OpenBao - expected no more than one package in cache with namespace+name

In this GitHub action run, I seem to have tripped this error:

https://github.com/actions/go-dependency-submission/blob/105f29a556567419f95abeb6197b4caecb1ffb7d/src/process.ts#L56-L64

Based on history of the action, the first failure of this pipeline seems to have been caused by this commit:

https://github.com/openbao/openbao/commit/d6a36ee21ccbdbf0e262ffa5a61044e61591f759#diff-33ef32bf6c23acb95f5902d7097b7a1d5128ca061167ec0716715b0b9eeaa5f6

But the change to go.mod seems unrelated (from this PoV) and the workflow's error message hasn't been preserved, so it might've been causing a different error message at the time.

The full error produced is as follows

```json 2024-07-16T22:39:31.1809478Z Error: assertion failed: expected no more than one package in cache with namespace+name. Found: [{"packageURL":{"type":"golang","name":"go","namespace":"github.com/google/tink","version":"v1.7.0","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"aws-sdk-go","namespace":"github.com/aws","version":"v1.44.269","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-jmespath","namespace":"github.com/jmespath","version":"v0.4.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"errors","namespace":"github.com/pkg","version":"v0.9.1","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"net","namespace":"golang.org/x","version":"v0.26.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"go-cmp","namespace":"github.com/google","version":"v0.6.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"crypto","namespace":"golang.org/x","version":"v0.24.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"oauth2","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"api","namespace":"google.golang.org","version":"v0.149.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"protobuf","namespace":"google.golang.org","version":"v1.33.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"go-metrics","namespace":"github.com/armon","version":"v0.4.1","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"datadog-go","namespace":"github.com/DataDog","version":"v3.2.0+incompatible","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"circonus-gometrics","namespace":"github.com/circonus-labs","version":"v2.3.1+incompatible","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"circonusllhist","namespace":"github.com/circonus-labs","version":"v0.1.3","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"protobuf","namespace":"github.com/golang","version":"v1.5.4","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-cmp","namespace":"github.com/google","version":"v0.6.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"protobuf","namespace":"google.golang.org","version":"v1.33.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"go-immutable-radix","namespace":"github.com/hashicorp","version":"v1.3.1","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-uuid","namespace":"github.com/hashicorp","version":"v1.0.3","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"golang-lru","namespace":"github.com/hashicorp","version":"v0.5.4","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"go-retryablehttp","namespace":"github.com/hashicorp","version":"v0.7.7","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-cleanhttp","namespace":"github.com/hashicorp","version":"v0.5.2","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"go-hclog","namespace":"github.com/hashicorp","version":"v1.6.3","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-spew","namespace":"github.com/davecgh","version":"v1.1.2-0.20180830191138-d8f796af33cc","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"color","namespace":"github.com/fatih","version":"v1.16.0","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-colorable","namespace":"github.com/mattn","version":"v0.1.13","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-isatty","namespace":"github.com/mattn","version":"v0.0.20","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]}]},{"packageURL":{"type":"golang","name":"go-isatty","namespace":"github.com/mattn","version":"v0.0.20","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"go-colorable","namespace":"github.com/mattn","version":"v0.1.13","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-isatty","namespace":"github.com/mattn","version":"v0.0.20","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]}]},{"packageURL":{"type":"golang","name":"go-isatty","namespace":"github.com/mattn","version":"v0.0.20","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"testify","namespace":"github.com/stretchr","version":"v1.9.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"color","namespace":"github.com/fatih","version":"v1.16.0","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-colorable","namespace":"github.com/mattn","version":"v0.1.13","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-isatty","namespace":"github.com/mattn","version":"v0.0.20","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]}]},{"packageURL":{"type":"golang","name":"go-isatty","namespace":"github.com/mattn","version":"v0.0.20","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"go-colorable","namespace":"github.com/mattn","version":"v0.1.13","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-isatty","namespace":"github.com/mattn","version":"v0.0.20","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]}]},{"packageURL":{"type":"golang","name":"go-isatty","namespace":"github.com/mattn","version":"v0.0.20","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"client_golang","namespace":"github.com/prometheus","version":"v1.14.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"client_model","namespace":"github.com/prometheus","version":"v0.4.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"common","namespace":"github.com/prometheus","version":"v0.37.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"httpunix","namespace":"github.com/tv42","version":"v0.0.0-20191220191345-2ba4b9c3382c","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"go-radix","namespace":"github.com/armon","version":"v1.0.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"v3","namespace":"github.com/cenkalti/backoff","version":"v3.2.2","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"color","namespace":"github.com/fatih","version":"v1.16.0","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-colorable","namespace":"github.com/mattn","version":"v0.1.13","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-isatty","namespace":"github.com/mattn","version":"v0.0.20","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]}]},{"packageURL":{"type":"golang","name":"go-isatty","namespace":"github.com/mattn","version":"v0.0.20","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"groupcache","namespace":"github.com/golang","version":"v0.0.0-20210331224755-41bb18bfe9da","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"protobuf","namespace":"github.com/golang","version":"v1.5.4","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-cmp","namespace":"github.com/google","version":"v0.6.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"protobuf","namespace":"google.golang.org","version":"v1.33.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"snappy","namespace":"github.com/golang","version":"v0.0.4","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"v2","namespace":"github.com/googleapis/gax-go","version":"v2.12.0","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-cmp","namespace":"github.com/google","version":"v0.6.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"api","namespace":"google.golang.org","version":"v0.149.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"api","namespace":"google.golang.org/genproto/googleapis","version":"v0.0.0-20240123012728-ef4313101c80","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"rpc","namespace":"google.golang.org/genproto/googleapis","version":"v0.0.0-20240304212257-790db918fca8","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"grpc","namespace":"google.golang.org","version":"v1.62.1","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"protobuf","namespace":"google.golang.org","version":"v1.33.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"protobuf","namespace":"github.com/golang","version":"v1.5.4","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-cmp","namespace":"github.com/google","version":"v0.6.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"protobuf","namespace":"google.golang.org","version":"v1.33.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"net","namespace":"golang.org/x","version":"v0.26.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"text","namespace":"golang.org/x","version":"v0.16.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"genproto","namespace":"google.golang.org","version":"v0.0.0-20240123012728-ef4313101c80","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"errwrap","namespace":"github.com/hashicorp","version":"v1.1.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"go-cleanhttp","namespace":"github.com/hashicorp","version":"v0.5.2","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"go-hclog","namespace":"github.com/hashicorp","version":"v1.6.3","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-spew","namespace":"github.com/davecgh","version":"v1.1.2-0.20180830191138-d8f796af33cc","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"color","namespace":"github.com/fatih","version":"v1.16.0","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-colorable","namespace":"github.com/mattn","version":"v0.1.13","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-isatty","namespace":"github.com/mattn","version":"v0.0.20","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]}]},{"packageURL":{"type":"golang","name":"go-isatty","namespace":"github.com/mattn","version":"v0.0.20","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"go-colorable","namespace":"github.com/mattn","version":"v0.1.13","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-isatty","namespace":"github.com/mattn","version":"v0.0.20","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]}]},{"packageURL":{"type":"golang","name":"go-isatty","namespace":"github.com/mattn","version":"v0.0.20","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"testify","namespace":"github.com/stretchr","version":"v1.9.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"go-immutable-radix","namespace":"github.com/hashicorp","version":"v1.3.1","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-uuid","namespace":"github.com/hashicorp","version":"v1.0.3","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"golang-lru","namespace":"github.com/hashicorp","version":"v0.5.4","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"go-multierror","namespace":"github.com/hashicorp","version":"v1.1.1","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"errwrap","namespace":"github.com/hashicorp","version":"v1.1.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"go-plugin","namespace":"github.com/hashicorp","version":"v1.4.9","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"protobuf","namespace":"github.com/golang","version":"v1.5.4","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-cmp","namespace":"github.com/google","version":"v0.6.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"protobuf","namespace":"google.golang.org","version":"v1.33.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"go-hclog","namespace":"github.com/hashicorp","version":"v1.6.3","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-spew","namespace":"github.com/davecgh","version":"v1.1.2-0.20180830191138-d8f796af33cc","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"color","namespace":"github.com/fatih","version":"v1.16.0","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-colorable","namespace":"github.com/mattn","version":"v0.1.13","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-isatty","namespace":"github.com/mattn","version":"v0.0.20","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]}]},{"packageURL":{"type":"golang","name":"go-isatty","namespace":"github.com/mattn","version":"v0.0.20","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"go-colorable","namespace":"github.com/mattn","version":"v0.1.13","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-isatty","namespace":"github.com/mattn","version":"v0.0.20","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]}]},{"packageURL":{"type":"golang","name":"go-isatty","namespace":"github.com/mattn","version":"v0.0.20","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"testify","namespace":"github.com/stretchr","version":"v1.9.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"yamux","namespace":"github.com/hashicorp","version":"v0.1.1","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"go-testing-interface","namespace":"github.com/mitchellh","version":"v1.14.1","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"run","namespace":"github.com/oklog","version":"v1.1.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"net","namespace":"golang.org/x","version":"v0.26.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"grpc","namespace":"google.golang.org","version":"v1.62.1","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"color","namespace":"github.com/fatih","version":"v1.16.0","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-colorable","namespace":"github.com/mattn","version":"v0.1.13","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-isatty","namespace":"github.com/mattn","version":"v0.0.20","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]}]},{"packageURL":{"type":"golang","name":"go-isatty","namespace":"github.com/mattn","version":"v0.0.20","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"go-colorable","namespace":"github.com/mattn","version":"v0.1.13","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-isatty","namespace":"github.com/mattn","version":"v0.0.20","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]}]},{"packageURL":{"type":"golang","name":"go-isatty","namespace":"github.com/mattn","version":"v0.0.20","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"testify","namespace":"github.com/stretchr","version":"v1.9.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"text","namespace":"golang.org/x","version":"v0.16.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"genproto","namespace":"google.golang.org","version":"v0.0.0-20240123012728-ef4313101c80","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"go-retryablehttp","namespace":"github.com/hashicorp","version":"v0.7.7","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-cleanhttp","namespace":"github.com/hashicorp","version":"v0.5.2","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"go-hclog","namespace":"github.com/hashicorp","version":"v1.6.3","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-spew","namespace":"github.com/davecgh","version":"v1.1.2-0.20180830191138-d8f796af33cc","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"color","namespace":"github.com/fatih","version":"v1.16.0","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-colorable","namespace":"github.com/mattn","version":"v0.1.13","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-isatty","namespace":"github.com/mattn","version":"v0.0.20","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]}]},{"packageURL":{"type":"golang","name":"go-isatty","namespace":"github.com/mattn","version":"v0.0.20","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"go-colorable","namespace":"github.com/mattn","version":"v0.1.13","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-isatty","namespace":"github.com/mattn","version":"v0.0.20","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]}]},{"packageURL":{"type":"golang","name":"go-isatty","namespace":"github.com/mattn","version":"v0.0.20","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"testify","namespace":"github.com/stretchr","version":"v1.9.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"color","namespace":"github.com/fatih","version":"v1.16.0","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-colorable","namespace":"github.com/mattn","version":"v0.1.13","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-isatty","namespace":"github.com/mattn","version":"v0.0.20","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]}]},{"packageURL":{"type":"golang","name":"go-isatty","namespace":"github.com/mattn","version":"v0.0.20","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"go-colorable","namespace":"github.com/mattn","version":"v0.1.13","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-isatty","namespace":"github.com/mattn","version":"v0.0.20","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]}]},{"packageURL":{"type":"golang","name":"go-isatty","namespace":"github.com/mattn","version":"v0.0.20","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"go-rootcerts","namespace":"github.com/hashicorp","version":"v1.0.2","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-homedir","namespace":"github.com/mitchellh","version":"v1.1.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"mlock","namespace":"github.com/hashicorp/go-secure-stdlib","version":"v0.1.3","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"parseutil","namespace":"github.com/hashicorp/go-secure-stdlib","version":"v0.1.7","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"strutil","namespace":"github.com/hashicorp/go-secure-stdlib","version":"v0.1.2","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-glob","namespace":"github.com/ryanuber","version":"v1.0.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"go-sockaddr","namespace":"github.com/hashicorp","version":"v1.0.6","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"errwrap","namespace":"github.com/hashicorp","version":"v1.1.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"cli","namespace":"github.com/mitchellh","version":"v1.1.5","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"v3","namespace":"github.com/Masterminds/sprig","version":"v3.2.3","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"goutils","namespace":"github.com/Masterminds","version":"v1.1.1","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"v3","namespace":"github.com/Masterminds/semver","version":"v3.2.1","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"uuid","namespace":"github.com/google","version":"v1.6.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"xstrings","namespace":"github.com/huandu","version":"v1.4.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"mergo","namespace":"github.com/imdario","version":"v0.3.15","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"yaml.v3","namespace":"gopkg.in","version":"v3.0.1","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"copystructure","namespace":"github.com/mitchellh","version":"v1.2.0","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"reflectwalk","namespace":"github.com/mitchellh","version":"v1.0.2","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"decimal","namespace":"github.com/shopspring","version":"v1.3.1","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"cast","namespace":"github.com/spf13","version":"v1.5.1","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"testify","namespace":"github.com/stretchr","version":"v1.9.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"crypto","namespace":"golang.org/x","version":"v0.24.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"go-radix","namespace":"github.com/armon","version":"v1.0.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"speakeasy","namespace":"github.com/bgentry","version":"v0.1.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"color","namespace":"github.com/fatih","version":"v1.16.0","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-colorable","namespace":"github.com/mattn","version":"v0.1.13","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-isatty","namespace":"github.com/mattn","version":"v0.0.20","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]}]},{"packageURL":{"type":"golang","name":"go-isatty","namespace":"github.com/mattn","version":"v0.0.20","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"uuid","namespace":"github.com/google","version":"v1.6.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"go-multierror","namespace":"github.com/hashicorp","version":"v1.1.1","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"errwrap","namespace":"github.com/hashicorp","version":"v1.1.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"xstrings","namespace":"github.com/huandu","version":"v1.4.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"go-colorable","namespace":"github.com/mattn","version":"v0.1.13","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-isatty","namespace":"github.com/mattn","version":"v0.0.20","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]}]},{"packageURL":{"type":"golang","name":"go-isatty","namespace":"github.com/mattn","version":"v0.0.20","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"complete","namespace":"github.com/posener","version":"v1.2.3","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"testify","namespace":"github.com/stretchr","version":"v1.9.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"crypto","namespace":"golang.org/x","version":"v0.24.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"go-wordwrap","namespace":"github.com/mitchellh","version":"v1.0.1","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"columnize","namespace":"github.com/ryanuber","version":"v2.1.2+incompatible","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"goutils","namespace":"github.com/Masterminds","version":"v1.1.1","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"v3","namespace":"github.com/Masterminds/semver","version":"v3.2.1","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"v3","namespace":"github.com/Masterminds/sprig","version":"v3.2.3","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"goutils","namespace":"github.com/Masterminds","version":"v1.1.1","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"v3","namespace":"github.com/Masterminds/semver","version":"v3.2.1","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"uuid","namespace":"github.com/google","version":"v1.6.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"xstrings","namespace":"github.com/huandu","version":"v1.4.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"mergo","namespace":"github.com/imdario","version":"v0.3.15","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"yaml.v3","namespace":"gopkg.in","version":"v3.0.1","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"copystructure","namespace":"github.com/mitchellh","version":"v1.2.0","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"reflectwalk","namespace":"github.com/mitchellh","version":"v1.0.2","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"decimal","namespace":"github.com/shopspring","version":"v1.3.1","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"cast","namespace":"github.com/spf13","version":"v1.5.1","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"testify","namespace":"github.com/stretchr","version":"v1.9.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"crypto","namespace":"golang.org/x","version":"v0.24.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"go-radix","namespace":"github.com/armon","version":"v1.0.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"speakeasy","namespace":"github.com/bgentry","version":"v0.1.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"color","namespace":"github.com/fatih","version":"v1.16.0","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-colorable","namespace":"github.com/mattn","version":"v0.1.13","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-isatty","namespace":"github.com/mattn","version":"v0.0.20","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]}]},{"packageURL":{"type":"golang","name":"go-isatty","namespace":"github.com/mattn","version":"v0.0.20","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"uuid","namespace":"github.com/google","version":"v1.6.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"go-multierror","namespace":"github.com/hashicorp","version":"v1.1.1","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"errwrap","namespace":"github.com/hashicorp","version":"v1.1.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"xstrings","namespace":"github.com/huandu","version":"v1.4.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"mergo","namespace":"github.com/imdario","version":"v0.3.15","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"yaml.v3","namespace":"gopkg.in","version":"v3.0.1","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"go-colorable","namespace":"github.com/mattn","version":"v0.1.13","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-isatty","namespace":"github.com/mattn","version":"v0.0.20","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]}]},{"packageURL":{"type":"golang","name":"go-isatty","namespace":"github.com/mattn","version":"v0.0.20","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"copystructure","namespace":"github.com/mitchellh","version":"v1.2.0","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"reflectwalk","namespace":"github.com/mitchellh","version":"v1.0.2","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"reflectwalk","namespace":"github.com/mitchellh","version":"v1.0.2","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"complete","namespace":"github.com/posener","version":"v1.2.3","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"decimal","namespace":"github.com/shopspring","version":"v1.3.1","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"cast","namespace":"github.com/spf13","version":"v1.5.1","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"crypto","namespace":"golang.org/x","version":"v0.24.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"mapstructure","namespace":"github.com/mitchellh","version":"v1.5.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"testify","namespace":"github.com/stretchr","version":"v1.9.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"strutil","namespace":"github.com/hashicorp/go-secure-stdlib","version":"v0.1.2","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-glob","namespace":"github.com/ryanuber","version":"v1.0.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"go-sockaddr","namespace":"github.com/hashicorp","version":"v1.0.6","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"errwrap","namespace":"github.com/hashicorp","version":"v1.1.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"cli","namespace":"github.com/mitchellh","version":"v1.1.5","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"v3","namespace":"github.com/Masterminds/sprig","version":"v3.2.3","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"goutils","namespace":"github.com/Masterminds","version":"v1.1.1","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"v3","namespace":"github.com/Masterminds/semver","version":"v3.2.1","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"uuid","namespace":"github.com/google","version":"v1.6.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"xstrings","namespace":"github.com/huandu","version":"v1.4.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"mergo","namespace":"github.com/imdario","version":"v0.3.15","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"yaml.v3","namespace":"gopkg.in","version":"v3.0.1","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"copystructure","namespace":"github.com/mitchellh","version":"v1.2.0","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"reflectwalk","namespace":"github.com/mitchellh","version":"v1.0.2","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"decimal","namespace":"github.com/shopspring","version":"v1.3.1","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"cast","namespace":"github.com/spf13","version":"v1.5.1","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"testify","namespace":"github.com/stretchr","version":"v1.9.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"crypto","namespace":"golang.org/x","version":"v0.24.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"go-radix","namespace":"github.com/armon","version":"v1.0.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"speakeasy","namespace":"github.com/bgentry","version":"v0.1.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"color","namespace":"github.com/fatih","version":"v1.16.0","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-colorable","namespace":"github.com/mattn","version":"v0.1.13","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-isatty","namespace":"github.com/mattn","version":"v0.0.20","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]}]},{"packageURL":{"type":"golang","name":"go-isatty","namespace":"github.com/mattn","version":"v0.0.20","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"uuid","namespace":"github.com/google","version":"v1.6.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"go-multierror","namespace":"github.com/hashicorp","version":"v1.1.1","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"errwrap","namespace":"github.com/hashicorp","version":"v1.1.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"xstrings","namespace":"github.com/huandu","version":"v1.4.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"go-colorable","namespace":"github.com/mattn","version":"v0.1.13","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-isatty","namespace":"github.com/mattn","version":"v0.0.20","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]}]},{"packageURL":{"type":"golang","name":"go-isatty","namespace":"github.com/mattn","version":"v0.0.20","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"complete","namespace":"github.com/posener","version":"v1.2.3","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"testify","namespace":"github.com/stretchr","version":"v1.9.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"crypto","namespace":"golang.org/x","version":"v0.24.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"go-wordwrap","namespace":"github.com/mitchellh","version":"v1.0.1","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"columnize","namespace":"github.com/ryanuber","version":"v2.1.2+incompatible","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"goutils","namespace":"github.com/Masterminds","version":"v1.1.1","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"v3","namespace":"github.com/Masterminds/semver","version":"v3.2.1","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"v3","namespace":"github.com/Masterminds/sprig","version":"v3.2.3","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"goutils","namespace":"github.com/Masterminds","version":"v1.1.1","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"v3","namespace":"github.com/Masterminds/semver","version":"v3.2.1","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"uuid","namespace":"github.com/google","version":"v1.6.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"xstrings","namespace":"github.com/huandu","version":"v1.4.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"mergo","namespace":"github.com/imdario","version":"v0.3.15","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"yaml.v3","namespace":"gopkg.in","version":"v3.0.1","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"copystructure","namespace":"github.com/mitchellh","version":"v1.2.0","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"reflectwalk","namespace":"github.com/mitchellh","version":"v1.0.2","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"decimal","namespace":"github.com/shopspring","version":"v1.3.1","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"cast","namespace":"github.com/spf13","version":"v1.5.1","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"testify","namespace":"github.com/stretchr","version":"v1.9.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"crypto","namespace":"golang.org/x","version":"v0.24.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"go-radix","namespace":"github.com/armon","version":"v1.0.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"speakeasy","namespace":"github.com/bgentry","version":"v0.1.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"color","namespace":"github.com/fatih","version":"v1.16.0","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-colorable","namespace":"github.com/mattn","version":"v0.1.13","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-isatty","namespace":"github.com/mattn","version":"v0.0.20","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]}]},{"packageURL":{"type":"golang","name":"go-isatty","namespace":"github.com/mattn","version":"v0.0.20","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"uuid","namespace":"github.com/google","version":"v1.6.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"go-multierror","namespace":"github.com/hashicorp","version":"v1.1.1","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"errwrap","namespace":"github.com/hashicorp","version":"v1.1.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"xstrings","namespace":"github.com/huandu","version":"v1.4.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"mergo","namespace":"github.com/imdario","version":"v0.3.15","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"yaml.v3","namespace":"gopkg.in","version":"v3.0.1","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"go-colorable","namespace":"github.com/mattn","version":"v0.1.13","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-isatty","namespace":"github.com/mattn","version":"v0.0.20","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]}]},{"packageURL":{"type":"golang","name":"go-isatty","namespace":"github.com/mattn","version":"v0.0.20","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"copystructure","namespace":"github.com/mitchellh","version":"v1.2.0","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"reflectwalk","namespace":"github.com/mitchellh","version":"v1.0.2","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"reflectwalk","namespace":"github.com/mitchellh","version":"v1.0.2","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"complete","namespace":"github.com/posener","version":"v1.2.3","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"decimal","namespace":"github.com/shopspring","version":"v1.3.1","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"cast","namespace":"github.com/spf13","version":"v1.5.1","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"crypto","namespace":"golang.org/x","version":"v0.24.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"go-uuid","namespace":"github.com/hashicorp","version":"v1.0.3","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"go-version","namespace":"github.com/hashicorp","version":"v1.6.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"golang-lru","namespace":"github.com/hashicorp","version":"v0.5.4","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"hcl","namespace":"github.com/hashicorp","version":"v1.0.1-vault-5","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-spew","namespace":"github.com/davecgh","version":"v1.1.2-0.20180830191138-d8f796af33cc","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"yamux","namespace":"github.com/hashicorp","version":"v0.1.1","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"go-jmespath","namespace":"github.com/jmespath","version":"v0.4.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"go-colorable","namespace":"github.com/mattn","version":"v0.1.13","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-isatty","namespace":"github.com/mattn","version":"v0.0.20","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]}]},{"packageURL":{"type":"golang","name":"go-isatty","namespace":"github.com/mattn","version":"v0.0.20","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"copystructure","namespace":"github.com/mitchellh","version":"v1.2.0","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"reflectwalk","namespace":"github.com/mitchellh","version":"v1.0.2","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"go-homedir","namespace":"github.com/mitchellh","version":"v1.1.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"go-testing-interface","namespace":"github.com/mitchellh","version":"v1.14.1","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"mapstructure","namespace":"github.com/mitchellh","version":"v1.5.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"reflectwalk","namespace":"github.com/mitchellh","version":"v1.0.2","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"run","namespace":"github.com/oklog","version":"v1.1.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"lz4","namespace":"github.com/pierrec","version":"v2.6.1+incompatible","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"go-glob","namespace":"github.com/ryanuber","version":"v1.0.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"go.opencensus.io","namespace":null,"version":"v0.24.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"atomic","namespace":"go.uber.org","version":"v1.11.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"net","namespace":"golang.org/x","version":"v0.26.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"sys","namespace":"golang.org/x","version":"v0.21.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"text","namespace":"golang.org/x","version":"v0.16.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"time","namespace":"golang.org/x","version":"v0.5.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"genproto","namespace":"google.golang.org","version":"v0.0.0-20240123012728-ef4313101c80","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"grpc","namespace":"google.golang.org","version":"v1.62.1","qualifiers":null,"subpath":null},"dependencies":[]}]},{"packageURL":{"type":"golang","name":"go","namespace":"github.com/json-iterator","version":"v1.1.12","qualifiers":null,"subpath":null},"dependencies":[{"packageURL":{"type":"golang","name":"go-spew","namespace":"github.com/davecgh","version":"v1.1.2-0.20180830191138-d8f796af33cc","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"gofuzz","namespace":"github.com/google","version":"v1.2.0","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"concurrent","namespace":"github.com/modern-go","version":"v0.0.0-20180306012644-bacd9c7ef1dd","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"reflect2","namespace":"github.com/modern-go","version":"v1.0.2","qualifiers":null,"subpath":null},"dependencies":[]},{"packageURL":{"type":"golang","name":"testify","namespace":"github.com/stretchr","version":"v1.9.0","qualifiers":null,"subpath":null},"dependencies":[]}]}]for {"name":"go"} ```

I think in particular, this matcher might be at fault:

https://github.com/github/dependency-submission-toolkit/blob/5758564c1c8c0e00bb72f7e5061782271b6a49ab/src/package.ts#L100-L122


  /**
   * Provided a "matcher" object with any of the string fields 'namespace',
   * 'name', or 'version', returns true if the Package has values matching the
   * matcher.
   *
   * @param {Object} matcher
   * @returns {boolean}
   */
  matching(matcher: {
    namespace?: string
    name?: string
    version?: string
  }): boolean {
    // prettier-ignore
    return (
      (matcher.namespace === undefined ||
        this.packageURL.namespace === matcher.namespace) && // XXX: namespace is unset in the above and thus any namespace would match.
      (matcher.name === undefined || this.packageURL.name === matcher.name) &&
      (matcher.version === undefined ||
        this.packageURL.version === matcher.version)
    )
  }
}

The following dependencies above I believe might both match as a result of the vaue matcher criteria:

github.com/google/tink.go 1 {'.[0].packageURL'}
github.com/json-iterator.go 1 {'.[1].packageURL'}

(in {namespace}.{name} compressed format with resulting jq paths from the above output).

While both have the nominal name "go", neither get imported as "go" in the code base (a subset of tink is imported as github.com/google/tink/go/kwp/subtle, though github.com/google/tink/go is the go module, and the json-iterator dependency is not a direct dependency). I am not entirely sure but I think like /v{number} imports, this'll revert to the base name (tink or json-iterator), and not go were the base module to be imported. However, they do have different namespaces, but this is elided from the matcher.

Both dependencies are rather old to the project:

6943ca5bc1 (hc-github-team-secure-vault-core 2023-05-30 19:49:24 -0400  53)     github.com/google/tink/go v1.7.0
...
37c28b47cf (Nick Cabatoff                    2021-11-16 15:07:03 -0500 280)     github.com/json-iterator/go v1.1.12 // indirect

so I am rather confused why this has only more recently started failing (at most 5 months ago), given neither code section seems to have changed recently in either of our projects (OpenBao, go-dependency-submission or dependency-submission-toolkit).

Thanks!

actions / go-dependency-submission

OpenBao - expected no more than one package in cache with namespace+name #74