coulomb/informed-decision
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
informed-decision/docs/evidence/2026-10-11-purpose-image-release/sbom.cdx.json
tegwick e0359bcb6c Prepare purpose image release with bounded custody protocol and owner reviews 
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade
2026-10-11 03:54:35 +02:00

2560 lines
73 KiB
JSON
Raw Blame History

{
"$schema": "http://cyclonedx.org/schema/bom-1.7.schema.json",
"bomFormat": "CycloneDX",
"specVersion": "1.7",
"serialNumber": "urn:uuid:3eaaa94b-5129-41f3-82f2-f8f58ac5239a",
"version": 1,
"metadata": {
"timestamp": "2026-10-11T01:22:33+00:00",
"tools": {
"components": [
{
"type": "application",
"manufacturer": {
"name": "Aqua Security Software Ltd."
},
"group": "aquasecurity",
"name": "trivy",
"version": "0.74.0"
}
]
},
"component": {
"bom-ref": "pkg:oci/informed-decision@sha256:763c36402c8be7cc4c1bd1a61623d1aff9116d52241877425b45a7018cc0883a?arch=amd64&repository_url=forgejo.coulomb.social%2Fcoulomb%2Finformed-decision",
"type": "container",
"name": "forgejo.coulomb.social/coulomb/informed-decision@sha256:763c36402c8be7cc4c1bd1a61623d1aff9116d52241877425b45a7018cc0883a",
"purl": "pkg:oci/informed-decision@sha256:763c36402c8be7cc4c1bd1a61623d1aff9116d52241877425b45a7018cc0883a?arch=amd64&repository_url=forgejo.coulomb.social%2Fcoulomb%2Finformed-decision",
"properties": [
{
"name": "aquasecurity:trivy:DiffID",
"value": "sha256:21ff9188cb29ca95fe9be11355f70ab5586e8499e33b52a253d953fb3b75aea3"
},
{
"name": "aquasecurity:trivy:DiffID",
"value": "sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c"
},
{
"name": "aquasecurity:trivy:DiffID",
"value": "sha256:361430a1113969743b99e237b20f023d5497493bcf96fb91af99ac0a0dbc4a59"
},
{
"name": "aquasecurity:trivy:DiffID",
"value": "sha256:3ca4be2c6e9ac0223715355253725381000486c2b45bfcb22cf571b6a85a12dd"
},
{
"name": "aquasecurity:trivy:DiffID",
"value": "sha256:4098ad033525263f92a8a9c51865596025d47018e078c0b1f7d9cd5663fc1ffe"
},
{
"name": "aquasecurity:trivy:DiffID",
"value": "sha256:648451a0dda84ad04681e32b5ecc7cd5d3a4f0ad84f783e9598d72bc69620d5c"
},
{
"name": "aquasecurity:trivy:DiffID",
"value": "sha256:cfc5939674d67f60b4411c24dfcde5622b712eeb7376cd0941a2751da80a6b02"
},
{
"name": "aquasecurity:trivy:DiffID",
"value": "sha256:e5ccda0fbf6b54d343e024156d876553ba57d3926d7196584b3a1ce4df016366"
},
{
"name": "aquasecurity:trivy:DiffID",
"value": "sha256:f9b4a8a412a0c07a489e46fb5db41f9d0dc84d4ec38a4e2c6ab9531f44e0d9f1"
},
{
"name": "aquasecurity:trivy:ImageID",
"value": "sha256:f34de21379c4f50ea0361ca1d8296c8e72f989499ad288016b81204997ae4779"
},
{
"name": "aquasecurity:trivy:Labels:org.opencontainers.image.base.digest",
"value": "sha256:7f5c6cb29c9f70a026bfe30e72934274ddc69261676cf6d476f81dd32812d173"
},
{
"name": "aquasecurity:trivy:Labels:org.opencontainers.image.revision",
"value": "3e4bcb26f8eeaa8c64345c565477b5ac8ccbb168"
},
{
"name": "aquasecurity:trivy:Labels:social.coulomb.release.scope",
"value": "INFD-WP-0009-T04/purpose-overlay-v1"
},
{
"name": "aquasecurity:trivy:Labels:social.coulomb.source.policy.sha256",
"value": "9d7c1be4cb6199d14ef0aaead5f85951f45b0ccbd7c800a7fde922a253566b62"
},
{
"name": "aquasecurity:trivy:Reference",
"value": "forgejo.coulomb.social/coulomb/informed-decision@sha256:763c36402c8be7cc4c1bd1a61623d1aff9116d52241877425b45a7018cc0883a"
},
{
"name": "aquasecurity:trivy:RepoDigest",
"value": "forgejo.coulomb.social/coulomb/informed-decision@sha256:763c36402c8be7cc4c1bd1a61623d1aff9116d52241877425b45a7018cc0883a"
},
{
"name": "aquasecurity:trivy:SchemaVersion",
"value": "2"
},
{
"name": "aquasecurity:trivy:Size",
"value": "88258048"
}
]
}
},
"components": [
{
"bom-ref": "5b71299e-3c0c-4c4f-bd29-865fb14e1758",
"type": "operating-system",
"name": "alpine",
"version": "3.24.1",
"properties": [
{
"name": "aquasecurity:trivy:Class",
"value": "os-pkgs"
},
{
"name": "aquasecurity:trivy:Type",
"value": "alpine"
}
]
},
{
"bom-ref": "pkg:apk/alpine/.python-rundeps@20260901.001029?arch=noarch&distro=3.24.1",
"type": "library",
"name": ".python-rundeps",
"version": "20260901.001029",
"hashes": [
{
"alg": "SHA-1",
"content": "51d0c1e7d88a414345799f0309185c625013ef32"
}
],
"purl": "pkg:apk/alpine/.python-rundeps@20260901.001029?arch=noarch&distro=3.24.1",
"properties": [
{
"name": "aquasecurity:trivy:LayerDiffID",
"value": "sha256:e5ccda0fbf6b54d343e024156d876553ba57d3926d7196584b3a1ce4df016366"
},
{
"name": "aquasecurity:trivy:LayerDigest",
"value": "sha256:2014fd3d47b2c2dd4dedc765822ac60ae269f3efa0e614f46ae29f540c7f1235"
},
{
"name": "aquasecurity:trivy:PkgID",
"value": ".python-rundeps@20260901.001029"
},
{
"name": "aquasecurity:trivy:PkgType",
"value": "alpine"
}
]
},
{
"bom-ref": "pkg:apk/alpine/alpine-baselayout-data@3.7.2-r1?arch=x86_64&distro=3.24.1",
"type": "library",
"supplier": {
"name": "Natanael Copa <ncopa@alpinelinux.org>"
},
"name": "alpine-baselayout-data",
"version": "3.7.2-r1",
"hashes": [
{
"alg": "SHA-1",
"content": "c6f9bded17d844b6f1b0bb5766d2c35c0d5c8508"
}
],
"licenses": [
{
"license": {
"id": "GPL-2.0-only"
}
}
],
"purl": "pkg:apk/alpine/alpine-baselayout-data@3.7.2-r1?arch=x86_64&distro=3.24.1",
"properties": [
{
"name": "aquasecurity:trivy:LayerDiffID",
"value": "sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c"
},
{
"name": "aquasecurity:trivy:LayerDigest",
"value": "sha256:55afa1ecc21d2bb5e5045f32dafee56272ffd89860bac26f6c32123439af26a4"
},
{
"name": "aquasecurity:trivy:PkgID",
"value": "alpine-baselayout-data@3.7.2-r1"
},
{
"name": "aquasecurity:trivy:PkgType",
"value": "alpine"
},
{
"name": "aquasecurity:trivy:SrcName",
"value": "alpine-baselayout"
},
{
"name": "aquasecurity:trivy:SrcVersion",
"value": "3.7.2-r1"
}
]
},
{
"bom-ref": "pkg:apk/alpine/alpine-baselayout@3.7.2-r1?arch=x86_64&distro=3.24.1",
"type": "library",
"supplier": {
"name": "Natanael Copa <ncopa@alpinelinux.org>"
},
"name": "alpine-baselayout",
"version": "3.7.2-r1",
"hashes": [
{
"alg": "SHA-1",
"content": "f0fcfdc2f4da058af6473bc45c4eab62916225b2"
}
],
"licenses": [
{
"license": {
"id": "GPL-2.0-only"
}
}
],
"purl": "pkg:apk/alpine/alpine-baselayout@3.7.2-r1?arch=x86_64&distro=3.24.1",
"properties": [
{
"name": "aquasecurity:trivy:LayerDiffID",
"value": "sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c"
},
{
"name": "aquasecurity:trivy:LayerDigest",
"value": "sha256:55afa1ecc21d2bb5e5045f32dafee56272ffd89860bac26f6c32123439af26a4"
},
{
"name": "aquasecurity:trivy:PkgID",
"value": "alpine-baselayout@3.7.2-r1"
},
{
"name": "aquasecurity:trivy:PkgType",
"value": "alpine"
},
{
"name": "aquasecurity:trivy:SrcName",
"value": "alpine-baselayout"
},
{
"name": "aquasecurity:trivy:SrcVersion",
"value": "3.7.2-r1"
}
]
},
{
"bom-ref": "pkg:apk/alpine/alpine-keys@2.6-r0?arch=x86_64&distro=3.24.1",
"type": "library",
"supplier": {
"name": "Natanael Copa <ncopa@alpinelinux.org>"
},
"name": "alpine-keys",
"version": "2.6-r0",
"hashes": [
{
"alg": "SHA-1",
"content": "d8d6b80e53c059a77e4915da78ba964f3ffea240"
}
],
"licenses": [
{
"license": {
"id": "MIT"
}
}
],
"purl": "pkg:apk/alpine/alpine-keys@2.6-r0?arch=x86_64&distro=3.24.1",
"properties": [
{
"name": "aquasecurity:trivy:LayerDiffID",
"value": "sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c"
},
{
"name": "aquasecurity:trivy:LayerDigest",
"value": "sha256:55afa1ecc21d2bb5e5045f32dafee56272ffd89860bac26f6c32123439af26a4"
},
{
"name": "aquasecurity:trivy:PkgID",
"value": "alpine-keys@2.6-r0"
},
{
"name": "aquasecurity:trivy:PkgType",
"value": "alpine"
},
{
"name": "aquasecurity:trivy:SrcName",
"value": "alpine-keys"
},
{
"name": "aquasecurity:trivy:SrcVersion",
"value": "2.6-r0"
}
]
},
{
"bom-ref": "pkg:apk/alpine/alpine-release@3.24.1-r0?arch=x86_64&distro=3.24.1",
"type": "library",
"supplier": {
"name": "Natanael Copa <ncopa@alpinelinux.org>"
},
"name": "alpine-release",
"version": "3.24.1-r0",
"hashes": [
{
"alg": "SHA-1",
"content": "bc6912a25cdc7733e0035ed509eceaa4026946e3"
}
],
"licenses": [
{
"license": {
"id": "MIT"
}
}
],
"purl": "pkg:apk/alpine/alpine-release@3.24.1-r0?arch=x86_64&distro=3.24.1",
"properties": [
{
"name": "aquasecurity:trivy:LayerDiffID",
"value": "sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c"
},
{
"name": "aquasecurity:trivy:LayerDigest",
"value": "sha256:55afa1ecc21d2bb5e5045f32dafee56272ffd89860bac26f6c32123439af26a4"
},
{
"name": "aquasecurity:trivy:PkgID",
"value": "alpine-release@3.24.1-r0"
},
{
"name": "aquasecurity:trivy:PkgType",
"value": "alpine"
},
{
"name": "aquasecurity:trivy:SrcName",
"value": "alpine-base"
},
{
"name": "aquasecurity:trivy:SrcVersion",
"value": "3.24.1-r0"
}
]
},
{
"bom-ref": "pkg:apk/alpine/apk-tools@3.0.6-r0?arch=x86_64&distro=3.24.1",
"type": "library",
"supplier": {
"name": "Natanael Copa <ncopa@alpinelinux.org>"
},
"name": "apk-tools",
"version": "3.0.6-r0",
"hashes": [
{
"alg": "SHA-1",
"content": "043333589798a1f52e09ae63f026c6c8fa676d34"
}
],
"licenses": [
{
"license": {
"id": "GPL-2.0-only"
}
}
],
"purl": "pkg:apk/alpine/apk-tools@3.0.6-r0?arch=x86_64&distro=3.24.1",
"properties": [
{
"name": "aquasecurity:trivy:LayerDiffID",
"value": "sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c"
},
{
"name": "aquasecurity:trivy:LayerDigest",
"value": "sha256:55afa1ecc21d2bb5e5045f32dafee56272ffd89860bac26f6c32123439af26a4"
},
{
"name": "aquasecurity:trivy:PkgID",
"value": "apk-tools@3.0.6-r0"
},
{
"name": "aquasecurity:trivy:PkgType",
"value": "alpine"
},
{
"name": "aquasecurity:trivy:SrcName",
"value": "apk-tools"
},
{
"name": "aquasecurity:trivy:SrcVersion",
"value": "3.0.6-r0"
}
]
},
{
"bom-ref": "pkg:apk/alpine/busybox-binsh@1.37.0-r31?arch=x86_64&distro=3.24.1",
"type": "library",
"supplier": {
"name": "Sören Tempel <soeren+alpine@soeren-tempel.net>"
},
"name": "busybox-binsh",
"version": "1.37.0-r31",
"hashes": [
{
"alg": "SHA-1",
"content": "5cbd14acc6f1804c5bac6c77dc2c492f010b0fc7"
}
],
"licenses": [
{
"license": {
"id": "GPL-2.0-only"
}
}
],
"purl": "pkg:apk/alpine/busybox-binsh@1.37.0-r31?arch=x86_64&distro=3.24.1",
"properties": [
{
"name": "aquasecurity:trivy:LayerDiffID",
"value": "sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c"
},
{
"name": "aquasecurity:trivy:LayerDigest",
"value": "sha256:55afa1ecc21d2bb5e5045f32dafee56272ffd89860bac26f6c32123439af26a4"
},
{
"name": "aquasecurity:trivy:PkgID",
"value": "busybox-binsh@1.37.0-r31"
},
{
"name": "aquasecurity:trivy:PkgType",
"value": "alpine"
},
{
"name": "aquasecurity:trivy:SrcName",
"value": "busybox"
},
{
"name": "aquasecurity:trivy:SrcVersion",
"value": "1.37.0-r31"
}
]
},
{
"bom-ref": "pkg:apk/alpine/busybox@1.37.0-r31?arch=x86_64&distro=3.24.1",
"type": "library",
"supplier": {
"name": "Sören Tempel <soeren+alpine@soeren-tempel.net>"
},
"name": "busybox",
"version": "1.37.0-r31",
"hashes": [
{
"alg": "SHA-1",
"content": "b5405ebc02f7dd8be95b6265c54b243d5456ab8f"
}
],
"licenses": [
{
"license": {
"id": "GPL-2.0-only"
}
}
],
"purl": "pkg:apk/alpine/busybox@1.37.0-r31?arch=x86_64&distro=3.24.1",
"properties": [
{
"name": "aquasecurity:trivy:LayerDiffID",
"value": "sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c"
},
{
"name": "aquasecurity:trivy:LayerDigest",
"value": "sha256:55afa1ecc21d2bb5e5045f32dafee56272ffd89860bac26f6c32123439af26a4"
},
{
"name": "aquasecurity:trivy:PkgID",
"value": "busybox@1.37.0-r31"
},
{
"name": "aquasecurity:trivy:PkgType",
"value": "alpine"
},
{
"name": "aquasecurity:trivy:SrcName",
"value": "busybox"
},
{
"name": "aquasecurity:trivy:SrcVersion",
"value": "1.37.0-r31"
}
]
},
{
"bom-ref": "pkg:apk/alpine/ca-certificates-bundle@20260611-r0?arch=x86_64&distro=3.24.1",
"type": "library",
"supplier": {
"name": "Natanael Copa <ncopa@alpinelinux.org>"
},
"name": "ca-certificates-bundle",
"version": "20260611-r0",
"hashes": [
{
"alg": "SHA-1",
"content": "c9534a03750bdfae341f10969016090fc11febbd"
}
],
"licenses": [
{
"license": {
"id": "MPL-2.0"
}
},
{
"license": {
"id": "MIT"
}
}
],
"purl": "pkg:apk/alpine/ca-certificates-bundle@20260611-r0?arch=x86_64&distro=3.24.1",
"properties": [
{
"name": "aquasecurity:trivy:LayerDiffID",
"value": "sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c"
},
{
"name": "aquasecurity:trivy:LayerDigest",
"value": "sha256:55afa1ecc21d2bb5e5045f32dafee56272ffd89860bac26f6c32123439af26a4"
},
{
"name": "aquasecurity:trivy:PkgID",
"value": "ca-certificates-bundle@20260611-r0"
},
{
"name": "aquasecurity:trivy:PkgType",
"value": "alpine"
},
{
"name": "aquasecurity:trivy:SrcName",
"value": "ca-certificates"
},
{
"name": "aquasecurity:trivy:SrcVersion",
"value": "20260611-r0"
}
]
},
{
"bom-ref": "pkg:apk/alpine/ca-certificates@20260611-r0?arch=x86_64&distro=3.24.1",
"type": "library",
"supplier": {
"name": "Natanael Copa <ncopa@alpinelinux.org>"
},
"name": "ca-certificates",
"version": "20260611-r0",
"hashes": [
{
"alg": "SHA-1",
"content": "8f2a04abeb54b331e2970a0a0dffb7bd6bdde567"
}
],
"licenses": [
{
"license": {
"id": "MPL-2.0"
}
},
{
"license": {
"id": "MIT"
}
}
],
"purl": "pkg:apk/alpine/ca-certificates@20260611-r0?arch=x86_64&distro=3.24.1",
"properties": [
{
"name": "aquasecurity:trivy:LayerDiffID",
"value": "sha256:3ca4be2c6e9ac0223715355253725381000486c2b45bfcb22cf571b6a85a12dd"
},
{
"name": "aquasecurity:trivy:LayerDigest",
"value": "sha256:47393b668ce535d06e8967917d424c177e2ecccae83856d48b2e99164f8cc6cb"
},
{
"name": "aquasecurity:trivy:PkgID",
"value": "ca-certificates@20260611-r0"
},
{
"name": "aquasecurity:trivy:PkgType",
"value": "alpine"
},
{
"name": "aquasecurity:trivy:SrcName",
"value": "ca-certificates"
},
{
"name": "aquasecurity:trivy:SrcVersion",
"value": "20260611-r0"
}
]
},
{
"bom-ref": "pkg:apk/alpine/gdbm@1.26-r0?arch=x86_64&distro=3.24.1",
"type": "library",
"supplier": {
"name": "Natanael Copa <ncopa@alpinelinux.org>"
},
"name": "gdbm",
"version": "1.26-r0",
"hashes": [
{
"alg": "SHA-1",
"content": "619493d8124fe49a8ee1d8f7a1372cf7e3977337"
}
],
"licenses": [
{
"license": {
"id": "GPL-3.0-or-later"
}
}
],
"purl": "pkg:apk/alpine/gdbm@1.26-r0?arch=x86_64&distro=3.24.1",
"properties": [
{
"name": "aquasecurity:trivy:LayerDiffID",
"value": "sha256:e5ccda0fbf6b54d343e024156d876553ba57d3926d7196584b3a1ce4df016366"
},
{
"name": "aquasecurity:trivy:LayerDigest",
"value": "sha256:2014fd3d47b2c2dd4dedc765822ac60ae269f3efa0e614f46ae29f540c7f1235"
},
{
"name": "aquasecurity:trivy:PkgID",
"value": "gdbm@1.26-r0"
},
{
"name": "aquasecurity:trivy:PkgType",
"value": "alpine"
},
{
"name": "aquasecurity:trivy:SrcName",
"value": "gdbm"
},
{
"name": "aquasecurity:trivy:SrcVersion",
"value": "1.26-r0"
}
]
},
{
"bom-ref": "pkg:apk/alpine/keyutils-libs@1.6.3-r4?arch=x86_64&distro=3.24.1",
"type": "library",
"supplier": {
"name": "Natanael Copa <ncopa@alpinelinux.org>"
},
"name": "keyutils-libs",
"version": "1.6.3-r4",
"hashes": [
{
"alg": "SHA-1",
"content": "b7331c96f077fc3522ee4361a441d1097204cd90"
}
],
"licenses": [
{
"license": {
"id": "GPL-2.0-or-later"
}
},
{
"license": {
"id": "LGPL-2.0-or-later"
}
}
],
"purl": "pkg:apk/alpine/keyutils-libs@1.6.3-r4?arch=x86_64&distro=3.24.1",
"properties": [
{
"name": "aquasecurity:trivy:LayerDiffID",
"value": "sha256:e5ccda0fbf6b54d343e024156d876553ba57d3926d7196584b3a1ce4df016366"
},
{
"name": "aquasecurity:trivy:LayerDigest",
"value": "sha256:2014fd3d47b2c2dd4dedc765822ac60ae269f3efa0e614f46ae29f540c7f1235"
},
{
"name": "aquasecurity:trivy:PkgID",
"value": "keyutils-libs@1.6.3-r4"
},
{
"name": "aquasecurity:trivy:PkgType",
"value": "alpine"
},
{
"name": "aquasecurity:trivy:SrcName",
"value": "keyutils"
},
{
"name": "aquasecurity:trivy:SrcVersion",
"value": "1.6.3-r4"
}
]
},
{
"bom-ref": "pkg:apk/alpine/krb5-conf@1.0-r2?arch=x86_64&distro=3.24.1",
"type": "library",
"supplier": {
"name": "Natanael Copa <ncopa@alpinelinux.org>"
},
"name": "krb5-conf",
"version": "1.0-r2",
"hashes": [
{
"alg": "SHA-1",
"content": "40a11e0690a59e110367b62a80661024e9942a2d"
}
],
"licenses": [
{
"license": {
"id": "MIT"
}
}
],
"purl": "pkg:apk/alpine/krb5-conf@1.0-r2?arch=x86_64&distro=3.24.1",
"properties": [
{
"name": "aquasecurity:trivy:LayerDiffID",
"value": "sha256:e5ccda0fbf6b54d343e024156d876553ba57d3926d7196584b3a1ce4df016366"
},
{
"name": "aquasecurity:trivy:LayerDigest",
"value": "sha256:2014fd3d47b2c2dd4dedc765822ac60ae269f3efa0e614f46ae29f540c7f1235"
},
{
"name": "aquasecurity:trivy:PkgID",
"value": "krb5-conf@1.0-r2"
},
{
"name": "aquasecurity:trivy:PkgType",
"value": "alpine"
},
{
"name": "aquasecurity:trivy:SrcName",
"value": "krb5-conf"
},
{
"name": "aquasecurity:trivy:SrcVersion",
"value": "1.0-r2"
}
]
},
{
"bom-ref": "pkg:apk/alpine/krb5-libs@1.22.2-r1?arch=x86_64&distro=3.24.1",
"type": "library",
"supplier": {
"name": "Natanael Copa <ncopa@alpinelinux.org>"
},
"name": "krb5-libs",
"version": "1.22.2-r1",
"hashes": [
{
"alg": "SHA-1",
"content": "ef02346e21b817ff379e4601e5b1fc9760e5e31a"
}
],
"licenses": [
{
"license": {
"id": "MIT"
}
}
],
"purl": "pkg:apk/alpine/krb5-libs@1.22.2-r1?arch=x86_64&distro=3.24.1",
"properties": [
{
"name": "aquasecurity:trivy:LayerDiffID",
"value": "sha256:e5ccda0fbf6b54d343e024156d876553ba57d3926d7196584b3a1ce4df016366"
},
{
"name": "aquasecurity:trivy:LayerDigest",
"value": "sha256:2014fd3d47b2c2dd4dedc765822ac60ae269f3efa0e614f46ae29f540c7f1235"
},
{
"name": "aquasecurity:trivy:PkgID",
"value": "krb5-libs@1.22.2-r1"
},
{
"name": "aquasecurity:trivy:PkgType",
"value": "alpine"
},
{
"name": "aquasecurity:trivy:SrcName",
"value": "krb5"
},
{
"name": "aquasecurity:trivy:SrcVersion",
"value": "1.22.2-r1"
}
]
},
{
"bom-ref": "pkg:apk/alpine/libapk@3.0.6-r0?arch=x86_64&distro=3.24.1",
"type": "library",
"supplier": {
"name": "Natanael Copa <ncopa@alpinelinux.org>"
},
"name": "libapk",
"version": "3.0.6-r0",
"hashes": [
{
"alg": "SHA-1",
"content": "523a8f58104589f74f743d501c81bf6517155378"
}
],
"licenses": [
{
"license": {
"id": "GPL-2.0-only"
}
}
],
"purl": "pkg:apk/alpine/libapk@3.0.6-r0?arch=x86_64&distro=3.24.1",
"properties": [
{
"name": "aquasecurity:trivy:LayerDiffID",
"value": "sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c"
},
{
"name": "aquasecurity:trivy:LayerDigest",
"value": "sha256:55afa1ecc21d2bb5e5045f32dafee56272ffd89860bac26f6c32123439af26a4"
},
{
"name": "aquasecurity:trivy:PkgID",
"value": "libapk@3.0.6-r0"
},
{
"name": "aquasecurity:trivy:PkgType",
"value": "alpine"
},
{
"name": "aquasecurity:trivy:SrcName",
"value": "apk-tools"
},
{
"name": "aquasecurity:trivy:SrcVersion",
"value": "3.0.6-r0"
}
]
},
{
"bom-ref": "pkg:apk/alpine/libbz2@1.0.8-r6?arch=x86_64&distro=3.24.1",
"type": "library",
"supplier": {
"name": "Natanael Copa <ncopa@alpinelinux.org>"
},
"name": "libbz2",
"version": "1.0.8-r6",
"hashes": [
{
"alg": "SHA-1",
"content": "08566ba5c7af97c25474be8b24e8b48f0116b67d"
}
],
"licenses": [
{
"license": {
"name": "bzip-2-1.0.6"
}
}
],
"purl": "pkg:apk/alpine/libbz2@1.0.8-r6?arch=x86_64&distro=3.24.1",
"properties": [
{
"name": "aquasecurity:trivy:LayerDiffID",
"value": "sha256:e5ccda0fbf6b54d343e024156d876553ba57d3926d7196584b3a1ce4df016366"
},
{
"name": "aquasecurity:trivy:LayerDigest",
"value": "sha256:2014fd3d47b2c2dd4dedc765822ac60ae269f3efa0e614f46ae29f540c7f1235"
},
{
"name": "aquasecurity:trivy:PkgID",
"value": "libbz2@1.0.8-r6"
},
{
"name": "aquasecurity:trivy:PkgType",
"value": "alpine"
},
{
"name": "aquasecurity:trivy:SrcName",
"value": "bzip2"
},
{
"name": "aquasecurity:trivy:SrcVersion",
"value": "1.0.8-r6"
}
]
},
{
"bom-ref": "pkg:apk/alpine/libcom_err@1.47.4-r0?arch=x86_64&distro=3.24.1",
"type": "library",
"supplier": {
"name": "Natanael Copa <ncopa@alpinelinux.org>"
},
"name": "libcom_err",
"version": "1.47.4-r0",
"hashes": [
{
"alg": "SHA-1",
"content": "4b9fb5899ea0b1c0cfbb2a2c5952704437d4ecef"
}
],
"licenses": [
{
"license": {
"id": "GPL-2.0-or-later"
}
},
{
"license": {
"id": "LGPL-2.0-or-later"
}
},
{
"license": {
"id": "BSD-3-Clause"
}
},
{
"license": {
"id": "MIT"
}
}
],
"purl": "pkg:apk/alpine/libcom_err@1.47.4-r0?arch=x86_64&distro=3.24.1",
"properties": [
{
"name": "aquasecurity:trivy:LayerDiffID",
"value": "sha256:e5ccda0fbf6b54d343e024156d876553ba57d3926d7196584b3a1ce4df016366"
},
{
"name": "aquasecurity:trivy:LayerDigest",
"value": "sha256:2014fd3d47b2c2dd4dedc765822ac60ae269f3efa0e614f46ae29f540c7f1235"
},
{
"name": "aquasecurity:trivy:PkgID",
"value": "libcom_err@1.47.4-r0"
},
{
"name": "aquasecurity:trivy:PkgType",
"value": "alpine"
},
{
"name": "aquasecurity:trivy:SrcName",
"value": "e2fsprogs"
},
{
"name": "aquasecurity:trivy:SrcVersion",
"value": "1.47.4-r0"
}
]
},
{
"bom-ref": "pkg:apk/alpine/libcrypto3@3.5.8-r0?arch=x86_64&distro=3.24.1",
"type": "library",
"supplier": {
"name": "Natanael Copa <ncopa@alpinelinux.org>"
},
"name": "libcrypto3",
"version": "3.5.8-r0",
"hashes": [
{
"alg": "SHA-1",
"content": "1b3b9fc0c136f4936932bcb2ec21499f0ae5dfd3"
}
],
"licenses": [
{
"license": {
"id": "Apache-2.0"
}
}
],
"purl": "pkg:apk/alpine/libcrypto3@3.5.8-r0?arch=x86_64&distro=3.24.1",
"properties": [
{
"name": "aquasecurity:trivy:LayerDiffID",
"value": "sha256:e5ccda0fbf6b54d343e024156d876553ba57d3926d7196584b3a1ce4df016366"
},
{
"name": "aquasecurity:trivy:LayerDigest",
"value": "sha256:2014fd3d47b2c2dd4dedc765822ac60ae269f3efa0e614f46ae29f540c7f1235"
},
{
"name": "aquasecurity:trivy:PkgID",
"value": "libcrypto3@3.5.8-r0"
},
{
"name": "aquasecurity:trivy:PkgType",
"value": "alpine"
},
{
"name": "aquasecurity:trivy:SrcName",
"value": "openssl"
},
{
"name": "aquasecurity:trivy:SrcVersion",
"value": "3.5.8-r0"
}
]
},
{
"bom-ref": "pkg:apk/alpine/libffi@3.5.2-r1?arch=x86_64&distro=3.24.1",
"type": "library",
"supplier": {
"name": "Natanael Copa <ncopa@alpinelinux.org>"
},
"name": "libffi",
"version": "3.5.2-r1",
"hashes": [
{
"alg": "SHA-1",
"content": "2f7b261f7fcecc4eebd8b330e7f6fb80713bfe3a"
}
],
"licenses": [
{
"license": {
"id": "MIT"
}
}
],
"purl": "pkg:apk/alpine/libffi@3.5.2-r1?arch=x86_64&distro=3.24.1",
"properties": [
{
"name": "aquasecurity:trivy:LayerDiffID",
"value": "sha256:e5ccda0fbf6b54d343e024156d876553ba57d3926d7196584b3a1ce4df016366"
},
{
"name": "aquasecurity:trivy:LayerDigest",
"value": "sha256:2014fd3d47b2c2dd4dedc765822ac60ae269f3efa0e614f46ae29f540c7f1235"
},
{
"name": "aquasecurity:trivy:PkgID",
"value": "libffi@3.5.2-r1"
},
{
"name": "aquasecurity:trivy:PkgType",
"value": "alpine"
},
{
"name": "aquasecurity:trivy:SrcName",
"value": "libffi"
},
{
"name": "aquasecurity:trivy:SrcVersion",
"value": "3.5.2-r1"
}
]
},
{
"bom-ref": "pkg:apk/alpine/libintl@1.0-r0?arch=x86_64&distro=3.24.1",
"type": "library",
"supplier": {
"name": "Carlo Landmeter <clandmeter@alpinelinux.org>"
},
"name": "libintl",
"version": "1.0-r0",
"hashes": [
{
"alg": "SHA-1",
"content": "282d6642ccac87237e43a864159d73cf5abe7550"
}
],
"licenses": [
{
"license": {
"id": "LGPL-2.1-or-later"
}
}
],
"purl": "pkg:apk/alpine/libintl@1.0-r0?arch=x86_64&distro=3.24.1",
"properties": [
{
"name": "aquasecurity:trivy:LayerDiffID",
"value": "sha256:e5ccda0fbf6b54d343e024156d876553ba57d3926d7196584b3a1ce4df016366"
},
{
"name": "aquasecurity:trivy:LayerDigest",
"value": "sha256:2014fd3d47b2c2dd4dedc765822ac60ae269f3efa0e614f46ae29f540c7f1235"
},
{
"name": "aquasecurity:trivy:PkgID",
"value": "libintl@1.0-r0"
},
{
"name": "aquasecurity:trivy:PkgType",
"value": "alpine"
},
{
"name": "aquasecurity:trivy:SrcName",
"value": "gettext"
},
{
"name": "aquasecurity:trivy:SrcVersion",
"value": "1.0-r0"
}
]
},
{
"bom-ref": "pkg:apk/alpine/libncursesw@6.6_p20260516-r0?arch=x86_64&distro=3.24.1",
"type": "library",
"supplier": {
"name": "Milan P. Stanić <mps@arvanta.net>"
},
"name": "libncursesw",
"version": "6.6_p20260516-r0",
"hashes": [
{
"alg": "SHA-1",
"content": "9f318e6e324d6827274829194cf6ac6afbaded12"
}
],
"licenses": [
{
"license": {
"name": "X-11"
}
}
],
"purl": "pkg:apk/alpine/libncursesw@6.6_p20260516-r0?arch=x86_64&distro=3.24.1",
"properties": [
{
"name": "aquasecurity:trivy:LayerDiffID",
"value": "sha256:e5ccda0fbf6b54d343e024156d876553ba57d3926d7196584b3a1ce4df016366"
},
{
"name": "aquasecurity:trivy:LayerDigest",
"value": "sha256:2014fd3d47b2c2dd4dedc765822ac60ae269f3efa0e614f46ae29f540c7f1235"
},
{
"name": "aquasecurity:trivy:PkgID",
"value": "libncursesw@6.6_p20260516-r0"
},
{
"name": "aquasecurity:trivy:PkgType",
"value": "alpine"
},
{
"name": "aquasecurity:trivy:SrcName",
"value": "ncurses"
},
{
"name": "aquasecurity:trivy:SrcVersion",
"value": "6.6_p20260516-r0"
}
]
},
{
"bom-ref": "pkg:apk/alpine/libnsl@2.0.1-r2?arch=x86_64&distro=3.24.1",
"type": "library",
"name": "libnsl",
"version": "2.0.1-r2",
"hashes": [
{
"alg": "SHA-1",
"content": "5194adbf26560b52be318481a7af294ab05fd795"
}
],
"licenses": [
{
"license": {
"id": "LGPL-2.0-or-later"
}
}
],
"purl": "pkg:apk/alpine/libnsl@2.0.1-r2?arch=x86_64&distro=3.24.1",
"properties": [
{
"name": "aquasecurity:trivy:LayerDiffID",
"value": "sha256:e5ccda0fbf6b54d343e024156d876553ba57d3926d7196584b3a1ce4df016366"
},
{
"name": "aquasecurity:trivy:LayerDigest",
"value": "sha256:2014fd3d47b2c2dd4dedc765822ac60ae269f3efa0e614f46ae29f540c7f1235"
},
{
"name": "aquasecurity:trivy:PkgID",
"value": "libnsl@2.0.1-r2"
},
{
"name": "aquasecurity:trivy:PkgType",
"value": "alpine"
},
{
"name": "aquasecurity:trivy:SrcName",
"value": "libnsl"
},
{
"name": "aquasecurity:trivy:SrcVersion",
"value": "2.0.1-r2"
}
]
},
{
"bom-ref": "pkg:apk/alpine/libpanelw@6.6_p20260516-r0?arch=x86_64&distro=3.24.1",
"type": "library",
"supplier": {
"name": "Milan P. Stanić <mps@arvanta.net>"
},
"name": "libpanelw",
"version": "6.6_p20260516-r0",
"hashes": [
{
"alg": "SHA-1",
"content": "149bdc434232ed11fc5bb975ba519a07154a6f56"
}
],
"licenses": [
{
"license": {
"name": "X-11"
}
}
],
"purl": "pkg:apk/alpine/libpanelw@6.6_p20260516-r0?arch=x86_64&distro=3.24.1",
"properties": [
{
"name": "aquasecurity:trivy:LayerDiffID",
"value": "sha256:e5ccda0fbf6b54d343e024156d876553ba57d3926d7196584b3a1ce4df016366"
},
{
"name": "aquasecurity:trivy:LayerDigest",
"value": "sha256:2014fd3d47b2c2dd4dedc765822ac60ae269f3efa0e614f46ae29f540c7f1235"
},
{
"name": "aquasecurity:trivy:PkgID",
"value": "libpanelw@6.6_p20260516-r0"
},
{
"name": "aquasecurity:trivy:PkgType",
"value": "alpine"
},
{
"name": "aquasecurity:trivy:SrcName",
"value": "ncurses"
},
{
"name": "aquasecurity:trivy:SrcVersion",
"value": "6.6_p20260516-r0"
}
]
},
{
"bom-ref": "pkg:apk/alpine/libssl3@3.5.8-r0?arch=x86_64&distro=3.24.1",
"type": "library",
"supplier": {
"name": "Natanael Copa <ncopa@alpinelinux.org>"
},
"name": "libssl3",
"version": "3.5.8-r0",
"hashes": [
{
"alg": "SHA-1",
"content": "5f9b1e55d821953d2e2b1db322dad70a3b5041ea"
}
],
"licenses": [
{
"license": {
"id": "Apache-2.0"
}
}
],
"purl": "pkg:apk/alpine/libssl3@3.5.8-r0?arch=x86_64&distro=3.24.1",
"properties": [
{
"name": "aquasecurity:trivy:LayerDiffID",
"value": "sha256:e5ccda0fbf6b54d343e024156d876553ba57d3926d7196584b3a1ce4df016366"
},
{
"name": "aquasecurity:trivy:LayerDigest",
"value": "sha256:2014fd3d47b2c2dd4dedc765822ac60ae269f3efa0e614f46ae29f540c7f1235"
},
{
"name": "aquasecurity:trivy:PkgID",
"value": "libssl3@3.5.8-r0"
},
{
"name": "aquasecurity:trivy:PkgType",
"value": "alpine"
},
{
"name": "aquasecurity:trivy:SrcName",
"value": "openssl"
},
{
"name": "aquasecurity:trivy:SrcVersion",
"value": "3.5.8-r0"
}
]
},
{
"bom-ref": "pkg:apk/alpine/libtirpc-conf@1.3.5-r1?arch=x86_64&distro=3.24.1",
"type": "library",
"supplier": {
"name": "Natanael Copa <ncopa@alpinelinux.org>"
},
"name": "libtirpc-conf",
"version": "1.3.5-r1",
"hashes": [
{
"alg": "SHA-1",
"content": "0c17d9988dc986c90e22f79778df047eca9973ff"
}
],
"licenses": [
{
"license": {
"id": "BSD-3-Clause"
}
}
],
"purl": "pkg:apk/alpine/libtirpc-conf@1.3.5-r1?arch=x86_64&distro=3.24.1",
"properties": [
{
"name": "aquasecurity:trivy:LayerDiffID",
"value": "sha256:e5ccda0fbf6b54d343e024156d876553ba57d3926d7196584b3a1ce4df016366"
},
{
"name": "aquasecurity:trivy:LayerDigest",
"value": "sha256:2014fd3d47b2c2dd4dedc765822ac60ae269f3efa0e614f46ae29f540c7f1235"
},
{
"name": "aquasecurity:trivy:PkgID",
"value": "libtirpc-conf@1.3.5-r1"
},
{
"name": "aquasecurity:trivy:PkgType",
"value": "alpine"
},
{
"name": "aquasecurity:trivy:SrcName",
"value": "libtirpc"
},
{
"name": "aquasecurity:trivy:SrcVersion",
"value": "1.3.5-r1"
}
]
},
{
"bom-ref": "pkg:apk/alpine/libtirpc@1.3.5-r1?arch=x86_64&distro=3.24.1",
"type": "library",
"supplier": {
"name": "Natanael Copa <ncopa@alpinelinux.org>"
},
"name": "libtirpc",
"version": "1.3.5-r1",
"hashes": [
{
"alg": "SHA-1",
"content": "c32865bd86a8b8829d152279cabbc5ac6d430eb2"
}
],
"licenses": [
{
"license": {
"id": "BSD-3-Clause"
}
}
],
"purl": "pkg:apk/alpine/libtirpc@1.3.5-r1?arch=x86_64&distro=3.24.1",
"properties": [
{
"name": "aquasecurity:trivy:LayerDiffID",
"value": "sha256:e5ccda0fbf6b54d343e024156d876553ba57d3926d7196584b3a1ce4df016366"
},
{
"name": "aquasecurity:trivy:LayerDigest",
"value": "sha256:2014fd3d47b2c2dd4dedc765822ac60ae269f3efa0e614f46ae29f540c7f1235"
},
{
"name": "aquasecurity:trivy:PkgID",
"value": "libtirpc@1.3.5-r1"
},
{
"name": "aquasecurity:trivy:PkgType",
"value": "alpine"
},
{
"name": "aquasecurity:trivy:SrcName",
"value": "libtirpc"
},
{
"name": "aquasecurity:trivy:SrcVersion",
"value": "1.3.5-r1"
}
]
},
{
"bom-ref": "pkg:apk/alpine/libuuid@2.42.3-r1?arch=x86_64&distro=3.24.1",
"type": "library",
"supplier": {
"name": "Natanael Copa <ncopa@alpinelinux.org>"
},
"name": "libuuid",
"version": "2.42.3-r1",
"hashes": [
{
"alg": "SHA-1",
"content": "8f041ef637ad75f381cc0c034f2afbbb0303264e"
}
],
"licenses": [
{
"license": {
"id": "BSD-3-Clause"
}
}
],
"purl": "pkg:apk/alpine/libuuid@2.42.3-r1?arch=x86_64&distro=3.24.1",
"properties": [
{
"name": "aquasecurity:trivy:LayerDiffID",
"value": "sha256:f9b4a8a412a0c07a489e46fb5db41f9d0dc84d4ec38a4e2c6ab9531f44e0d9f1"
},
{
"name": "aquasecurity:trivy:LayerDigest",
"value": "sha256:f0fe3e08ab046c0c5e29d34ee73bc8c7e03398eb891e4498e0a67088a5ea3e86"
},
{
"name": "aquasecurity:trivy:PkgID",
"value": "libuuid@2.42.3-r1"
},
{
"name": "aquasecurity:trivy:PkgType",
"value": "alpine"
},
{
"name": "aquasecurity:trivy:SrcName",
"value": "util-linux"
},
{
"name": "aquasecurity:trivy:SrcVersion",
"value": "2.42.3-r1"
}
]
},
{
"bom-ref": "pkg:apk/alpine/libverto@0.3.2-r2?arch=x86_64&distro=3.24.1",
"type": "library",
"supplier": {
"name": "Francesco Colista <fcolista@alpinelinux.org>"
},
"name": "libverto",
"version": "0.3.2-r2",
"hashes": [
{
"alg": "SHA-1",
"content": "73233059338142e4ac6d8fb8bb0074e93da75dc1"
}
],
"licenses": [
{
"license": {
"id": "MIT"
}
}
],
"purl": "pkg:apk/alpine/libverto@0.3.2-r2?arch=x86_64&distro=3.24.1",
"properties": [
{
"name": "aquasecurity:trivy:LayerDiffID",
"value": "sha256:e5ccda0fbf6b54d343e024156d876553ba57d3926d7196584b3a1ce4df016366"
},
{
"name": "aquasecurity:trivy:LayerDigest",
"value": "sha256:2014fd3d47b2c2dd4dedc765822ac60ae269f3efa0e614f46ae29f540c7f1235"
},
{
"name": "aquasecurity:trivy:PkgID",
"value": "libverto@0.3.2-r2"
},
{
"name": "aquasecurity:trivy:PkgType",
"value": "alpine"
},
{
"name": "aquasecurity:trivy:SrcName",
"value": "libverto"
},
{
"name": "aquasecurity:trivy:SrcVersion",
"value": "0.3.2-r2"
}
]
},
{
"bom-ref": "pkg:apk/alpine/musl-utils@1.2.6-r2?arch=x86_64&distro=3.24.1",
"type": "library",
"supplier": {
"name": "Natanael Copa <ncopa@alpinelinux.org>"
},
"name": "musl-utils",
"version": "1.2.6-r2",
"hashes": [
{
"alg": "SHA-1",
"content": "75ada3c48d63ec5d87c42fdf934a3fdd11298dc5"
}
],
"licenses": [
{
"license": {
"id": "MIT"
}
},
{
"license": {
"id": "BSD-2-Clause"
}
},
{
"license": {
"id": "GPL-2.0-or-later"
}
}
],
"purl": "pkg:apk/alpine/musl-utils@1.2.6-r2?arch=x86_64&distro=3.24.1",
"properties": [
{
"name": "aquasecurity:trivy:LayerDiffID",
"value": "sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c"
},
{
"name": "aquasecurity:trivy:LayerDigest",
"value": "sha256:55afa1ecc21d2bb5e5045f32dafee56272ffd89860bac26f6c32123439af26a4"
},
{
"name": "aquasecurity:trivy:PkgID",
"value": "musl-utils@1.2.6-r2"
},
{
"name": "aquasecurity:trivy:PkgType",
"value": "alpine"
},
{
"name": "aquasecurity:trivy:SrcName",
"value": "musl"
},
{
"name": "aquasecurity:trivy:SrcVersion",
"value": "1.2.6-r2"
}
]
},
{
"bom-ref": "pkg:apk/alpine/musl@1.2.6-r2?arch=x86_64&distro=3.24.1",
"type": "library",
"supplier": {
"name": "Natanael Copa <ncopa@alpinelinux.org>"
},
"name": "musl",
"version": "1.2.6-r2",
"hashes": [
{
"alg": "SHA-1",
"content": "0f7e5827e4e1a73631beda27b78431a8ba240e05"
}
],
"licenses": [
{
"license": {
"id": "MIT"
}
}
],
"purl": "pkg:apk/alpine/musl@1.2.6-r2?arch=x86_64&distro=3.24.1",
"properties": [
{
"name": "aquasecurity:trivy:LayerDiffID",
"value": "sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c"
},
{
"name": "aquasecurity:trivy:LayerDigest",
"value": "sha256:55afa1ecc21d2bb5e5045f32dafee56272ffd89860bac26f6c32123439af26a4"
},
{
"name": "aquasecurity:trivy:PkgID",
"value": "musl@1.2.6-r2"
},
{
"name": "aquasecurity:trivy:PkgType",
"value": "alpine"
},
{
"name": "aquasecurity:trivy:SrcName",
"value": "musl"
},
{
"name": "aquasecurity:trivy:SrcVersion",
"value": "1.2.6-r2"
}
]
},
{
"bom-ref": "pkg:apk/alpine/ncurses-terminfo-base@6.6_p20260516-r0?arch=x86_64&distro=3.24.1",
"type": "library",
"supplier": {
"name": "Milan P. Stanić <mps@arvanta.net>"
},
"name": "ncurses-terminfo-base",
"version": "6.6_p20260516-r0",
"hashes": [
{
"alg": "SHA-1",
"content": "9d551d828e9c8ee52c5801c1d6046828ebf15752"
}
],
"licenses": [
{
"license": {
"name": "X-11"
}
}
],
"purl": "pkg:apk/alpine/ncurses-terminfo-base@6.6_p20260516-r0?arch=x86_64&distro=3.24.1",
"properties": [
{
"name": "aquasecurity:trivy:LayerDiffID",
"value": "sha256:e5ccda0fbf6b54d343e024156d876553ba57d3926d7196584b3a1ce4df016366"
},
{
"name": "aquasecurity:trivy:LayerDigest",
"value": "sha256:2014fd3d47b2c2dd4dedc765822ac60ae269f3efa0e614f46ae29f540c7f1235"
},
{
"name": "aquasecurity:trivy:PkgID",
"value": "ncurses-terminfo-base@6.6_p20260516-r0"
},
{
"name": "aquasecurity:trivy:PkgType",
"value": "alpine"
},
{
"name": "aquasecurity:trivy:SrcName",
"value": "ncurses"
},
{
"name": "aquasecurity:trivy:SrcVersion",
"value": "6.6_p20260516-r0"
}
]
},
{
"bom-ref": "pkg:apk/alpine/readline@8.3.3-r1?arch=x86_64&distro=3.24.1",
"type": "library",
"supplier": {
"name": "qaqland <qaq@qaq.land>"
},
"name": "readline",
"version": "8.3.3-r1",
"hashes": [
{
"alg": "SHA-1",
"content": "945b16e378bc00e44d89d4de8124bba7647fdf4d"
}
],
"licenses": [
{
"license": {
"id": "GPL-3.0-or-later"
}
}
],
"purl": "pkg:apk/alpine/readline@8.3.3-r1?arch=x86_64&distro=3.24.1",
"properties": [
{
"name": "aquasecurity:trivy:LayerDiffID",
"value": "sha256:e5ccda0fbf6b54d343e024156d876553ba57d3926d7196584b3a1ce4df016366"
},
{
"name": "aquasecurity:trivy:LayerDigest",
"value": "sha256:2014fd3d47b2c2dd4dedc765822ac60ae269f3efa0e614f46ae29f540c7f1235"
},
{
"name": "aquasecurity:trivy:PkgID",
"value": "readline@8.3.3-r1"
},
{
"name": "aquasecurity:trivy:PkgType",
"value": "alpine"
},
{
"name": "aquasecurity:trivy:SrcName",
"value": "readline"
},
{
"name": "aquasecurity:trivy:SrcVersion",
"value": "8.3.3-r1"
}
]
},
{
"bom-ref": "pkg:apk/alpine/scanelf@1.3.9-r1?arch=x86_64&distro=3.24.1",
"type": "library",
"supplier": {
"name": "Natanael Copa <ncopa@alpinelinux.org>"
},
"name": "scanelf",
"version": "1.3.9-r1",
"hashes": [
{
"alg": "SHA-1",
"content": "013f903d0ba219673aebbdd04f74bb5ed82b01f0"
}
],
"licenses": [
{
"license": {
"id": "GPL-2.0-only"
}
}
],
"purl": "pkg:apk/alpine/scanelf@1.3.9-r1?arch=x86_64&distro=3.24.1",
"properties": [
{
"name": "aquasecurity:trivy:LayerDiffID",
"value": "sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c"
},
{
"name": "aquasecurity:trivy:LayerDigest",
"value": "sha256:55afa1ecc21d2bb5e5045f32dafee56272ffd89860bac26f6c32123439af26a4"
},
{
"name": "aquasecurity:trivy:PkgID",
"value": "scanelf@1.3.9-r1"
},
{
"name": "aquasecurity:trivy:PkgType",
"value": "alpine"
},
{
"name": "aquasecurity:trivy:SrcName",
"value": "pax-utils"
},
{
"name": "aquasecurity:trivy:SrcVersion",
"value": "1.3.9-r1"
}
]
},
{
"bom-ref": "pkg:apk/alpine/sqlite-libs@3.53.4-r0?arch=x86_64&distro=3.24.1",
"type": "library",
"supplier": {
"name": "Jingyun Hua <huajingyun@loongson.cn>"
},
"name": "sqlite-libs",
"version": "3.53.4-r0",
"hashes": [
{
"alg": "SHA-1",
"content": "f7630ceb37c232b6609861aeab6cdb9cd120e6fa"
}
],
"licenses": [
{
"license": {
"id": "blessing"
}
}
],
"purl": "pkg:apk/alpine/sqlite-libs@3.53.4-r0?arch=x86_64&distro=3.24.1",
"properties": [
{
"name": "aquasecurity:trivy:LayerDiffID",
"value": "sha256:e5ccda0fbf6b54d343e024156d876553ba57d3926d7196584b3a1ce4df016366"
},
{
"name": "aquasecurity:trivy:LayerDigest",
"value": "sha256:2014fd3d47b2c2dd4dedc765822ac60ae269f3efa0e614f46ae29f540c7f1235"
},
{
"name": "aquasecurity:trivy:PkgID",
"value": "sqlite-libs@3.53.4-r0"
},
{
"name": "aquasecurity:trivy:PkgType",
"value": "alpine"
},
{
"name": "aquasecurity:trivy:SrcName",
"value": "sqlite"
},
{
"name": "aquasecurity:trivy:SrcVersion",
"value": "3.53.4-r0"
}
]
},
{
"bom-ref": "pkg:apk/alpine/ssl_client@1.37.0-r31?arch=x86_64&distro=3.24.1",
"type": "library",
"supplier": {
"name": "Sören Tempel <soeren+alpine@soeren-tempel.net>"
},
"name": "ssl_client",
"version": "1.37.0-r31",
"hashes": [
{
"alg": "SHA-1",
"content": "c220f4a5125a313af733e98def94132bb1e9d40d"
}
],
"licenses": [
{
"license": {
"id": "GPL-2.0-only"
}
}
],
"purl": "pkg:apk/alpine/ssl_client@1.37.0-r31?arch=x86_64&distro=3.24.1",
"properties": [
{
"name": "aquasecurity:trivy:LayerDiffID",
"value": "sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c"
},
{
"name": "aquasecurity:trivy:LayerDigest",
"value": "sha256:55afa1ecc21d2bb5e5045f32dafee56272ffd89860bac26f6c32123439af26a4"
},
{
"name": "aquasecurity:trivy:PkgID",
"value": "ssl_client@1.37.0-r31"
},
{
"name": "aquasecurity:trivy:PkgType",
"value": "alpine"
},
{
"name": "aquasecurity:trivy:SrcName",
"value": "busybox"
},
{
"name": "aquasecurity:trivy:SrcVersion",
"value": "1.37.0-r31"
}
]
},
{
"bom-ref": "pkg:apk/alpine/tzdata@2026c-r0?arch=x86_64&distro=3.24.1",
"type": "library",
"supplier": {
"name": "Natanael Copa <ncopa@alpinelinux.org>"
},
"name": "tzdata",
"version": "2026c-r0",
"hashes": [
{
"alg": "SHA-1",
"content": "61f7544ecd8dd63eac23fe3e645702fda92ef02a"
}
],
"licenses": [
{
"license": {
"name": "Public-Domain"
}
}
],
"purl": "pkg:apk/alpine/tzdata@2026c-r0?arch=x86_64&distro=3.24.1",
"properties": [
{
"name": "aquasecurity:trivy:LayerDiffID",
"value": "sha256:3ca4be2c6e9ac0223715355253725381000486c2b45bfcb22cf571b6a85a12dd"
},
{
"name": "aquasecurity:trivy:LayerDigest",
"value": "sha256:47393b668ce535d06e8967917d424c177e2ecccae83856d48b2e99164f8cc6cb"
},
{
"name": "aquasecurity:trivy:PkgID",
"value": "tzdata@2026c-r0"
},
{
"name": "aquasecurity:trivy:PkgType",
"value": "alpine"
},
{
"name": "aquasecurity:trivy:SrcName",
"value": "tzdata"
},
{
"name": "aquasecurity:trivy:SrcVersion",
"value": "2026c-r0"
}
]
},
{
"bom-ref": "pkg:apk/alpine/xz-libs@5.8.3-r0?arch=x86_64&distro=3.24.1",
"type": "library",
"supplier": {
"name": "Natanael Copa <ncopa@alpinelinux.org>"
},
"name": "xz-libs",
"version": "5.8.3-r0",
"hashes": [
{
"alg": "SHA-1",
"content": "4c92c5be0c5bef404e93c880eba9037a9b147347"
}
],
"licenses": [
{
"license": {
"id": "GPL-2.0-or-later"
}
},
{
"license": {
"id": "0BSD"
}
},
{
"license": {
"name": "Public-Domain"
}
},
{
"license": {
"id": "LGPL-2.1-or-later"
}
}
],
"purl": "pkg:apk/alpine/xz-libs@5.8.3-r0?arch=x86_64&distro=3.24.1",
"properties": [
{
"name": "aquasecurity:trivy:LayerDiffID",
"value": "sha256:e5ccda0fbf6b54d343e024156d876553ba57d3926d7196584b3a1ce4df016366"
},
{
"name": "aquasecurity:trivy:LayerDigest",
"value": "sha256:2014fd3d47b2c2dd4dedc765822ac60ae269f3efa0e614f46ae29f540c7f1235"
},
{
"name": "aquasecurity:trivy:PkgID",
"value": "xz-libs@5.8.3-r0"
},
{
"name": "aquasecurity:trivy:PkgType",
"value": "alpine"
},
{
"name": "aquasecurity:trivy:SrcName",
"value": "xz"
},
{
"name": "aquasecurity:trivy:SrcVersion",
"value": "5.8.3-r0"
}
]
},
{
"bom-ref": "pkg:apk/alpine/zlib@1.3.2-r0?arch=x86_64&distro=3.24.1",
"type": "library",
"supplier": {
"name": "Natanael Copa <ncopa@alpinelinux.org>"
},
"name": "zlib",
"version": "1.3.2-r0",
"hashes": [
{
"alg": "SHA-1",
"content": "dd4c3d102acaef2a71a1495951d55fabc8680613"
}
],
"licenses": [
{
"license": {
"id": "Zlib"
}
}
],
"purl": "pkg:apk/alpine/zlib@1.3.2-r0?arch=x86_64&distro=3.24.1",
"properties": [
{
"name": "aquasecurity:trivy:LayerDiffID",
"value": "sha256:34884abbe92863fce933ed7c39c0e045631af0ed86d5cc0dfbdf9fdca426ce3c"
},
{
"name": "aquasecurity:trivy:LayerDigest",
"value": "sha256:55afa1ecc21d2bb5e5045f32dafee56272ffd89860bac26f6c32123439af26a4"
},
{
"name": "aquasecurity:trivy:PkgID",
"value": "zlib@1.3.2-r0"
},
{
"name": "aquasecurity:trivy:PkgType",
"value": "alpine"
},
{
"name": "aquasecurity:trivy:SrcName",
"value": "zlib"
},
{
"name": "aquasecurity:trivy:SrcVersion",
"value": "1.3.2-r0"
}
]
},
{
"bom-ref": "pkg:pypi/cffi@2.1.1",
"type": "library",
"name": "cffi",
"version": "2.1.1",
"licenses": [
{
"license": {
"id": "MIT-0"
}
}
],
"purl": "pkg:pypi/cffi@2.1.1",
"properties": [
{
"name": "aquasecurity:trivy:FilePath",
"value": "opt/venv/lib/python3.12/site-packages/cffi-2.1.1.dist-info/METADATA"
},
{
"name": "aquasecurity:trivy:LayerDiffID",
"value": "sha256:648451a0dda84ad04681e32b5ecc7cd5d3a4f0ad84f783e9598d72bc69620d5c"
},
{
"name": "aquasecurity:trivy:LayerDigest",
"value": "sha256:82ff17b555d91096dd328eb1e829daaeba9a48d7757143d0b97c35a721f6fb87"
},
{
"name": "aquasecurity:trivy:PkgType",
"value": "python-pkg"
}
]
},
{
"bom-ref": "pkg:pypi/cryptography@50.0.1",
"type": "library",
"name": "cryptography",
"version": "50.0.1",
"licenses": [
{
"expression": "Apache-2.0 OR BSD-3-Clause"
}
],
"purl": "pkg:pypi/cryptography@50.0.1",
"properties": [
{
"name": "aquasecurity:trivy:FilePath",
"value": "opt/venv/lib/python3.12/site-packages/cryptography-50.0.1.dist-info/METADATA"
},
{
"name": "aquasecurity:trivy:LayerDiffID",
"value": "sha256:648451a0dda84ad04681e32b5ecc7cd5d3a4f0ad84f783e9598d72bc69620d5c"
},
{
"name": "aquasecurity:trivy:LayerDigest",
"value": "sha256:82ff17b555d91096dd328eb1e829daaeba9a48d7757143d0b97c35a721f6fb87"
},
{
"name": "aquasecurity:trivy:PkgType",
"value": "python-pkg"
}
]
},
{
"bom-ref": "pkg:pypi/informed-decision@0.2.0",
"type": "library",
"name": "informed-decision",
"version": "0.2.0",
"purl": "pkg:pypi/informed-decision@0.2.0",
"properties": [
{
"name": "aquasecurity:trivy:FilePath",
"value": "opt/venv/lib/python3.12/site-packages/informed_decision-0.2.0.dist-info/METADATA"
},
{
"name": "aquasecurity:trivy:LayerDiffID",
"value": "sha256:648451a0dda84ad04681e32b5ecc7cd5d3a4f0ad84f783e9598d72bc69620d5c"
},
{
"name": "aquasecurity:trivy:LayerDigest",
"value": "sha256:82ff17b555d91096dd328eb1e829daaeba9a48d7757143d0b97c35a721f6fb87"
},
{
"name": "aquasecurity:trivy:PkgType",
"value": "python-pkg"
}
]
},
{
"bom-ref": "pkg:pypi/pycparser@3.0",
"type": "library",
"name": "pycparser",
"version": "3.0",
"licenses": [
{
"license": {
"id": "BSD-3-Clause"
}
}
],
"purl": "pkg:pypi/pycparser@3.0",
"properties": [
{
"name": "aquasecurity:trivy:FilePath",
"value": "opt/venv/lib/python3.12/site-packages/pycparser-3.0.dist-info/METADATA"
},
{
"name": "aquasecurity:trivy:LayerDiffID",
"value": "sha256:648451a0dda84ad04681e32b5ecc7cd5d3a4f0ad84f783e9598d72bc69620d5c"
},
{
"name": "aquasecurity:trivy:LayerDigest",
"value": "sha256:82ff17b555d91096dd328eb1e829daaeba9a48d7757143d0b97c35a721f6fb87"
},
{
"name": "aquasecurity:trivy:PkgType",
"value": "python-pkg"
}
]
},
{
"bom-ref": "pkg:pypi/pyjwt@2.15.1",
"type": "library",
"name": "PyJWT",
"version": "2.15.1",
"licenses": [
{
"license": {
"id": "MIT"
}
}
],
"purl": "pkg:pypi/pyjwt@2.15.1",
"properties": [
{
"name": "aquasecurity:trivy:FilePath",
"value": "opt/venv/lib/python3.12/site-packages/pyjwt-2.15.1.dist-info/METADATA"
},
{
"name": "aquasecurity:trivy:LayerDiffID",
"value": "sha256:648451a0dda84ad04681e32b5ecc7cd5d3a4f0ad84f783e9598d72bc69620d5c"
},
{
"name": "aquasecurity:trivy:LayerDigest",
"value": "sha256:82ff17b555d91096dd328eb1e829daaeba9a48d7757143d0b97c35a721f6fb87"
},
{
"name": "aquasecurity:trivy:PkgType",
"value": "python-pkg"
}
]
},
{
"bom-ref": "pkg:pypi/waitress@3.0.2",
"type": "library",
"name": "waitress",
"version": "3.0.2",
"licenses": [
{
"license": {
"id": "ZPL-2.1"
}
}
],
"purl": "pkg:pypi/waitress@3.0.2",
"properties": [
{
"name": "aquasecurity:trivy:FilePath",
"value": "opt/venv/lib/python3.12/site-packages/waitress-3.0.2.dist-info/METADATA"
},
{
"name": "aquasecurity:trivy:LayerDiffID",
"value": "sha256:648451a0dda84ad04681e32b5ecc7cd5d3a4f0ad84f783e9598d72bc69620d5c"
},
{
"name": "aquasecurity:trivy:LayerDigest",
"value": "sha256:82ff17b555d91096dd328eb1e829daaeba9a48d7757143d0b97c35a721f6fb87"
},
{
"name": "aquasecurity:trivy:PkgType",
"value": "python-pkg"
}
]
}
],
"dependencies": [
{
"ref": "5b71299e-3c0c-4c4f-bd29-865fb14e1758",
"dependsOn": [
"pkg:apk/alpine/.python-rundeps@20260901.001029?arch=noarch&distro=3.24.1",
"pkg:apk/alpine/alpine-baselayout@3.7.2-r1?arch=x86_64&distro=3.24.1",
"pkg:apk/alpine/alpine-release@3.24.1-r0?arch=x86_64&distro=3.24.1",
"pkg:apk/alpine/apk-tools@3.0.6-r0?arch=x86_64&distro=3.24.1",
"pkg:apk/alpine/ca-certificates@20260611-r0?arch=x86_64&distro=3.24.1",
"pkg:apk/alpine/musl-utils@1.2.6-r2?arch=x86_64&distro=3.24.1",
"pkg:apk/alpine/ssl_client@1.37.0-r31?arch=x86_64&distro=3.24.1",
"pkg:apk/alpine/tzdata@2026c-r0?arch=x86_64&distro=3.24.1"
]
},
{
"ref": "pkg:apk/alpine/.python-rundeps@20260901.001029?arch=noarch&distro=3.24.1",
"dependsOn": [
"pkg:apk/alpine/gdbm@1.26-r0?arch=x86_64&distro=3.24.1",
"pkg:apk/alpine/libbz2@1.0.8-r6?arch=x86_64&distro=3.24.1",
"pkg:apk/alpine/libcrypto3@3.5.8-r0?arch=x86_64&distro=3.24.1",
"pkg:apk/alpine/libffi@3.5.2-r1?arch=x86_64&distro=3.24.1",
"pkg:apk/alpine/libncursesw@6.6_p20260516-r0?arch=x86_64&distro=3.24.1",
"pkg:apk/alpine/libnsl@2.0.1-r2?arch=x86_64&distro=3.24.1",
"pkg:apk/alpine/libpanelw@6.6_p20260516-r0?arch=x86_64&distro=3.24.1",
"pkg:apk/alpine/libssl3@3.5.8-r0?arch=x86_64&distro=3.24.1",
"pkg:apk/alpine/libtirpc@1.3.5-r1?arch=x86_64&distro=3.24.1",
"pkg:apk/alpine/libuuid@2.42.3-r1?arch=x86_64&distro=3.24.1",
"pkg:apk/alpine/musl@1.2.6-r2?arch=x86_64&distro=3.24.1",
"pkg:apk/alpine/readline@8.3.3-r1?arch=x86_64&distro=3.24.1",
"pkg:apk/alpine/sqlite-libs@3.53.4-r0?arch=x86_64&distro=3.24.1",
"pkg:apk/alpine/xz-libs@5.8.3-r0?arch=x86_64&distro=3.24.1",
"pkg:apk/alpine/zlib@1.3.2-r0?arch=x86_64&distro=3.24.1"
]
},
{
"ref": "pkg:apk/alpine/alpine-baselayout-data@3.7.2-r1?arch=x86_64&distro=3.24.1",
"dependsOn": []
},
{
"ref": "pkg:apk/alpine/alpine-baselayout@3.7.2-r1?arch=x86_64&distro=3.24.1",
"dependsOn": [
"pkg:apk/alpine/alpine-baselayout-data@3.7.2-r1?arch=x86_64&distro=3.24.1",
"pkg:apk/alpine/busybox-binsh@1.37.0-r31?arch=x86_64&distro=3.24.1"
]
},
{
"ref": "pkg:apk/alpine/alpine-keys@2.6-r0?arch=x86_64&distro=3.24.1",
"dependsOn": []
},
{
"ref": "pkg:apk/alpine/alpine-release@3.24.1-r0?arch=x86_64&distro=3.24.1",
"dependsOn": [
"pkg:apk/alpine/alpine-keys@2.6-r0?arch=x86_64&distro=3.24.1"
]
},
{
"ref": "pkg:apk/alpine/apk-tools@3.0.6-r0?arch=x86_64&distro=3.24.1",
"dependsOn": [
"pkg:apk/alpine/ca-certificates-bundle@20260611-r0?arch=x86_64&distro=3.24.1",
"pkg:apk/alpine/libapk@3.0.6-r0?arch=x86_64&distro=3.24.1",
"pkg:apk/alpine/libcrypto3@3.5.8-r0?arch=x86_64&distro=3.24.1",
"pkg:apk/alpine/musl@1.2.6-r2?arch=x86_64&distro=3.24.1",
"pkg:apk/alpine/zlib@1.3.2-r0?arch=x86_64&distro=3.24.1"
]
},
{
"ref": "pkg:apk/alpine/busybox-binsh@1.37.0-r31?arch=x86_64&distro=3.24.1",
"dependsOn": [
"pkg:apk/alpine/busybox@1.37.0-r31?arch=x86_64&distro=3.24.1"
]
},
{
"ref": "pkg:apk/alpine/busybox@1.37.0-r31?arch=x86_64&distro=3.24.1",
"dependsOn": [
"pkg:apk/alpine/musl@1.2.6-r2?arch=x86_64&distro=3.24.1"
]
},
{
"ref": "pkg:apk/alpine/ca-certificates-bundle@20260611-r0?arch=x86_64&distro=3.24.1",
"dependsOn": []
},
{
"ref": "pkg:apk/alpine/ca-certificates@20260611-r0?arch=x86_64&distro=3.24.1",
"dependsOn": [
"pkg:apk/alpine/busybox-binsh@1.37.0-r31?arch=x86_64&distro=3.24.1",
"pkg:apk/alpine/libcrypto3@3.5.8-r0?arch=x86_64&distro=3.24.1",
"pkg:apk/alpine/musl@1.2.6-r2?arch=x86_64&distro=3.24.1"
]
},
{
"ref": "pkg:apk/alpine/gdbm@1.26-r0?arch=x86_64&distro=3.24.1",
"dependsOn": [
"pkg:apk/alpine/musl@1.2.6-r2?arch=x86_64&distro=3.24.1"
]
},
{
"ref": "pkg:apk/alpine/keyutils-libs@1.6.3-r4?arch=x86_64&distro=3.24.1",
"dependsOn": [
"pkg:apk/alpine/musl@1.2.6-r2?arch=x86_64&distro=3.24.1"
]
},
{
"ref": "pkg:apk/alpine/krb5-conf@1.0-r2?arch=x86_64&distro=3.24.1",
"dependsOn": []
},
{
"ref": "pkg:apk/alpine/krb5-libs@1.22.2-r1?arch=x86_64&distro=3.24.1",
"dependsOn": [
"pkg:apk/alpine/keyutils-libs@1.6.3-r4?arch=x86_64&distro=3.24.1",
"pkg:apk/alpine/krb5-conf@1.0-r2?arch=x86_64&distro=3.24.1",
"pkg:apk/alpine/libcom_err@1.47.4-r0?arch=x86_64&distro=3.24.1",
"pkg:apk/alpine/libcrypto3@3.5.8-r0?arch=x86_64&distro=3.24.1",
"pkg:apk/alpine/libssl3@3.5.8-r0?arch=x86_64&distro=3.24.1",
"pkg:apk/alpine/libverto@0.3.2-r2?arch=x86_64&distro=3.24.1",
"pkg:apk/alpine/musl@1.2.6-r2?arch=x86_64&distro=3.24.1"
]
},
{
"ref": "pkg:apk/alpine/libapk@3.0.6-r0?arch=x86_64&distro=3.24.1",
"dependsOn": [
"pkg:apk/alpine/libcrypto3@3.5.8-r0?arch=x86_64&distro=3.24.1",
"pkg:apk/alpine/libssl3@3.5.8-r0?arch=x86_64&distro=3.24.1",
"pkg:apk/alpine/musl@1.2.6-r2?arch=x86_64&distro=3.24.1",
"pkg:apk/alpine/zlib@1.3.2-r0?arch=x86_64&distro=3.24.1"
]
},
{
"ref": "pkg:apk/alpine/libbz2@1.0.8-r6?arch=x86_64&distro=3.24.1",
"dependsOn": [
"pkg:apk/alpine/musl@1.2.6-r2?arch=x86_64&distro=3.24.1"
]
},
{
"ref": "pkg:apk/alpine/libcom_err@1.47.4-r0?arch=x86_64&distro=3.24.1",
"dependsOn": [
"pkg:apk/alpine/musl@1.2.6-r2?arch=x86_64&distro=3.24.1"
]
},
{
"ref": "pkg:apk/alpine/libcrypto3@3.5.8-r0?arch=x86_64&distro=3.24.1",
"dependsOn": [
"pkg:apk/alpine/musl@1.2.6-r2?arch=x86_64&distro=3.24.1"
]
},
{
"ref": "pkg:apk/alpine/libffi@3.5.2-r1?arch=x86_64&distro=3.24.1",
"dependsOn": [
"pkg:apk/alpine/musl@1.2.6-r2?arch=x86_64&distro=3.24.1"
]
},
{
"ref": "pkg:apk/alpine/libintl@1.0-r0?arch=x86_64&distro=3.24.1",
"dependsOn": [
"pkg:apk/alpine/musl@1.2.6-r2?arch=x86_64&distro=3.24.1"
]
},
{
"ref": "pkg:apk/alpine/libncursesw@6.6_p20260516-r0?arch=x86_64&distro=3.24.1",
"dependsOn": [
"pkg:apk/alpine/musl@1.2.6-r2?arch=x86_64&distro=3.24.1",
"pkg:apk/alpine/ncurses-terminfo-base@6.6_p20260516-r0?arch=x86_64&distro=3.24.1"
]
},
{
"ref": "pkg:apk/alpine/libnsl@2.0.1-r2?arch=x86_64&distro=3.24.1",
"dependsOn": [
"pkg:apk/alpine/libintl@1.0-r0?arch=x86_64&distro=3.24.1",
"pkg:apk/alpine/libtirpc@1.3.5-r1?arch=x86_64&distro=3.24.1",
"pkg:apk/alpine/musl@1.2.6-r2?arch=x86_64&distro=3.24.1"
]
},
{
"ref": "pkg:apk/alpine/libpanelw@6.6_p20260516-r0?arch=x86_64&distro=3.24.1",
"dependsOn": [
"pkg:apk/alpine/libncursesw@6.6_p20260516-r0?arch=x86_64&distro=3.24.1",
"pkg:apk/alpine/musl@1.2.6-r2?arch=x86_64&distro=3.24.1",
"pkg:apk/alpine/ncurses-terminfo-base@6.6_p20260516-r0?arch=x86_64&distro=3.24.1"
]
},
{
"ref": "pkg:apk/alpine/libssl3@3.5.8-r0?arch=x86_64&distro=3.24.1",
"dependsOn": [
"pkg:apk/alpine/libcrypto3@3.5.8-r0?arch=x86_64&distro=3.24.1",
"pkg:apk/alpine/musl@1.2.6-r2?arch=x86_64&distro=3.24.1"
]
},
{
"ref": "pkg:apk/alpine/libtirpc-conf@1.3.5-r1?arch=x86_64&distro=3.24.1",
"dependsOn": []
},
{
"ref": "pkg:apk/alpine/libtirpc@1.3.5-r1?arch=x86_64&distro=3.24.1",
"dependsOn": [
"pkg:apk/alpine/krb5-libs@1.22.2-r1?arch=x86_64&distro=3.24.1",
"pkg:apk/alpine/libtirpc-conf@1.3.5-r1?arch=x86_64&distro=3.24.1",
"pkg:apk/alpine/musl@1.2.6-r2?arch=x86_64&distro=3.24.1"
]
},
{
"ref": "pkg:apk/alpine/libuuid@2.42.3-r1?arch=x86_64&distro=3.24.1",
"dependsOn": [
"pkg:apk/alpine/musl@1.2.6-r2?arch=x86_64&distro=3.24.1"
]
},
{
"ref": "pkg:apk/alpine/libverto@0.3.2-r2?arch=x86_64&distro=3.24.1",
"dependsOn": [
"pkg:apk/alpine/musl@1.2.6-r2?arch=x86_64&distro=3.24.1"
]
},
{
"ref": "pkg:apk/alpine/musl-utils@1.2.6-r2?arch=x86_64&distro=3.24.1",
"dependsOn": [
"pkg:apk/alpine/musl@1.2.6-r2?arch=x86_64&distro=3.24.1",
"pkg:apk/alpine/scanelf@1.3.9-r1?arch=x86_64&distro=3.24.1"
]
},
{
"ref": "pkg:apk/alpine/musl@1.2.6-r2?arch=x86_64&distro=3.24.1",
"dependsOn": []
},
{
"ref": "pkg:apk/alpine/ncurses-terminfo-base@6.6_p20260516-r0?arch=x86_64&distro=3.24.1",
"dependsOn": []
},
{
"ref": "pkg:apk/alpine/readline@8.3.3-r1?arch=x86_64&distro=3.24.1",
"dependsOn": [
"pkg:apk/alpine/libncursesw@6.6_p20260516-r0?arch=x86_64&distro=3.24.1",
"pkg:apk/alpine/musl@1.2.6-r2?arch=x86_64&distro=3.24.1"
]
},
{
"ref": "pkg:apk/alpine/scanelf@1.3.9-r1?arch=x86_64&distro=3.24.1",
"dependsOn": [
"pkg:apk/alpine/musl@1.2.6-r2?arch=x86_64&distro=3.24.1"
]
},
{
"ref": "pkg:apk/alpine/sqlite-libs@3.53.4-r0?arch=x86_64&distro=3.24.1",
"dependsOn": [
"pkg:apk/alpine/musl@1.2.6-r2?arch=x86_64&distro=3.24.1"
]
},
{
"ref": "pkg:apk/alpine/ssl_client@1.37.0-r31?arch=x86_64&distro=3.24.1",
"dependsOn": [
"pkg:apk/alpine/libcrypto3@3.5.8-r0?arch=x86_64&distro=3.24.1",
"pkg:apk/alpine/libssl3@3.5.8-r0?arch=x86_64&distro=3.24.1",
"pkg:apk/alpine/musl@1.2.6-r2?arch=x86_64&distro=3.24.1"
]
},
{
"ref": "pkg:apk/alpine/tzdata@2026c-r0?arch=x86_64&distro=3.24.1",
"dependsOn": []
},
{
"ref": "pkg:apk/alpine/xz-libs@5.8.3-r0?arch=x86_64&distro=3.24.1",
"dependsOn": [
"pkg:apk/alpine/musl@1.2.6-r2?arch=x86_64&distro=3.24.1"
]
},
{
"ref": "pkg:apk/alpine/zlib@1.3.2-r0?arch=x86_64&distro=3.24.1",
"dependsOn": [
"pkg:apk/alpine/musl@1.2.6-r2?arch=x86_64&distro=3.24.1"
]
},
{
"ref": "pkg:oci/informed-decision@sha256:763c36402c8be7cc4c1bd1a61623d1aff9116d52241877425b45a7018cc0883a?arch=amd64&repository_url=forgejo.coulomb.social%2Fcoulomb%2Finformed-decision",
"dependsOn": [
"5b71299e-3c0c-4c4f-bd29-865fb14e1758",
"pkg:pypi/cffi@2.1.1",
"pkg:pypi/cryptography@50.0.1",
"pkg:pypi/informed-decision@0.2.0",
"pkg:pypi/pycparser@3.0",
"pkg:pypi/pyjwt@2.15.1",
"pkg:pypi/waitress@3.0.2"
]
},
{
"ref": "pkg:pypi/cffi@2.1.1",
"dependsOn": []
},
{
"ref": "pkg:pypi/cryptography@50.0.1",
"dependsOn": []
},
{
"ref": "pkg:pypi/informed-decision@0.2.0",
"dependsOn": []
},
{
"ref": "pkg:pypi/pycparser@3.0",
"dependsOn": []
},
{
"ref": "pkg:pypi/pyjwt@2.15.1",
"dependsOn": []
},
{
"ref": "pkg:pypi/waitress@3.0.2",
"dependsOn": []
}
],
"vulnerabilities": [
{
"id": "CVE-2026-85091",
"source": {
"name": "alpine",
"url": "https://secdb.alpinelinux.org/"
},
"ratings": [
{
"source": {
"name": "ubuntu"
},
"severity": "medium"
}
],
"cwes": [
787
],
"description": "zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gz_vacate() function when processing non-blocking gzwrite() operations with stale external buffer pointers. Attackers can trigger the overflow by calling gzprintf() or gzvprintf() after a write stall, causing an unchecked memmove() to write beyond the internal input buffer boundary.",
"recommendation": "Upgrade zlib to version 1.3.2-r1",
"advisories": [
{
"url": "https://avd.aquasec.com/nvd/cve-2026-85091"
},
{
"url": "https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490"
},
{
"url": "https://github.com/madler/zlib"
},
{
"url": "https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c#L393"
},
{
"url": "https://www.cve.org/CVERecord?id=CVE-2026-85091"
},
{
"url": "https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate"
}
],
"published": "2026-09-03T13:06:20+00:00",
"updated": "2026-09-09T20:41:07+00:00",
"affects": [
{
"ref": "pkg:apk/alpine/zlib@1.3.2-r0?arch=x86_64&distro=3.24.1",
"versions": [
{
"version": "1.3.2-r0",
"status": "affected"
}
]
}
]
}
]
}
Reference in a new issue View git blame Copy permalink