{"spdxVersion":"SPDX-2.3","dataLicense":"CC0-1.0","SPDXID":"SPDXRef-DOCUMENT","name":"com.github.commit-check/commit-check","documentNamespace":"https://spdx.org/spdxdocs/protobom/ac623d11-2824-4cb4-bec7-69aea7c3d555","comment":"Exact versions could not be resolved for some packages. For more information: https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-the-dependency-graph#dependencies-included.","creationInfo":{"creators":["Tool: protobom-v0.0.0-20260303044708-397e2e19870f+dirty","Tool: GitHub.com-Dependency-Graph"],"created":"2026-03-03T08:31:44Z"},"packages":[{"name":"actions/checkout","SPDXID":"SPDXRef-githubactions-actions-checkout-6.0.2-75c946","versionInfo":"6.0.2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/[email protected]"}]},{"name":"actions/setup-python","SPDXID":"SPDXRef-githubactions-actions-setup-python-6.2.0-75c946","versionInfo":"6.2.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/[email protected]"}]},{"name":"actions/upload-artifact","SPDXID":"SPDXRef-githubactions-actions-upload-artifact-bbbca2ddaa5d8feaa63e36b76fdaad77386f024f-75c946","versionInfo":"bbbca2ddaa5d8feaa63e36b76fdaad77386f024f","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f"}]},{"name":"actions/upload-artifact","SPDXID":"SPDXRef-githubactions-actions-upload-artifact-7..-75c946","versionInfo":"7.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/upload-artifact@7.%2A.%2A"}]},{"name":"peaceiris/actions-gh-pages","SPDXID":"SPDXRef-githubactions-peaceiris-actions-gh-pages-4f9cc6602d3f66b9c108549d475ec49e8ef4d45e-75c946","versionInfo":"4f9cc6602d3f66b9c108549d475ec49e8ef4d45e","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/peaceiris/actions-gh-pages@4f9cc6602d3f66b9c108549d475ec49e8ef4d45e"}]},{"name":"actions/download-artifact","SPDXID":"SPDXRef-githubactions-actions-download-artifact-8..-75c946","versionInfo":"8.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/download-artifact@8.%2A.%2A"}]},{"name":"codecov/codecov-action","SPDXID":"SPDXRef-githubactions-codecov-codecov-action-5c47607acb93fed5485fdbf7232e8a31425f672a-75c946","versionInfo":"5c47607acb93fed5485fdbf7232e8a31425f672a","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/codecov/codecov-action@5c47607acb93fed5485fdbf7232e8a31425f672a"}]},{"name":"actions/attest-build-provenance","SPDXID":"SPDXRef-githubactions-actions-attest-build-provenance-a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32-75c946","versionInfo":"a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32"}]},{"name":"tomli","SPDXID":"SPDXRef-pypi-tomli-75c946","versionInfo":"\u003e= 1.1.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/tomli"}]},{"name":"pyyaml","SPDXID":"SPDXRef-pypi-pyyaml-75c946","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:pypi/pyyaml"}]},{"name":"actions/checkout","SPDXID":"SPDXRef-githubactions-actions-checkout-de0fac2e4500dabe0009e67214ff5f5447ce83dd-75c946","versionInfo":"de0fac2e4500dabe0009e67214ff5f5447ce83dd","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd"}]},{"name":"actions/setup-python","SPDXID":"SPDXRef-githubactions-actions-setup-python-a309ff8b426b58ec0e2a45f0f869d46889d02405-75c946","versionInfo":"a309ff8b426b58ec0e2a45f0f869d46889d02405","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405"}]},{"name":"CodSpeedHQ/action","SPDXID":"SPDXRef-githubactions-CodSpeedHQ-action-2ac572851726409c88c02a307f1ea2632a9ea59b-75c946","versionInfo":"2ac572851726409c88c02a307f1ea2632a9ea59b","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/CodSpeedHQ/action@2ac572851726409c88c02a307f1ea2632a9ea59b"}]},{"name":"commit-check/.github/.github/workflows/release-drafter.yml","SPDXID":"SPDXRef-githubactions-commit-check.github.githubworkflows-release-drafter.yml-main-75c946","versionInfo":"main","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/commit-check/.github/.github/workflows/release-drafter.yml@main"}]},{"name":"com.github.commit-check/commit-check","SPDXID":"SPDXRef-github-commit-check-commit-check-main-2f0caf","versionInfo":"main","downloadLocation":"git+https://github.com/commit-check/commit-check","filesAnalyzed":false,"licenseDeclared":"MIT","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:github/commit-check/commit-check@main"}]}],"relationships":[{"spdxElementId":"SPDXRef-github-commit-check-commit-check-main-2f0caf","relatedSpdxElement":"SPDXRef-pypi-pyyaml-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-commit-check-commit-check-main-2f0caf","relatedSpdxElement":"SPDXRef-githubactions-actions-checkout-de0fac2e4500dabe0009e67214ff5f5447ce83dd-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-commit-check-commit-check-main-2f0caf","relatedSpdxElement":"SPDXRef-githubactions-actions-upload-artifact-bbbca2ddaa5d8feaa63e36b76fdaad77386f024f-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-commit-check-commit-check-main-2f0caf","relatedSpdxElement":"SPDXRef-githubactions-actions-upload-artifact-7..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-commit-check-commit-check-main-2f0caf","relatedSpdxElement":"SPDXRef-pypi-tomli-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-commit-check-commit-check-main-2f0caf","relatedSpdxElement":"SPDXRef-githubactions-actions-setup-python-a309ff8b426b58ec0e2a45f0f869d46889d02405-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-commit-check-commit-check-main-2f0caf","relatedSpdxElement":"SPDXRef-githubactions-CodSpeedHQ-action-2ac572851726409c88c02a307f1ea2632a9ea59b-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-commit-check-commit-check-main-2f0caf","relatedSpdxElement":"SPDXRef-githubactions-commit-check.github.githubworkflows-release-drafter.yml-main-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-commit-check-commit-check-main-2f0caf","relatedSpdxElement":"SPDXRef-githubactions-actions-checkout-6.0.2-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-commit-check-commit-check-main-2f0caf","relatedSpdxElement":"SPDXRef-githubactions-actions-setup-python-6.2.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-commit-check-commit-check-main-2f0caf","relatedSpdxElement":"SPDXRef-githubactions-peaceiris-actions-gh-pages-4f9cc6602d3f66b9c108549d475ec49e8ef4d45e-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-commit-check-commit-check-main-2f0caf","relatedSpdxElement":"SPDXRef-githubactions-actions-download-artifact-8..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-commit-check-commit-check-main-2f0caf","relatedSpdxElement":"SPDXRef-githubactions-codecov-codecov-action-5c47607acb93fed5485fdbf7232e8a31425f672a-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-commit-check-commit-check-main-2f0caf","relatedSpdxElement":"SPDXRef-githubactions-actions-attest-build-provenance-a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-DOCUMENT","relatedSpdxElement":"SPDXRef-github-commit-check-commit-check-main-2f0caf","relationshipType":"DESCRIBES"}]}