tegwick
645d5af213
Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade
40 lines
1.8 KiB
JSON
40 lines
1.8 KiB
JSON
{
|
|
"source_manifest": "/tmp/policy-runtime-refresh-stage/manifest.json",
|
|
"source_sha256": "21346cf88f53599e4d0bd36e260ad698065d0d83d658c96e1d82bbb6d04dbd3c",
|
|
"old_artifact": "sha256:b955359f68ccd98ca6e906ef57b74c9bd6e732083b9e2b6857a358cd5196f9a1",
|
|
"old_findings": {
|
|
"CRITICAL": 2,
|
|
"HIGH": 39,
|
|
"MEDIUM": 76,
|
|
"LOW": 42,
|
|
"all_fixable": 159
|
|
},
|
|
"official_base_index": "sha256:15c994d10d6d78658721c3bcafff14cb281fba2a4bdf9d5ba92c416a472516e3",
|
|
"new_nginx": "1.30.5",
|
|
"old_nginx": "1.27.5",
|
|
"new_alpine": "3.24.2",
|
|
"old_alpine": "3.21.3",
|
|
"exact_additional_package_fixes": {
|
|
"tiff": "4.7.2-r0",
|
|
"zlib": "1.3.2-r1"
|
|
},
|
|
"module_configure_flags": "identical old and new; full module set retained",
|
|
"local_image_index": "sha256:29f87195bd9478a706c88c8732948e59a118fcf342f1215ea08b30f87946a71f",
|
|
"local_image_amd64_manifest": "sha256:e0edbf00d9266a92e82b6b12680e1d0cd7e145c5c6f1d7e6115aaa2b4fa34fec",
|
|
"local_findings": 0,
|
|
"scanned_packages": 70,
|
|
"database_metadata": {
|
|
"Version": 2,
|
|
"NextUpdate": "2026-10-11T18:59:50.889010572Z",
|
|
"UpdatedAt": "2026-10-10T18:59:50.889010923Z",
|
|
"DownloadedAt": "2026-10-10T23:32:32.380033131Z"
|
|
},
|
|
"scanner_eol_warning": "Alpine3.24 not present on bundled EOL list; vulnerability detector examined70packages and original unpatched base reported2fixed findings",
|
|
"native_published_candidate": "pending root application/commit/CI",
|
|
"hosting_changed": false,
|
|
"initial_local_build_failures": [
|
|
"sandbox denied home buildx activity write",
|
|
"default Dockerfile name absent; corrected explicit Containerfile"
|
|
],
|
|
"source_lock_recipe": "native CI exact source revision; resolved upstream archives + canonical JSON repository revisions SHA256; installed inventory reconstructed by verify-policy-candidate-image.py; current local site uses exact previously reviewed source pins"
|
|
}
|