"spdx:licenseId\":\"Unlicense OR MIT\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"cf8baf1c55e62ffcace7a9f06f4bd9cd3f0c4beb022d3b367256b91b87513d98\"}],\"spdx:id\":\"pkg:cargo/memchr@2.8.3\",\"spdx:name\":\"memchr\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"cf8baf1c55e62ffcace7a9f06f4bd9cd3f0c4beb022d3b367256b91b87513d98\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"2.8.3\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/once_cell@1.21.4\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"9f7c3e4beb33f85d45ae3e3a1792185706c8e16d043238c593331cc7cd313b50\"}],\"spdx:id\":\"pkg:cargo/once_cell@1.21.4\",\"spdx:name\":\"once_cell\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"9f7c3e4beb33f85d45ae3e3a1792185706c8e16d043238c593331cc7cd313b50\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"1.21.4\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/once_cell_polyfill@1.70.2\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"384b8ab6d37215f3c5301a95a4accb5d64aa607f1fcb26a11b5303878451b4fe\"}],\"spdx:id\":\"pkg:cargo/once_cell_polyfill@1.70.2\",\"spdx:name\":\"once_cell_polyfill\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"384b8ab6d37215f3c5301a95a4accb5d64aa607f1fcb26a11b5303878451b4fe\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"1.70.2\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/pkcs8@0.10.2\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-Apache-2.0 OR MIT\",\"spdx:licenseId\":\"Apache-2.0 OR MIT\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"f950b2377845cebe5cf8b5165cb3cc1a5e0fa5cfa3e1f7f55707d8fd82e0a7b7\"}],\"spdx:id\":\"pkg:cargo/pkcs8@0.10.2\",\"spdx:name\":\"pkcs8\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"f950b2377845cebe5cf8b5165cb3cc1a5e0fa5cfa3e1f7f55707d8fd82e0a7b7\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.10.2\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/ppv-lite86@0.2.21\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"85eae3c4ed2f50dcfe72643da4befc30deadb458a9b590d720cde2f2b1e97da9\"}],\"spdx:id\":\"pkg:cargo/ppv-lite86@0.2.21\",\"spdx:name\":\"ppv-lite86\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"85eae3c4ed2f50dcfe72643da4befc30deadb458a9b590d720cde2f2b1e97da9\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.2.21\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/proc-macro2@1.0.107\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"985e7ec9bb745e6ce6535b544d84d6cd6f7ad8bd711c398938ae983b91a766d9\"}],\"spdx:id\":\"pkg:cargo/proc-macro2@1.0.107\",\"spdx:name\":\"proc-macro2\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"985e7ec9bb745e6ce6535b544d84d6cd6f7ad8bd711c398938ae983b91a766d9\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"1.0.107\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/quote@1.0.47\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"1fbf4db142a473a8d80c26bbf18454ed458bf8d26c8219c331daecfdbd079001\"}],\"spdx:id\":\"pkg:cargo/quote@1.0.47\",\"spdx:name\":\"quote\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"1fbf4db142a473a8d80c26bbf18454ed458bf8d26c8219c331daecfdbd079001\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"1.0.47\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/r-efi@6.0.0\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0 OR LGPL-2.1-or-later\",\"spdx:licenseId\":\"MIT OR Apache-2.0 OR LGPL-2.1-or-later\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"f8dcc9c7d52a811697d2151c701e0d08956f92b0e24136cf4cf27b57a6a0d9bf\"}],\"spdx:id\":\"pkg:cargo/r-efi@6.0.0\",\"spdx:name\":\"r-efi\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"f8dcc9c7d52a811697d2151c701e0d08956f92b0e24136cf4cf27b57a6a0d9bf\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"6.0.0\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/rand@0.8.8\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"e058c7de0b26af77780c769414d6257830bb240f3c38477dbc2c16e5f54d6d4c\"}],\"spdx:id\":\"pkg:cargo/rand@0.8.8\",\"spdx:name\":\"rand\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"e058c7de0b26af77780c769414d6257830bb240f3c38477dbc2c16e5f54d6d4c\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.8.8\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/rand_chacha@0.3.1\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"e6c10a63a0fa32252be49d21e7709d4d4baf8d231c2dbce1eaa8141b9b127d88\"}],\"spdx:id\":\"pkg:cargo/rand_chacha@0.3.1\",\"spdx:name\":\"rand_chacha\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"e6c10a63a0fa32252be49d21e7709d4d4baf8d231c2dbce1eaa8141b9b127d88\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.3.1\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/rand_core@0.6.4\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"ec0be4795e2f6a28069bec0b5ff3e2ac9bafc99e6a9a7dc3547996c5c816922c\"}],\"spdx:id\":\"pkg:cargo/rand_core@0.6.4\",\"spdx:name\":\"rand_core\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"ec0be4795e2f6a28069bec0b5ff3e2ac9bafc99e6a9a7dc3547996c5c816922c\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.6.4\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/rustc_version@0.4.1\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"cfcb3a22ef46e85b45de6ee7e79d063319ebb6594faafcf1c225ea92ab6e9b92\"}],\"spdx:id\":\"pkg:cargo/rustc_version@0.4.1\",\"spdx:name\":\"rustc_version\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"cfcb3a22ef46e85b45de6ee7e79d063319ebb6594faafcf1c225ea92ab6e9b92\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.4.1\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/rustix@1.1.5\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT\",\"spdx:licenseId\":\"Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"891efababe418670775f199f0d233d84843c227a0949a883ce15b37c78d6629d\"}],\"spdx:id\":\"pkg:cargo/rustix@1.1.5\",\"spdx:name\":\"rustix\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"891efababe418670775f199f0d233d84843c227a0949a883ce15b37c78d6629d\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"1.1.5\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/semver@1.0.28\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"8a7852d02fc848982e0c167ef163aaff9cd91dc640ba85e263cb1ce46fae51cd\"}],\"spdx:id\":\"pkg:cargo/semver@1.0.28\",\"spdx:name\":\"semver\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"8a7852d02fc848982e0c167ef163aaff9cd91dc640ba85e263cb1ce46fae51cd\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"1.0.28\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/serde@1.0.229\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"4148590afebada386688f18773da617792bf2ef03ffc1e4cbd2b1d45b023e0ba\"}],\"spdx:id\":\"pkg:cargo/serde@1.0.229\",\"spdx:name\":\"serde\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"4148590afebada386688f18773da617792bf2ef03ffc1e4cbd2b1d45b023e0ba\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"1.0.229\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/serde_core@1.0.229\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"67dca2c9c51e58a4791a4b1ed58308b39c64224d349a935ab5039aa360942a48\"}],\"spdx:id\":\"pkg:cargo/serde_core@1.0.229\",\"spdx:name\":\"serde_core\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"67dca2c9c51e58a4791a4b1ed58308b39c64224d349a935ab5039aa360942a48\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"1.0.229\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/serde_derive@1.0.229\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"e7a5d71263a5a7d47b41f6b3f06ba276f10cc18b0931f1799f710578e2309348\"}],\"spdx:id\":\"pkg:cargo/serde_derive@1.0.229\",\"spdx:name\":\"serde_derive\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"e7a5d71263a5a7d47b41f6b3f06ba276f10cc18b0931f1799f710578e2309348\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"1.0.229\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/serde_json@1.0.154\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"e7e9cc8b1b85264074fbcc02a88680c4096b1e47df8f739dceb03bf482f04bd6\"}],\"spdx:id\":\"pkg:cargo/serde_json@1.0.154\",\"spdx:name\":\"serde_json\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"e7e9cc8b1b85264074fbcc02a88680c4096b1e47df8f739dceb03bf482f04bd6\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"1.0.154\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/sha2@0.10.9\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283\"}],\"spdx:id\":\"pkg:cargo/sha2@0.10.9\",\"spdx:name\":\"sha2\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.10.9\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/signature@2.2.0\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-Apache-2.0 OR MIT\",\"spdx:licenseId\":\"Apache-2.0 OR MIT\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"77549399552de45a898a580c1b41d445bf730df867cc44e6c0233bbc4b8329de\"}],\"spdx:id\":\"pkg:cargo/signature@2.2.0\",\"spdx:name\":\"signature\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"77549399552de45a898a580c1b41d445bf730df867cc44e6c0233bbc4b8329de\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"2.2.0\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/smallvec@1.6.0\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT/Apache-2.0\",\"spdx:licenseId\":\"MIT/Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"1a55ca5f3b68e41c979bf8c46a6f1da892ca4db8f94023ce0bd32407573b1ac0\"}],\"spdx:id\":\"pkg:cargo/smallvec@1.6.0\",\"spdx:name\":\"smallvec\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"1a55ca5f3b68e41c979bf8c46a6f1da892ca4db8f94023ce0bd32407573b1ac0\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"1.6.0\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/spki@0.7.3\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-Apache-2.0 OR MIT\",\"spdx:licenseId\":\"Apache-2.0 OR MIT\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"d91ed6c858b01f942cd56b37a94b3e0a1798290327d1236e4d9cf4eaca44d29d\"}],\"spdx:id\":\"pkg:cargo/spki@0.7.3\",\"spdx:name\":\"spki\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"d91ed6c858b01f942cd56b37a94b3e0a1798290327d1236e4d9cf4eaca44d29d\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.7.3\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/strsim@0.11.1\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT\",\"spdx:licenseId\":\"MIT\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f\"}],\"spdx:id\":\"pkg:cargo/strsim@0.11.1\",\"spdx:name\":\"strsim\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.11.1\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/subtle@2.6.1\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-BSD-3-Clause\",\"spdx:licenseId\":\"BSD-3-Clause\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292\"}],\"spdx:id\":\"pkg:cargo/subtle@2.6.1\",\"spdx:name\":\"subtle\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"2.6.1\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/syn@2.0.119\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"872831b642d1a07999a962a351ed35b955ea2cfc8f3862091e2a240a84f17297\"}],\"spdx:id\":\"pkg:cargo/syn@2.0.119\",\"spdx:name\":\"syn\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"872831b642d1a07999a962a351ed35b955ea2cfc8f3862091e2a240a84f17297\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"2.0.119\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/syn@3.0.9\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"d78c8dee4c7bf0e14673097256fed6142ce9d3b85a408189d07482442145823b\"}],\"spdx:id\":\"pkg:cargo/syn@3.0.9\",\"spdx:name\":\"syn\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"d78c8dee4c7bf0e14673097256fed6142ce9d3b85a408189d07482442145823b\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"3.0.9\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/tempfile@3.27.0\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"32497e9a4c7b38532efcdebeef879707aa9f794296a4f0244f6f69e9bc8574bd\"}],\"spdx:id\":\"pkg:cargo/tempfile@3.27.0\",\"spdx:name\":\"tempfile\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"32497e9a4c7b38532efcdebeef879707aa9f794296a4f0244f6f69e9bc8574bd\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"3.27.0\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/typenum@1.20.1\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"b6f5e870be6c3b371b77fe0ee0bafb859fa4964b4404c27de1d380043c4dda20\"}],\"spdx:id\":\"pkg:cargo/typenum@1.20.1\",\"spdx:name\":\"typenum\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"b6f5e870be6c3b371b77fe0ee0bafb859fa4964b4404c27de1d380043c4dda20\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"1.20.1\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/unicode-ident@1.0.27\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-(MIT OR Apache-2.0) AND Unicode-3.0\",\"spdx:licenseId\":\"(MIT OR Apache-2.0) AND Unicode-3.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"a2c754d6c33795a1c324727428e5a7dedb5b06195f9890bdbcba760d3e246563\"}],\"spdx:id\":\"pkg:cargo/unicode-ident@1.0.27\",\"spdx:name\":\"unicode-ident\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"a2c754d6c33795a1c324727428e5a7dedb5b06195f9890bdbcba760d3e246563\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"1.0.27\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/utf8parse@0.2.2\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-Apache-2.0 OR MIT\",\"spdx:licenseId\":\"Apache-2.0 OR MIT\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"06abde3611657adf66d383f00b093d7faecc7fa57071cce2578660c9f1010821\"}],\"spdx:id\":\"pkg:cargo/utf8parse@0.2.2\",\"spdx:name\":\"utf8parse\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"06abde3611657adf66d383f00b093d7faecc7fa57071cce2578660c9f1010821\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.2.2\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/version_check@0.9.5\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT/Apache-2.0\",\"spdx:licenseId\":\"MIT/Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a\"}],\"spdx:id\":\"pkg:cargo/version_check@0.9.5\",\"spdx:name\":\"version_check\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.9.5\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/wasi@0.11.1+wasi-snapshot-preview1\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT\",\"spdx:licenseId\":\"Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b\"}],\"spdx:id\":\"pkg:cargo/wasi@0.11.1+wasi-snapshot-preview1\",\"spdx:name\":\"wasi\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.11.1+wasi-snapshot-preview1\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/windows-link@0.2.1\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5\"}],\"spdx:id\":\"pkg:cargo/windows-link@0.2.1\",\"spdx:name\":\"windows-link\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.2.1\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/windows-sys@0.61.2\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT OR Apache-2.0\",\"spdx:licenseId\":\"MIT OR Apache-2.0\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc\"}],\"spdx:id\":\"pkg:cargo/windows-sys@0.61.2\",\"spdx:name\":\"windows-sys\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.61.2\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/zerocopy@0.8.63\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-BSD-2-Clause OR Apache-2.0 OR MIT\",\"spdx:licenseId\":\"BSD-2-Clause OR Apache-2.0 OR MIT\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"e5fe1f8f1b06191a00962174c61aa5005e0bb391a6d80d07e24d115c01a92ed8\"}],\"spdx:id\":\"pkg:cargo/zerocopy@0.8.63\",\"spdx:name\":\"zerocopy\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"e5fe1f8f1b06191a00962174c61aa5005e0bb391a6d80d07e24d115c01a92ed8\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.8.63\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/zerocopy-derive@0.8.63\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-BSD-2-Clause OR Apache-2.0 OR MIT\",\"spdx:licenseId\":\"BSD-2-Clause OR Apache-2.0 OR MIT\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"863ad3ac83293fb4d740aedbfdc9240dd8d1a50c1099acd76ce80ce7c7230c7f\"}],\"spdx:id\":\"pkg:cargo/zerocopy-derive@0.8.63\",\"spdx:name\":\"zerocopy-derive\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"863ad3ac83293fb4d740aedbfdc9240dd8d1a50c1099acd76ce80ce7c7230c7f\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"0.8.63\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/zeroize@1.9.1\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-Apache-2.0 OR MIT\",\"spdx:licenseId\":\"Apache-2.0 OR MIT\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"e13084392c5e4bc371903e2935a5eaeed24905a7511356b883835e18a78f6879\"}],\"spdx:id\":\"pkg:cargo/zeroize@1.9.1\",\"spdx:name\":\"zeroize\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"e13084392c5e4bc371903e2935a5eaeed24905a7511356b883835e18a78f6879\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"1.9.1\"},{\"spdx:externalIdentifier\":[{\"spdx:reference\":\"pkg:cargo/zmij@1.0.23\",\"spdx:type\":\"OTHER\"}],\"spdx:hasExtract\":[{\"spdx:id\":\"SPDXRef-License-MIT\",\"spdx:licenseId\":\"MIT\",\"spdx:type\":\"License\"}],\"spdx:hashes\":[{\"algorithm\":\"sha256\",\"value\":\"29666d0abbfad1e3dc4dcf6144730dd3a3ab225bbbdac83319345b1b44ccfc1b\"}],\"spdx:id\":\"pkg:cargo/zmij@1.0.23\",\"spdx:name\":\"zmij\",\"spdx:packageVerification\":{\"spdx:packageVerificationCodeValue\":\"29666d0abbfad1e3dc4dcf6144730dd3a3ab225bbbdac83319345b1b44ccfc1b\"},\"spdx:specificationVersion\":\"3.0\",\"spdx:type\":\"Package\",\"spdx:versionInfo\":\"1.0.23\"}],\"spdx:name\":\"falsegreen-sbom-e8006c3f\",\"spdx:relationship\":[{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/anstream@1.0.0\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/anstyle@1.0.14\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/anstyle-parse@1.0.0\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/anstyle-query@1.1.5\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/anstyle-wincon@3.0.11\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/base64ct@1.8.3\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/bitflags@2.13.2\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/block-buffer@0.10.4\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/cfg-if@1.0.5\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/clap@4.6.7\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/clap_builder@4.6.7\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/clap_derive@4.6.7\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/clap_lex@1.1.1\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/colorchoice@1.0.5\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/const-oid@0.9.6\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/cpufeatures@0.2.17\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/crypto-common@0.1.7\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/curve25519-dalek@4.1.3\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/curve25519-dalek-derive@0.1.1\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/der@0.7.10\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/digest@0.10.7\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/ed25519@2.2.3\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/ed25519-dalek@2.2.0\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/errno@0.3.14\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/fastrand@2.5.0\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/fiat-crypto@0.2.9\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/generic-array@0.14.7\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/getrandom@0.2.17\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/getrandom@0.4.3\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/heck@0.5.0\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/hex@0.4.3\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/is_terminal_polyfill@1.70.2\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/itoa@1.0.18\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/libc@0.2.191\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/linux-raw-sys@0.12.1\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/memchr@2.8.3\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/once_cell@1.21.4\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/once_cell_polyfill@1.70.2\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/pkcs8@0.10.2\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/ppv-lite86@0.2.21\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/proc-macro2@1.0.107\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/quote@1.0.47\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/r-efi@6.0.0\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/rand@0.8.8\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/rand_chacha@0.3.1\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/rand_core@0.6.4\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/rustc_version@0.4.1\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/rustix@1.1.5\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/semver@1.0.28\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/serde@1.0.229\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/serde_core@1.0.229\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/serde_derive@1.0.229\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/serde_json@1.0.154\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/sha2@0.10.9\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/signature@2.2.0\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/smallvec@1.6.0\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/spki@0.7.3\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/strsim@0.11.1\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/subtle@2.6.1\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/syn@2.0.119\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/syn@3.0.9\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/tempfile@3.27.0\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/typenum@1.20.1\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/unicode-ident@1.0.27\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/utf8parse@0.2.2\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/version_check@0.9.5\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/wasi@0.11.1+wasi-snapshot-preview1\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/windows-link@0.2.1\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/windows-sys@0.61.2\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/zerocopy@0.8.63\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/zerocopy-derive@0.8.63\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/zeroize@1.9.1\"},{\"spdx:relationshipType\":\"CONTAINS\",\"spdx:spdxElement1\":\"SPDXRef-Root-e8006c3f\",\"spdx:spdxElement2\":\"pkg:cargo/zmij@1.0.23\"}],\"spdx:spdxVersion\":\"SPDX-3.0\",\"spdx:specVersion\":\"3.0\"}" }, { "format": "cyclonedx-1.7", "digest": "0b323f20f1fe10c6827e4e4f95eac74131f7b562796866974a89cf9e7a0ea6c7", "ref": "report-artifact:sbom:cyclonedx-1.7", "content": "{\"bomFormat\":\"CycloneDX\",\"components\":[{\"bom-ref\":\"pkg:cargo/anstream@1.0.0\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"824a212faf96e9acacdbd09febd34438f8f711fb84e09a8916013cd7815ca28d\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"anstream\",\"purl\":\"pkg:cargo/anstream@1.0.0\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"1.0.0\"},{\"bom-ref\":\"pkg:cargo/anstyle@1.0.14\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"940b3a0ca603d1eade50a4846a2afffd5ef57a9feac2c0e2ec2e14f9ead76000\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"anstyle\",\"purl\":\"pkg:cargo/anstyle@1.0.14\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"1.0.14\"},{\"bom-ref\":\"pkg:cargo/anstyle-parse@1.0.0\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"52ce7f38b242319f7cabaa6813055467063ecdc9d355bbb4ce0c68908cd8130e\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"anstyle-parse\",\"purl\":\"pkg:cargo/anstyle-parse@1.0.0\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"1.0.0\"},{\"bom-ref\":\"pkg:cargo/anstyle-query@1.1.5\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"anstyle-query\",\"purl\":\"pkg:cargo/anstyle-query@1.1.5\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"1.1.5\"},{\"bom-ref\":\"pkg:cargo/anstyle-wincon@3.0.11\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"anstyle-wincon\",\"purl\":\"pkg:cargo/anstyle-wincon@3.0.11\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"3.0.11\"},{\"bom-ref\":\"pkg:cargo/base64ct@1.8.3\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"2af50177e190e07a26ab74f8b1efbfe2ef87da2116221318cb1c2e82baf7de06\"}],\"licenses\":[{\"license\":{\"id\":\"Apache-2.0 OR MIT\"}}],\"name\":\"base64ct\",\"purl\":\"pkg:cargo/base64ct@1.8.3\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"1.8.3\"},{\"bom-ref\":\"pkg:cargo/bitflags@2.13.2\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"3ded4057c258ba199e2d26386d3af3780957ecaee6c4ef4041c6b4b8b97c0b06\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"bitflags\",\"purl\":\"pkg:cargo/bitflags@2.13.2\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"2.13.2\"},{\"bom-ref\":\"pkg:cargo/block-buffer@0.10.4\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"3078c7629b62d3f0439517fa394996acacc5cbc91c5a20d8c658e77abd503a71\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"block-buffer\",\"purl\":\"pkg:cargo/block-buffer@0.10.4\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.10.4\"},{\"bom-ref\":\"pkg:cargo/cfg-if@1.0.5\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"4e7648175b45a9a48536d676f68d918270699102aa8dab5496df06904c914600\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"cfg-if\",\"purl\":\"pkg:cargo/cfg-if@1.0.5\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"1.0.5\"},{\"bom-ref\":\"pkg:cargo/clap@4.6.7\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"aa8876b300ab35ba921adea3dfd70157a46249b33f95c9084ae5709785478946\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"clap\",\"purl\":\"pkg:cargo/clap@4.6.7\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"4.6.7\"},{\"bom-ref\":\"pkg:cargo/clap_builder@4.6.7\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"ec0797fb7aeb1406c84efac526901f7ec3ead2124f946b494e72879d4b54704d\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"clap_builder\",\"purl\":\"pkg:cargo/clap_builder@4.6.7\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"4.6.7\"},{\"bom-ref\":\"pkg:cargo/clap_derive@4.6.7\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"f9c751b79415d4e559e3d1fcf128e09e720eb673a06d26cf6f392d37d75b66e0\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"clap_derive\",\"purl\":\"pkg:cargo/clap_derive@4.6.7\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"4.6.7\"},{\"bom-ref\":\"pkg:cargo/clap_lex@1.1.1\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"1c133bc6a41be0d194c306b5506d15e6feeea7b1d6604bd3f8310dfb2ca96486\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"clap_lex\",\"purl\":\"pkg:cargo/clap_lex@1.1.1\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"1.1.1\"},{\"bom-ref\":\"pkg:cargo/colorchoice@1.0.5\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"1d07550c9036bf2ae0c684c4297d503f838287c83c53686d05370d0e139ae570\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"colorchoice\",\"purl\":\"pkg:cargo/colorchoice@1.0.5\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"1.0.5\"},{\"bom-ref\":\"pkg:cargo/const-oid@0.9.6\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"c2459377285ad874054d797f3ccebf984978aa39129f6eafde5cdc8315b612f8\"}],\"licenses\":[{\"license\":{\"id\":\"Apache-2.0 OR MIT\"}}],\"name\":\"const-oid\",\"purl\":\"pkg:cargo/const-oid@0.9.6\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.9.6\"},{\"bom-ref\":\"pkg:cargo/cpufeatures@0.2.17\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"59ed5838eebb26a2bb2e58f6d5b5316989ae9d08bab10e0e6d103e656d1b0280\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"cpufeatures\",\"purl\":\"pkg:cargo/cpufeatures@0.2.17\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.2.17\"},{\"bom-ref\":\"pkg:cargo/crypto-common@0.1.7\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"78c8292055d1c1df0cce5d180393dc8cce0abec0a7102adb6c7b1eef6016d60a\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"crypto-common\",\"purl\":\"pkg:cargo/crypto-common@0.1.7\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.1.7\"},{\"bom-ref\":\"pkg:cargo/curve25519-dalek@4.1.3\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"97fb8b7c4503de7d6ae7b42ab72a5a59857b4c937ec27a3d4539dba95b5ab2be\"}],\"licenses\":[{\"license\":{\"id\":\"BSD-3-Clause\"}}],\"name\":\"curve25519-dalek\",\"purl\":\"pkg:cargo/curve25519-dalek@4.1.3\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"4.1.3\"},{\"bom-ref\":\"pkg:cargo/curve25519-dalek-derive@0.1.1\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"f46882e17999c6cc590af592290432be3bce0428cb0d5f8b6715e4dc7b383eb3\"}],\"licenses\":[{\"license\":{\"id\":\"MIT/Apache-2.0\"}}],\"name\":\"curve25519-dalek-derive\",\"purl\":\"pkg:cargo/curve25519-dalek-derive@0.1.1\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.1.1\"},{\"bom-ref\":\"pkg:cargo/der@0.7.10\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"e7c1832837b905bbfb5101e07cc24c8deddf52f93225eee6ead5f4d63d53ddcb\"}],\"licenses\":[{\"license\":{\"id\":\"Apache-2.0 OR MIT\"}}],\"name\":\"der\",\"purl\":\"pkg:cargo/der@0.7.10\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.7.10\"},{\"bom-ref\":\"pkg:cargo/digest@0.10.7\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"digest\",\"purl\":\"pkg:cargo/digest@0.10.7\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.10.7\"},{\"bom-ref\":\"pkg:cargo/ed25519@2.2.3\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"115531babc129696a58c64a4fef0a8bf9e9698629fb97e9e40767d235cfbcd53\"}],\"licenses\":[{\"license\":{\"id\":\"Apache-2.0 OR MIT\"}}],\"name\":\"ed25519\",\"purl\":\"pkg:cargo/ed25519@2.2.3\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"2.2.3\"},{\"bom-ref\":\"pkg:cargo/ed25519-dalek@2.2.0\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"70e796c081cee67dc755e1a36a0a172b897fab85fc3f6bc48307991f64e4eca9\"}],\"licenses\":[{\"license\":{\"id\":\"BSD-3-Clause\"}}],\"name\":\"ed25519-dalek\",\"purl\":\"pkg:cargo/ed25519-dalek@2.2.0\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"2.2.0\"},{\"bom-ref\":\"pkg:cargo/errno@0.3.14\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"errno\",\"purl\":\"pkg:cargo/errno@0.3.14\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.3.14\"},{\"bom-ref\":\"pkg:cargo/fastrand@2.5.0\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"da7c62ceae207dd37ea5b845da6a0696c799f85e97da1ab5b7910be3c1c80223\"}],\"licenses\":[{\"license\":{\"id\":\"Apache-2.0 OR MIT\"}}],\"name\":\"fastrand\",\"purl\":\"pkg:cargo/fastrand@2.5.0\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"2.5.0\"},{\"bom-ref\":\"pkg:cargo/fiat-crypto@0.2.9\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"28dea519a9695b9977216879a3ebfddf92f1c08c05d984f8996aecd6ecdc811d\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0 OR BSD-1-Clause\"}}],\"name\":\"fiat-crypto\",\"purl\":\"pkg:cargo/fiat-crypto@0.2.9\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.2.9\"},{\"bom-ref\":\"pkg:cargo/generic-array@0.14.7\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"85649ca51fd72272d7821adaf274ad91c288277713d9c18820d8499a7ff69e9a\"}],\"licenses\":[{\"license\":{\"id\":\"MIT\"}}],\"name\":\"generic-array\",\"purl\":\"pkg:cargo/generic-array@0.14.7\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.14.7\"},{\"bom-ref\":\"pkg:cargo/getrandom@0.2.17\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"ff2abc00be7fca6ebc474524697ae276ad847ad0a6b3faa4bcb027e9a4614ad0\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"getrandom\",\"purl\":\"pkg:cargo/getrandom@0.2.17\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.2.17\"},{\"bom-ref\":\"pkg:cargo/getrandom@0.4.3\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"300e883d756b2e4ec94e02791f39b04b522276138852cfc41d9fb7e904106099\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"getrandom\",\"purl\":\"pkg:cargo/getrandom@0.4.3\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.4.3\"},{\"bom-ref\":\"pkg:cargo/heck@0.5.0\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"heck\",\"purl\":\"pkg:cargo/heck@0.5.0\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.5.0\"},{\"bom-ref\":\"pkg:cargo/hex@0.4.3\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"hex\",\"purl\":\"pkg:cargo/hex@0.4.3\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.4.3\"},{\"bom-ref\":\"pkg:cargo/is_terminal_polyfill@1.70.2\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"a6cb138bb79a146c1bd460005623e142ef0181e3d0219cb493e02f7d08a35695\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"is_terminal_polyfill\",\"purl\":\"pkg:cargo/is_terminal_polyfill@1.70.2\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"1.70.2\"},{\"bom-ref\":\"pkg:cargo/itoa@1.0.18\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"8f42a60cbdf9a97f5d2305f08a87dc4e09308d1276d28c869c684d7777685682\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"itoa\",\"purl\":\"pkg:cargo/itoa@1.0.18\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"1.0.18\"},{\"bom-ref\":\"pkg:cargo/libc@0.2.191\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"65cd87c9a6d60536580b316ad985726104730a5151c99845f2490428ef91240a\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"libc\",\"purl\":\"pkg:cargo/libc@0.2.191\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.2.191\"},{\"bom-ref\":\"pkg:cargo/linux-raw-sys@0.12.1\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"32a66949e030da00e8c7d4434b251670a91556f4144941d37452769c25d58a53\"}],\"licenses\":[{\"license\":{\"id\":\"Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT\"}}],\"name\":\"linux-raw-sys\",\"purl\":\"pkg:cargo/linux-raw-sys@0.12.1\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.12.1\"},{\"bom-ref\":\"pkg:cargo/memchr@2.8.3\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"cf8baf1c55e62ffcace7a9f06f4bd9cd3f0c4beb022d3b367256b91b87513d98\"}],\"licenses\":[{\"license\":{\"id\":\"Unlicense OR MIT\"}}],\"name\":\"memchr\",\"purl\":\"pkg:cargo/memchr@2.8.3\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"2.8.3\"},{\"bom-ref\":\"pkg:cargo/once_cell@1.21.4\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"9f7c3e4beb33f85d45ae3e3a1792185706c8e16d043238c593331cc7cd313b50\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"once_cell\",\"purl\":\"pkg:cargo/once_cell@1.21.4\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"1.21.4\"},{\"bom-ref\":\"pkg:cargo/once_cell_polyfill@1.70.2\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"384b8ab6d37215f3c5301a95a4accb5d64aa607f1fcb26a11b5303878451b4fe\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"once_cell_polyfill\",\"purl\":\"pkg:cargo/once_cell_polyfill@1.70.2\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"1.70.2\"},{\"bom-ref\":\"pkg:cargo/pkcs8@0.10.2\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"f950b2377845cebe5cf8b5165cb3cc1a5e0fa5cfa3e1f7f55707d8fd82e0a7b7\"}],\"licenses\":[{\"license\":{\"id\":\"Apache-2.0 OR MIT\"}}],\"name\":\"pkcs8\",\"purl\":\"pkg:cargo/pkcs8@0.10.2\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.10.2\"},{\"bom-ref\":\"pkg:cargo/ppv-lite86@0.2.21\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"85eae3c4ed2f50dcfe72643da4befc30deadb458a9b590d720cde2f2b1e97da9\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"ppv-lite86\",\"purl\":\"pkg:cargo/ppv-lite86@0.2.21\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.2.21\"},{\"bom-ref\":\"pkg:cargo/proc-macro2@1.0.107\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"985e7ec9bb745e6ce6535b544d84d6cd6f7ad8bd711c398938ae983b91a766d9\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"proc-macro2\",\"purl\":\"pkg:cargo/proc-macro2@1.0.107\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"1.0.107\"},{\"bom-ref\":\"pkg:cargo/quote@1.0.47\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"1fbf4db142a473a8d80c26bbf18454ed458bf8d26c8219c331daecfdbd079001\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"quote\",\"purl\":\"pkg:cargo/quote@1.0.47\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"1.0.47\"},{\"bom-ref\":\"pkg:cargo/r-efi@6.0.0\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"f8dcc9c7d52a811697d2151c701e0d08956f92b0e24136cf4cf27b57a6a0d9bf\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0 OR LGPL-2.1-or-later\"}}],\"name\":\"r-efi\",\"purl\":\"pkg:cargo/r-efi@6.0.0\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"6.0.0\"},{\"bom-ref\":\"pkg:cargo/rand@0.8.8\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"e058c7de0b26af77780c769414d6257830bb240f3c38477dbc2c16e5f54d6d4c\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"rand\",\"purl\":\"pkg:cargo/rand@0.8.8\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.8.8\"},{\"bom-ref\":\"pkg:cargo/rand_chacha@0.3.1\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"e6c10a63a0fa32252be49d21e7709d4d4baf8d231c2dbce1eaa8141b9b127d88\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"rand_chacha\",\"purl\":\"pkg:cargo/rand_chacha@0.3.1\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.3.1\"},{\"bom-ref\":\"pkg:cargo/rand_core@0.6.4\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"ec0be4795e2f6a28069bec0b5ff3e2ac9bafc99e6a9a7dc3547996c5c816922c\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"rand_core\",\"purl\":\"pkg:cargo/rand_core@0.6.4\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.6.4\"},{\"bom-ref\":\"pkg:cargo/rustc_version@0.4.1\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"cfcb3a22ef46e85b45de6ee7e79d063319ebb6594faafcf1c225ea92ab6e9b92\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"rustc_version\",\"purl\":\"pkg:cargo/rustc_version@0.4.1\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.4.1\"},{\"bom-ref\":\"pkg:cargo/rustix@1.1.5\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"891efababe418670775f199f0d233d84843c227a0949a883ce15b37c78d6629d\"}],\"licenses\":[{\"license\":{\"id\":\"Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT\"}}],\"name\":\"rustix\",\"purl\":\"pkg:cargo/rustix@1.1.5\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"1.1.5\"},{\"bom-ref\":\"pkg:cargo/semver@1.0.28\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"8a7852d02fc848982e0c167ef163aaff9cd91dc640ba85e263cb1ce46fae51cd\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"semver\",\"purl\":\"pkg:cargo/semver@1.0.28\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"1.0.28\"},{\"bom-ref\":\"pkg:cargo/serde@1.0.229\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"4148590afebada386688f18773da617792bf2ef03ffc1e4cbd2b1d45b023e0ba\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"serde\",\"purl\":\"pkg:cargo/serde@1.0.229\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"1.0.229\"},{\"bom-ref\":\"pkg:cargo/serde_core@1.0.229\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"67dca2c9c51e58a4791a4b1ed58308b39c64224d349a935ab5039aa360942a48\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"serde_core\",\"purl\":\"pkg:cargo/serde_core@1.0.229\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"1.0.229\"},{\"bom-ref\":\"pkg:cargo/serde_derive@1.0.229\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"e7a5d71263a5a7d47b41f6b3f06ba276f10cc18b0931f1799f710578e2309348\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"serde_derive\",\"purl\":\"pkg:cargo/serde_derive@1.0.229\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"1.0.229\"},{\"bom-ref\":\"pkg:cargo/serde_json@1.0.154\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"e7e9cc8b1b85264074fbcc02a88680c4096b1e47df8f739dceb03bf482f04bd6\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"serde_json\",\"purl\":\"pkg:cargo/serde_json@1.0.154\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"1.0.154\"},{\"bom-ref\":\"pkg:cargo/sha2@0.10.9\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"sha2\",\"purl\":\"pkg:cargo/sha2@0.10.9\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.10.9\"},{\"bom-ref\":\"pkg:cargo/signature@2.2.0\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"77549399552de45a898a580c1b41d445bf730df867cc44e6c0233bbc4b8329de\"}],\"licenses\":[{\"license\":{\"id\":\"Apache-2.0 OR MIT\"}}],\"name\":\"signature\",\"purl\":\"pkg:cargo/signature@2.2.0\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"2.2.0\"},{\"bom-ref\":\"pkg:cargo/smallvec@1.6.0\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"1a55ca5f3b68e41c979bf8c46a6f1da892ca4db8f94023ce0bd32407573b1ac0\"}],\"licenses\":[{\"license\":{\"id\":\"MIT/Apache-2.0\"}}],\"name\":\"smallvec\",\"purl\":\"pkg:cargo/smallvec@1.6.0\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"1.6.0\"},{\"bom-ref\":\"pkg:cargo/spki@0.7.3\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"d91ed6c858b01f942cd56b37a94b3e0a1798290327d1236e4d9cf4eaca44d29d\"}],\"licenses\":[{\"license\":{\"id\":\"Apache-2.0 OR MIT\"}}],\"name\":\"spki\",\"purl\":\"pkg:cargo/spki@0.7.3\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.7.3\"},{\"bom-ref\":\"pkg:cargo/strsim@0.11.1\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f\"}],\"licenses\":[{\"license\":{\"id\":\"MIT\"}}],\"name\":\"strsim\",\"purl\":\"pkg:cargo/strsim@0.11.1\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.11.1\"},{\"bom-ref\":\"pkg:cargo/subtle@2.6.1\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292\"}],\"licenses\":[{\"license\":{\"id\":\"BSD-3-Clause\"}}],\"name\":\"subtle\",\"purl\":\"pkg:cargo/subtle@2.6.1\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"2.6.1\"},{\"bom-ref\":\"pkg:cargo/syn@2.0.119\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"872831b642d1a07999a962a351ed35b955ea2cfc8f3862091e2a240a84f17297\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"syn\",\"purl\":\"pkg:cargo/syn@2.0.119\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"2.0.119\"},{\"bom-ref\":\"pkg:cargo/syn@3.0.9\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"d78c8dee4c7bf0e14673097256fed6142ce9d3b85a408189d07482442145823b\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"syn\",\"purl\":\"pkg:cargo/syn@3.0.9\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"3.0.9\"},{\"bom-ref\":\"pkg:cargo/tempfile@3.27.0\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"32497e9a4c7b38532efcdebeef879707aa9f794296a4f0244f6f69e9bc8574bd\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"tempfile\",\"purl\":\"pkg:cargo/tempfile@3.27.0\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"3.27.0\"},{\"bom-ref\":\"pkg:cargo/typenum@1.20.1\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"b6f5e870be6c3b371b77fe0ee0bafb859fa4964b4404c27de1d380043c4dda20\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"typenum\",\"purl\":\"pkg:cargo/typenum@1.20.1\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"1.20.1\"},{\"bom-ref\":\"pkg:cargo/unicode-ident@1.0.27\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"a2c754d6c33795a1c324727428e5a7dedb5b06195f9890bdbcba760d3e246563\"}],\"licenses\":[{\"license\":{\"id\":\"(MIT OR Apache-2.0) AND Unicode-3.0\"}}],\"name\":\"unicode-ident\",\"purl\":\"pkg:cargo/unicode-ident@1.0.27\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"1.0.27\"},{\"bom-ref\":\"pkg:cargo/utf8parse@0.2.2\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"06abde3611657adf66d383f00b093d7faecc7fa57071cce2578660c9f1010821\"}],\"licenses\":[{\"license\":{\"id\":\"Apache-2.0 OR MIT\"}}],\"name\":\"utf8parse\",\"purl\":\"pkg:cargo/utf8parse@0.2.2\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.2.2\"},{\"bom-ref\":\"pkg:cargo/version_check@0.9.5\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a\"}],\"licenses\":[{\"license\":{\"id\":\"MIT/Apache-2.0\"}}],\"name\":\"version_check\",\"purl\":\"pkg:cargo/version_check@0.9.5\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.9.5\"},{\"bom-ref\":\"pkg:cargo/wasi@0.11.1+wasi-snapshot-preview1\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b\"}],\"licenses\":[{\"license\":{\"id\":\"Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT\"}}],\"name\":\"wasi\",\"purl\":\"pkg:cargo/wasi@0.11.1+wasi-snapshot-preview1\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.11.1+wasi-snapshot-preview1\"},{\"bom-ref\":\"pkg:cargo/windows-link@0.2.1\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"windows-link\",\"purl\":\"pkg:cargo/windows-link@0.2.1\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.2.1\"},{\"bom-ref\":\"pkg:cargo/windows-sys@0.61.2\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc\"}],\"licenses\":[{\"license\":{\"id\":\"MIT OR Apache-2.0\"}}],\"name\":\"windows-sys\",\"purl\":\"pkg:cargo/windows-sys@0.61.2\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.61.2\"},{\"bom-ref\":\"pkg:cargo/zerocopy@0.8.63\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"e5fe1f8f1b06191a00962174c61aa5005e0bb391a6d80d07e24d115c01a92ed8\"}],\"licenses\":[{\"license\":{\"id\":\"BSD-2-Clause OR Apache-2.0 OR MIT\"}}],\"name\":\"zerocopy\",\"purl\":\"pkg:cargo/zerocopy@0.8.63\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.8.63\"},{\"bom-ref\":\"pkg:cargo/zerocopy-derive@0.8.63\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"863ad3ac83293fb4d740aedbfdc9240dd8d1a50c1099acd76ce80ce7c7230c7f\"}],\"licenses\":[{\"license\":{\"id\":\"BSD-2-Clause OR Apache-2.0 OR MIT\"}}],\"name\":\"zerocopy-derive\",\"purl\":\"pkg:cargo/zerocopy-derive@0.8.63\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"0.8.63\"},{\"bom-ref\":\"pkg:cargo/zeroize@1.9.1\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"e13084392c5e4bc371903e2935a5eaeed24905a7511356b883835e18a78f6879\"}],\"licenses\":[{\"license\":{\"id\":\"Apache-2.0 OR MIT\"}}],\"name\":\"zeroize\",\"purl\":\"pkg:cargo/zeroize@1.9.1\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"1.9.1\"},{\"bom-ref\":\"pkg:cargo/zmij@1.0.23\",\"hashes\":[{\"alg\":\"SHA256\",\"value\":\"29666d0abbfad1e3dc4dcf6144730dd3a3ab225bbbdac83319345b1b44ccfc1b\"}],\"licenses\":[{\"license\":{\"id\":\"MIT\"}}],\"name\":\"zmij\",\"purl\":\"pkg:cargo/zmij@1.0.23\",\"scope\":\"runtime\",\"type\":\"library\",\"version\":\"1.0.23\"}],\"dependencies\":[{\"dependsOn\":[],\"ref\":\"pkg:cargo/anstream@1.0.0\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/anstyle@1.0.14\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/anstyle-parse@1.0.0\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/anstyle-query@1.1.5\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/anstyle-wincon@3.0.11\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/base64ct@1.8.3\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/bitflags@2.13.2\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/block-buffer@0.10.4\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/cfg-if@1.0.5\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/clap@4.6.7\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/clap_builder@4.6.7\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/clap_derive@4.6.7\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/clap_lex@1.1.1\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/colorchoice@1.0.5\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/const-oid@0.9.6\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/cpufeatures@0.2.17\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/crypto-common@0.1.7\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/curve25519-dalek@4.1.3\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/curve25519-dalek-derive@0.1.1\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/der@0.7.10\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/digest@0.10.7\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/ed25519@2.2.3\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/ed25519-dalek@2.2.0\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/errno@0.3.14\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/fastrand@2.5.0\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/fiat-crypto@0.2.9\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/generic-array@0.14.7\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/getrandom@0.2.17\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/getrandom@0.4.3\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/heck@0.5.0\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/hex@0.4.3\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/is_terminal_polyfill@1.70.2\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/itoa@1.0.18\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/libc@0.2.191\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/linux-raw-sys@0.12.1\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/memchr@2.8.3\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/once_cell@1.21.4\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/once_cell_polyfill@1.70.2\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/pkcs8@0.10.2\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/ppv-lite86@0.2.21\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/proc-macro2@1.0.107\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/quote@1.0.47\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/r-efi@6.0.0\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/rand@0.8.8\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/rand_chacha@0.3.1\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/rand_core@0.6.4\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/rustc_version@0.4.1\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/rustix@1.1.5\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/semver@1.0.28\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/serde@1.0.229\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/serde_core@1.0.229\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/serde_derive@1.0.229\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/serde_json@1.0.154\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/sha2@0.10.9\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/signature@2.2.0\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/smallvec@1.6.0\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/spki@0.7.3\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/strsim@0.11.1\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/subtle@2.6.1\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/syn@2.0.119\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/syn@3.0.9\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/tempfile@3.27.0\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/typenum@1.20.1\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/unicode-ident@1.0.27\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/utf8parse@0.2.2\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/version_check@0.9.5\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/wasi@0.11.1+wasi-snapshot-preview1\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/windows-link@0.2.1\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/windows-sys@0.61.2\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/zerocopy@0.8.63\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/zerocopy-derive@0.8.63\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/zeroize@1.9.1\"},{\"dependsOn\":[],\"ref\":\"pkg:cargo/zmij@1.0.23\"}],\"metadata\":{\"component\":{\"bom-ref\":\"root\",\"name\":\"falsegreen-specimen-e8006c3f\",\"type\":\"application\"},\"timestamp\":\"2026-10-26T05:58:17.902953173+00:00\",\"tools\":[{\"name\":\"cargo\",\"vendor\":\"FalseGreen\",\"version\":\"1.99.0\"}]},\"properties\":[{\"name\":\"falsegreen:projectionDigest\",\"value\":\"8fd80e3e5e233e2c3fff1af3bf0125c1b5d5b5ba56e19d221289bdc30eba03cc\"}],\"serialNumber\":\"urn:uuid:01ccb399-9b95-668c-4912-eb774d606779\",\"specVersion\":\"1.7\",\"version\":1}" }, { "format": "cyclonedx-1.7-vex", "digest": "62942ce2646bffc3761f5ada87954ac7167299a394bf1632855ab300753e772a", "ref": "report-artifact:vex:cyclonedx-1.7-vex", "content": "{\"bomFormat\":\"CycloneDX\",\"components\":[{\"bom-ref\":\"cmp-0\",\"name\":\"smallvec\",\"purl\":\"pkg:crates.io/smallvec@1.6.0\",\"type\":\"library\",\"version\":\"1.6.0\"}],\"metadata\":{\"component\":{\"bom-ref\":\"specimen\",\"hashes\":[{\"alg\":\"SHA-256\",\"content\":\"e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d\"}],\"name\":\"falsegreen-job-specimen\",\"type\":\"application\"},\"properties\":[{\"name\":\"falsegreen:vex:vulnerabilitySnapshot\",\"value\":\"osv-dev-20261021-457e10c8 observed_at=2026-10-21T17:30:12Z\"}],\"timestamp\":\"2026-10-26T05:58:17Z\",\"tools\":{\"components\":[{\"name\":\"falsegreen-server\",\"type\":\"application\",\"vendor\":\"FalseGreen\",\"version\":\"0.15.0\"}]}},\"serialNumber\":\"urn:uuid:cb463bdf-09b8-ac8d-34c9-cf9f91de1970\",\"specVersion\":\"1.7\",\"version\":1,\"vulnerabilities\":[{\"affects\":[{\"ref\":\"cmp-0\"}],\"analysis\":{\"detail\":\"falsegreen:vex class=dependency_vulnerability rule=osv#GHSA-43w2-9j62-hq99 component=pkg:crates.io/smallvec@1.6.0 severity=high witness=a01c9fbe2e0f89ba51e98a9f9adb3e2221181b02f05426888a8e8e1d4c6f99a0 snapshot=osv-dev-20261021-457e10c8 policy=absent specimen_sha256=e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d\",\"firstIssued\":\"2026-10-26T05:58:17Z\",\"lastUpdated\":\"2026-10-26T05:58:17Z\",\"state\":\"in_triage\"},\"id\":\"GHSA-43w2-9j62-hq99\",\"ratings\":[{\"severity\":\"high\",\"source\":{\"name\":\"OSV\",\"url\":\"https://osv.dev/vulnerability/GHSA-43w2-9j62-hq99\"}}],\"source\":{\"name\":\"OSV\",\"url\":\"https://osv.dev/vulnerability/GHSA-43w2-9j62-hq99\"}},{\"affects\":[{\"ref\":\"cmp-0\"}],\"analysis\":{\"detail\":\"falsegreen:vex class=dependency_vulnerability rule=osv#RUSTSEC-2021-0003 component=pkg:crates.io/smallvec@1.6.0 severity=high witness=a01c9fbe2e0f89ba51e98a9f9adb3e2221181b02f05426888a8e8e1d4c6f99a0 snapshot=osv-dev-20261021-457e10c8 policy=absent specimen_sha256=e8006c3f8784d4f439eff39ce6354cbd256c987bb17243c3a45c57f92726d25d\",\"firstIssued\":\"2026-10-26T05:58:17Z\",\"lastUpdated\":\"2026-10-26T05:58:17Z\",\"state\":\"in_triage\"},\"id\":\"RUSTSEC-2021-0003\",\"ratings\":[{\"severity\":\"high\",\"source\":{\"name\":\"OSV\",\"url\":\"https://osv.dev/vulnerability/RUSTSEC-2021-0003\"}}],\"source\":{\"name\":\"OSV\",\"url\":\"https://osv.dev/vulnerability/RUSTSEC-2021-0003\"}}]}" } ], "signed_at": "2026-10-26T05:58:17.902953173Z", "digest": "fbf0f1ad979580760474c065b21b6e3d149a77ca50a697c37717d42d7ad4f53a", "signature": "a21e8e5fd18646f89b328fae30ec7b2c2ed932492f64d3f12351299a10722312", "key_id": "fg-report-9fc1a2c5-134c-4ca1-a0f2-56b2d1bcde67-20261018-1", "public_key": "ie4eQdY1lt7O5aCCQzO+/192Yzc4pLQsGyVNqSKtlmA=", "signature_ed25519": "ElwtGNIaWa+Pl93yIwHaGJFmvN7m569bNIPyjs9tFO5AYA6PXBpJ1iozFt7nTeYbstLLpdcLJukLbLeBb4WOAw==", "language": "rust", "toolchain": "rustc 1.99.0 (rustc) (1.99.0)", "record_seq": 5 }