{"bomFormat":"CycloneDX","specVersion":"1.5","version":1,"serialNumber":"urn:uuid:b8754ec4-292a-44ec-aa47-d43a34d1f9db","metadata":{"timestamp":"2026-09-15T03:26:52Z","tools":[{"vendor":"Ecosystems","name":"Ecosystems SBOM Generator"}],"component":{"type":"application","name":"github/codeql-coding-standards"}},"components":[{"type":"library","name":"pyyaml","version":"==5.4","purl":"pkg:pypi/pyyaml","properties":[{"name":"filePath","value":"scripts/reports/requirements.txt"}]},{"type":"library","name":"beautifulsoup4","version":"==4.9.3","purl":"pkg:pypi/beautifulsoup4","properties":[{"name":"filePath","value":"scripts/requirements.txt"}]},{"type":"library","name":"certifi","version":"==2020.11.8","purl":"pkg:pypi/certifi","properties":[{"name":"filePath","value":"scripts/requirements.txt"}]},{"type":"library","name":"chardet","version":"==3.0.4","purl":"pkg:pypi/chardet","properties":[{"name":"filePath","value":"scripts/requirements.txt"}]},{"type":"library","name":"gitdb","version":"==4.0.5","purl":"pkg:pypi/gitdb","properties":[{"name":"filePath","value":"scripts/requirements.txt"}]},{"type":"library","name":"GitPython","version":"==3.1.12","purl":"pkg:pypi/GitPython","properties":[{"name":"filePath","value":"scripts/requirements.txt"}]},{"type":"library","name":"idna","version":"==2.10","purl":"pkg:pypi/idna","properties":[{"name":"filePath","value":"scripts/requirements.txt"}]},{"type":"library","name":"Jinja2","version":"==2.11.3","purl":"pkg:pypi/Jinja2","properties":[{"name":"filePath","value":"scripts/requirements.txt"}]},{"type":"library","name":"MarkupSafe","version":"==1.1.1","purl":"pkg:pypi/MarkupSafe","properties":[{"name":"filePath","value":"scripts/requirements.txt"}]},{"type":"library","name":"requests","version":"==2.25.0","purl":"pkg:pypi/requests","properties":[{"name":"filePath","value":"scripts/requirements.txt"}]},{"type":"library","name":"smmap","version":"==3.0.5","purl":"pkg:pypi/smmap","properties":[{"name":"filePath","value":"scripts/requirements.txt"}]},{"type":"library","name":"soupsieve","version":"==2.0.1","purl":"pkg:pypi/soupsieve","properties":[{"name":"filePath","value":"scripts/requirements.txt"}]},{"type":"library","name":"urllib3","version":"==1.26.5","purl":"pkg:pypi/urllib3","properties":[{"name":"filePath","value":"scripts/requirements.txt"}]},{"type":"library","name":"pyyaml","version":"==5.4","purl":"pkg:pypi/pyyaml","properties":[{"name":"filePath","value":"scripts/requirements.txt"}]},{"type":"library","name":"wheel","version":"==0.37.0","purl":"pkg:pypi/wheel","properties":[{"name":"filePath","value":"scripts/requirements.txt"}]},{"type":"library","name":"jsonschema","version":"==3.2.0","purl":"pkg:pypi/jsonschema","properties":[{"name":"filePath","value":"scripts/requirements.txt"}]},{"type":"library","name":"marko","version":"==1.2.1","purl":"pkg:pypi/marko","properties":[{"name":"filePath","value":"scripts/requirements.txt"}]},{"type":"library","name":"actions/checkout","version":"v4","purl":"pkg:githubactions/actions/checkout","properties":[{"name":"filePath","value":".github/workflows/finalize-release.yml"}]},{"type":"library","name":"actions/checkout","version":"v3","purl":"pkg:githubactions/actions/checkout","properties":[{"name":"filePath","value":".github/workflows/prepare-release.yml"}]},{"type":"library","name":"actions/setup-python","version":"v4","purl":"pkg:githubactions/actions/setup-python","properties":[{"name":"filePath","value":".github/workflows/prepare-release.yml"}]},{"type":"library","name":"actions/create-github-app-token","version":"eaddb9eb7e4226c68cf4b39f167c83e5bd132b3e","purl":"pkg:githubactions/actions/create-github-app-token","properties":[{"name":"filePath","value":".github/workflows/prepare-release.yml"}]},{"type":"library","name":"actions/checkout","version":"v4","purl":"pkg:githubactions/actions/checkout","properties":[{"name":"filePath","value":".github/workflows/update-release-status.yml"}]},{"type":"library","name":"actions/checkout","version":"v4","purl":"pkg:githubactions/actions/checkout","properties":[{"name":"filePath","value":".github/workflows/update-release.yml"}]},{"type":"library","name":"actions/setup-python","version":"v4","purl":"pkg:githubactions/actions/setup-python","properties":[{"name":"filePath","value":".github/workflows/update-release.yml"}]},{"type":"library","name":"actions/create-github-app-token","version":"eaddb9eb7e4226c68cf4b39f167c83e5bd132b3e","purl":"pkg:githubactions/actions/create-github-app-token","properties":[{"name":"filePath","value":".github/workflows/update-release.yml"}]},{"type":"library","name":"actions/checkout","version":"v3","purl":"pkg:githubactions/actions/checkout","properties":[{"name":"filePath","value":".github/workflows/validate-package-files.yml"}]},{"type":"library","name":"actions/setup-python","version":"v4","purl":"pkg:githubactions/actions/setup-python","properties":[{"name":"filePath","value":".github/workflows/validate-package-files.yml"}]},{"type":"library","name":"actions/checkout","version":"v3","purl":"pkg:githubactions/actions/checkout","properties":[{"name":"filePath","value":".github/workflows/validate-query-formatting.yml"}]},{"type":"library","name":"actions/checkout","version":"v3","purl":"pkg:githubactions/actions/checkout","properties":[{"name":"filePath","value":".github/workflows/validate-query-help.yml"}]},{"type":"library","name":"actions/checkout","version":"v3","purl":"pkg:githubactions/actions/checkout","properties":[{"name":"filePath","value":".github/workflows/validate-query-test-case-formatting.yml"}]},{"type":"library","name":"actions/create-github-app-token","version":"eaddb9eb7e4226c68cf4b39f167c83e5bd132b3e","purl":"pkg:githubactions/actions/create-github-app-token","properties":[{"name":"filePath","value":".github/workflows/validate-release.yml"}]},{"type":"library","name":"semantic-version","version":"==2.10.0","purl":"pkg:pypi/semantic-version","properties":[{"name":"filePath","value":"scripts/release/requirements.txt"}]},{"type":"library","name":"PyGithub","version":"==1.59.1","purl":"pkg:pypi/PyGithub","properties":[{"name":"filePath","value":"scripts/release/requirements.txt"}]},{"type":"library","name":"PyYAML","version":"==6.0.1","purl":"pkg:pypi/PyYAML","properties":[{"name":"filePath","value":"scripts/release/requirements.txt"}]},{"type":"library","name":"GitPython","version":"==3.1.37","purl":"pkg:pypi/GitPython","properties":[{"name":"filePath","value":"scripts/release/requirements.txt"}]},{"type":"library","name":"pytest","version":"==7.4.3","purl":"pkg:pypi/pytest","properties":[{"name":"filePath","value":"scripts/release/requirements.txt"}]},{"type":"library","name":"certifi","version":"==2023.7.22","purl":"pkg:pypi/certifi","properties":[{"name":"filePath","value":"scripts/upgrade-codeql-dependencies/requirements.txt"}]},{"type":"library","name":"charset-normalizer","version":"==3.2.0","purl":"pkg:pypi/charset-normalizer","properties":[{"name":"filePath","value":"scripts/upgrade-codeql-dependencies/requirements.txt"}]},{"type":"library","name":"idna","version":"==3.4","purl":"pkg:pypi/idna","properties":[{"name":"filePath","value":"scripts/upgrade-codeql-dependencies/requirements.txt"}]},{"type":"library","name":"requests","version":"==2.31.0","purl":"pkg:pypi/requests","properties":[{"name":"filePath","value":"scripts/upgrade-codeql-dependencies/requirements.txt"}]},{"type":"library","name":"semantic-version","version":"==2.10.0","purl":"pkg:pypi/semantic-version","properties":[{"name":"filePath","value":"scripts/upgrade-codeql-dependencies/requirements.txt"}]},{"type":"library","name":"urllib3","version":"==1.26.18","purl":"pkg:pypi/urllib3","properties":[{"name":"filePath","value":"scripts/upgrade-codeql-dependencies/requirements.txt"}]},{"type":"library","name":"actions/checkout","version":"v2","purl":"pkg:githubactions/actions/checkout","properties":[{"name":"filePath","value":".github/workflows/code-scanning-pack-gen.yml"}]},{"type":"library","name":"actions/cache","version":"v2.1.3","purl":"pkg:githubactions/actions/cache","properties":[{"name":"filePath","value":".github/workflows/code-scanning-pack-gen.yml"}]},{"type":"library","name":"./.github/actions/install-codeql","version":"*","purl":"pkg:githubactions/./.github/actions/install-codeql","properties":[{"name":"filePath","value":".github/workflows/code-scanning-pack-gen.yml"}]},{"type":"library","name":"./.github/actions/install-codeql-packs","version":"*","purl":"pkg:githubactions/./.github/actions/install-codeql-packs","properties":[{"name":"filePath","value":".github/workflows/code-scanning-pack-gen.yml"}]},{"type":"library","name":"actions/upload-artifact","version":"v2","purl":"pkg:githubactions/actions/upload-artifact","properties":[{"name":"filePath","value":".github/workflows/code-scanning-pack-gen.yml"}]},{"type":"library","name":"actions/checkout","version":"v2","purl":"pkg:githubactions/actions/checkout","properties":[{"name":"filePath","value":".github/workflows/codeql_unit_tests.yml"}]},{"type":"library","name":"actions/setup-python","version":"v4","purl":"pkg:githubactions/actions/setup-python","properties":[{"name":"filePath","value":".github/workflows/codeql_unit_tests.yml"}]},{"type":"library","name":"actions/cache","version":"v2.1.3","purl":"pkg:githubactions/actions/cache","properties":[{"name":"filePath","value":".github/workflows/codeql_unit_tests.yml"}]},{"type":"library","name":"./.github/actions/install-codeql","version":"*","purl":"pkg:githubactions/./.github/actions/install-codeql","properties":[{"name":"filePath","value":".github/workflows/codeql_unit_tests.yml"}]},{"type":"library","name":"./.github/actions/install-codeql-packs","version":"*","purl":"pkg:githubactions/./.github/actions/install-codeql-packs","properties":[{"name":"filePath","value":".github/workflows/codeql_unit_tests.yml"}]},{"type":"library","name":"actions/upload-artifact","version":"v2","purl":"pkg:githubactions/actions/upload-artifact","properties":[{"name":"filePath","value":".github/workflows/codeql_unit_tests.yml"}]},{"type":"library","name":"actions/download-artifact","version":"v2","purl":"pkg:githubactions/actions/download-artifact","properties":[{"name":"filePath","value":".github/workflows/codeql_unit_tests.yml"}]},{"type":"library","name":"peter-evans/repository-dispatch","version":"v2","purl":"pkg:githubactions/peter-evans/repository-dispatch","properties":[{"name":"filePath","value":".github/workflows/dispatch-matrix-test-on-comment.yml"}]},{"type":"library","name":"actions/github-script","version":"v6","purl":"pkg:githubactions/actions/github-script","properties":[{"name":"filePath","value":".github/workflows/dispatch-matrix-test-on-comment.yml"}]},{"type":"library","name":"peter-evans/repository-dispatch","version":"v2","purl":"pkg:githubactions/peter-evans/repository-dispatch","properties":[{"name":"filePath","value":".github/workflows/dispatch-release-performance-check.yml"}]},{"type":"library","name":"actions/github-script","version":"v6","purl":"pkg:githubactions/actions/github-script","properties":[{"name":"filePath","value":".github/workflows/dispatch-release-performance-check.yml"}]},{"type":"library","name":"actions/checkout","version":"v2","purl":"pkg:githubactions/actions/checkout","properties":[{"name":"filePath","value":".github/workflows/extra-rule-validation.yml"}]},{"type":"library","name":"actions/upload-artifact","version":"v3","purl":"pkg:githubactions/actions/upload-artifact","properties":[{"name":"filePath","value":".github/workflows/extra-rule-validation.yml"}]},{"type":"library","name":"actions/checkout","version":"v2","purl":"pkg:githubactions/actions/checkout","properties":[{"name":"filePath","value":".github/workflows/generate-html-docs.yml"}]},{"type":"library","name":"actions/setup-python","version":"v4","purl":"pkg:githubactions/actions/setup-python","properties":[{"name":"filePath","value":".github/workflows/generate-html-docs.yml"}]},{"type":"library","name":"actions/upload-artifact","version":"v2","purl":"pkg:githubactions/actions/upload-artifact","properties":[{"name":"filePath","value":".github/workflows/generate-html-docs.yml"}]},{"type":"library","name":"actions/checkout","version":"v2","purl":"pkg:githubactions/actions/checkout","properties":[{"name":"filePath","value":".github/workflows/standard_library_upgrade_tests.yml"}]},{"type":"library","name":"actions/setup-python","version":"v2","purl":"pkg:githubactions/actions/setup-python","properties":[{"name":"filePath","value":".github/workflows/standard_library_upgrade_tests.yml"}]},{"type":"library","name":"actions/cache","version":"v2.1.3","purl":"pkg:githubactions/actions/cache","properties":[{"name":"filePath","value":".github/workflows/standard_library_upgrade_tests.yml"}]},{"type":"library","name":"./.github/actions/install-codeql","version":"*","purl":"pkg:githubactions/./.github/actions/install-codeql","properties":[{"name":"filePath","value":".github/workflows/standard_library_upgrade_tests.yml"}]},{"type":"library","name":"actions/upload-artifact","version":"v2","purl":"pkg:githubactions/actions/upload-artifact","properties":[{"name":"filePath","value":".github/workflows/standard_library_upgrade_tests.yml"}]},{"type":"library","name":"actions/setup-python","version":"v4","purl":"pkg:githubactions/actions/setup-python","properties":[{"name":"filePath","value":".github/workflows/standard_library_upgrade_tests.yml"}]},{"type":"library","name":"actions/download-artifact","version":"v2","purl":"pkg:githubactions/actions/download-artifact","properties":[{"name":"filePath","value":".github/workflows/standard_library_upgrade_tests.yml"}]},{"type":"library","name":"actions/checkout","version":"v2","purl":"pkg:githubactions/actions/checkout","properties":[{"name":"filePath","value":".github/workflows/tooling-unit-tests.yml"}]},{"type":"library","name":"actions/setup-python","version":"v4","purl":"pkg:githubactions/actions/setup-python","properties":[{"name":"filePath","value":".github/workflows/tooling-unit-tests.yml"}]},{"type":"library","name":"actions/cache","version":"v2.1.3","purl":"pkg:githubactions/actions/cache","properties":[{"name":"filePath","value":".github/workflows/tooling-unit-tests.yml"}]},{"type":"library","name":"./.github/actions/install-codeql","version":"*","purl":"pkg:githubactions/./.github/actions/install-codeql","properties":[{"name":"filePath","value":".github/workflows/tooling-unit-tests.yml"}]},{"type":"library","name":"./.github/actions/install-codeql-packs","version":"*","purl":"pkg:githubactions/./.github/actions/install-codeql-packs","properties":[{"name":"filePath","value":".github/workflows/tooling-unit-tests.yml"}]},{"type":"library","name":"actions/checkout","version":"v2","purl":"pkg:githubactions/actions/checkout","properties":[{"name":"filePath","value":".github/workflows/upgrade_codeql_dependencies.yml"}]},{"type":"library","name":"peter-evans/create-pull-request","version":"v3","purl":"pkg:githubactions/peter-evans/create-pull-request","properties":[{"name":"filePath","value":".github/workflows/upgrade_codeql_dependencies.yml"}]},{"type":"library","name":"actions/checkout","version":"v2","purl":"pkg:githubactions/actions/checkout","properties":[{"name":"filePath","value":".github/workflows/verify-standard-library-dependencies.yml"}]},{"type":"library","name":"actions/setup-python","version":"v4","purl":"pkg:githubactions/actions/setup-python","properties":[{"name":"filePath","value":".github/workflows/verify-standard-library-dependencies.yml"}]},{"type":"library","name":"actions/cache","version":"v2.1.3","purl":"pkg:githubactions/actions/cache","properties":[{"name":"filePath","value":".github/workflows/verify-standard-library-dependencies.yml"}]},{"type":"library","name":"./.github/actions/install-codeql","version":"*","purl":"pkg:githubactions/./.github/actions/install-codeql","properties":[{"name":"filePath","value":".github/workflows/verify-standard-library-dependencies.yml"}]},{"type":"library","name":"pyyaml","version":"==5.4","purl":"pkg:pypi/pyyaml","properties":[{"name":"filePath","value":"scripts/configuration/requirements.txt"}]},{"type":"library","name":"jsonpath-ng","version":"==1.5.3","purl":"pkg:pypi/jsonpath-ng","properties":[{"name":"filePath","value":"scripts/guideline_recategorization/requirements.txt"}]},{"type":"library","name":"jsonschema","version":"==4.9.1","purl":"pkg:pypi/jsonschema","properties":[{"name":"filePath","value":"scripts/guideline_recategorization/requirements.txt"}]},{"type":"library","name":"jsonpatch","version":"==1.32","purl":"pkg:pypi/jsonpatch","properties":[{"name":"filePath","value":"scripts/guideline_recategorization/requirements.txt"}]},{"type":"library","name":"jsonpointer","version":"==2.3","purl":"pkg:pypi/jsonpointer","properties":[{"name":"filePath","value":"scripts/guideline_recategorization/requirements.txt"}]},{"type":"library","name":"PyYAML","version":"==5.4","purl":"pkg:pypi/PyYAML","properties":[{"name":"filePath","value":"scripts/guideline_recategorization/requirements.txt"}]},{"type":"library","name":"pytest","version":"==7.2.0","purl":"pkg:pypi/pytest","properties":[{"name":"filePath","value":"scripts/guideline_recategorization/requirements.txt"}]},{"type":"library","name":"actions/github-script","version":"v7","purl":"pkg:githubactions/actions/github-script","properties":[{"name":"filePath","value":".github/actions/check-permissions/action.yml"}]},{"type":"library","name":"actions/setup-python","version":"v5","purl":"pkg:githubactions/actions/setup-python","properties":[{"name":"filePath","value":"apply-configuration/action.yml"}]}]}