Hello,

Here's a quick update to 1.3.3, runs fine

changelog:
Fixes:
Bug #369 Fix requirements.txt misparsing lines that contain --hash
Bug #237 Clarify when no vulnerabilities are found
Bug #354 Fix cycle in requirements.txt causing infinite recursion
Bug #367 Fix panic when parsing empty lockfile

API Features
Feature #357 Update pkg/osv to allow overriding the http client / transport

Thanks,
Lucas
diff refs/heads/master refs/heads/osv-scanner
commit - f381dcdca76d90f4031515d36be712c61299e96f
commit + 6323aa5feeab6c61f06bbc3dd37c74ed22d9633d
blob - b1d8bf866628d68282b8fa0ac39fc5e345c3f23b
blob + a46631c8f3102603e93a61f9857d8b8ad7899411
--- security/osv-scanner/Makefile
+++ security/osv-scanner/Makefile
@@ -6,7 +6,7 @@ V =             1.3.2
 
 COMMENT =      scan your project's dependencies for vulnerabilities
 
-V =            1.3.2
+V =            1.3.3
 MODGO_MODNAME =        github.com/google/osv-scanner
 MODGO_VERSION =        v${V}
 
blob - 11a0fd580b104397e581c21a593d72324be4b34b
blob + f8641c8b2f4cc3195ea99c403e16f4ca21b2938c
--- security/osv-scanner/distinfo
+++ security/osv-scanner/distinfo
@@ -9,6 +9,8 @@ SHA256 (go_modules/github.com/anmitsu/go-shlex/@v/v0.0
 SHA256 
(go_modules/github.com/!proton!mail/go-crypto/@v/v0.0.0-20230217124315-7d5c6f04bbb8.zip)
 = QwUH/oqnnj2zdodYBPMSbvCZZdheyYaRH5jQmXUU4Tc=
 SHA256 (go_modules/github.com/acomagu/bufpipe/@v/v1.0.4.mod) = 
Iaxsw323lcL/h53Hl9IqRY/0F1um/IBgrFx8/DYOoWw=
 SHA256 (go_modules/github.com/acomagu/bufpipe/@v/v1.0.4.zip) = 
Oj1OO/HH5GpaEMpDGEcx1fFnEgE6YoMIfzYy9xw/P8U=
+SHA256 
(go_modules/github.com/anchore/go-struct-converter/@v/v0.0.0-20221118182256-c68fdcfa2092.mod)
 = WggzYMJ2oV0NvIKxftIioKjw0UBjFCKw6YbWdrPy93k=
+SHA256 
(go_modules/github.com/anchore/go-struct-converter/@v/v0.0.0-20221118182256-c68fdcfa2092.zip)
 = Ocmj9VeqVIbAhoGmJoWLydfDM6809s4iFC+xV4KNAPE=
 SHA256 
(go_modules/github.com/anmitsu/go-shlex/@v/v0.0.0-20200514113438-38f4b401e2be.mod)
 = YFvwqg2YIjVA9dr3+pcJHq+79ImJx9F2Uq+ZLKdkr7Y=
 SHA256 
(go_modules/github.com/anmitsu/go-shlex/@v/v0.0.0-20200514113438-38f4b401e2be.zip)
 = Klz3yaJwn2Sf1QjLrLK+luT7pNU0oooSLuTXV0r0C14=
 SHA256 
(go_modules/github.com/armon/go-socks5/@v/v0.0.0-20160902184237-e75332964ef5.mod)
 = eH9fmKshF09xFkyrjuplEl5gqnL111F+EuCOe47szNI=
@@ -16,11 +18,13 @@ SHA256 (go_modules/github.com/bwesterb/go-ristretto/@v
 SHA256 (go_modules/github.com/bradleyjkemp/cupaloy/v2/@v/v2.8.0.mod) = 
Irw2AV+FCyXe73ShEsNARxdI76cC9taJWn6pcIumIZM=
 SHA256 (go_modules/github.com/bradleyjkemp/cupaloy/v2/@v/v2.8.0.zip) = 
+nOEG0auVcwJj3c5M4gl5XREHETrknHSzqt1rMDbPtc=
 SHA256 (go_modules/github.com/bwesterb/go-ristretto/@v/v1.2.0.mod) = 
NorKF1e+h0XM47kN60Aee+V0CWPKU1nEqVTMA1AtjwM=
-SHA256 (go_modules/github.com/bwesterb/go-ristretto/@v/v1.2.0.zip) = 
RZ6byrTT29I8JWJebDwSHZzBjz9oPhO7YXQA9offe3I=
+SHA256 (go_modules/github.com/bwesterb/go-ristretto/@v/v1.2.3.mod) = 
NorKF1e+h0XM47kN60Aee+V0CWPKU1nEqVTMA1AtjwM=
+SHA256 (go_modules/github.com/bwesterb/go-ristretto/@v/v1.2.3.zip) = 
ToAJtAKuZJbmazogNwAtwS8abq0JAOchM5D7er/AOUw=
 SHA256 (go_modules/github.com/client9/misspell/@v/v0.3.4.mod) = 
0bw2Ld3Zb7OkPtS5Kqq3CqbH71pQDX8JVk4+skq88Lg=
 SHA256 (go_modules/github.com/client9/misspell/@v/v0.3.4.zip) = 
o68gY3LhMd0QporEcMZqGxjq9Rxq+stVsuKgbjm5Byg=
 SHA256 (go_modules/github.com/cloudflare/circl/@v/v1.1.0.mod) = 
HbnQ8RL5ropyoGhB9PGR01RcFExuBe082BYBiliCKBo=
-SHA256 (go_modules/github.com/cloudflare/circl/@v/v1.1.0.zip) = 
vGIgcUMzpWYndEC0f6KpArlTR2nbVvhPvHGuKZLfF5o=
+SHA256 (go_modules/github.com/cloudflare/circl/@v/v1.3.3.mod) = 
aLEuRmK7BjlyhJAVP/xS2L3WO+VYvdQbyw2PHu6wPkE=
+SHA256 (go_modules/github.com/cloudflare/circl/@v/v1.3.3.zip) = 
XhGMBQbVxujLM33jULSE2jRUQIXNpV0xFKPm9DJSjfQ=
 SHA256 (go_modules/github.com/cpuguy83/go-md2man/v2/@v/v2.0.2.mod) = 
FMOvou9iNVXBtINNH4ixTfd1Sa/uheV1DBkQJGW3iro=
 SHA256 (go_modules/github.com/cpuguy83/go-md2man/v2/@v/v2.0.2.zip) = 
cKfmCYCc8qksVTUQTbXrgtdcVL/P7S0iTofdL9lyn2I=
 SHA256 (go_modules/github.com/creack/pty/@v/v1.1.9.mod) = 
6rBwW8ShjdMVwnpOPbqPIKnhIwZfogYzlmMytczPdzE=
@@ -43,7 +47,6 @@ SHA256 (go_modules/github.com/google/go-cmp/@v/v0.5.7.
 SHA256 (go_modules/github.com/go-git/go-git/v5/@v/v5.6.1.zip) = 
IK23A5GiSiadaVfoyqwdVUUl9GFyzL91vPOlGXFPi/U=
 SHA256 
(go_modules/github.com/google/go-cmdtest/@v/v0.4.1-0.20220921163831-55ab3332a786.mod)
 = YBCCwe/4ls1GJ8PCPRVrWD+85CRh5UhHNLZGe5ZOtk0=
 SHA256 
(go_modules/github.com/google/go-cmdtest/@v/v0.4.1-0.20220921163831-55ab3332a786.zip)
 = 4HEz61u+FEJsMN3UCV7i91TREi2XN28NVlyNqGMOhBw=
-SHA256 (go_modules/github.com/google/go-cmp/@v/v0.5.7.mod) = 
e1G+1TTzn2zfY8noFgqsIOf6SUl52PWprel0NH+JvjY=
 SHA256 (go_modules/github.com/google/go-cmp/@v/v0.5.8.mod) = 
58dmnUod1Ym6PgJLon9D8pPbYR/gdc4g17iENw1j/r0=
 SHA256 (go_modules/github.com/google/go-cmp/@v/v0.5.9.mod) = 
58dmnUod1Ym6PgJLon9D8pPbYR/gdc4g17iENw1j/r0=
 SHA256 (go_modules/github.com/google/go-cmp/@v/v0.5.9.zip) = 
MkUIdKx1bvXUf2uBkwUQUwS5gZBFoW4/EFKJt88lLFE=
@@ -103,20 +106,22 @@ SHA256 (go_modules/github.com/spdx/tools-golang/@v/v0.
 SHA256 
(go_modules/github.com/spdx/gordf/@v/v0.0.0-20201111095634-7098f93598fb.mod) = 
eKUongYQUXmwBVYtvFiYMNLnHrFgrEUV5RiQ5fFMgYk=
 SHA256 
(go_modules/github.com/spdx/gordf/@v/v0.0.0-20221230105357-b735bd5aac89.mod) = 
eKUongYQUXmwBVYtvFiYMNLnHrFgrEUV5RiQ5fFMgYk=
 SHA256 
(go_modules/github.com/spdx/gordf/@v/v0.0.0-20221230105357-b735bd5aac89.zip) = 
XxsMQLKthYlrDa14n8WZRd/FR93bivyiABl27UQYdtw=
-SHA256 (go_modules/github.com/spdx/tools-golang/@v/v0.4.0.mod) = 
5qaoCe6yydD6uyr0KaDkuGJZYn/KsmDSn+eZvnJnY98=
-SHA256 (go_modules/github.com/spdx/tools-golang/@v/v0.4.0.zip) = 
Ao9d8f/ZWvvV66u+4lpTxlaPiYqQslkvvySIQJ9vmQY=
+SHA256 (go_modules/github.com/spdx/tools-golang/@v/v0.5.0.mod) = 
tR5GhaF8VbvoWEjeG1jC7pk/tJXu/mwPDhaqcre1jJU=
+SHA256 (go_modules/github.com/spdx/tools-golang/@v/v0.5.0.zip) = 
gNdugKIUNOM8/AMAfTd8rTKjXhuecVb8zk/scQjCdo8=
 SHA256 (go_modules/github.com/stretchr/objx/@v/v0.1.0.mod) = 
E1A1TVLSKHpiM27MDVYjLUxHaZr5u6ScZ8K0glTamPE=
 SHA256 (go_modules/github.com/stretchr/objx/@v/v0.4.0.mod) = 
MbL9ze6HDw9hv/r6+5YiCWflvKCKdqkg1XQhb8H5E1U=
-SHA256 (go_modules/github.com/stretchr/objx/@v/v0.4.0.zip) = 
+1x0NztDheV+kAsqnd7Huh7aLA2T+rTTB8FQl9yqB2U=
+SHA256 (go_modules/github.com/stretchr/objx/@v/v0.5.0.mod) = 
yzJlQO/LEnSm5Olw1/yd4ugGLwigWPwpbYWQJeYugHo=
+SHA256 (go_modules/github.com/stretchr/objx/@v/v0.5.0.zip) = 
GgCzu1rUHLcmNKzga36334V0BNd6fKtOQBp8cpVh/kw=
 SHA256 (go_modules/github.com/stretchr/testify/@v/v1.2.2.mod) = 
SrRj9ow3AEH5UMEMq1EEkD1FmMUM+CT5qtG3t/aSVa8=
 SHA256 (go_modules/github.com/stretchr/testify/@v/v1.4.0.mod) = 
awx7cQMNT8VdTm5uJMC/wCViE0H3YUHjrsAETEzomVA=
 SHA256 (go_modules/github.com/stretchr/testify/@v/v1.7.0.mod) = 
//gWjZjmoHFWxFShtuklUJ8xd+lsFVUW1/lrQHnMo78=
 SHA256 (go_modules/github.com/stretchr/testify/@v/v1.7.1.mod) = 
//gWjZjmoHFWxFShtuklUJ8xd+lsFVUW1/lrQHnMo78=
 SHA256 (go_modules/github.com/stretchr/testify/@v/v1.7.4.mod) = 
4HYHTBVgrR3amLiwD+pjCMS2zNBt3QiNIttGJu1o9zg=
+SHA256 (go_modules/github.com/stretchr/testify/@v/v1.8.0.mod) = 
4HYHTBVgrR3amLiwD+pjCMS2zNBt3QiNIttGJu1o9zg=
 SHA256 (go_modules/github.com/stretchr/testify/@v/v1.8.2.mod) = 
rxpdyzMazno/n8G11+7pwLyCtKKhgv5M7CrdIX4oU9Y=
 SHA256 (go_modules/github.com/stretchr/testify/@v/v1.8.2.zip) = 
QA4YyI5cS+t+zKXWdQSPGRWm5nWzD8A/j1Y+tN/eB5o=
-SHA256 (go_modules/github.com/urfave/cli/v2/@v/v2.25.1.mod) = 
vrUO54Wf55rTJgt1onaRXPZpTqf1UBuI9VD4q7RpqU0=
-SHA256 (go_modules/github.com/urfave/cli/v2/@v/v2.25.1.zip) = 
d5/dY9wkYIfvvdsK7Sk1G1dkImunUYHL/FbpFqqHKbE=
+SHA256 (go_modules/github.com/urfave/cli/v2/@v/v2.25.3.mod) = 
vrUO54Wf55rTJgt1onaRXPZpTqf1UBuI9VD4q7RpqU0=
+SHA256 (go_modules/github.com/urfave/cli/v2/@v/v2.25.3.zip) = 
P3K/P8ZABjgDSxzMJo8SaIlujKa9w2ePu6XBrEve4zs=
 SHA256 (go_modules/github.com/xanzy/ssh-agent/@v/v0.3.3.mod) = 
HOHMUJiJtzjB9j2/zFrVIs62MnLZ3v9u73SZ7TAaoSU=
 SHA256 (go_modules/github.com/xanzy/ssh-agent/@v/v0.3.3.zip) = 
GahsJiOyDMmGh73diePwI9sMpRyLyeOLmtnFblt9EQ0=
 SHA256 
(go_modules/github.com/xrash/smetrics/@v/v0.0.0-20201216005158-039620a65673.mod)
 = Kz9hJyfgYrwlZDq5c5S7f0F6KXqf9lIqDxjs93h38EI=
@@ -131,11 +136,12 @@ SHA256 (go_modules/golang.org/x/crypto/@v/v0.6.0.mod) 
 SHA256 
(go_modules/golang.org/x/crypto/@v/v0.0.0-20220622213112-05595931fe9d.mod) = 
ryyI7r/wPjoq/ssbA2afxU6dEiyI97Ls/tBR7F28i7s=
 SHA256 
(go_modules/golang.org/x/crypto/@v/v0.0.0-20220826181053-bd7e27e6170d.mod) = 
ryyI7r/wPjoq/ssbA2afxU6dEiyI97Ls/tBR7F28i7s=
 SHA256 (go_modules/golang.org/x/crypto/@v/v0.1.0.mod) = 
UyMpuLIbGJweFmNIgx2ltu2Mx8mCUJOmvjEM7M0m6MI=
+SHA256 
(go_modules/golang.org/x/crypto/@v/v0.3.1-0.20221117191849-2c476679df9a.mod) = 
t5UQb4uN637XdSOoHeAatGAfDwOBNTkYRX0teK2ePOk=
 SHA256 (go_modules/golang.org/x/crypto/@v/v0.6.0.mod) = 
G2poNFWjuIK2rFPyJ1KWDoe9kQQKlNbyxcthJh4jidg=
 SHA256 (go_modules/golang.org/x/crypto/@v/v0.6.0.zip) = 
gcqIrzcc/1qERCuijiPY9CzME4fI/hUuVeh7pK+eGsc=
 SHA256 (go_modules/golang.org/x/exp/@v/v0.0.0-20220722155223-a9213eeb770e.mod) 
= KqbbzGUyHHFTSmOE7NZqsrIERkRKV3BwZjFFGY3Rnas=
-SHA256 (go_modules/golang.org/x/exp/@v/v0.0.0-20230425010034-47ecfdc1ba53.mod) 
= EF8h/6AuHlv/paPw/lAoL4JDRLRXLLlG+MRWK0JUfWc=
-SHA256 (go_modules/golang.org/x/exp/@v/v0.0.0-20230425010034-47ecfdc1ba53.zip) 
= l2l6s6PrECfDZqqkQeaYlu2vRKKRl6DkSy56o/FwrCE=
+SHA256 (go_modules/golang.org/x/exp/@v/v0.0.0-20230510235704-dd950f8aeaea.mod) 
= EF8h/6AuHlv/paPw/lAoL4JDRLRXLLlG+MRWK0JUfWc=
+SHA256 (go_modules/golang.org/x/exp/@v/v0.0.0-20230510235704-dd950f8aeaea.zip) 
= qRcbJSFlXiJAq74zCew5lV8aStp9dBe2TvqLx4hbGqY=
 SHA256 (go_modules/golang.org/x/mod/@v/v0.10.0.mod) = 
YkVnRZxumUesSr3gtwNO5h3Ltqk3P1lwCUwLs+gSGWQ=
 SHA256 (go_modules/golang.org/x/mod/@v/v0.10.0.zip) = 
+HZHOsJ/HG47D/+XHIT7689nDbCz6PKB4DFJ/PY2/iU=
 SHA256 
(go_modules/golang.org/x/mod/@v/v0.6.0-dev.0.20220419223038-86c51ed26bb4.mod) = 
QtGQI/+PLq5wC8VJXzcezZmKItGbqYXQr19pkAslQIM=
@@ -147,14 +153,15 @@ SHA256 (go_modules/golang.org/x/net/@v/v0.6.0.mod) = Q
 SHA256 (go_modules/golang.org/x/net/@v/v0.0.0-20220722155237-a158d28d115b.mod) 
= sxXFJkfS2i925c2502fh1nJ3hCNqm/+2EhkrGbEKEo0=
 SHA256 (go_modules/golang.org/x/net/@v/v0.0.0-20220826154423-83b083e8dc8b.mod) 
= RchlScbaiI0Gy5B2u6/uyZ9PtWwlnLbilO0+gEM9vKA=
 SHA256 (go_modules/golang.org/x/net/@v/v0.1.0.mod) = 
bMULjKFlQRqqkeV/MJpPT0TkMAPb2vIiAicYcfdCids=
+SHA256 (go_modules/golang.org/x/net/@v/v0.10.0.mod) = 
07fiNv8J5jIr5IkXAhbgGNMiGGLxoFPctj5T6rhTPBc=
+SHA256 (go_modules/golang.org/x/net/@v/v0.10.0.zip) = 
+S+bJlUiam0BWvenYnmhH7VWeOQQuFGxWPyEZUb4BzM=
 SHA256 (go_modules/golang.org/x/net/@v/v0.6.0.mod) = 
Qex26iFy8+4wMeOPmlNZOaWE1rs170gIVP3LjCAmcBs=
 SHA256 (go_modules/golang.org/x/net/@v/v0.7.0.mod) = 
Qex26iFy8+4wMeOPmlNZOaWE1rs170gIVP3LjCAmcBs=
-SHA256 (go_modules/golang.org/x/net/@v/v0.9.0.mod) = 
xdaFHt5Q7BwAGvt2MEAZS2iWG/Bpl+JgXovwbc0q6y4=
-SHA256 (go_modules/golang.org/x/net/@v/v0.9.0.zip) = 
yNPLFl0LK29b5ka2KLulsXZ4HSbpK9T8ss3nV+EacvA=
 SHA256 
(go_modules/golang.org/x/sync/@v/v0.0.0-20190423024810-112230192c58.mod) = 
Qh9hOWhtWJHz3FpWPQmVeA0yefZcrU0iXOpSaGeUFhw=
 SHA256 
(go_modules/golang.org/x/sync/@v/v0.0.0-20220722155255-886fb9371eb4.mod) = 
Qh9hOWhtWJHz3FpWPQmVeA0yefZcrU0iXOpSaGeUFhw=
 SHA256 (go_modules/golang.org/x/sync/@v/v0.1.0.mod) = 
Qh9hOWhtWJHz3FpWPQmVeA0yefZcrU0iXOpSaGeUFhw=
-SHA256 (go_modules/golang.org/x/sync/@v/v0.1.0.zip) = 
9RC+xgCeGYgtGZU+cnMTfTTfhsZZSTRdcvEjolXC7NI=
+SHA256 (go_modules/golang.org/x/sync/@v/v0.2.0.mod) = 
Qh9hOWhtWJHz3FpWPQmVeA0yefZcrU0iXOpSaGeUFhw=
+SHA256 (go_modules/golang.org/x/sync/@v/v0.2.0.zip) = 
7g30Vy3XNmV2eWT/gJsS8NQeOgdAIg1E1BihmYmgNjs=
 SHA256 (go_modules/golang.org/x/sys/@v/v0.0.0-20190215142949-d0b11bdaac8a.mod) 
= iWkRXko5EIhIMk55ob2KhEUjDm46rMvp+AV/tQ//yME=
 SHA256 (go_modules/golang.org/x/sys/@v/v0.0.0-20191026070338-33540a1f6037.mod) 
= GBl56L1X0tngZBgtqGyaYRGqaXVeiI8IQx7OR0Kuw0M=
 SHA256 (go_modules/golang.org/x/sys/@v/v0.0.0-20200302150141-5c8b2ff67527.mod) 
= GBl56L1X0tngZBgtqGyaYRGqaXVeiI8IQx7OR0Kuw0M=
@@ -172,15 +179,15 @@ SHA256 (go_modules/golang.org/x/sys/@v/v0.7.0.mod) = 8
 SHA256 (go_modules/golang.org/x/sys/@v/v0.1.0.mod) = 
8DMzMJb+GY8xUd7tk/LeunTlC7/nc5E0BFvDt85KUCQ=
 SHA256 (go_modules/golang.org/x/sys/@v/v0.3.0.mod) = 
8DMzMJb+GY8xUd7tk/LeunTlC7/nc5E0BFvDt85KUCQ=
 SHA256 (go_modules/golang.org/x/sys/@v/v0.5.0.mod) = 
8DMzMJb+GY8xUd7tk/LeunTlC7/nc5E0BFvDt85KUCQ=
-SHA256 (go_modules/golang.org/x/sys/@v/v0.7.0.mod) = 
8DMzMJb+GY8xUd7tk/LeunTlC7/nc5E0BFvDt85KUCQ=
-SHA256 (go_modules/golang.org/x/sys/@v/v0.7.0.zip) = 
5iBUFFbnJTSTQWIbLaqgPjRwzn7dNMLlfGuj/gNt7/Y=
+SHA256 (go_modules/golang.org/x/sys/@v/v0.8.0.mod) = 
8DMzMJb+GY8xUd7tk/LeunTlC7/nc5E0BFvDt85KUCQ=
+SHA256 (go_modules/golang.org/x/sys/@v/v0.8.0.zip) = 
JYizpkWDg5DjQfEAf4Z59eERe11ayUZ++DLRSLIhmjg=
 SHA256 
(go_modules/golang.org/x/term/@v/v0.0.0-20201126162022-7de9c90e9dd1.mod) = 
TLqxT3cGdxsnHZlaGzzBMf5aJGqtx+5tG6bwvYlHgfo=
 SHA256 
(go_modules/golang.org/x/term/@v/v0.0.0-20210927222741-03fcf44c2211.mod) = 
dAeU4pFPXMh+JWVsWEMiKyxlZlghIF9FYyoEd8jT95s=
 SHA256 
(go_modules/golang.org/x/term/@v/v0.0.0-20220722155259-a9ba230a4035.mod) = 
dAeU4pFPXMh+JWVsWEMiKyxlZlghIF9FYyoEd8jT95s=
 SHA256 (go_modules/golang.org/x/term/@v/v0.1.0.mod) = 
dAeU4pFPXMh+JWVsWEMiKyxlZlghIF9FYyoEd8jT95s=
 SHA256 (go_modules/golang.org/x/term/@v/v0.5.0.mod) = 
DW9YIoqtwaZSjmdV2gGFFlZuOuXFIB963hdz9W+o2TQ=
-SHA256 (go_modules/golang.org/x/term/@v/v0.7.0.mod) = 
RsDxQ/3tcWQnE3P7XJr/a2bC0r7iyhjANT6qnUqJxKI=
-SHA256 (go_modules/golang.org/x/term/@v/v0.7.0.zip) = 
9UiGeSoJI5e1FObXmj/D6SahpUC04VARWZXZZnp6RuQ=
+SHA256 (go_modules/golang.org/x/term/@v/v0.8.0.mod) = 
XTYtaoNFP3Akcl6CTAXFlJYk749MsT9dfj1Lfxygsyc=
+SHA256 (go_modules/golang.org/x/term/@v/v0.8.0.zip) = 
GWHf6lnOUx4tbmoyKHgfWViyfG2dnAmTL1/8VMTZzfk=
 SHA256 (go_modules/golang.org/x/text/@v/v0.3.0.mod) = 
NoedWG/YAB6E2oeHGQoR5PeHSeKoHf6Lm2kxiZ//Mc8=
 SHA256 (go_modules/golang.org/x/text/@v/v0.3.3.mod) = 
+7eojtFAUV55Dsp6EP/TGcl4axHGpsfln4D3+ze7RUI=
 SHA256 (go_modules/golang.org/x/text/@v/v0.3.6.mod) = 
+7eojtFAUV55Dsp6EP/TGcl4axHGpsfln4D3+ze7RUI=
@@ -194,13 +201,12 @@ SHA256 (go_modules/golang.org/x/tools/@v/v0.8.0.mod) =
 SHA256 (go_modules/golang.org/x/tools/@v/v0.1.12.mod) = 
KouTZYmPCCL6zmW6CJoTU+aKZdNC8wDKMXzOzN5kIfM=
 SHA256 (go_modules/golang.org/x/tools/@v/v0.2.0.mod) = 
nJteYq9p8rEAKc4SlE3Ig08SJqg7skPpoNvzfguxhro=
 SHA256 
(go_modules/golang.org/x/tools/@v/v0.6.1-0.20230217175706-3102dad5faf9.mod) = 
gw7Xjc0+mSfEEuJkEjAwhEd0nVE9MQJNJ24kQ7IBZgk=
-SHA256 (go_modules/golang.org/x/tools/@v/v0.8.0.mod) = 
QuEQONrSiBnOMc9u0+HY36K6xQ3gzbPgfv/yim5sEe0=
-SHA256 (go_modules/golang.org/x/tools/@v/v0.8.0.zip) = 
LLg+45pBSPgFOX+nniasTNFlL5yZTBB9fQ3E456djGA=
+SHA256 (go_modules/golang.org/x/tools/@v/v0.9.1.mod) = 
FBIGSEXOBF727VKe3jyzqLyO1KKnwrfU+WeAfXyVhVE=
+SHA256 (go_modules/golang.org/x/tools/@v/v0.9.1.zip) = 
dCakc0lBfS0RRIfafgtog8qyK7ibRq5JF0Mm94QoccM=
 SHA256 
(go_modules/golang.org/x/vuln/@v/v0.0.0-20230303230808-d3042fecc4e3.mod) = 
7Myv1lmpCaM+E9+f7Z3rH0tCHyldsvRHWsUS/3jHXPA=
 SHA256 
(go_modules/golang.org/x/vuln/@v/v0.0.0-20230303230808-d3042fecc4e3.zip) = 
NaXn5o77jm6373+pQn8hnIDgLEBR121/xPCAu8zUnDQ=
 SHA256 
(go_modules/golang.org/x/xerrors/@v/v0.0.0-20190717185122-a985d3407aa7.mod) = 
ql4+ybt7n2gWCe+sAZ2d4ae6dxkkj/Hqon54iC2z1/U=
-SHA256 
(go_modules/golang.org/x/xerrors/@v/v0.0.0-20191204190536-9bdfabe68543.mod) = 
ql4+ybt7n2gWCe+sAZ2d4ae6dxkkj/Hqon54iC2z1/U=
-SHA256 
(go_modules/golang.org/x/xerrors/@v/v0.0.0-20191204190536-9bdfabe68543.zip) = 
qTAQq9PE9INxDDf7h1Ead2lC9wm0wYIKKNCZ1EhoA5A=
+SHA256 
(go_modules/golang.org/x/xerrors/@v/v0.0.0-20190717185122-a985d3407aa7.zip) = 
xOnwY8/tVGyQ8AqWV96sT5FaiZT4y+bb0/GOeeuDAs8=
 SHA256 
(go_modules/gopkg.in/check.v1/@v/v0.0.0-20161208181325-20d25e280405.mod) = 
XDBuDWM81moRtA4uX7vG2kIRDbfXLqPBUkzrRe5Awz8=
 SHA256 
(go_modules/gopkg.in/check.v1/@v/v1.0.0-20190902080502-41f04d3bba15.mod) = 
XDBuDWM81moRtA4uX7vG2kIRDbfXLqPBUkzrRe5Awz8=
 SHA256 
(go_modules/gopkg.in/check.v1/@v/v1.0.0-20200227125254-8fa46927fb4f.mod) = 
XDBuDWM81moRtA4uX7vG2kIRDbfXLqPBUkzrRe5Awz8=
@@ -224,7 +230,7 @@ SHA256 (osv-scanner-v1.3.2.zip) = sskngEt251OO7KdFhZHA
 SHA256 (go_modules/rsc.io/pdf/@v/v0.1.1.zip) = 
eb8xDjmc8OLYqmFTZ1DSppmcXKiE56J/r4jTcBzVuo8=
 SHA256 (go_modules/sigs.k8s.io/yaml/@v/v1.3.0.mod) = 
L8eybun2ctl7QvpvJfWxWlWYK7usaZYdduux0DbRUAE=
 SHA256 (go_modules/sigs.k8s.io/yaml/@v/v1.3.0.zip) = 
qsiNpVHCpRK2Qss1ZYvz3IYllaNWa9hA6/GOSALx/Mk=
-SHA256 (osv-scanner-v1.3.2.zip) = sskngEt251OO7KdFhZHA5hnlGAl7yzxPjolFoncuWYo=
+SHA256 (osv-scanner-v1.3.3.zip) = TriperDLag9GCE68ifKB7SqCResUNCKRXkoqD0KzauY=
 SIZE (go_modules/github.com/!burnt!sushi/toml/@v/v0.3.1.mod) = 34
 SIZE (go_modules/github.com/!burnt!sushi/toml/@v/v1.2.1.mod) = 43
 SIZE (go_modules/github.com/!burnt!sushi/toml/@v/v1.2.1.zip) = 238822
@@ -236,6 +242,8 @@ SIZE (go_modules/github.com/anmitsu/go-shlex/@v/v0.0.0
 SIZE 
(go_modules/github.com/!proton!mail/go-crypto/@v/v0.0.0-20230217124315-7d5c6f04bbb8.zip)
 = 418901
 SIZE (go_modules/github.com/acomagu/bufpipe/@v/v1.0.4.mod) = 81
 SIZE (go_modules/github.com/acomagu/bufpipe/@v/v1.0.4.zip) = 7050
+SIZE 
(go_modules/github.com/anchore/go-struct-converter/@v/v0.0.0-20221118182256-c68fdcfa2092.mod)
 = 55
+SIZE 
(go_modules/github.com/anchore/go-struct-converter/@v/v0.0.0-20221118182256-c68fdcfa2092.zip)
 = 19578
 SIZE 
(go_modules/github.com/anmitsu/go-shlex/@v/v0.0.0-20200514113438-38f4b401e2be.mod)
 = 44
 SIZE 
(go_modules/github.com/anmitsu/go-shlex/@v/v0.0.0-20200514113438-38f4b401e2be.zip)
 = 5367
 SIZE 
(go_modules/github.com/armon/go-socks5/@v/v0.0.0-20160902184237-e75332964ef5.mod)
 = 34
@@ -243,11 +251,13 @@ SIZE (go_modules/github.com/bwesterb/go-ristretto/@v/v
 SIZE (go_modules/github.com/bradleyjkemp/cupaloy/v2/@v/v2.8.0.mod) = 209
 SIZE (go_modules/github.com/bradleyjkemp/cupaloy/v2/@v/v2.8.0.zip) = 289386
 SIZE (go_modules/github.com/bwesterb/go-ristretto/@v/v1.2.0.mod) = 49
-SIZE (go_modules/github.com/bwesterb/go-ristretto/@v/v1.2.0.zip) = 166392
+SIZE (go_modules/github.com/bwesterb/go-ristretto/@v/v1.2.3.mod) = 49
+SIZE (go_modules/github.com/bwesterb/go-ristretto/@v/v1.2.3.zip) = 167051
 SIZE (go_modules/github.com/client9/misspell/@v/v0.3.4.mod) = 35
 SIZE (go_modules/github.com/client9/misspell/@v/v0.3.4.zip) = 246908
 SIZE (go_modules/github.com/cloudflare/circl/@v/v1.1.0.mod) = 207
-SIZE (go_modules/github.com/cloudflare/circl/@v/v1.1.0.zip) = 4613872
+SIZE (go_modules/github.com/cloudflare/circl/@v/v1.3.3.mod) = 181
+SIZE (go_modules/github.com/cloudflare/circl/@v/v1.3.3.zip) = 4909858
 SIZE (go_modules/github.com/cpuguy83/go-md2man/v2/@v/v2.0.2.mod) = 100
 SIZE (go_modules/github.com/cpuguy83/go-md2man/v2/@v/v2.0.2.zip) = 12539
 SIZE (go_modules/github.com/creack/pty/@v/v1.1.9.mod) = 39
@@ -270,7 +280,6 @@ SIZE (go_modules/github.com/google/go-cmp/@v/v0.5.7.mo
 SIZE (go_modules/github.com/go-git/go-git/v5/@v/v5.6.1.zip) = 671202
 SIZE 
(go_modules/github.com/google/go-cmdtest/@v/v0.4.1-0.20220921163831-55ab3332a786.mod)
 = 126
 SIZE 
(go_modules/github.com/google/go-cmdtest/@v/v0.4.1-0.20220921163831-55ab3332a786.zip)
 = 29538
-SIZE (go_modules/github.com/google/go-cmp/@v/v0.5.7.mod) = 106
 SIZE (go_modules/github.com/google/go-cmp/@v/v0.5.8.mod) = 41
 SIZE (go_modules/github.com/google/go-cmp/@v/v0.5.9.mod) = 41
 SIZE (go_modules/github.com/google/go-cmp/@v/v0.5.9.zip) = 130220
@@ -330,20 +339,22 @@ SIZE (go_modules/github.com/spdx/tools-golang/@v/v0.4.
 SIZE 
(go_modules/github.com/spdx/gordf/@v/v0.0.0-20201111095634-7098f93598fb.mod) = 
38
 SIZE 
(go_modules/github.com/spdx/gordf/@v/v0.0.0-20221230105357-b735bd5aac89.mod) = 
38
 SIZE 
(go_modules/github.com/spdx/gordf/@v/v0.0.0-20221230105357-b735bd5aac89.zip) = 
56398
-SIZE (go_modules/github.com/spdx/tools-golang/@v/v0.4.0.mod) = 174
-SIZE (go_modules/github.com/spdx/tools-golang/@v/v0.4.0.zip) = 595063
+SIZE (go_modules/github.com/spdx/tools-golang/@v/v0.5.0.mod) = 285
+SIZE (go_modules/github.com/spdx/tools-golang/@v/v0.5.0.zip) = 579739
 SIZE (go_modules/github.com/stretchr/objx/@v/v0.1.0.mod) = 32
 SIZE (go_modules/github.com/stretchr/objx/@v/v0.4.0.mod) = 137
-SIZE (go_modules/github.com/stretchr/objx/@v/v0.4.0.zip) = 44330
+SIZE (go_modules/github.com/stretchr/objx/@v/v0.5.0.mod) = 85
+SIZE (go_modules/github.com/stretchr/objx/@v/v0.5.0.zip) = 44362
 SIZE (go_modules/github.com/stretchr/testify/@v/v1.2.2.mod) = 35
 SIZE (go_modules/github.com/stretchr/testify/@v/v1.4.0.mod) = 179
 SIZE (go_modules/github.com/stretchr/testify/@v/v1.7.0.mod) = 216
 SIZE (go_modules/github.com/stretchr/testify/@v/v1.7.1.mod) = 216
 SIZE (go_modules/github.com/stretchr/testify/@v/v1.7.4.mod) = 188
+SIZE (go_modules/github.com/stretchr/testify/@v/v1.8.0.mod) = 188
 SIZE (go_modules/github.com/stretchr/testify/@v/v1.8.2.mod) = 188
 SIZE (go_modules/github.com/stretchr/testify/@v/v1.8.2.zip) = 114188
-SIZE (go_modules/github.com/urfave/cli/v2/@v/v2.25.1.mod) = 280
-SIZE (go_modules/github.com/urfave/cli/v2/@v/v2.25.1.zip) = 3548657
+SIZE (go_modules/github.com/urfave/cli/v2/@v/v2.25.3.mod) = 280
+SIZE (go_modules/github.com/urfave/cli/v2/@v/v2.25.3.zip) = 3548796
 SIZE (go_modules/github.com/xanzy/ssh-agent/@v/v0.3.3.mod) = 203
 SIZE (go_modules/github.com/xanzy/ssh-agent/@v/v0.3.3.zip) = 11274
 SIZE 
(go_modules/github.com/xrash/smetrics/@v/v0.0.0-20201216005158-039620a65673.mod)
 = 33
@@ -358,11 +369,12 @@ SIZE (go_modules/golang.org/x/crypto/@v/v0.6.0.mod) = 
 SIZE 
(go_modules/golang.org/x/crypto/@v/v0.0.0-20220622213112-05595931fe9d.mod) = 255
 SIZE 
(go_modules/golang.org/x/crypto/@v/v0.0.0-20220826181053-bd7e27e6170d.mod) = 255
 SIZE (go_modules/golang.org/x/crypto/@v/v0.1.0.mod) = 171
+SIZE 
(go_modules/golang.org/x/crypto/@v/v0.3.1-0.20221117191849-2c476679df9a.mod) = 
171
 SIZE (go_modules/golang.org/x/crypto/@v/v0.6.0.mod) = 171
 SIZE (go_modules/golang.org/x/crypto/@v/v0.6.0.zip) = 1761232
 SIZE (go_modules/golang.org/x/exp/@v/v0.0.0-20220722155223-a9213eeb770e.mod) = 
325
-SIZE (go_modules/golang.org/x/exp/@v/v0.0.0-20230425010034-47ecfdc1ba53.mod) = 
176
-SIZE (go_modules/golang.org/x/exp/@v/v0.0.0-20230425010034-47ecfdc1ba53.zip) = 
445555
+SIZE (go_modules/golang.org/x/exp/@v/v0.0.0-20230510235704-dd950f8aeaea.mod) = 
176
+SIZE (go_modules/golang.org/x/exp/@v/v0.0.0-20230510235704-dd950f8aeaea.zip) = 
445818
 SIZE (go_modules/golang.org/x/mod/@v/v0.10.0.mod) = 84
 SIZE (go_modules/golang.org/x/mod/@v/v0.10.0.zip) = 162521
 SIZE 
(go_modules/golang.org/x/mod/@v/v0.6.0-dev.0.20220419223038-86c51ed26bb4.mod) = 
157
@@ -374,14 +386,15 @@ SIZE (go_modules/golang.org/x/net/@v/v0.6.0.mod) = 123
 SIZE (go_modules/golang.org/x/net/@v/v0.0.0-20220722155237-a158d28d115b.mod) = 
179
 SIZE (go_modules/golang.org/x/net/@v/v0.0.0-20220826154423-83b083e8dc8b.mod) = 
179
 SIZE (go_modules/golang.org/x/net/@v/v0.1.0.mod) = 123
+SIZE (go_modules/golang.org/x/net/@v/v0.10.0.mod) = 123
+SIZE (go_modules/golang.org/x/net/@v/v0.10.0.zip) = 1564890
 SIZE (go_modules/golang.org/x/net/@v/v0.6.0.mod) = 123
 SIZE (go_modules/golang.org/x/net/@v/v0.7.0.mod) = 123
-SIZE (go_modules/golang.org/x/net/@v/v0.9.0.mod) = 123
-SIZE (go_modules/golang.org/x/net/@v/v0.9.0.zip) = 1561724
 SIZE (go_modules/golang.org/x/sync/@v/v0.0.0-20190423024810-112230192c58.mod) 
= 25
 SIZE (go_modules/golang.org/x/sync/@v/v0.0.0-20220722155255-886fb9371eb4.mod) 
= 25
 SIZE (go_modules/golang.org/x/sync/@v/v0.1.0.mod) = 25
-SIZE (go_modules/golang.org/x/sync/@v/v0.1.0.zip) = 27781
+SIZE (go_modules/golang.org/x/sync/@v/v0.2.0.mod) = 25
+SIZE (go_modules/golang.org/x/sync/@v/v0.2.0.zip) = 27919
 SIZE (go_modules/golang.org/x/sys/@v/v0.0.0-20190215142949-d0b11bdaac8a.mod) = 
24
 SIZE (go_modules/golang.org/x/sys/@v/v0.0.0-20191026070338-33540a1f6037.mod) = 
33
 SIZE (go_modules/golang.org/x/sys/@v/v0.0.0-20200302150141-5c8b2ff67527.mod) = 
33
@@ -399,15 +412,15 @@ SIZE (go_modules/golang.org/x/sys/@v/v0.7.0.mod) = 33
 SIZE (go_modules/golang.org/x/sys/@v/v0.1.0.mod) = 33
 SIZE (go_modules/golang.org/x/sys/@v/v0.3.0.mod) = 33
 SIZE (go_modules/golang.org/x/sys/@v/v0.5.0.mod) = 33
-SIZE (go_modules/golang.org/x/sys/@v/v0.7.0.mod) = 33
-SIZE (go_modules/golang.org/x/sys/@v/v0.7.0.zip) = 1893247
+SIZE (go_modules/golang.org/x/sys/@v/v0.8.0.mod) = 33
+SIZE (go_modules/golang.org/x/sys/@v/v0.8.0.zip) = 1894928
 SIZE (go_modules/golang.org/x/term/@v/v0.0.0-20201126162022-7de9c90e9dd1.mod) 
= 95
 SIZE (go_modules/golang.org/x/term/@v/v0.0.0-20210927222741-03fcf44c2211.mod) 
= 95
 SIZE (go_modules/golang.org/x/term/@v/v0.0.0-20220722155259-a9ba230a4035.mod) 
= 95
 SIZE (go_modules/golang.org/x/term/@v/v0.1.0.mod) = 95
 SIZE (go_modules/golang.org/x/term/@v/v0.5.0.mod) = 67
-SIZE (go_modules/golang.org/x/term/@v/v0.7.0.mod) = 67
-SIZE (go_modules/golang.org/x/term/@v/v0.7.0.zip) = 19924
+SIZE (go_modules/golang.org/x/term/@v/v0.8.0.mod) = 67
+SIZE (go_modules/golang.org/x/term/@v/v0.8.0.zip) = 19924
 SIZE (go_modules/golang.org/x/text/@v/v0.3.0.mod) = 25
 SIZE (go_modules/golang.org/x/text/@v/v0.3.3.mod) = 97
 SIZE (go_modules/golang.org/x/text/@v/v0.3.6.mod) = 97
@@ -421,13 +434,12 @@ SIZE (go_modules/golang.org/x/tools/@v/v0.8.0.mod) = 2
 SIZE (go_modules/golang.org/x/tools/@v/v0.1.12.mod) = 327
 SIZE (go_modules/golang.org/x/tools/@v/v0.2.0.mod) = 177
 SIZE 
(go_modules/golang.org/x/tools/@v/v0.6.1-0.20230217175706-3102dad5faf9.mod) = 
211
-SIZE (go_modules/golang.org/x/tools/@v/v0.8.0.mod) = 212
-SIZE (go_modules/golang.org/x/tools/@v/v0.8.0.zip) = 3074447
+SIZE (go_modules/golang.org/x/tools/@v/v0.9.1.mod) = 213
+SIZE (go_modules/golang.org/x/tools/@v/v0.9.1.zip) = 3120890
 SIZE (go_modules/golang.org/x/vuln/@v/v0.0.0-20230303230808-d3042fecc4e3.mod) 
= 568
 SIZE (go_modules/golang.org/x/vuln/@v/v0.0.0-20230303230808-d3042fecc4e3.zip) 
= 305007
 SIZE 
(go_modules/golang.org/x/xerrors/@v/v0.0.0-20190717185122-a985d3407aa7.mod) = 37
-SIZE 
(go_modules/golang.org/x/xerrors/@v/v0.0.0-20191204190536-9bdfabe68543.mod) = 37
-SIZE 
(go_modules/golang.org/x/xerrors/@v/v0.0.0-20191204190536-9bdfabe68543.zip) = 
22282
+SIZE 
(go_modules/golang.org/x/xerrors/@v/v0.0.0-20190717185122-a985d3407aa7.zip) = 
20009
 SIZE (go_modules/gopkg.in/check.v1/@v/v0.0.0-20161208181325-20d25e280405.mod) 
= 25
 SIZE (go_modules/gopkg.in/check.v1/@v/v1.0.0-20190902080502-41f04d3bba15.mod) 
= 25
 SIZE (go_modules/gopkg.in/check.v1/@v/v1.0.0-20200227125254-8fa46927fb4f.mod) 
= 25
@@ -451,4 +463,4 @@ SIZE (osv-scanner-v1.3.2.zip) = 893481
 SIZE (go_modules/rsc.io/pdf/@v/v0.1.1.zip) = 50919
 SIZE (go_modules/sigs.k8s.io/yaml/@v/v1.3.0.mod) = 106
 SIZE (go_modules/sigs.k8s.io/yaml/@v/v1.3.0.zip) = 21567
-SIZE (osv-scanner-v1.3.2.zip) = 893481
+SIZE (osv-scanner-v1.3.3.zip) = 899204
blob - 2941fe15840197da7a371944022a34e029310dda
blob + 9dc60d3a42c30d6dba6ad495077a9f0265acae36
--- security/osv-scanner/modules.inc
+++ security/osv-scanner/modules.inc
@@ -4,12 +4,13 @@ MODGO_MODULES =       \
        github.com/!microsoft/go-winio           v0.5.2 \
        github.com/!proton!mail/go-crypto        
v0.0.0-20230217124315-7d5c6f04bbb8 \
        github.com/acomagu/bufpipe               v1.0.4 \
+       github.com/anchore/go-struct-converter   
v0.0.0-20221118182256-c68fdcfa2092 \
        github.com/anmitsu/go-shlex              
v0.0.0-20200514113438-38f4b401e2be \
        github.com/armon/go-socks5               
v0.0.0-20160902184237-e75332964ef5 \
        github.com/bradleyjkemp/cupaloy/v2       v2.8.0 \
-       github.com/bwesterb/go-ristretto         v1.2.0 \
+       github.com/bwesterb/go-ristretto         v1.2.3 \
        github.com/client9/misspell              v0.3.4 \
-       github.com/cloudflare/circl              v1.1.0 \
+       github.com/cloudflare/circl              v1.3.3 \
        github.com/cpuguy83/go-md2man/v2         v2.0.2 \
        github.com/creack/pty                    v1.1.9 \
        github.com/davecgh/go-spew               v1.1.1 \
@@ -47,25 +48,25 @@ MODGO_MODULES =     \
        github.com/sirupsen/logrus               v1.7.0 \
        github.com/skeema/knownhosts             v1.1.0 \
        github.com/spdx/gordf                    
v0.0.0-20221230105357-b735bd5aac89 \
-       github.com/spdx/tools-golang             v0.4.0 \
-       github.com/stretchr/objx                 v0.4.0 \
+       github.com/spdx/tools-golang             v0.5.0 \
+       github.com/stretchr/objx                 v0.5.0 \
        github.com/stretchr/testify              v1.8.2 \
-       github.com/urfave/cli/v2                 v2.25.1 \
+       github.com/urfave/cli/v2                 v2.25.3 \
        github.com/xanzy/ssh-agent               v0.3.3 \
        github.com/xrash/smetrics                
v0.0.0-20201216005158-039620a65673 \
        github.com/yuin/goldmark                 v1.4.13 \
        golang.org/x/arch                        v0.1.0 \
        golang.org/x/crypto                      v0.6.0 \
-       golang.org/x/exp                         
v0.0.0-20230425010034-47ecfdc1ba53 \
+       golang.org/x/exp                         
v0.0.0-20230510235704-dd950f8aeaea \
        golang.org/x/mod                         v0.10.0 \
-       golang.org/x/net                         v0.9.0 \
-       golang.org/x/sync                        v0.1.0 \
-       golang.org/x/sys                         v0.7.0 \
-       golang.org/x/term                        v0.7.0 \
+       golang.org/x/net                         v0.10.0 \
+       golang.org/x/sync                        v0.2.0 \
+       golang.org/x/sys                         v0.8.0 \
+       golang.org/x/term                        v0.8.0 \
        golang.org/x/text                        v0.9.0 \
-       golang.org/x/tools                       v0.8.0 \
+       golang.org/x/tools                       v0.9.1 \
        golang.org/x/vuln                        
v0.0.0-20230303230808-d3042fecc4e3 \
-       golang.org/x/xerrors                     
v0.0.0-20191204190536-9bdfabe68543 \
+       golang.org/x/xerrors                     
v0.0.0-20190717185122-a985d3407aa7 \
        gopkg.in/check.v1                        
v1.0.0-20201130134442-10cb98267c6c \
        gopkg.in/warnings.v0                     v0.1.2 \
        gopkg.in/yaml.v2                         v2.4.0 \
@@ -76,80 +77,84 @@ MODGO_MODFILES =    \
        sigs.k8s.io/yaml                         v1.3.0
 
 MODGO_MODFILES =       \
-       github.com/!burnt!sushi/toml     v0.3.1 \
-       github.com/davecgh/go-spew       v1.1.0 \
-       github.com/go-git/go-billy/v5    v5.3.1 \
-       github.com/google/go-cmp         v0.5.7 \
-       github.com/google/go-cmp         v0.5.8 \
-       github.com/kr/pretty             v0.1.0 \
-       github.com/kr/pretty             v0.2.1 \
-       github.com/kr/text               v0.1.0 \
-       github.com/spdx/gordf            v0.0.0-20201111095634-7098f93598fb \
-       github.com/stretchr/objx         v0.1.0 \
-       github.com/stretchr/testify      v1.2.2 \
-       github.com/stretchr/testify      v1.4.0 \
-       github.com/stretchr/testify      v1.7.0 \
-       github.com/stretchr/testify      v1.7.1 \
-       github.com/stretchr/testify      v1.7.4 \
-       golang.org/x/crypto              v0.0.0-20190308221718-c2843e01d9a2 \
-       golang.org/x/crypto              v0.0.0-20210921155107-089bfa567519 \
-       golang.org/x/crypto              v0.0.0-20220525230936-793ad666bf5e \
-       golang.org/x/crypto              v0.0.0-20220622213112-05595931fe9d \
-       golang.org/x/crypto              v0.0.0-20220826181053-bd7e27e6170d \
-       golang.org/x/crypto              v0.1.0 \
-       golang.org/x/exp                 v0.0.0-20220722155223-a9213eeb770e \
-       golang.org/x/mod                 v0.6.0 \
-       golang.org/x/mod                 
v0.6.0-dev.0.20220419223038-86c51ed26bb4 \
-       golang.org/x/mod                 v0.8.0 \
-       golang.org/x/net                 v0.0.0-20190620200207-3b0461eec859 \
-       golang.org/x/net                 v0.0.0-20210226172049-e18ecbb05110 \
-       golang.org/x/net                 v0.0.0-20211112202133-69e39bad7dc2 \
-       golang.org/x/net                 v0.0.0-20220722155237-a158d28d115b \
-       golang.org/x/net                 v0.0.0-20220826154423-83b083e8dc8b \
-       golang.org/x/net                 v0.1.0 \
-       golang.org/x/net                 v0.6.0 \
-       golang.org/x/net                 v0.7.0 \
-       golang.org/x/sync                v0.0.0-20190423024810-112230192c58 \
-       golang.org/x/sync                v0.0.0-20220722155255-886fb9371eb4 \
-       golang.org/x/sys                 v0.0.0-20190215142949-d0b11bdaac8a \
-       golang.org/x/sys                 v0.0.0-20191026070338-33540a1f6037 \
-       golang.org/x/sys                 v0.0.0-20200302150141-5c8b2ff67527 \
-       golang.org/x/sys                 v0.0.0-20201119102817-f84b799fce68 \
-       golang.org/x/sys                 v0.0.0-20210124154548-22da62e12c0c \
-       golang.org/x/sys                 v0.0.0-20210320140829-1e4c9ba3b0c4 \
-       golang.org/x/sys                 v0.0.0-20210423082822-04245dca01da \
-       golang.org/x/sys                 v0.0.0-20210615035016-665e8c7367d1 \
-       golang.org/x/sys                 v0.0.0-20211007075335-d3039528d8ac \
-       golang.org/x/sys                 v0.0.0-20220520151302-bc2c85ada10a \
-       golang.org/x/sys                 v0.0.0-20220715151400-c0bba94af5f8 \
-       golang.org/x/sys                 v0.0.0-20220722155257-8c9f86f7a55f \
-       golang.org/x/sys                 v0.0.0-20220728004956-3c1f35247d10 \
-       golang.org/x/sys                 v0.0.0-20220825204002-c680a09ffe64 \
-       golang.org/x/sys                 v0.1.0 \
-       golang.org/x/sys                 v0.3.0 \
-       golang.org/x/sys                 v0.5.0 \
-       golang.org/x/term                v0.0.0-20201126162022-7de9c90e9dd1 \
-       golang.org/x/term                v0.0.0-20210927222741-03fcf44c2211 \
-       golang.org/x/term                v0.0.0-20220722155259-a9ba230a4035 \
-       golang.org/x/term                v0.1.0 \
-       golang.org/x/term                v0.5.0 \
-       golang.org/x/text                v0.3.0 \
-       golang.org/x/text                v0.3.3 \
-       golang.org/x/text                v0.3.6 \
-       golang.org/x/text                v0.3.7 \
-       golang.org/x/text                v0.4.0 \
-       golang.org/x/text                v0.7.0 \
-       golang.org/x/tools               v0.0.0-20180917221912-90fa682c2a6e \
-       golang.org/x/tools               v0.0.0-20191119224855-298f0cb1881e \
-       golang.org/x/tools               v0.1.12 \
-       golang.org/x/tools               v0.2.0 \
-       golang.org/x/tools               v0.6.1-0.20230217175706-3102dad5faf9 \
-       golang.org/x/xerrors             v0.0.0-20190717185122-a985d3407aa7 \
-       gopkg.in/check.v1                v0.0.0-20161208181325-20d25e280405 \
-       gopkg.in/check.v1                v1.0.0-20190902080502-41f04d3bba15 \
-       gopkg.in/check.v1                v1.0.0-20200227125254-8fa46927fb4f \
-       gopkg.in/yaml.v2                 v2.2.2 \
-       gopkg.in/yaml.v2                 v2.2.4 \
-       gopkg.in/yaml.v3                 v3.0.0 \
-       gopkg.in/yaml.v3                 v3.0.0-20200313102051-9f266ea9e77c
+       github.com/!burnt!sushi/toml             v0.3.1 \
+       github.com/bwesterb/go-ristretto         v1.2.0 \
+       github.com/cloudflare/circl              v1.1.0 \
+       github.com/davecgh/go-spew               v1.1.0 \
+       github.com/go-git/go-billy/v5            v5.3.1 \
+       github.com/google/go-cmp                 v0.5.8 \
+       github.com/kr/pretty                     v0.1.0 \
+       github.com/kr/pretty                     v0.2.1 \
+       github.com/kr/text                       v0.1.0 \
+       github.com/spdx/gordf                    
v0.0.0-20201111095634-7098f93598fb \
+       github.com/stretchr/objx                 v0.1.0 \
+       github.com/stretchr/objx                 v0.4.0 \
+       github.com/stretchr/testify              v1.2.2 \
+       github.com/stretchr/testify              v1.4.0 \
+       github.com/stretchr/testify              v1.7.0 \
+       github.com/stretchr/testify              v1.7.1 \
+       github.com/stretchr/testify              v1.7.4 \
+       github.com/stretchr/testify              v1.8.0 \
+       golang.org/x/crypto                      
v0.0.0-20190308221718-c2843e01d9a2 \
+       golang.org/x/crypto                      
v0.0.0-20210921155107-089bfa567519 \
+       golang.org/x/crypto                      
v0.0.0-20220525230936-793ad666bf5e \
+       golang.org/x/crypto                      
v0.0.0-20220622213112-05595931fe9d \
+       golang.org/x/crypto                      
v0.0.0-20220826181053-bd7e27e6170d \
+       golang.org/x/crypto                      v0.1.0 \
+       golang.org/x/crypto                      
v0.3.1-0.20221117191849-2c476679df9a \
+       golang.org/x/exp                         
v0.0.0-20220722155223-a9213eeb770e \
+       golang.org/x/mod                         v0.6.0 \
+       golang.org/x/mod                         
v0.6.0-dev.0.20220419223038-86c51ed26bb4 \
+       golang.org/x/mod                         v0.8.0 \
+       golang.org/x/net                         
v0.0.0-20190620200207-3b0461eec859 \
+       golang.org/x/net                         
v0.0.0-20210226172049-e18ecbb05110 \
+       golang.org/x/net                         
v0.0.0-20211112202133-69e39bad7dc2 \
+       golang.org/x/net                         
v0.0.0-20220722155237-a158d28d115b \
+       golang.org/x/net                         
v0.0.0-20220826154423-83b083e8dc8b \
+       golang.org/x/net                         v0.1.0 \
+       golang.org/x/net                         v0.6.0 \
+       golang.org/x/net                         v0.7.0 \
+       golang.org/x/sync                        
v0.0.0-20190423024810-112230192c58 \
+       golang.org/x/sync                        
v0.0.0-20220722155255-886fb9371eb4 \
+       golang.org/x/sync                        v0.1.0 \
+       golang.org/x/sys                         
v0.0.0-20190215142949-d0b11bdaac8a \
+       golang.org/x/sys                         
v0.0.0-20191026070338-33540a1f6037 \
+       golang.org/x/sys                         
v0.0.0-20200302150141-5c8b2ff67527 \
+       golang.org/x/sys                         
v0.0.0-20201119102817-f84b799fce68 \
+       golang.org/x/sys                         
v0.0.0-20210124154548-22da62e12c0c \
+       golang.org/x/sys                         
v0.0.0-20210320140829-1e4c9ba3b0c4 \
+       golang.org/x/sys                         
v0.0.0-20210423082822-04245dca01da \
+       golang.org/x/sys                         
v0.0.0-20210615035016-665e8c7367d1 \
+       golang.org/x/sys                         
v0.0.0-20211007075335-d3039528d8ac \
+       golang.org/x/sys                         
v0.0.0-20220520151302-bc2c85ada10a \
+       golang.org/x/sys                         
v0.0.0-20220715151400-c0bba94af5f8 \
+       golang.org/x/sys                         
v0.0.0-20220722155257-8c9f86f7a55f \
+       golang.org/x/sys                         
v0.0.0-20220728004956-3c1f35247d10 \
+       golang.org/x/sys                         
v0.0.0-20220825204002-c680a09ffe64 \
+       golang.org/x/sys                         v0.1.0 \
+       golang.org/x/sys                         v0.3.0 \
+       golang.org/x/sys                         v0.5.0 \
+       golang.org/x/term                        
v0.0.0-20201126162022-7de9c90e9dd1 \
+       golang.org/x/term                        
v0.0.0-20210927222741-03fcf44c2211 \
+       golang.org/x/term                        
v0.0.0-20220722155259-a9ba230a4035 \
+       golang.org/x/term                        v0.1.0 \
+       golang.org/x/term                        v0.5.0 \
+       golang.org/x/text                        v0.3.0 \
+       golang.org/x/text                        v0.3.3 \
+       golang.org/x/text                        v0.3.6 \
+       golang.org/x/text                        v0.3.7 \
+       golang.org/x/text                        v0.4.0 \
+       golang.org/x/text                        v0.7.0 \
+       golang.org/x/tools                       
v0.0.0-20180917221912-90fa682c2a6e \
+       golang.org/x/tools                       
v0.0.0-20191119224855-298f0cb1881e \
+       golang.org/x/tools                       v0.1.12 \
+       golang.org/x/tools                       v0.2.0 \
+       golang.org/x/tools                       
v0.6.1-0.20230217175706-3102dad5faf9 \
+       gopkg.in/check.v1                        
v0.0.0-20161208181325-20d25e280405 \
+       gopkg.in/check.v1                        
v1.0.0-20190902080502-41f04d3bba15 \
+       gopkg.in/check.v1                        
v1.0.0-20200227125254-8fa46927fb4f \
+       gopkg.in/yaml.v2                         v2.2.2 \
+       gopkg.in/yaml.v2                         v2.2.4 \
+       gopkg.in/yaml.v3                         v3.0.0 \
+       gopkg.in/yaml.v3                         
v3.0.0-20200313102051-9f266ea9e77c
 

Reply via email to