go.mod

module github.com/interlynk-io/sbomasm

go 1.23

toolchain go1.23.1

require (
	github.com/CycloneDX/cyclonedx-go v0.9.1
	github.com/Masterminds/semver/v3 v3.3.1
	github.com/github/go-spdx/v2 v2.3.2
	github.com/google/go-github/v52 v52.0.0
	github.com/google/uuid v1.6.0
	github.com/mitchellh/copystructure v1.2.0
	github.com/pingcap/log v1.1.0
	github.com/samber/lo v1.47.0
	github.com/spdx/tools-golang v0.5.5
	github.com/spf13/cobra v1.8.1
	go.uber.org/zap v1.27.0
	gopkg.in/yaml.v2 v2.4.0
	sigs.k8s.io/release-utils v0.8.5
)

require golang.org/x/mod v0.22.0 // indirect

require golang.org/x/tools v0.22.0 // indirect

require (
	github.com/DependencyTrack/client-go v0.14.0
	github.com/ProtonMail/go-crypto v1.1.3 // indirect
	github.com/anchore/go-struct-converter v0.0.0-20240925125616-a0883641c664 // indirect
	github.com/cloudflare/circl v1.5.0 // indirect
	github.com/common-nighthawk/go-figure v0.0.0-20210622060536-734e95fb86be // indirect
	github.com/google/go-querystring v1.1.0 // indirect
	github.com/inconshreveable/mousetrap v1.1.0 // indirect
	github.com/mitchellh/reflectwalk v1.0.2 // indirect
	github.com/rogpeppe/go-internal v1.13.1
	github.com/spdx/gordf v0.0.0-20221230105357-b735bd5aac89 // indirect
	github.com/spf13/pflag v1.0.5 // indirect
	go.uber.org/multierr v1.11.0 // indirect
	golang.org/x/crypto v0.30.0 // indirect
	golang.org/x/oauth2 v0.24.0 // indirect
	golang.org/x/sys v0.28.0 // indirect
	golang.org/x/text v0.21.0 // indirect
	gopkg.in/natefinch/lumberjack.v2 v2.2.1 // indirect
	sigs.k8s.io/yaml v1.4.0 // indirect
)