{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:3cd61595-6f9a-4ea3-a160-b574155ecf53",
  "version": 1,
  "metadata": {
    "timestamp": "2026-10-14T17:16:53+00:00",
    "tools": {
      "components": [
        {
          "type": "application",
          "manufacturer": {
            "name": "Aqua Security Software Ltd."
          },
          "group": "aquasecurity",
          "name": "trivy",
          "version": "0.69.3"
        }
      ]
    },
    "component": {
      "bom-ref": "e453a520-5d10-4507-a6ec-40276517b481",
      "type": "application",
      "name": "confluent-usm-agent",
      "properties": [
        {
          "name": "aquasecurity:trivy:SchemaVersion",
          "value": "2"
        }
      ],
      "version": "1.3.0",
      "supplier": {
        "name": "Confluent",
        "url": [
          "https://confluent.io"
        ]
      },
      "publisher": "Confluent"
    }
  },
  "components": [
    {
      "bom-ref": "17dfa5b4-29e0-45ad-965b-c2f46fa6ad75",
      "type": "library",
      "name": "github.com/confluentinc/setu-agent/tools",
      "version": "1.3.0",
      "purl": "pkg:golang/github.com/confluentinc/setu-agent/tools@1.3.0",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "github.com/confluentinc/setu-agent/tools@v1.3.0"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "363f9f18-efac-41ac-ac01-804d9be7aa7d",
      "type": "application",
      "name": "usr/bin/usm-agent-command-handler",
      "properties": [
        {
          "name": "aquasecurity:trivy:Class",
          "value": "lang-pkgs"
        },
        {
          "name": "aquasecurity:trivy:Type",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "5b4d7168-6920-45a5-a117-0d6f838aed0e",
      "type": "library",
      "name": "stdlib",
      "version": "v1.26.9",
      "purl": "pkg:golang/stdlib@v1.26.9",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "stdlib@v1.26.9"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "5db52d54-1f9f-463a-9de8-d714f5b43ff6",
      "type": "application",
      "name": "usr/bin/usm-agent-logparser",
      "properties": [
        {
          "name": "aquasecurity:trivy:Class",
          "value": "lang-pkgs"
        },
        {
          "name": "aquasecurity:trivy:Type",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "98f620ab-2823-46e7-88d3-b4c83e9f69e0",
      "type": "library",
      "name": "stdlib",
      "version": "v1.26.9",
      "purl": "pkg:golang/stdlib@v1.26.9",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "stdlib@v1.26.9"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "997a4026-579c-4299-b0c4-e07caacec47d",
      "type": "application",
      "name": "usr/bin/usm-agent-configgen",
      "properties": [
        {
          "name": "aquasecurity:trivy:Class",
          "value": "lang-pkgs"
        },
        {
          "name": "aquasecurity:trivy:Type",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "9d7c5fc0-049c-4ab5-b05a-c669d554cb9f",
      "type": "application",
      "name": "usr/bin/usm-agent-logcollector",
      "properties": [
        {
          "name": "aquasecurity:trivy:Class",
          "value": "lang-pkgs"
        },
        {
          "name": "aquasecurity:trivy:Type",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "a4da886a-0639-49ab-ac37-d40c45dac7e0",
      "type": "library",
      "name": "github.com/confluentinc/setu-agent/tools",
      "version": "1.3.0",
      "purl": "pkg:golang/github.com/confluentinc/setu-agent/tools@1.3.0",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "github.com/confluentinc/setu-agent/tools@v1.3.0"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "a9fed7ad-e585-46d7-8f77-34366c1478a7",
      "type": "library",
      "name": "github.com/confluentinc/setu-agent/tools",
      "version": "1.3.0",
      "purl": "pkg:golang/github.com/confluentinc/setu-agent/tools@1.3.0",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "github.com/confluentinc/setu-agent/tools@v1.3.0"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "cb019218-bf51-4772-a8c3-8ed737d67d0c",
      "type": "library",
      "name": "stdlib",
      "version": "v1.26.9",
      "purl": "pkg:golang/stdlib@v1.26.9",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "stdlib@v1.26.9"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "f7352585-95e1-4d02-8b3e-7f68fcb3e886",
      "type": "library",
      "name": "stdlib",
      "version": "v1.26.9",
      "purl": "pkg:golang/stdlib@v1.26.9",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "stdlib@v1.26.9"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/cncf/xds/go@v0.0.0-20260202195803-dba9d589def2",
      "type": "library",
      "name": "github.com/cncf/xds/go",
      "version": "v0.0.0-20260202195803-dba9d589def2",
      "purl": "pkg:golang/github.com/cncf/xds/go@v0.0.0-20260202195803-dba9d589def2",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "github.com/cncf/xds/go@v0.0.0-20260202195803-dba9d589def2"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/confluentinc/events-schema@v0.449.0",
      "type": "library",
      "name": "github.com/confluentinc/events-schema",
      "version": "v0.449.0",
      "purl": "pkg:golang/github.com/confluentinc/events-schema@v0.449.0",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "github.com/confluentinc/events-schema@v0.449.0"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/confluentinc/setu-agent/command-handler@1.3.0",
      "type": "library",
      "name": "github.com/confluentinc/setu-agent/command-handler",
      "version": "1.3.0",
      "purl": "pkg:golang/github.com/confluentinc/setu-agent/command-handler@1.3.0",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "github.com/confluentinc/setu-agent/command-handler@v1.3.0"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/envoyproxy/go-control-plane/envoy@v1.39.0",
      "type": "library",
      "name": "github.com/envoyproxy/go-control-plane/envoy",
      "version": "v1.39.0",
      "purl": "pkg:golang/github.com/envoyproxy/go-control-plane/envoy@v1.39.0",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "github.com/envoyproxy/go-control-plane/envoy@v1.39.0"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.3.3",
      "type": "library",
      "name": "github.com/envoyproxy/protoc-gen-validate",
      "version": "v1.3.3",
      "purl": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.3.3",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "github.com/envoyproxy/protoc-gen-validate@v1.3.3"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/golang/protobuf@v1.5.4",
      "type": "library",
      "name": "github.com/golang/protobuf",
      "version": "v1.5.4",
      "purl": "pkg:golang/github.com/golang/protobuf@v1.5.4",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "github.com/golang/protobuf@v1.5.4"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.29.0",
      "type": "library",
      "name": "github.com/grpc-ecosystem/grpc-gateway/v2",
      "version": "v2.29.0",
      "purl": "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.29.0",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "github.com/grpc-ecosystem/grpc-gateway/v2@v2.29.0"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/klauspost/compress@v1.19.2",
      "type": "library",
      "name": "github.com/klauspost/compress",
      "version": "v1.19.2",
      "purl": "pkg:golang/github.com/klauspost/compress@v1.19.2",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "github.com/klauspost/compress@v1.19.2"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/pierrec/lz4/v4@v4.1.29",
      "type": "library",
      "name": "github.com/pierrec/lz4/v4",
      "version": "v4.1.29",
      "purl": "pkg:golang/github.com/pierrec/lz4/v4@v4.1.29",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "github.com/pierrec/lz4/v4@v4.1.29"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/go.opentelemetry.io/proto/otlp@v1.11.0",
      "type": "library",
      "name": "go.opentelemetry.io/proto/otlp",
      "version": "v1.11.0",
      "purl": "pkg:golang/go.opentelemetry.io/proto/otlp@v1.11.0",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "go.opentelemetry.io/proto/otlp@v1.11.0"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/net@v0.60.0",
      "type": "library",
      "name": "golang.org/x/net",
      "version": "v0.60.0",
      "purl": "pkg:golang/golang.org/x/net@v0.60.0",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "golang.org/x/net@v0.60.0"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/sync@v0.23.0",
      "type": "library",
      "name": "golang.org/x/sync",
      "version": "v0.23.0",
      "purl": "pkg:golang/golang.org/x/sync@v0.23.0",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "golang.org/x/sync@v0.23.0"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/sys@v0.48.0",
      "type": "library",
      "name": "golang.org/x/sys",
      "version": "v0.48.0",
      "purl": "pkg:golang/golang.org/x/sys@v0.48.0",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "golang.org/x/sys@v0.48.0"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/text@v0.42.0",
      "type": "library",
      "name": "golang.org/x/text",
      "version": "v0.42.0",
      "purl": "pkg:golang/golang.org/x/text@v0.42.0",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "golang.org/x/text@v0.42.0"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260819154853-08b0e4226688",
      "type": "library",
      "name": "google.golang.org/genproto/googleapis/api",
      "version": "v0.0.0-20260819154853-08b0e4226688",
      "purl": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260819154853-08b0e4226688",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "google.golang.org/genproto/googleapis/api@v0.0.0-20260819154853-08b0e4226688"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260819154853-08b0e4226688",
      "type": "library",
      "name": "google.golang.org/genproto/googleapis/rpc",
      "version": "v0.0.0-20260819154853-08b0e4226688",
      "purl": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260819154853-08b0e4226688",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "google.golang.org/genproto/googleapis/rpc@v0.0.0-20260819154853-08b0e4226688"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/google.golang.org/grpc@v1.83.2",
      "type": "library",
      "name": "google.golang.org/grpc",
      "version": "v1.83.2",
      "purl": "pkg:golang/google.golang.org/grpc@v1.83.2",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "google.golang.org/grpc@v1.83.2"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/google.golang.org/protobuf@v1.36.12",
      "type": "library",
      "name": "google.golang.org/protobuf",
      "version": "v1.36.12",
      "purl": "pkg:golang/google.golang.org/protobuf@v1.36.12",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "google.golang.org/protobuf@v1.36.12"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "17dfa5b4-29e0-45ad-965b-c2f46fa6ad75",
      "dependsOn": [
        "98f620ab-2823-46e7-88d3-b4c83e9f69e0"
      ]
    },
    {
      "ref": "363f9f18-efac-41ac-ac01-804d9be7aa7d",
      "dependsOn": [
        "pkg:golang/github.com/confluentinc/setu-agent/command-handler@1.3.0"
      ]
    },
    {
      "ref": "5b4d7168-6920-45a5-a117-0d6f838aed0e",
      "dependsOn": []
    },
    {
      "ref": "5db52d54-1f9f-463a-9de8-d714f5b43ff6",
      "dependsOn": [
        "a4da886a-0639-49ab-ac37-d40c45dac7e0"
      ]
    },
    {
      "ref": "98f620ab-2823-46e7-88d3-b4c83e9f69e0",
      "dependsOn": []
    },
    {
      "ref": "997a4026-579c-4299-b0c4-e07caacec47d",
      "dependsOn": [
        "17dfa5b4-29e0-45ad-965b-c2f46fa6ad75"
      ]
    },
    {
      "ref": "9d7c5fc0-049c-4ab5-b05a-c669d554cb9f",
      "dependsOn": [
        "a9fed7ad-e585-46d7-8f77-34366c1478a7"
      ]
    },
    {
      "ref": "a4da886a-0639-49ab-ac37-d40c45dac7e0",
      "dependsOn": [
        "5b4d7168-6920-45a5-a117-0d6f838aed0e",
        "pkg:golang/github.com/cncf/xds/go@v0.0.0-20260202195803-dba9d589def2",
        "pkg:golang/github.com/confluentinc/events-schema@v0.449.0",
        "pkg:golang/github.com/envoyproxy/go-control-plane/envoy@v1.39.0",
        "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.3.3",
        "pkg:golang/github.com/golang/protobuf@v1.5.4",
        "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.29.0",
        "pkg:golang/github.com/klauspost/compress@v1.19.2",
        "pkg:golang/github.com/pierrec/lz4/v4@v4.1.29",
        "pkg:golang/go.opentelemetry.io/proto/otlp@v1.11.0",
        "pkg:golang/golang.org/x/net@v0.60.0",
        "pkg:golang/golang.org/x/sys@v0.48.0",
        "pkg:golang/golang.org/x/text@v0.42.0",
        "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260819154853-08b0e4226688",
        "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260819154853-08b0e4226688",
        "pkg:golang/google.golang.org/grpc@v1.83.2",
        "pkg:golang/google.golang.org/protobuf@v1.36.12"
      ]
    },
    {
      "ref": "a9fed7ad-e585-46d7-8f77-34366c1478a7",
      "dependsOn": [
        "f7352585-95e1-4d02-8b3e-7f68fcb3e886"
      ]
    },
    {
      "ref": "cb019218-bf51-4772-a8c3-8ed737d67d0c",
      "dependsOn": []
    },
    {
      "ref": "e453a520-5d10-4507-a6ec-40276517b481",
      "dependsOn": [
        "363f9f18-efac-41ac-ac01-804d9be7aa7d",
        "5db52d54-1f9f-463a-9de8-d714f5b43ff6",
        "997a4026-579c-4299-b0c4-e07caacec47d",
        "9d7c5fc0-049c-4ab5-b05a-c669d554cb9f"
      ]
    },
    {
      "ref": "f7352585-95e1-4d02-8b3e-7f68fcb3e886",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/cncf/xds/go@v0.0.0-20260202195803-dba9d589def2",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/confluentinc/events-schema@v0.449.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/confluentinc/setu-agent/command-handler@1.3.0",
      "dependsOn": [
        "cb019218-bf51-4772-a8c3-8ed737d67d0c",
        "pkg:golang/golang.org/x/sync@v0.23.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/envoyproxy/go-control-plane/envoy@v1.39.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.3.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/golang/protobuf@v1.5.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.29.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/klauspost/compress@v1.19.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/pierrec/lz4/v4@v4.1.29",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/go.opentelemetry.io/proto/otlp@v1.11.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/golang.org/x/net@v0.60.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/golang.org/x/sync@v0.23.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/golang.org/x/sys@v0.48.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/golang.org/x/text@v0.42.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260819154853-08b0e4226688",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260819154853-08b0e4226688",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/google.golang.org/grpc@v1.83.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/google.golang.org/protobuf@v1.36.12",
      "dependsOn": []
    }
  ],
  "vulnerabilities": []
}