informed-decision/docs/evidence/2026-10-11-zlib-remediation-candidate/artifact-comparison.json
tegwick 9b4bb25d32
All checks were successful
Publish exact zlib-only remediation candidate / publish-candidate (push) Successful in 13s
Prepare independently reviewed zlib-only image candidate
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade
2026-10-11 11:36:02 +02:00

75 lines
2.9 KiB
JSON

{
"base_image_config_id": "sha256:f34de21379c4f50ea0361ca1d8296c8e72f989499ad288016b81204997ae4779",
"candidate_local_image_config_id": "sha256:625d066416e901eaa2db5e18b96c37559b25dd91bdc3afb3d1ff5e916c7a8a3f",
"candidate_registry_digest": null,
"base_layers_preserved": 9,
"new_layers": 2,
"effective_runtime_config_identical": true,
"raw_config_bytes_identical": false,
"serialization_note": "Legacy base explicitly serialized empty/false/null defaults; candidate Docker-save config omits equivalent known defaults. Exact closed default normalization only; runtime fields unchanged.",
"labels_before": {
"org.opencontainers.image.base.digest": "sha256:7f5c6cb29c9f70a026bfe30e72934274ddc69261676cf6d476f81dd32812d173",
"org.opencontainers.image.revision": "3e4bcb26f8eeaa8c64345c565477b5ac8ccbb168",
"social.coulomb.release.scope": "INFD-WP-0009-T04/purpose-overlay-v1",
"social.coulomb.source.policy.sha256": "9d7c1be4cb6199d14ef0aaead5f85951f45b0ccbd7c800a7fde922a253566b62"
},
"labels_after": {
"org.opencontainers.image.base.digest": "sha256:763c36402c8be7cc4c1bd1a61623d1aff9116d52241877425b45a7018cc0883a",
"org.opencontainers.image.revision": "uncommitted-T05-local-preparation",
"social.coulomb.release.scope": "INFD-WP-0009-T05/zlib-85091-r1",
"social.coulomb.source.context.sha256": "c554e62a84af340cba15d469a4568f6d0c40923e580b08ed7565e22702b1207d",
"social.coulomb.source.policy.sha256": "9d7c1be4cb6199d14ef0aaead5f85951f45b0ccbd7c800a7fde922a253566b62"
},
"final_changed_files": {
"lib/apk/db/installed": {
"before": [
"file",
420,
0,
0,
"6383ea3806247e8dbf9ebee8cb30eb8eca63a8ea59662a793127d6a61b988d70"
],
"after": [
"file",
420,
0,
0,
"f590762196710e25c0e9f72da0642cad8a5dcba0aa9e58a0cbaa65684d15c001"
]
},
"usr/lib/libz.so.1.3.2": {
"before": [
"file",
493,
0,
0,
"a1e2c03dcdedba98a06a00cadfb67a0e0b1cd93986860ec0c5ce66e789c44e57"
],
"after": [
"file",
493,
0,
0,
"ecc8b9dfc45eb7fa29b410ffaca6257873890de53b80fe91735737b49067c5f2"
]
}
},
"directory_metadata_compared": true,
"directory_count_base": 313,
"directory_count_candidate": 313,
"directory_metadata_delta": {},
"sbom_package_count_base": 44,
"sbom_package_count_candidate": 44,
"sbom_only_delta": {
"zlib": [
"1.3.2-r0",
"1.3.2-r1"
]
},
"full_scan_baseline_findings": 1,
"full_scan_candidate_allseverity_findings": 0,
"db_snapshot_same": true,
"native_workload_changed": false,
"candidate_docker_daemon_image_id": "sha256:78bfdcc00a62367ae6190f6569a02b18abf9a943f760e4ac8fb946703348af31",
"candidate_local_image_config_id_kind": "Docker-save OCI export config SHA; distinct from legacy daemon imageID; closed default serialization differs."
}