🤖 [TPIP] Automated report updates

[grasci-arm]

Third-party IP report updates
Automated Changes:

• Updated third party licenses report

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 12 package(s) with unknown licenses.

See the Details below.

Snapshot Warnings

⚠️: The number of snapshots compared for the base SHA (0) and the head SHA (1) do not match. You may see unexpected additions in the diff.

Re-running this action after a short time may resolve the issue. See the documentation for more information and troubleshooting advice.

License Issues

go.mod

Package	Version	License	Issue Type
github.com/creack/pty	v1.1.24	Null	Unknown License
github.com/davecgh/go-spew	v1.1.1	Null	Unknown License
github.com/hashicorp/go-version	v1.9.0	Null	Unknown License
github.com/otiai10/copy	v1.14.1	Null	Unknown License
github.com/pmezard/go-difflib	v1.0.0	Null	Unknown License
github.com/sirupsen/logrus	v1.9.4	Null	Unknown License
github.com/spf13/cobra	v1.10.2	Null	Unknown License
github.com/spf13/pflag	v1.0.10	Null	Unknown License
github.com/stretchr/testify	v1.11.1	Null	Unknown License
golang.org/x/crypto	v0.52.0	Null	Unknown License
golang.org/x/sys	v0.45.0	Null	Unknown License
gopkg.in/yaml.v3	v3.0.1	Null	Unknown License

OpenSSF Scorecard

Scorecard details

Package	Version	Score	Details
gomod/github.com/aymanbagabas/go-pty	v0.2.3	🟢 4.1	Details Check Score Reason Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Maintained 🟢 8 10 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 8 Code-Review 🟢 5 Found 1/2 approved changesets -- score normalized to 5 Binary-Artifacts 🟢 10 no binaries found in the repo Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Packaging ⚠️ -1 packaging workflow not detected Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found Branch-Protection ⚠️ 0 branch protection not enabled on development/release branches Security-Policy ⚠️ 0 security policy file not detected SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0
gomod/github.com/creack/pty	v1.1.24	Unknown	Unknown
gomod/github.com/davecgh/go-spew	v1.1.1	Unknown	Unknown
gomod/github.com/hashicorp/go-version	v1.9.0	Unknown	Unknown
gomod/github.com/otiai10/copy	v1.14.1	Unknown	Unknown
gomod/github.com/pmezard/go-difflib	v1.0.0	Unknown	Unknown
gomod/github.com/sirupsen/logrus	v1.9.4	Unknown	Unknown
gomod/github.com/spf13/cobra	v1.10.2	Unknown	Unknown
gomod/github.com/spf13/pflag	v1.0.10	Unknown	Unknown
gomod/github.com/stretchr/testify	v1.11.1	Unknown	Unknown
gomod/github.com/u-root/u-root	v0.16.0	🟢 7.4	Details Check Score Reason Code-Review 🟢 10 all changesets reviewed Security-Policy 🟢 4 security policy file detected Maintained 🟢 10 30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected CII-Best-Practices ⚠️ 2 badge detected: InProgress License 🟢 10 license file detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Signed-Releases ⚠️ -1 no releases found Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md Fuzzing 🟢 10 project is fuzzed Packaging 🟢 10 packaging workflow detected SAST 🟢 10 SAST tool is run on all commits Binary-Artifacts 🟢 9 binaries present in source code Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0
gomod/golang.org/x/crypto	v0.52.0	Unknown	Unknown
gomod/golang.org/x/sync	v0.18.0	Unknown	Unknown
gomod/golang.org/x/sys	v0.45.0	Unknown	Unknown
gomod/golang.org/x/term	v0.43.0	Unknown	Unknown
gomod/gopkg.in/yaml.v3	v3.0.1	Unknown	Unknown

Scanned Files

• go.mod