{"id":178372655,"number":"v2.88.0","published_at":"2026-03-10T16:02:10.000Z","licenses":null,"integrity":null,"status":null,"download_url":"https://proxy.golang.org/cached-only/github.com/cli/cli/v2/@v/v2.88.0.zip","registry_url":"https://pkg.go.dev/github.com/cli/cli/v2@v2.88.0","documentation_url":"https://pkg.go.dev/github.com/cli/cli/v2@v2.88.0#section-documentation","install_command":"go get github.com/cli/cli/v2@v2.88.0","immutable":null,"metadata":{},"created_at":"2026-03-10T22:11:12.491Z","updated_at":"2026-03-11T23:11:30.540Z","purl":"pkg:golang/github.com/cli/cli/v2@v2.88.0","related_tag":{"name":"v2.88.0","sha":"e8cc7f94367a0d862501aea1e318e6e0c326f0b9","kind":"commit","published_at":"2026-03-10T16:02:10.000Z","download_url":"https://codeload.github.com/cli/cli/tar.gz/v2.88.0","html_url":"https://github.com/cli/cli/releases/tag/v2.88.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/cli/cli@v2.88.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cli%2Fcli/tags/v2.88.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cli%2Fcli/tags/v2.88.0/manifests"},"latest":false,"version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcli%2Fcli%2Fv2/versions/v2.88.0","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcli%2Fcli%2Fv2/versions/v2.88.0/codemeta","dependencies":[{"id":1948969809,"ecosystem":"go","package_name":"github.com/AlecAivazis/survey/v2","requirements":"v2.3.7","kind":"runtime","optional":false},{"id":1948969811,"ecosystem":"go","package_name":"github.com/MakeNowJust/heredoc","requirements":"v1.0.0","kind":"runtime","optional":false},{"id":1948969812,"ecosystem":"go","package_name":"github.com/Netflix/go-expect","requirements":"v0.0.0-20220104043353-73e0943537d2","kind":"runtime","optional":false},{"id":1948969813,"ecosystem":"go","package_name":"github.com/atotto/clipboard","requirements":"v0.1.4","kind":"runtime","optional":false},{"id":1948969815,"ecosystem":"go","package_name":"github.com/briandowns/spinner","requirements":"v1.23.2","kind":"runtime","optional":false},{"id":1948969826,"ecosystem":"go","package_name":"github.com/cenkalti/backoff/v4","requirements":"v4.3.0","kind":"runtime","optional":false},{"id":1948969829,"ecosystem":"go","package_name":"github.com/cenkalti/backoff/v5","requirements":"v5.0.3","kind":"runtime","optional":false},{"id":1948969832,"ecosystem":"go","package_name":"github.com/charmbracelet/glamour","requirements":"v0.10.0","kind":"runtime","optional":false},{"id":1948969843,"ecosystem":"go","package_name":"github.com/charmbracelet/huh","requirements":"v0.8.0","kind":"runtime","optional":false},{"id":1948969854,"ecosystem":"go","package_name":"github.com/charmbracelet/lipgloss","requirements":"v1.1.1-0.20250404203927-76690c660834","kind":"runtime","optional":false},{"id":1948969857,"ecosystem":"go","package_name":"github.com/cli/go-gh/v2","requirements":"v2.13.0","kind":"runtime","optional":false},{"id":1948969890,"ecosystem":"go","package_name":"github.com/cli/go-internal","requirements":"v0.0.0-20241025142207-6c48bcd5ce24","kind":"runtime","optional":false},{"id":1948969900,"ecosystem":"go","package_name":"github.com/cli/oauth","requirements":"v1.2.2","kind":"runtime","optional":false},{"id":1948969910,"ecosystem":"go","package_name":"github.com/cli/safeexec","requirements":"v1.0.1","kind":"runtime","optional":false},{"id":1948969911,"ecosystem":"go","package_name":"github.com/cpuguy83/go-md2man/v2","requirements":"v2.0.7","kind":"runtime","optional":false},{"id":1948969912,"ecosystem":"go","package_name":"github.com/creack/pty","requirements":"v1.1.24","kind":"runtime","optional":false},{"id":1948969920,"ecosystem":"go","package_name":"github.com/digitorus/timestamp","requirements":"v0.0.0-20250524132541-c45532741eea","kind":"runtime","optional":false},{"id":1948969921,"ecosystem":"go","package_name":"github.com/distribution/reference","requirements":"v0.6.0","kind":"runtime","optional":false},{"id":1948969922,"ecosystem":"go","package_name":"github.com/gabriel-vasile/mimetype","requirements":"v1.4.13","kind":"runtime","optional":false},{"id":1948969923,"ecosystem":"go","package_name":"github.com/gdamore/tcell/v2","requirements":"v2.13.8","kind":"runtime","optional":false},{"id":1948970007,"ecosystem":"go","package_name":"github.com/golang/snappy","requirements":"v1.0.0","kind":"runtime","optional":false},{"id":1948970033,"ecosystem":"go","package_name":"github.com/google/go-cmp","requirements":"v0.7.0","kind":"runtime","optional":false},{"id":1948970036,"ecosystem":"go","package_name":"github.com/google/go-containerregistry","requirements":"v0.20.7","kind":"runtime","optional":false},{"id":1948970080,"ecosystem":"go","package_name":"github.com/google/shlex","requirements":"v0.0.0-20191202100458-e7afc7fbc510","kind":"runtime","optional":false},{"id":1948970081,"ecosystem":"go","package_name":"github.com/gorilla/websocket","requirements":"v1.5.3","kind":"runtime","optional":false},{"id":1948970082,"ecosystem":"go","package_name":"github.com/hashicorp/go-version","requirements":"v1.8.0","kind":"runtime","optional":false},{"id":1948970083,"ecosystem":"go","package_name":"github.com/hinshun/vt10x","requirements":"v0.0.0-20220119200601-820417d04eec","kind":"runtime","optional":false},{"id":1948970084,"ecosystem":"go","package_name":"github.com/in-toto/attestation","requirements":"v1.1.2","kind":"runtime","optional":false},{"id":1948970085,"ecosystem":"go","package_name":"github.com/joho/godotenv","requirements":"v1.5.1","kind":"runtime","optional":false},{"id":1948970086,"ecosystem":"go","package_name":"github.com/kballard/go-shellquote","requirements":"v0.0.0-20180428030007-95032a82bc51","kind":"runtime","optional":false},{"id":1948970087,"ecosystem":"go","package_name":"github.com/mattn/go-colorable","requirements":"v0.1.14","kind":"runtime","optional":false},{"id":1948970088,"ecosystem":"go","package_name":"github.com/mattn/go-isatty","requirements":"v0.0.20","kind":"runtime","optional":false},{"id":1948970089,"ecosystem":"go","package_name":"github.com/mgutz/ansi","requirements":"v0.0.0-20200706080929-d51e80ef957d","kind":"runtime","optional":false},{"id":1948970107,"ecosystem":"go","package_name":"github.com/microsoft/dev-tunnels","requirements":"v0.1.19","kind":"runtime","optional":false},{"id":1948970191,"ecosystem":"go","package_name":"github.com/muhammadmuzzammil1998/jsonc","requirements":"v1.0.0","kind":"runtime","optional":false},{"id":1948970192,"ecosystem":"go","package_name":"github.com/opentracing/opentracing-go","requirements":"v1.2.0","kind":"runtime","optional":false},{"id":1948970193,"ecosystem":"go","package_name":"github.com/rivo/tview","requirements":"v0.42.0","kind":"runtime","optional":false},{"id":1948970194,"ecosystem":"go","package_name":"github.com/shurcooL/githubv4","requirements":"v0.0.0-20240727222349-48295856cce7","kind":"runtime","optional":false},{"id":1948970195,"ecosystem":"go","package_name":"github.com/sigstore/protobuf-specs","requirements":"v0.5.0","kind":"runtime","optional":false},{"id":1948970196,"ecosystem":"go","package_name":"github.com/sigstore/sigstore-go","requirements":"v1.1.4","kind":"runtime","optional":false},{"id":1948970197,"ecosystem":"go","package_name":"github.com/spf13/cobra","requirements":"v1.10.2","kind":"runtime","optional":false},{"id":1948970198,"ecosystem":"go","package_name":"github.com/spf13/pflag","requirements":"v1.0.10","kind":"runtime","optional":false},{"id":1948970199,"ecosystem":"go","package_name":"github.com/stretchr/testify","requirements":"v1.11.1","kind":"runtime","optional":false},{"id":1948970200,"ecosystem":"go","package_name":"github.com/theupdateframework/go-tuf/v2","requirements":"v2.4.1","kind":"runtime","optional":false},{"id":1948970201,"ecosystem":"go","package_name":"github.com/vmihailenco/msgpack/v5","requirements":"v5.4.1","kind":"runtime","optional":false},{"id":1948970202,"ecosystem":"go","package_name":"github.com/yuin/goldmark","requirements":"v1.7.16","kind":"runtime","optional":false},{"id":1948970204,"ecosystem":"go","package_name":"github.com/zalando/go-keyring","requirements":"v0.2.6","kind":"runtime","optional":false},{"id":1948970212,"ecosystem":"go","package_name":"golang.org/x/crypto","requirements":"v0.48.0","kind":"runtime","optional":false},{"id":1948970214,"ecosystem":"go","package_name":"golang.org/x/sync","requirements":"v0.20.0","kind":"runtime","optional":false},{"id":1948970216,"ecosystem":"go","package_name":"golang.org/x/term","requirements":"v0.40.0","kind":"runtime","optional":false},{"id":1948970218,"ecosystem":"go","package_name":"golang.org/x/text","requirements":"v0.34.0","kind":"runtime","optional":false},{"id":1948970219,"ecosystem":"go","package_name":"google.golang.org/grpc","requirements":"v1.79.2","kind":"runtime","optional":false},{"id":1948970221,"ecosystem":"go","package_name":"google.golang.org/protobuf","requirements":"v1.36.11","kind":"runtime","optional":false},{"id":1948970223,"ecosystem":"go","package_name":"gopkg.in/h2non/gock.v1","requirements":"v1.1.2","kind":"runtime","optional":false},{"id":1948970227,"ecosystem":"go","package_name":"gopkg.in/yaml.v3","requirements":"v3.0.1","kind":"runtime","optional":false},{"id":1948970229,"ecosystem":"go","package_name":"al.essio.dev/pkg/shellescape","requirements":"v1.6.0","kind":"runtime","optional":false},{"id":1948970231,"ecosystem":"go","package_name":"dario.cat/mergo","requirements":"v1.0.2","kind":"runtime","optional":false},{"id":1948970232,"ecosystem":"go","package_name":"github.com/Masterminds/goutils","requirements":"v1.1.1","kind":"runtime","optional":false},{"id":1948970238,"ecosystem":"go","package_name":"github.com/Masterminds/semver/v3","requirements":"v3.4.0","kind":"runtime","optional":false},{"id":1948970240,"ecosystem":"go","package_name":"github.com/Masterminds/sprig/v3","requirements":"v3.3.0","kind":"runtime","optional":false},{"id":1948970247,"ecosystem":"go","package_name":"github.com/alecthomas/chroma/v2","requirements":"v2.19.0","kind":"runtime","optional":false},{"id":1948970252,"ecosystem":"go","package_name":"github.com/asaskevich/govalidator","requirements":"v0.0.0-20230301143203-a9d515a09cc2","kind":"runtime","optional":false},{"id":1948970254,"ecosystem":"go","package_name":"github.com/aymanbagabas/go-osc52/v2","requirements":"v2.0.1","kind":"runtime","optional":false},{"id":1948970256,"ecosystem":"go","package_name":"github.com/aymerick/douceur","requirements":"v0.2.0","kind":"runtime","optional":false},{"id":1948970258,"ecosystem":"go","package_name":"github.com/blang/semver","requirements":"v3.5.1+incompatible","kind":"runtime","optional":false},{"id":1948970261,"ecosystem":"go","package_name":"github.com/catppuccin/go","requirements":"v0.3.0","kind":"runtime","optional":false},{"id":1948970269,"ecosystem":"go","package_name":"github.com/cespare/xxhash/v2","requirements":"v2.3.0","kind":"runtime","optional":false},{"id":1948970271,"ecosystem":"go","package_name":"github.com/charmbracelet/bubbles","requirements":"v0.21.1-0.20250623103423-23b8fd6302d7","kind":"runtime","optional":false},{"id":1948970280,"ecosystem":"go","package_name":"github.com/charmbracelet/bubbletea","requirements":"v1.3.10","kind":"runtime","optional":false},{"id":1948970282,"ecosystem":"go","package_name":"github.com/charmbracelet/colorprofile","requirements":"v0.3.1","kind":"runtime","optional":false},{"id":1948970327,"ecosystem":"go","package_name":"github.com/charmbracelet/x/ansi","requirements":"v0.10.2","kind":"runtime","optional":false},{"id":1948970328,"ecosystem":"go","package_name":"github.com/charmbracelet/x/cellbuf","requirements":"v0.0.13","kind":"runtime","optional":false},{"id":1948970329,"ecosystem":"go","package_name":"github.com/charmbracelet/x/exp/slice","requirements":"v0.0.0-20250630141444-821143405392","kind":"runtime","optional":false},{"id":1948970330,"ecosystem":"go","package_name":"github.com/charmbracelet/x/exp/strings","requirements":"v0.0.0-20250630141444-821143405392","kind":"runtime","optional":false},{"id":1948970331,"ecosystem":"go","package_name":"github.com/charmbracelet/x/term","requirements":"v0.2.1","kind":"runtime","optional":false},{"id":1948970332,"ecosystem":"go","package_name":"github.com/cli/browser","requirements":"v1.3.0","kind":"runtime","optional":false},{"id":1948970433,"ecosystem":"go","package_name":"github.com/cli/shurcooL-graphql","requirements":"v0.0.4","kind":"runtime","optional":false},{"id":1948970434,"ecosystem":"go","package_name":"github.com/containerd/stargz-snapshotter/estargz","requirements":"v0.18.1","kind":"runtime","optional":false},{"id":1948970435,"ecosystem":"go","package_name":"github.com/cyberphone/json-canonicalization","requirements":"v0.0.0-20241213102144-19d51d7fe467","kind":"runtime","optional":false},{"id":1948970436,"ecosystem":"go","package_name":"github.com/danieljoos/wincred","requirements":"v1.2.2","kind":"runtime","optional":false},{"id":1948970437,"ecosystem":"go","package_name":"github.com/davecgh/go-spew","requirements":"v1.1.2-0.20180830191138-d8f796af33cc","kind":"runtime","optional":false},{"id":1948970438,"ecosystem":"go","package_name":"github.com/digitorus/pkcs7","requirements":"v0.0.0-20230818184609-3a137a874352","kind":"runtime","optional":false},{"id":1948970439,"ecosystem":"go","package_name":"github.com/dlclark/regexp2","requirements":"v1.11.5","kind":"runtime","optional":false},{"id":1948970440,"ecosystem":"go","package_name":"github.com/docker/cli","requirements":"v29.2.0+incompatible","kind":"runtime","optional":false},{"id":1948970441,"ecosystem":"go","package_name":"github.com/docker/distribution","requirements":"v2.8.3+incompatible","kind":"runtime","optional":false},{"id":1948970442,"ecosystem":"go","package_name":"github.com/docker/docker-credential-helpers","requirements":"v0.9.3","kind":"runtime","optional":false},{"id":1948970443,"ecosystem":"go","package_name":"github.com/dustin/go-humanize","requirements":"v1.0.1","kind":"runtime","optional":false},{"id":1948970444,"ecosystem":"go","package_name":"github.com/erikgeiser/coninput","requirements":"v0.0.0-20211004153227-1c3628e74d0f","kind":"runtime","optional":false},{"id":1948970445,"ecosystem":"go","package_name":"github.com/fatih/color","requirements":"v1.18.0","kind":"runtime","optional":false},{"id":1948970446,"ecosystem":"go","package_name":"github.com/gdamore/encoding","requirements":"v1.0.1","kind":"runtime","optional":false},{"id":1948970447,"ecosystem":"go","package_name":"github.com/go-logr/logr","requirements":"v1.4.3","kind":"runtime","optional":false},{"id":1948970448,"ecosystem":"go","package_name":"github.com/go-logr/stdr","requirements":"v1.2.2","kind":"runtime","optional":false},{"id":1948970449,"ecosystem":"go","package_name":"github.com/go-openapi/analysis","requirements":"v0.24.1","kind":"runtime","optional":false},{"id":1948970450,"ecosystem":"go","package_name":"github.com/go-openapi/errors","requirements":"v0.22.6","kind":"runtime","optional":false},{"id":1948970451,"ecosystem":"go","package_name":"github.com/go-openapi/jsonpointer","requirements":"v0.22.4","kind":"runtime","optional":false},{"id":1948970452,"ecosystem":"go","package_name":"github.com/go-openapi/jsonreference","requirements":"v0.21.4","kind":"runtime","optional":false},{"id":1948970453,"ecosystem":"go","package_name":"github.com/go-openapi/loads","requirements":"v0.23.2","kind":"runtime","optional":false},{"id":1948970454,"ecosystem":"go","package_name":"github.com/go-openapi/runtime","requirements":"v0.29.2","kind":"runtime","optional":false},{"id":1948970457,"ecosystem":"go","package_name":"github.com/go-openapi/spec","requirements":"v0.22.3","kind":"runtime","optional":false},{"id":1948970467,"ecosystem":"go","package_name":"github.com/go-openapi/strfmt","requirements":"v0.25.0","kind":"runtime","optional":false},{"id":1948971085,"ecosystem":"go","package_name":"github.com/go-openapi/swag","requirements":"v0.25.4","kind":"runtime","optional":false},{"id":1948971091,"ecosystem":"go","package_name":"github.com/go-openapi/swag/cmdutils","requirements":"v0.25.4","kind":"runtime","optional":false},{"id":1948971159,"ecosystem":"go","package_name":"github.com/go-openapi/swag/conv","requirements":"v0.25.4","kind":"runtime","optional":false},{"id":1948971160,"ecosystem":"go","package_name":"github.com/go-openapi/swag/fileutils","requirements":"v0.25.4","kind":"runtime","optional":false},{"id":1948971161,"ecosystem":"go","package_name":"github.com/go-openapi/swag/jsonname","requirements":"v0.25.4","kind":"runtime","optional":false},{"id":1948971162,"ecosystem":"go","package_name":"github.com/go-openapi/swag/jsonutils","requirements":"v0.25.4","kind":"runtime","optional":false},{"id":1948971163,"ecosystem":"go","package_name":"github.com/go-openapi/swag/loading","requirements":"v0.25.4","kind":"runtime","optional":false},{"id":1948971164,"ecosystem":"go","package_name":"github.com/go-openapi/swag/mangling","requirements":"v0.25.4","kind":"runtime","optional":false},{"id":1948971165,"ecosystem":"go","package_name":"github.com/go-openapi/swag/netutils","requirements":"v0.25.4","kind":"runtime","optional":false},{"id":1948971166,"ecosystem":"go","package_name":"github.com/go-openapi/swag/stringutils","requirements":"v0.25.4","kind":"runtime","optional":false},{"id":1948971167,"ecosystem":"go","package_name":"github.com/go-openapi/swag/typeutils","requirements":"v0.25.4","kind":"runtime","optional":false},{"id":1948971168,"ecosystem":"go","package_name":"github.com/go-openapi/swag/yamlutils","requirements":"v0.25.4","kind":"runtime","optional":false},{"id":1948971169,"ecosystem":"go","package_name":"github.com/go-openapi/validate","requirements":"v0.25.1","kind":"runtime","optional":false},{"id":1948971170,"ecosystem":"go","package_name":"github.com/go-viper/mapstructure/v2","requirements":"v2.4.0","kind":"runtime","optional":false},{"id":1948971171,"ecosystem":"go","package_name":"github.com/godbus/dbus/v5","requirements":"v5.1.0","kind":"runtime","optional":false},{"id":1948971172,"ecosystem":"go","package_name":"github.com/google/certificate-transparency-go","requirements":"v1.3.2","kind":"runtime","optional":false},{"id":1948971173,"ecosystem":"go","package_name":"github.com/google/uuid","requirements":"v1.6.0","kind":"runtime","optional":false},{"id":1948971174,"ecosystem":"go","package_name":"github.com/gorilla/css","requirements":"v1.0.1","kind":"runtime","optional":false},{"id":1948971175,"ecosystem":"go","package_name":"github.com/grpc-ecosystem/grpc-gateway/v2","requirements":"v2.27.3","kind":"runtime","optional":false},{"id":1948971176,"ecosystem":"go","package_name":"github.com/h2non/parth","requirements":"v0.0.0-20190131123155-b4df798d6542","kind":"runtime","optional":false},{"id":1948971177,"ecosystem":"go","package_name":"github.com/henvic/httpretty","requirements":"v0.1.4","kind":"runtime","optional":false},{"id":1948971178,"ecosystem":"go","package_name":"github.com/huandu/xstrings","requirements":"v1.5.0","kind":"runtime","optional":false},{"id":1948971179,"ecosystem":"go","package_name":"github.com/in-toto/in-toto-golang","requirements":"v0.9.0","kind":"runtime","optional":false},{"id":1948971191,"ecosystem":"go","package_name":"github.com/inconshreveable/mousetrap","requirements":"v1.1.0","kind":"runtime","optional":false},{"id":1948971194,"ecosystem":"go","package_name":"github.com/itchyny/gojq","requirements":"v0.12.17","kind":"runtime","optional":false},{"id":1948971235,"ecosystem":"go","package_name":"github.com/itchyny/timefmt-go","requirements":"v0.1.6","kind":"runtime","optional":false},{"id":1948971246,"ecosystem":"go","package_name":"github.com/jedisct1/go-minisign","requirements":"v0.0.0-20241212093149-d2f9f49435c7","kind":"runtime","optional":false},{"id":1948971272,"ecosystem":"go","package_name":"github.com/klauspost/compress","requirements":"v1.18.1","kind":"runtime","optional":false},{"id":1948971274,"ecosystem":"go","package_name":"github.com/lucasb-eyer/go-colorful","requirements":"v1.3.0","kind":"runtime","optional":false},{"id":1948971278,"ecosystem":"go","package_name":"github.com/mattn/go-localereader","requirements":"v0.0.1","kind":"runtime","optional":false},{"id":1948971281,"ecosystem":"go","package_name":"github.com/mattn/go-runewidth","requirements":"v0.0.17","kind":"runtime","optional":false},{"id":1948971284,"ecosystem":"go","package_name":"github.com/microcosm-cc/bluemonday","requirements":"v1.0.27","kind":"runtime","optional":false},{"id":1948971287,"ecosystem":"go","package_name":"github.com/mitchellh/copystructure","requirements":"v1.2.0","kind":"runtime","optional":false},{"id":1948971290,"ecosystem":"go","package_name":"github.com/mitchellh/go-homedir","requirements":"v1.1.0","kind":"runtime","optional":false},{"id":1948971291,"ecosystem":"go","package_name":"github.com/mitchellh/hashstructure/v2","requirements":"v2.0.2","kind":"runtime","optional":false},{"id":1948971292,"ecosystem":"go","package_name":"github.com/mitchellh/reflectwalk","requirements":"v1.0.2","kind":"runtime","optional":false},{"id":1948971293,"ecosystem":"go","package_name":"github.com/muesli/ansi","requirements":"v0.0.0-20230316100256-276c6243b2f6","kind":"runtime","optional":false},{"id":1948971294,"ecosystem":"go","package_name":"github.com/muesli/cancelreader","requirements":"v0.2.2","kind":"runtime","optional":false},{"id":1948971295,"ecosystem":"go","package_name":"github.com/muesli/reflow","requirements":"v0.3.0","kind":"runtime","optional":false},{"id":1948971296,"ecosystem":"go","package_name":"github.com/muesli/termenv","requirements":"v0.16.0","kind":"runtime","optional":false},{"id":1948971297,"ecosystem":"go","package_name":"github.com/oklog/ulid","requirements":"v1.3.1","kind":"runtime","optional":false},{"id":1948971298,"ecosystem":"go","package_name":"github.com/opencontainers/go-digest","requirements":"v1.0.0","kind":"runtime","optional":false},{"id":1948971299,"ecosystem":"go","package_name":"github.com/opencontainers/image-spec","requirements":"v1.1.1","kind":"runtime","optional":false},{"id":1948971300,"ecosystem":"go","package_name":"github.com/pkg/errors","requirements":"v0.9.1","kind":"runtime","optional":false},{"id":1948971301,"ecosystem":"go","package_name":"github.com/pmezard/go-difflib","requirements":"v1.0.1-0.20181226105442-5d4384ee4fb2","kind":"runtime","optional":false},{"id":1948971302,"ecosystem":"go","package_name":"github.com/rivo/uniseg","requirements":"v0.4.7","kind":"runtime","optional":false},{"id":1948971303,"ecosystem":"go","package_name":"github.com/rodaine/table","requirements":"v1.3.0","kind":"runtime","optional":false},{"id":1948971304,"ecosystem":"go","package_name":"github.com/russross/blackfriday/v2","requirements":"v2.1.0","kind":"runtime","optional":false},{"id":1948971305,"ecosystem":"go","package_name":"github.com/secure-systems-lab/go-securesystemslib","requirements":"v0.10.0","kind":"runtime","optional":false},{"id":1948971306,"ecosystem":"go","package_name":"github.com/shibumi/go-pathspec","requirements":"v1.3.0","kind":"runtime","optional":false},{"id":1948971312,"ecosystem":"go","package_name":"github.com/shopspring/decimal","requirements":"v1.4.0","kind":"runtime","optional":false},{"id":1948971318,"ecosystem":"go","package_name":"github.com/shurcooL/graphql","requirements":"v0.0.0-20230722043721-ed46e5a46466","kind":"runtime","optional":false},{"id":1948971327,"ecosystem":"go","package_name":"github.com/sigstore/rekor","requirements":"v1.5.0","kind":"runtime","optional":false},{"id":1948971357,"ecosystem":"go","package_name":"github.com/sigstore/rekor-tiles/v2","requirements":"v2.0.1","kind":"runtime","optional":false},{"id":1948971362,"ecosystem":"go","package_name":"github.com/sigstore/sigstore","requirements":"v1.10.4","kind":"runtime","optional":false},{"id":1948971366,"ecosystem":"go","package_name":"github.com/sigstore/timestamp-authority/v2","requirements":"v2.0.3","kind":"runtime","optional":false},{"id":1948971378,"ecosystem":"go","package_name":"github.com/sirupsen/logrus","requirements":"v1.9.3","kind":"runtime","optional":false},{"id":1948971379,"ecosystem":"go","package_name":"github.com/spf13/cast","requirements":"v1.10.0","kind":"runtime","optional":false},{"id":1948971380,"ecosystem":"go","package_name":"github.com/stretchr/objx","requirements":"v0.5.2","kind":"runtime","optional":false},{"id":1948971381,"ecosystem":"go","package_name":"github.com/thlib/go-timezone-local","requirements":"v0.0.6","kind":"runtime","optional":false},{"id":1948971392,"ecosystem":"go","package_name":"github.com/transparency-dev/formats","requirements":"v0.0.0-20251017110053-404c0d5b696c","kind":"runtime","optional":false},{"id":1948971412,"ecosystem":"go","package_name":"github.com/transparency-dev/merkle","requirements":"v0.0.2","kind":"runtime","optional":false},{"id":1948971418,"ecosystem":"go","package_name":"github.com/vbatts/tar-split","requirements":"v0.12.2","kind":"runtime","optional":false},{"id":1948971420,"ecosystem":"go","package_name":"github.com/vmihailenco/tagparser/v2","requirements":"v2.0.0","kind":"runtime","optional":false},{"id":1948971421,"ecosystem":"go","package_name":"github.com/xo/terminfo","requirements":"v0.0.0-20220910002029-abceb7e1c41e","kind":"runtime","optional":false},{"id":1948971422,"ecosystem":"go","package_name":"github.com/yuin/goldmark-emoji","requirements":"v1.0.6","kind":"runtime","optional":false},{"id":1948971423,"ecosystem":"go","package_name":"go.mongodb.org/mongo-driver","requirements":"v1.17.6","kind":"runtime","optional":false},{"id":1948971424,"ecosystem":"go","package_name":"go.opentelemetry.io/auto/sdk","requirements":"v1.2.1","kind":"runtime","optional":false},{"id":1948971425,"ecosystem":"go","package_name":"go.opentelemetry.io/otel","requirements":"v1.39.0","kind":"runtime","optional":false},{"id":1948971426,"ecosystem":"go","package_name":"go.opentelemetry.io/otel/metric","requirements":"v1.39.0","kind":"runtime","optional":false},{"id":1948971427,"ecosystem":"go","package_name":"go.opentelemetry.io/otel/trace","requirements":"v1.39.0","kind":"runtime","optional":false},{"id":1948971428,"ecosystem":"go","package_name":"go.yaml.in/yaml/v3","requirements":"v3.0.4","kind":"runtime","optional":false},{"id":1948971429,"ecosystem":"go","package_name":"golang.org/x/mod","requirements":"v0.32.0","kind":"runtime","optional":false},{"id":1948971430,"ecosystem":"go","package_name":"golang.org/x/net","requirements":"v0.49.0","kind":"runtime","optional":false},{"id":1948971431,"ecosystem":"go","package_name":"golang.org/x/sys","requirements":"v0.41.0","kind":"runtime","optional":false},{"id":1948971432,"ecosystem":"go","package_name":"golang.org/x/tools","requirements":"v0.41.0","kind":"runtime","optional":false},{"id":1948971433,"ecosystem":"go","package_name":"google.golang.org/genproto/googleapis/api","requirements":"v0.0.0-20251202230838-ff82c1b0f217","kind":"runtime","optional":false},{"id":1948971434,"ecosystem":"go","package_name":"google.golang.org/genproto/googleapis/rpc","requirements":"v0.0.0-20251222181119-0a764e51fe1b","kind":"runtime","optional":false}],"advisories":[{"uuid":"GSA_kwCzR0hTQS1tbTI3LW13cTktZnI1Z84AB9VU","identifiers":["GHSA-mm27-mwq9-fr5g","CVE-2026-64655"],"url":"https://github.com/advisories/GHSA-mm27-mwq9-fr5g","title":"GitHub CLI allows attestation verification bypass through unescaped regex metacharacters","severity":"LOW","affected":true,"fixed":false,"fixed_versions":["2.97.0"]},{"uuid":"GSA_kwCzR0hTQS00ZmpnLTJoNHEtZndnM84AB9VT","identifiers":["GHSA-4fjg-2h4q-fwg3","CVE-2026-64653"],"url":"https://github.com/advisories/GHSA-4fjg-2h4q-fwg3","title":"GitHub CLI allows path traversal through unescaped request URL components","severity":"LOW","affected":true,"fixed":false,"fixed_versions":["2.97.0"]},{"uuid":"GSA_kwCzR0hTQS1jZzZyLW1wZ2MtaDltbc4AB9VS","identifiers":["GHSA-cg6r-mpgc-h9mm","CVE-2026-64652"],"url":"https://github.com/advisories/GHSA-cg6r-mpgc-h9mm","title":"GitHub CLI partially discloses authentication tokens in `gh auth status` output","severity":"LOW","affected":true,"fixed":false,"fixed_versions":["2.97.0"]},{"uuid":"GSA_kwCzR0hTQS04eHZwLTdoajYtbWNqOc4ABXuP","identifiers":["GHSA-8xvp-7hj6-mcj9","CVE-2026-48501"],"url":"https://github.com/advisories/GHSA-8xvp-7hj6-mcj9","title":"GitHub CLI has an incorrect authorization header in API requests to TUF repository mirrors via `gh attestation`, `gh release verify`, and `gh release verify-asset` commands","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":["2.93.0"]},{"uuid":"GSA_kwCzR0hTQS1jcmMzLWg4djYtcWg1N84ABXHe","identifiers":["GHSA-crc3-h8v6-qh57","CVE-2026-45803"],"url":"https://github.com/advisories/GHSA-crc3-h8v6-qh57","title":"GitHub CLI: GitHub Actions log output in `gh run view` allows terminal escape sequence injection","severity":"LOW","affected":true,"fixed":false,"fixed_versions":["2.92.0"]}],"package_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcli%2Fcli%2Fv2"}