{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:12adac63-3a10-4fb9-a3e0-f4c1496f777b",
  "version": 1,
  "metadata": {
    "timestamp": "2026-06-26T17:51:50+00:00",
    "tools": {
      "components": [
        {
          "type": "application",
          "manufacturer": {
            "name": "Aqua Security Software Ltd."
          },
          "group": "aquasecurity",
          "name": "trivy",
          "version": "0.69.3"
        }
      ]
    },
    "component": {
      "bom-ref": "2bbf996d-df98-4147-984a-688315b03ef8",
      "type": "application",
      "name": "confluent-usm-agent",
      "properties": [
        {
          "name": "aquasecurity:trivy:SchemaVersion",
          "value": "2"
        }
      ],
      "version": "1.1.1",
      "supplier": {
        "name": "Confluent",
        "url": [
          "https://confluent.io"
        ]
      },
      "publisher": "Confluent"
    }
  },
  "components": [
    {
      "bom-ref": "2871b44a-4a65-4e61-8ea2-abca606451f5",
      "type": "library",
      "name": "github.com/confluentinc/setu-agent/tools",
      "version": "1.1.0",
      "purl": "pkg:golang/github.com/confluentinc/setu-agent/tools@1.1.0",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "github.com/confluentinc/setu-agent/tools@v1.1.0"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "28a6b110-f061-4f5a-bfbe-01837c847613",
      "type": "library",
      "name": "stdlib",
      "version": "v1.25.8",
      "purl": "pkg:golang/stdlib@v1.25.8",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "stdlib@v1.25.8"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "4cae5a02-b059-4ba9-9808-bf1756d1cf71",
      "type": "application",
      "name": "usr/bin/usm-agent-logcollector",
      "properties": [
        {
          "name": "aquasecurity:trivy:Class",
          "value": "lang-pkgs"
        },
        {
          "name": "aquasecurity:trivy:Type",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "559a4663-cba8-4655-a13b-affa2401ffae",
      "type": "application",
      "name": "usr/bin/usm-agent-configgen",
      "properties": [
        {
          "name": "aquasecurity:trivy:Class",
          "value": "lang-pkgs"
        },
        {
          "name": "aquasecurity:trivy:Type",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "5fec8047-6c23-4ee9-84f1-575896e5d6b3",
      "type": "library",
      "name": "stdlib",
      "version": "v1.25.8",
      "purl": "pkg:golang/stdlib@v1.25.8",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "stdlib@v1.25.8"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "bac6c26d-f19a-4bc5-be50-e550f37ea681",
      "type": "library",
      "name": "github.com/confluentinc/setu-agent/tools",
      "version": "1.1.0",
      "purl": "pkg:golang/github.com/confluentinc/setu-agent/tools@1.1.0",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "github.com/confluentinc/setu-agent/tools@v1.1.0"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "db91045c-2d89-43ae-a478-c43ec57fbe46",
      "type": "library",
      "name": "github.com/confluentinc/setu-agent/tools",
      "version": "1.1.0",
      "purl": "pkg:golang/github.com/confluentinc/setu-agent/tools@1.1.0",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "github.com/confluentinc/setu-agent/tools@v1.1.0"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "eca342c2-0572-4ba5-b1f4-5fc68e80e610",
      "type": "library",
      "name": "stdlib",
      "version": "v1.25.8",
      "purl": "pkg:golang/stdlib@v1.25.8",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "stdlib@v1.25.8"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "f0812e00-e4aa-4c87-a78b-dfac9acbddd8",
      "type": "application",
      "name": "usr/bin/usm-agent-logparser",
      "properties": [
        {
          "name": "aquasecurity:trivy:Class",
          "value": "lang-pkgs"
        },
        {
          "name": "aquasecurity:trivy:Type",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/cncf/xds/go@v0.0.0-20250121191232-2f005788dc42",
      "type": "library",
      "name": "github.com/cncf/xds/go",
      "version": "v0.0.0-20250121191232-2f005788dc42",
      "purl": "pkg:golang/github.com/cncf/xds/go@v0.0.0-20250121191232-2f005788dc42",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "github.com/cncf/xds/go@v0.0.0-20250121191232-2f005788dc42"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/confluentinc/events-schema@v0.365.0",
      "type": "library",
      "name": "github.com/confluentinc/events-schema",
      "version": "v0.365.0",
      "purl": "pkg:golang/github.com/confluentinc/events-schema@v0.365.0",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "github.com/confluentinc/events-schema@v0.365.0"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/envoyproxy/go-control-plane/envoy@v1.32.5-0.20250603023119-cddde1872b42",
      "type": "library",
      "name": "github.com/envoyproxy/go-control-plane/envoy",
      "version": "v1.32.5-0.20250603023119-cddde1872b42",
      "purl": "pkg:golang/github.com/envoyproxy/go-control-plane/envoy@v1.32.5-0.20250603023119-cddde1872b42",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "github.com/envoyproxy/go-control-plane/envoy@v1.32.5-0.20250603023119-cddde1872b42"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.2.1",
      "type": "library",
      "name": "github.com/envoyproxy/protoc-gen-validate",
      "version": "v1.2.1",
      "purl": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.2.1",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "github.com/envoyproxy/protoc-gen-validate@v1.2.1"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/golang/protobuf@v1.5.4",
      "type": "library",
      "name": "github.com/golang/protobuf",
      "version": "v1.5.4",
      "purl": "pkg:golang/github.com/golang/protobuf@v1.5.4",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "github.com/golang/protobuf@v1.5.4"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.26.3",
      "type": "library",
      "name": "github.com/grpc-ecosystem/grpc-gateway/v2",
      "version": "v2.26.3",
      "purl": "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.26.3",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "github.com/grpc-ecosystem/grpc-gateway/v2@v2.26.3"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/klauspost/compress@v1.18.0",
      "type": "library",
      "name": "github.com/klauspost/compress",
      "version": "v1.18.0",
      "purl": "pkg:golang/github.com/klauspost/compress@v1.18.0",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "github.com/klauspost/compress@v1.18.0"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/github.com/pierrec/lz4/v4@v4.1.22",
      "type": "library",
      "name": "github.com/pierrec/lz4/v4",
      "version": "v4.1.22",
      "purl": "pkg:golang/github.com/pierrec/lz4/v4@v4.1.22",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "github.com/pierrec/lz4/v4@v4.1.22"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/go.opentelemetry.io/proto/otlp@v1.6.0",
      "type": "library",
      "name": "go.opentelemetry.io/proto/otlp",
      "version": "v1.6.0",
      "purl": "pkg:golang/go.opentelemetry.io/proto/otlp@v1.6.0",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "go.opentelemetry.io/proto/otlp@v1.6.0"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/net@v0.39.0",
      "type": "library",
      "name": "golang.org/x/net",
      "version": "v0.39.0",
      "purl": "pkg:golang/golang.org/x/net@v0.39.0",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "golang.org/x/net@v0.39.0"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/sys@v0.32.0",
      "type": "library",
      "name": "golang.org/x/sys",
      "version": "v0.32.0",
      "purl": "pkg:golang/golang.org/x/sys@v0.32.0",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "golang.org/x/sys@v0.32.0"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/text@v0.24.0",
      "type": "library",
      "name": "golang.org/x/text",
      "version": "v0.24.0",
      "purl": "pkg:golang/golang.org/x/text@v0.24.0",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "golang.org/x/text@v0.24.0"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20250428153025-10db94c68c34",
      "type": "library",
      "name": "google.golang.org/genproto/googleapis/api",
      "version": "v0.0.0-20250428153025-10db94c68c34",
      "purl": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20250428153025-10db94c68c34",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "google.golang.org/genproto/googleapis/api@v0.0.0-20250428153025-10db94c68c34"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20250428153025-10db94c68c34",
      "type": "library",
      "name": "google.golang.org/genproto/googleapis/rpc",
      "version": "v0.0.0-20250428153025-10db94c68c34",
      "purl": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20250428153025-10db94c68c34",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "google.golang.org/genproto/googleapis/rpc@v0.0.0-20250428153025-10db94c68c34"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/google.golang.org/grpc@v1.72.2",
      "type": "library",
      "name": "google.golang.org/grpc",
      "version": "v1.72.2",
      "purl": "pkg:golang/google.golang.org/grpc@v1.72.2",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "google.golang.org/grpc@v1.72.2"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    },
    {
      "bom-ref": "pkg:golang/google.golang.org/protobuf@v1.36.6",
      "type": "library",
      "name": "google.golang.org/protobuf",
      "version": "v1.36.6",
      "purl": "pkg:golang/google.golang.org/protobuf@v1.36.6",
      "properties": [
        {
          "name": "aquasecurity:trivy:PkgID",
          "value": "google.golang.org/protobuf@v1.36.6"
        },
        {
          "name": "aquasecurity:trivy:PkgType",
          "value": "gobinary"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "2871b44a-4a65-4e61-8ea2-abca606451f5",
      "dependsOn": [
        "eca342c2-0572-4ba5-b1f4-5fc68e80e610",
        "pkg:golang/github.com/cncf/xds/go@v0.0.0-20250121191232-2f005788dc42",
        "pkg:golang/github.com/confluentinc/events-schema@v0.365.0",
        "pkg:golang/github.com/envoyproxy/go-control-plane/envoy@v1.32.5-0.20250603023119-cddde1872b42",
        "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.2.1",
        "pkg:golang/github.com/golang/protobuf@v1.5.4",
        "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.26.3",
        "pkg:golang/github.com/klauspost/compress@v1.18.0",
        "pkg:golang/github.com/pierrec/lz4/v4@v4.1.22",
        "pkg:golang/go.opentelemetry.io/proto/otlp@v1.6.0",
        "pkg:golang/golang.org/x/net@v0.39.0",
        "pkg:golang/golang.org/x/sys@v0.32.0",
        "pkg:golang/golang.org/x/text@v0.24.0",
        "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20250428153025-10db94c68c34",
        "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20250428153025-10db94c68c34",
        "pkg:golang/google.golang.org/grpc@v1.72.2",
        "pkg:golang/google.golang.org/protobuf@v1.36.6"
      ]
    },
    {
      "ref": "28a6b110-f061-4f5a-bfbe-01837c847613",
      "dependsOn": []
    },
    {
      "ref": "2bbf996d-df98-4147-984a-688315b03ef8",
      "dependsOn": [
        "4cae5a02-b059-4ba9-9808-bf1756d1cf71",
        "559a4663-cba8-4655-a13b-affa2401ffae",
        "f0812e00-e4aa-4c87-a78b-dfac9acbddd8"
      ]
    },
    {
      "ref": "4cae5a02-b059-4ba9-9808-bf1756d1cf71",
      "dependsOn": [
        "bac6c26d-f19a-4bc5-be50-e550f37ea681"
      ]
    },
    {
      "ref": "559a4663-cba8-4655-a13b-affa2401ffae",
      "dependsOn": [
        "db91045c-2d89-43ae-a478-c43ec57fbe46"
      ]
    },
    {
      "ref": "5fec8047-6c23-4ee9-84f1-575896e5d6b3",
      "dependsOn": []
    },
    {
      "ref": "bac6c26d-f19a-4bc5-be50-e550f37ea681",
      "dependsOn": [
        "5fec8047-6c23-4ee9-84f1-575896e5d6b3"
      ]
    },
    {
      "ref": "db91045c-2d89-43ae-a478-c43ec57fbe46",
      "dependsOn": [
        "28a6b110-f061-4f5a-bfbe-01837c847613"
      ]
    },
    {
      "ref": "eca342c2-0572-4ba5-b1f4-5fc68e80e610",
      "dependsOn": []
    },
    {
      "ref": "f0812e00-e4aa-4c87-a78b-dfac9acbddd8",
      "dependsOn": [
        "2871b44a-4a65-4e61-8ea2-abca606451f5"
      ]
    },
    {
      "ref": "pkg:golang/github.com/cncf/xds/go@v0.0.0-20250121191232-2f005788dc42",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/confluentinc/events-schema@v0.365.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/envoyproxy/go-control-plane/envoy@v1.32.5-0.20250603023119-cddde1872b42",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/golang/protobuf@v1.5.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.26.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/klauspost/compress@v1.18.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/pierrec/lz4/v4@v4.1.22",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/go.opentelemetry.io/proto/otlp@v1.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/golang.org/x/net@v0.39.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/golang.org/x/sys@v0.32.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/golang.org/x/text@v0.24.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20250428153025-10db94c68c34",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20250428153025-10db94c68c34",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/google.golang.org/grpc@v1.72.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/google.golang.org/protobuf@v1.36.6",
      "dependsOn": []
    }
  ],
  "vulnerabilities": []
}