go.mod

module github.com/interlynk-io/sbomasm/v2

go 1.24.2

toolchain go1.24.6

require (
	github.com/CycloneDX/cyclonedx-go v0.9.3
	github.com/fatih/color v1.18.0
	github.com/github/go-spdx/v2 v2.3.5
	github.com/google/uuid v1.6.0
	github.com/guacsec/sw-id-core v0.1.3
	github.com/hashicorp/go-retryablehttp v0.7.8
	github.com/interlynk-io/sbomqs v1.3.0
	github.com/mitchellh/copystructure v1.2.0
	github.com/package-url/packageurl-go v0.1.3
	github.com/pingcap/log v1.1.0
	github.com/samber/lo v1.52.0
	github.com/shiftleftcyber/securesbom-sdk-golang/v2 v2.1.0
	github.com/spdx/tools-golang v0.5.5
	github.com/spf13/cobra v1.10.2
	go.uber.org/zap v1.27.1
	golang.org/x/time v0.14.0
	gopkg.in/yaml.v2 v2.4.0
	sigs.k8s.io/release-utils v0.12.2
)

require golang.org/x/mod v0.30.0 // indirect

require (
	github.com/VividCortex/ewma v1.2.0 // indirect
	github.com/clipperhouse/stringish v0.1.1 // indirect
	github.com/clipperhouse/uax29/v2 v2.3.0 // indirect
	github.com/hashicorp/go-cleanhttp v0.5.2 // indirect
	github.com/mattn/go-colorable v0.1.14 // indirect
	github.com/mattn/go-isatty v0.0.20 // indirect
	github.com/mattn/go-runewidth v0.0.19 // indirect
	go.yaml.in/yaml/v2 v2.4.3 // indirect
	golang.org/x/tools v0.38.0 // indirect
)

require (
	github.com/DependencyTrack/client-go v0.17.0
	github.com/anchore/go-struct-converter v0.0.0-20250211213226-cce56d595160 // indirect
	github.com/cheggaaa/pb/v3 v3.1.7
	github.com/common-nighthawk/go-figure v0.0.0-20210622060536-734e95fb86be // indirect
	github.com/inconshreveable/mousetrap v1.1.0 // indirect
	github.com/mitchellh/reflectwalk v1.0.2 // indirect
	github.com/rogpeppe/go-internal v1.14.1
	github.com/spdx/gordf v0.0.0-20250128162952-000978ccd6fb // indirect
	github.com/spf13/pflag v1.0.10 // indirect
	go.uber.org/multierr v1.11.0 // indirect
	golang.org/x/sys v0.38.0 // indirect
	golang.org/x/text v0.31.0 // indirect
	gopkg.in/natefinch/lumberjack.v2 v2.2.1 // indirect
	sigs.k8s.io/yaml v1.6.0 // indirect
)