{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:a5def8a8-8a65-425f-b6af-8134f0a51c2e",
  "version": 1,
  "metadata": {
    "timestamp": "2026-06-23T19:13:58+00:00",
    "tools": {
      "components": [
        {
          "type": "application",
          "manufacturer": {
            "name": "Aqua Security Software Ltd."
          },
          "group": "aquasecurity",
          "name": "trivy",
          "version": "0.69.3"
        }
      ]
    },
    "component": {
      "bom-ref": "87d0a2d2-f026-4e3f-92f5-b154ac7da2b4",
      "type": "application",
      "name": "confluent-usm-agent",
      "properties": [
        {
          "name": "aquasecurity:trivy:SchemaVersion",
          "value": "2"
        }
      ],
      "version": "1.1.0",
      "supplier": {
        "name": "Confluent",
        "url": [
          "https://confluent.io"
        ]
      },
      "publisher": "Confluent"
    }
  },
  "components": [
    {
      "bom-ref": "1d960ed6-42e4-4ed3-8a3b-1e542504d348",
      "type": "library",
      "name": "github.com/confluentinc/setu-agent/tools",
      "version": "1.1.0",
      "purl": "pkg:golang/github.com/confluentinc/setu-agent/tools@1.1.0",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "github.com/confluentinc/setu-agent/tools@v1.1.0"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "3765bcf1-765a-417c-add2-e19673730f60",
      "type": "application",
      "name": "usr/bin/usm-agent-logcollector",
      "properties": [
        {
          "name": "aquasecurity:trivy:Class",
          "value": "lang-pkgs"
        },
        {
          "name": "aquasecurity:trivy:Type",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "43a2a764-7f90-4b83-ba7f-5a8b2f0d5072",
      "type": "library",
      "name": "github.com/confluentinc/setu-agent/tools",
      "version": "1.1.0",
      "purl": "pkg:golang/github.com/confluentinc/setu-agent/tools@1.1.0",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "github.com/confluentinc/setu-agent/tools@v1.1.0"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "503202cd-3b0d-493f-95dc-9d204307483e",
      "type": "library",
      "name": "github.com/confluentinc/setu-agent/tools",
      "version": "1.1.0",
      "purl": "pkg:golang/github.com/confluentinc/setu-agent/tools@1.1.0",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "github.com/confluentinc/setu-agent/tools@v1.1.0"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "5da6a520-9ff8-4c45-9fc5-52504f119510",
      "type": "library",
      "name": "stdlib",
      "version": "v1.25.8",
      "purl": "pkg:golang/stdlib@v1.25.8",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "stdlib@v1.25.8"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "6badc3c6-af2b-4b43-af2a-37ff857c8b2b",
      "type": "library",
      "name": "stdlib",
      "version": "v1.25.8",
      "purl": "pkg:golang/stdlib@v1.25.8",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "stdlib@v1.25.8"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "d6030f1a-3135-45b5-8f1e-738a4d6314b5",
      "type": "application",
      "name": "usr/bin/usm-agent-logparser",
      "properties": [
        {
          "name": "aquasecurity:trivy:Class",
          "value": "lang-pkgs"
        },
        {
          "name": "aquasecurity:trivy:Type",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "e859c5c1-b7b3-4097-8af3-1dc0c33e637f",
      "type": "application",
      "name": "usr/bin/usm-agent-configgen",
      "properties": [
        {
          "name": "aquasecurity:trivy:Class",
          "value": "lang-pkgs"
        },
        {
          "name": "aquasecurity:trivy:Type",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "f5116d1b-71bf-4df0-a0ab-3d072e983129",
      "type": "library",
      "name": "stdlib",
      "version": "v1.25.8",
      "purl": "pkg:golang/stdlib@v1.25.8",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "stdlib@v1.25.8"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/cncf/xds/go@v0.0.0-20250121191232-2f005788dc42",
      "type": "library",
      "name": "github.com/cncf/xds/go",
      "version": "v0.0.0-20250121191232-2f005788dc42",
      "purl": "pkg:golang/github.com/cncf/xds/go@v0.0.0-20250121191232-2f005788dc42",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "github.com/cncf/xds/go@v0.0.0-20250121191232-2f005788dc42"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/confluentinc/events-schema@v0.365.0",
      "type": "library",
      "name": "github.com/confluentinc/events-schema",
      "version": "v0.365.0",
      "purl": "pkg:golang/github.com/confluentinc/events-schema@v0.365.0",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "github.com/confluentinc/events-schema@v0.365.0"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/envoyproxy/go-control-plane/envoy@v1.32.5-0.20250603023119-cddde1872b42",
      "type": "library",
      "name": "github.com/envoyproxy/go-control-plane/envoy",
      "version": "v1.32.5-0.20250603023119-cddde1872b42",
      "purl": "pkg:golang/github.com/envoyproxy/go-control-plane/envoy@v1.32.5-0.20250603023119-cddde1872b42",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "github.com/envoyproxy/go-control-plane/envoy@v1.32.5-0.20250603023119-cddde1872b42"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.2.1",
      "type": "library",
      "name": "github.com/envoyproxy/protoc-gen-validate",
      "version": "v1.2.1",
      "purl": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.2.1",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "github.com/envoyproxy/protoc-gen-validate@v1.2.1"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/golang/protobuf@v1.5.4",
      "type": "library",
      "name": "github.com/golang/protobuf",
      "version": "v1.5.4",
      "purl": "pkg:golang/github.com/golang/protobuf@v1.5.4",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "github.com/golang/protobuf@v1.5.4"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.26.3",
      "type": "library",
      "name": "github.com/grpc-ecosystem/grpc-gateway/v2",
      "version": "v2.26.3",
      "purl": "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.26.3",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "github.com/grpc-ecosystem/grpc-gateway/v2@v2.26.3"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/klauspost/compress@v1.18.0",
      "type": "library",
      "name": "github.com/klauspost/compress",
      "version": "v1.18.0",
      "purl": "pkg:golang/github.com/klauspost/compress@v1.18.0",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "github.com/klauspost/compress@v1.18.0"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/pierrec/lz4/v4@v4.1.22",
      "type": "library",
      "name": "github.com/pierrec/lz4/v4",
      "version": "v4.1.22",
      "purl": "pkg:golang/github.com/pierrec/lz4/v4@v4.1.22",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "github.com/pierrec/lz4/v4@v4.1.22"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/go.opentelemetry.io/proto/otlp@v1.6.0",
      "type": "library",
      "name": "go.opentelemetry.io/proto/otlp",
      "version": "v1.6.0",
      "purl": "pkg:golang/go.opentelemetry.io/proto/otlp@v1.6.0",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "go.opentelemetry.io/proto/otlp@v1.6.0"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/net@v0.39.0",
      "type": "library",
      "name": "golang.org/x/net",
      "version": "v0.39.0",
      "purl": "pkg:golang/golang.org/x/net@v0.39.0",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "golang.org/x/net@v0.39.0"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/sys@v0.32.0",
      "type": "library",
      "name": "golang.org/x/sys",
      "version": "v0.32.0",
      "purl": "pkg:golang/golang.org/x/sys@v0.32.0",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "golang.org/x/sys@v0.32.0"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/text@v0.24.0",
      "type": "library",
      "name": "golang.org/x/text",
      "version": "v0.24.0",
      "purl": "pkg:golang/golang.org/x/text@v0.24.0",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "golang.org/x/text@v0.24.0"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20250428153025-10db94c68c34",
      "type": "library",
      "name": "google.golang.org/genproto/googleapis/api",
      "version": "v0.0.0-20250428153025-10db94c68c34",
      "purl": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20250428153025-10db94c68c34",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "google.golang.org/genproto/googleapis/api@v0.0.0-20250428153025-10db94c68c34"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20250428153025-10db94c68c34",
      "type": "library",
      "name": "google.golang.org/genproto/googleapis/rpc",
      "version": "v0.0.0-20250428153025-10db94c68c34",
      "purl": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20250428153025-10db94c68c34",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "google.golang.org/genproto/googleapis/rpc@v0.0.0-20250428153025-10db94c68c34"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/google.golang.org/grpc@v1.72.2",
      "type": "library",
      "name": "google.golang.org/grpc",
      "version": "v1.72.2",
      "purl": "pkg:golang/google.golang.org/grpc@v1.72.2",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "google.golang.org/grpc@v1.72.2"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/google.golang.org/protobuf@v1.36.6",
      "type": "library",
      "name": "google.golang.org/protobuf",
      "version": "v1.36.6",
      "purl": "pkg:golang/google.golang.org/protobuf@v1.36.6",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "google.golang.org/protobuf@v1.36.6"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "1d960ed6-42e4-4ed3-8a3b-1e542504d348",
      "dependsOn": [
        "5da6a520-9ff8-4c45-9fc5-52504f119510"
      ]
    },
    {
      "ref": "3765bcf1-765a-417c-add2-e19673730f60",
      "dependsOn": [
        "1d960ed6-42e4-4ed3-8a3b-1e542504d348"
      ]
    },
    {
      "ref": "43a2a764-7f90-4b83-ba7f-5a8b2f0d5072",
      "dependsOn": [
        "f5116d1b-71bf-4df0-a0ab-3d072e983129"
      ]
    },
    {
      "ref": "503202cd-3b0d-493f-95dc-9d204307483e",
      "dependsOn": [
        "6badc3c6-af2b-4b43-af2a-37ff857c8b2b",
        "pkg:golang/github.com/cncf/xds/go@v0.0.0-20250121191232-2f005788dc42",
        "pkg:golang/github.com/confluentinc/events-schema@v0.365.0",
        "pkg:golang/github.com/envoyproxy/go-control-plane/envoy@v1.32.5-0.20250603023119-cddde1872b42",
        "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.2.1",
        "pkg:golang/github.com/golang/protobuf@v1.5.4",
        "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.26.3",
        "pkg:golang/github.com/klauspost/compress@v1.18.0",
        "pkg:golang/github.com/pierrec/lz4/v4@v4.1.22",
        "pkg:golang/go.opentelemetry.io/proto/otlp@v1.6.0",
        "pkg:golang/golang.org/x/net@v0.39.0",
        "pkg:golang/golang.org/x/sys@v0.32.0",
        "pkg:golang/golang.org/x/text@v0.24.0",
        "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20250428153025-10db94c68c34",
        "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20250428153025-10db94c68c34",
        "pkg:golang/google.golang.org/grpc@v1.72.2",
        "pkg:golang/google.golang.org/protobuf@v1.36.6"
      ]
    },
    {
      "ref": "5da6a520-9ff8-4c45-9fc5-52504f119510",
      "dependsOn": []
    },
    {
      "ref": "6badc3c6-af2b-4b43-af2a-37ff857c8b2b",
      "dependsOn": []
    },
    {
      "ref": "87d0a2d2-f026-4e3f-92f5-b154ac7da2b4",
      "dependsOn": [
        "3765bcf1-765a-417c-add2-e19673730f60",
        "d6030f1a-3135-45b5-8f1e-738a4d6314b5",
        "e859c5c1-b7b3-4097-8af3-1dc0c33e637f"
      ]
    },
    {
      "ref": "d6030f1a-3135-45b5-8f1e-738a4d6314b5",
      "dependsOn": [
        "503202cd-3b0d-493f-95dc-9d204307483e"
      ]
    },
    {
      "ref": "e859c5c1-b7b3-4097-8af3-1dc0c33e637f",
      "dependsOn": [
        "43a2a764-7f90-4b83-ba7f-5a8b2f0d5072"
      ]
    },
    {
      "ref": "f5116d1b-71bf-4df0-a0ab-3d072e983129",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/cncf/xds/go@v0.0.0-20250121191232-2f005788dc42",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/confluentinc/events-schema@v0.365.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/envoyproxy/go-control-plane/envoy@v1.32.5-0.20250603023119-cddde1872b42",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/golang/protobuf@v1.5.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.26.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/klauspost/compress@v1.18.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/pierrec/lz4/v4@v4.1.22",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/go.opentelemetry.io/proto/otlp@v1.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/golang.org/x/net@v0.39.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/golang.org/x/sys@v0.32.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/golang.org/x/text@v0.24.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20250428153025-10db94c68c34",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20250428153025-10db94c68c34",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/google.golang.org/grpc@v1.72.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/google.golang.org/protobuf@v1.36.6",
      "dependsOn": []
    }
  ],
  "vulnerabilities": []
}