Prepare independently reviewed zlib-only image candidate
All checks were successful
Publish exact zlib-only remediation candidate / publish-candidate (push) Successful in 13s

Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade
This commit is contained in:
tegwick 2026-10-11 11:36:02 +02:00
parent f0f89b6d1d
commit 9b4bb25d32
154 changed files with 29358 additions and 1 deletions

View file

@ -0,0 +1,5 @@
*
!.dockerignore
!Containerfile
!zlib-1.3.2-r1.apk
!APKINDEX.tar.gz

Binary file not shown.

View file

@ -0,0 +1,17 @@
FROM forgejo.coulomb.social/coulomb/informed-decision@sha256:763c36402c8be7cc4c1bd1a61623d1aff9116d52241877425b45a7018cc0883a
ARG SOURCE_REVISION=uncommitted-T05-local-preparation
ARG SOURCE_CONTEXT_SHA256
USER 0:0
COPY zlib-1.3.2-r1.apk APKINDEX.tar.gz /tmp/infd-zlib/x86_64/
RUN echo '63aeea03c15a2f9018f81805cfc8aa926bdf5cd68921f22149c2fbb5d0ee9f47 /tmp/infd-zlib/x86_64/zlib-1.3.2-r1.apk' | sha256sum -c - \
&& echo '24fc2ccb08f3125429a38b31bd6c76a7b394c6236df0975760dc8259e50dfbd5 /tmp/infd-zlib/x86_64/APKINDEX.tar.gz' | sha256sum -c - \
&& apk verify /tmp/infd-zlib/x86_64/zlib-1.3.2-r1.apk /tmp/infd-zlib/x86_64/APKINDEX.tar.gz \
&& apk upgrade --no-logfile --no-network --no-cache --no-preupgrade --repositories-file /dev/null --repository /tmp/infd-zlib zlib \
&& apk info --exists 'zlib=1.3.2-r1' \
&& rm -rf /tmp/infd-zlib
USER 10001:10001
LABEL org.opencontainers.image.revision="$SOURCE_REVISION" \
org.opencontainers.image.base.digest="sha256:763c36402c8be7cc4c1bd1a61623d1aff9116d52241877425b45a7018cc0883a" \
social.coulomb.source.context.sha256="$SOURCE_CONTEXT_SHA256" \
social.coulomb.source.policy.sha256="9d7c1be4cb6199d14ef0aaead5f85951f45b0ccbd7c800a7fde922a253566b62" \
social.coulomb.release.scope="INFD-WP-0009-T05/zlib-85091-r1"

View file

@ -0,0 +1,15 @@
{
"files": {
".dockerignore": "ce3fa53cfe2c963c7fec4f2333a8af84a40740f144605a5aea795bcd6ac9eb8a",
"Containerfile": "5e4d9b39e37fed95d729503deb0e9c414ae63d2779b02306beaadc94675d4f15",
"zlib-1.3.2-r1.apk": "63aeea03c15a2f9018f81805cfc8aa926bdf5cd68921f22149c2fbb5d0ee9f47",
"APKINDEX.tar.gz": "24fc2ccb08f3125429a38b31bd6c76a7b394c6236df0975760dc8259e50dfbd5"
},
"context_sha256": "c554e62a84af340cba15d469a4568f6d0c40923e580b08ed7565e22702b1207d",
"base_image": "forgejo.coulomb.social/coulomb/informed-decision@sha256:763c36402c8be7cc4c1bd1a61623d1aff9116d52241877425b45a7018cc0883a",
"package_url": "https://dl-cdn.alpinelinux.org/alpine/v3.24/main/x86_64/zlib-1.3.2-r1.apk",
"index_url": "https://dl-cdn.alpinelinux.org/alpine/v3.24/main/x86_64/APKINDEX.tar.gz",
"package_commit": "0afa2da0e8c8051c6f8f64a7a388e5a259904245",
"package_signature": "alpine-devel@lists.alpinelinux.org-6165ee59.rsa.pub",
"status": "prepared-unpublished-unapproved"
}

Binary file not shown.