{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:48264cbf-c13b-4777-8795-9996e38bf00d",
  "version": 1,
  "metadata": {
    "timestamp": "2026-06-22T07:20:45+00:00",
    "tools": {
      "components": [
        {
          "type": "application",
          "manufacturer": {
            "name": "Aqua Security Software Ltd."
          },
          "group": "aquasecurity",
          "name": "trivy",
          "version": "0.70.0"
        }
      ]
    },
    "component": {
      "bom-ref": "60bdded5-5aaa-4645-b019-4c80470d9529",
      "type": "application",
      "name": "/tmp/confluent-packaging/usm-agent/confluent-usm-agent-1.0.2-amd64",
      "properties": [
        {
          "name": "aquasecurity:trivy:SchemaVersion",
          "value": "2"
        }
      ]
    }
  },
  "components": [
    {
      "bom-ref": "1068fdf5-bb1d-4f27-b529-c785341aaea2",
      "type": "library",
      "name": "stdlib",
      "version": "v1.25.10",
      "purl": "pkg:golang/stdlib@v1.25.10",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "stdlib@v1.25.10"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "300da3e3-8ff8-4c6e-93db-de8e264dc0d8",
      "type": "application",
      "name": "bin/usm-agent-configgen",
      "properties": [
        {
          "name": "aquasecurity:trivy:Class",
          "value": "lang-pkgs"
        },
        {
          "name": "aquasecurity:trivy:Type",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "3d3301d2-b16c-411e-bba0-6f1f6f19e23c",
      "type": "application",
      "name": "bin/usm-agent-logparser",
      "properties": [
        {
          "name": "aquasecurity:trivy:Class",
          "value": "lang-pkgs"
        },
        {
          "name": "aquasecurity:trivy:Type",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "614822f6-1a14-4e5b-b3cd-4e45c55cdcd8",
      "type": "library",
      "name": "stdlib",
      "version": "v1.25.10",
      "purl": "pkg:golang/stdlib@v1.25.10",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "stdlib@v1.25.10"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "92ce1078-5f3e-46e3-960c-835e2437bfca",
      "type": "library",
      "name": "stdlib",
      "version": "v1.25.10",
      "purl": "pkg:golang/stdlib@v1.25.10",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "stdlib@v1.25.10"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "939079e9-513c-475f-9eee-d148cc12f122",
      "type": "library",
      "name": "github.com/confluentinc/setu-agent/tools",
      "version": "1.0.2",
      "purl": "pkg:golang/github.com/confluentinc/setu-agent/tools@1.0.2",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "github.com/confluentinc/setu-agent/tools@v1.0.2"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "a5e09fa4-05c7-4d6e-9904-7d7ccf006b3e",
      "type": "library",
      "name": "github.com/confluentinc/setu-agent/tools",
      "version": "1.0.2",
      "purl": "pkg:golang/github.com/confluentinc/setu-agent/tools@1.0.2",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "github.com/confluentinc/setu-agent/tools@v1.0.2"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "cd29fcd9-9b3c-4aff-8c99-f2dfaee2923a",
      "type": "library",
      "name": "github.com/confluentinc/setu-agent/tools",
      "version": "1.0.2",
      "purl": "pkg:golang/github.com/confluentinc/setu-agent/tools@1.0.2",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "github.com/confluentinc/setu-agent/tools@v1.0.2"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "d0541af9-fa24-45dc-9b44-b96fede26f05",
      "type": "application",
      "name": "bin/usm-agent-logcollector",
      "properties": [
        {
          "name": "aquasecurity:trivy:Class",
          "value": "lang-pkgs"
        },
        {
          "name": "aquasecurity:trivy:Type",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/cncf/xds/go@v0.0.0-20260202195803-dba9d589def2",
      "type": "library",
      "name": "github.com/cncf/xds/go",
      "version": "v0.0.0-20260202195803-dba9d589def2",
      "purl": "pkg:golang/github.com/cncf/xds/go@v0.0.0-20260202195803-dba9d589def2",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "github.com/cncf/xds/go@v0.0.0-20260202195803-dba9d589def2"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/confluentinc/events-schema@v0.429.0",
      "type": "library",
      "name": "github.com/confluentinc/events-schema",
      "version": "v0.429.0",
      "purl": "pkg:golang/github.com/confluentinc/events-schema@v0.429.0",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "github.com/confluentinc/events-schema@v0.429.0"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/envoyproxy/go-control-plane/envoy@v1.37.0",
      "type": "library",
      "name": "github.com/envoyproxy/go-control-plane/envoy",
      "version": "v1.37.0",
      "purl": "pkg:golang/github.com/envoyproxy/go-control-plane/envoy@v1.37.0",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "github.com/envoyproxy/go-control-plane/envoy@v1.37.0"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.3.3",
      "type": "library",
      "name": "github.com/envoyproxy/protoc-gen-validate",
      "version": "v1.3.3",
      "purl": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.3.3",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "github.com/envoyproxy/protoc-gen-validate@v1.3.3"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/golang/protobuf@v1.5.4",
      "type": "library",
      "name": "github.com/golang/protobuf",
      "version": "v1.5.4",
      "purl": "pkg:golang/github.com/golang/protobuf@v1.5.4",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "github.com/golang/protobuf@v1.5.4"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.28.0",
      "type": "library",
      "name": "github.com/grpc-ecosystem/grpc-gateway/v2",
      "version": "v2.28.0",
      "purl": "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.28.0",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "github.com/grpc-ecosystem/grpc-gateway/v2@v2.28.0"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/klauspost/compress@v1.18.6",
      "type": "library",
      "name": "github.com/klauspost/compress",
      "version": "v1.18.6",
      "purl": "pkg:golang/github.com/klauspost/compress@v1.18.6",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "github.com/klauspost/compress@v1.18.6"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/pierrec/lz4/v4@v4.1.26",
      "type": "library",
      "name": "github.com/pierrec/lz4/v4",
      "version": "v4.1.26",
      "purl": "pkg:golang/github.com/pierrec/lz4/v4@v4.1.26",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "github.com/pierrec/lz4/v4@v4.1.26"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/go.opentelemetry.io/proto/otlp@v1.10.0",
      "type": "library",
      "name": "go.opentelemetry.io/proto/otlp",
      "version": "v1.10.0",
      "purl": "pkg:golang/go.opentelemetry.io/proto/otlp@v1.10.0",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "go.opentelemetry.io/proto/otlp@v1.10.0"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/net@v0.54.0",
      "type": "library",
      "name": "golang.org/x/net",
      "version": "v0.54.0",
      "purl": "pkg:golang/golang.org/x/net@v0.54.0",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "golang.org/x/net@v0.54.0"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/sys@v0.44.0",
      "type": "library",
      "name": "golang.org/x/sys",
      "version": "v0.44.0",
      "purl": "pkg:golang/golang.org/x/sys@v0.44.0",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "golang.org/x/sys@v0.44.0"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/text@v0.37.0",
      "type": "library",
      "name": "golang.org/x/text",
      "version": "v0.37.0",
      "purl": "pkg:golang/golang.org/x/text@v0.37.0",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "golang.org/x/text@v0.37.0"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260511170946-3700d4141b60",
      "type": "library",
      "name": "google.golang.org/genproto/googleapis/api",
      "version": "v0.0.0-20260511170946-3700d4141b60",
      "purl": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260511170946-3700d4141b60",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "google.golang.org/genproto/googleapis/api@v0.0.0-20260511170946-3700d4141b60"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260511170946-3700d4141b60",
      "type": "library",
      "name": "google.golang.org/genproto/googleapis/rpc",
      "version": "v0.0.0-20260511170946-3700d4141b60",
      "purl": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260511170946-3700d4141b60",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "google.golang.org/genproto/googleapis/rpc@v0.0.0-20260511170946-3700d4141b60"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/google.golang.org/grpc@v1.81.0",
      "type": "library",
      "name": "google.golang.org/grpc",
      "version": "v1.81.0",
      "purl": "pkg:golang/google.golang.org/grpc@v1.81.0",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "google.golang.org/grpc@v1.81.0"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/google.golang.org/protobuf@v1.36.11",
      "type": "library",
      "name": "google.golang.org/protobuf",
      "version": "v1.36.11",
      "purl": "pkg:golang/google.golang.org/protobuf@v1.36.11",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "google.golang.org/protobuf@v1.36.11"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "1068fdf5-bb1d-4f27-b529-c785341aaea2",
      "dependsOn": []
    },
    {
      "ref": "300da3e3-8ff8-4c6e-93db-de8e264dc0d8",
      "dependsOn": [
        "939079e9-513c-475f-9eee-d148cc12f122"
      ]
    },
    {
      "ref": "3d3301d2-b16c-411e-bba0-6f1f6f19e23c",
      "dependsOn": [
        "cd29fcd9-9b3c-4aff-8c99-f2dfaee2923a"
      ]
    },
    {
      "ref": "60bdded5-5aaa-4645-b019-4c80470d9529",
      "dependsOn": [
        "300da3e3-8ff8-4c6e-93db-de8e264dc0d8",
        "3d3301d2-b16c-411e-bba0-6f1f6f19e23c",
        "d0541af9-fa24-45dc-9b44-b96fede26f05"
      ]
    },
    {
      "ref": "614822f6-1a14-4e5b-b3cd-4e45c55cdcd8",
      "dependsOn": []
    },
    {
      "ref": "92ce1078-5f3e-46e3-960c-835e2437bfca",
      "dependsOn": []
    },
    {
      "ref": "939079e9-513c-475f-9eee-d148cc12f122",
      "dependsOn": [
        "92ce1078-5f3e-46e3-960c-835e2437bfca"
      ]
    },
    {
      "ref": "a5e09fa4-05c7-4d6e-9904-7d7ccf006b3e",
      "dependsOn": [
        "1068fdf5-bb1d-4f27-b529-c785341aaea2"
      ]
    },
    {
      "ref": "cd29fcd9-9b3c-4aff-8c99-f2dfaee2923a",
      "dependsOn": [
        "614822f6-1a14-4e5b-b3cd-4e45c55cdcd8",
        "pkg:golang/github.com/cncf/xds/go@v0.0.0-20260202195803-dba9d589def2",
        "pkg:golang/github.com/confluentinc/events-schema@v0.429.0",
        "pkg:golang/github.com/envoyproxy/go-control-plane/envoy@v1.37.0",
        "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.3.3",
        "pkg:golang/github.com/golang/protobuf@v1.5.4",
        "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.28.0",
        "pkg:golang/github.com/klauspost/compress@v1.18.6",
        "pkg:golang/github.com/pierrec/lz4/v4@v4.1.26",
        "pkg:golang/go.opentelemetry.io/proto/otlp@v1.10.0",
        "pkg:golang/golang.org/x/net@v0.54.0",
        "pkg:golang/golang.org/x/sys@v0.44.0",
        "pkg:golang/golang.org/x/text@v0.37.0",
        "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260511170946-3700d4141b60",
        "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260511170946-3700d4141b60",
        "pkg:golang/google.golang.org/grpc@v1.81.0",
        "pkg:golang/google.golang.org/protobuf@v1.36.11"
      ]
    },
    {
      "ref": "d0541af9-fa24-45dc-9b44-b96fede26f05",
      "dependsOn": [
        "a5e09fa4-05c7-4d6e-9904-7d7ccf006b3e"
      ]
    },
    {
      "ref": "pkg:golang/github.com/cncf/xds/go@v0.0.0-20260202195803-dba9d589def2",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/confluentinc/events-schema@v0.429.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/envoyproxy/go-control-plane/envoy@v1.37.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.3.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/golang/protobuf@v1.5.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.28.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/klauspost/compress@v1.18.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/pierrec/lz4/v4@v4.1.26",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/go.opentelemetry.io/proto/otlp@v1.10.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/golang.org/x/net@v0.54.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/golang.org/x/sys@v0.44.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/golang.org/x/text@v0.37.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260511170946-3700d4141b60",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260511170946-3700d4141b60",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/google.golang.org/grpc@v1.81.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/google.golang.org/protobuf@v1.36.11",
      "dependsOn": []
    }
  ],
  "vulnerabilities": []
}