Imports github.com/CycloneDX/cyclonedx-go github.com/invopop/jsonschema github.com/spdx/tools-golang/spdx Imports in module “github.com/in-toto/go-witness” github.com/in-toto/go-witness/attestation github.com/in-toto/go-witness/cryptoutil github.com/in-toto/go-witness/log github.com/in-toto/go-witness/registry Standard library imports bytes crypto encoding/json fmt io os path/filepath