informed-decision/docs/evidence/2026-10-11-purpose-image-release/security-summary.json
tegwick e0359bcb6c Prepare purpose image release with bounded custody protocol and owner reviews
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade
2026-10-11 03:54:35 +02:00

35 lines
1.2 KiB
JSON

{
"image": "forgejo.coulomb.social/coulomb/informed-decision@sha256:763c36402c8be7cc4c1bd1a61623d1aff9116d52241877425b45a7018cc0883a",
"source_revision": "3e4bcb26f8eeaa8c64345c565477b5ac8ccbb168",
"scanner": "aquasec/trivy@sha256:62b1e65e8869bc4b4c6aa4fa2b21595256c7c2f6018a9d9ad61caf87187c1969",
"version": "0.74.0",
"db_metadata": {
"Version": 2,
"NextUpdate": "2026-10-11T18:59:50.889010572Z",
"UpdatedAt": "2026-10-10T18:59:50.889010923Z",
"DownloadedAt": "2026-10-10T23:32:32.380033131Z"
},
"suppression": false,
"ignore_unfixed": false,
"severity_filter": null,
"package_count": 44,
"findings_by_severity": {
"MEDIUM": 1
},
"findings": [
{
"id": "CVE-2026-85091",
"package": "zlib",
"installed": "1.3.2-r0",
"fixed": "1.3.2-r1",
"severity": "MEDIUM"
}
],
"coverage_limits": [
"Alpine3.24 absent scanner EOL list; OS detector ran against Alpine3.24 repository on38OS packages",
"Known findings asof pinnedDB, not claim absence of unknown vulnerabilities"
],
"high_critical": 0,
"same_scanner_actual_base_scan_findings_identical": true,
"base_scan_file": "base-trivy-full.json"
}