diff --git a/adapters/v1/domain_to_syft_test.go b/adapters/v1/domain_to_syft_test.go index 5f29808..01b10a0 100644 --- a/adapters/v1/domain_to_syft_test.go +++ b/adapters/v1/domain_to_syft_test.go @@ -37,8 +37,8 @@ func Test_domainJSONToSyft(t *testing.T) { artifactRelationships: 129, files: 78, source: source{ - id: "e2e16842c9b54d985bf1ef9242a313f36b856181f188de21313820e177002501", - name: "alpine", + id: "fd6275a37d2472b9d3be70c3261087b8d65e441c21342ae7313096312bcda2b3", + name: "library/alpine", }, }, }, { diff --git a/adapters/v1/syft.go b/adapters/v1/syft.go index 52aaab0..8272ce7 100644 --- a/adapters/v1/syft.go +++ b/adapters/v1/syft.go @@ -10,20 +10,20 @@ import ( helpersv1 "github.com/kubescape/k8s-interface/instanceidhandler/v1/helpers" - "github.com/anchore/stereoscope/pkg/file" + "github.com/anchore/clio" + stereoscopeFile "github.com/anchore/stereoscope/pkg/file" "github.com/anchore/stereoscope/pkg/image" - "github.com/anchore/syft/cmd/syft/cli/eventloop" "github.com/anchore/syft/cmd/syft/cli/options" - "github.com/anchore/syft/syft/artifact" + "github.com/anchore/syft/syft" "github.com/anchore/syft/syft/sbom" "github.com/anchore/syft/syft/source" "github.com/eapache/go-resiliency/deadline" - "github.com/hashicorp/go-multierror" "github.com/kubescape/go-logger" "github.com/kubescape/go-logger/helpers" "github.com/kubescape/kubevuln/core/domain" "github.com/kubescape/kubevuln/core/ports" "github.com/kubescape/kubevuln/internal/tools" + "github.com/kubescape/kubevuln/pkg/secretdetector" "go.opentelemetry.io/otel" ) @@ -34,7 +34,6 @@ type SyftAdapter struct { } var _ ports.SBOMCreator = (*SyftAdapter)(nil) -var ErrImageTooLarge = fmt.Errorf("image size exceeds maximum allowed size") // NewSyftAdapter initializes the SyftAdapter struct func NewSyftAdapter(scanTimeout time.Duration, maxImageSize int64) *SyftAdapter { @@ -78,13 +77,14 @@ func (s *SyftAdapter) CreateSBOM(ctx context.Context, name, imageID string, opti InsecureSkipTLSVerify: options.InsecureSkipTLSVerify, InsecureUseHTTP: options.InsecureUseHTTP, Credentials: credentials, + MaxImageSize: s.maxImageSize, } syftOpts := defaultPackagesOptions() // prepare temporary directory for image download - t := file.NewTempDirGenerator("stereoscope") - defer func(t *file.TempDirGenerator) { + t := stereoscopeFile.NewTempDirGenerator("stereoscope") + defer func(t *stereoscopeFile.TempDirGenerator) { err := t.Cleanup() if err != nil { logger.L().Ctx(ctx).Warning("failed to cleanup temp dir", helpers.Error(err), @@ -106,7 +106,7 @@ func (s *SyftAdapter) CreateSBOM(ctx context.Context, name, imageID string, opti src, err = detectSource(imageID, syftOpts, ®istryOptions) } switch { - case errors.Is(err, ErrImageTooLarge): + case errors.Is(err, image.ErrImageTooLarge): logger.L().Ctx(ctx).Warning("Image exceeds size limit", helpers.Int("maxImageSize", int(s.maxImageSize)), helpers.String("imageID", imageID)) @@ -125,11 +125,41 @@ func (s *SyftAdapter) CreateSBOM(ctx context.Context, name, imageID string, opti var syftSBOM *sbom.SBOM dl := deadline.New(s.scanTimeout) err = dl.Run(func(stopper <-chan struct{}) error { + // make sure we clean the temp dir + defer func(src source.Source) { + if err := src.Close(); err != nil { + logger.L().Ctx(ctx).Warning("failed to close source", helpers.Error(err), + helpers.String("imageID", imageID)) + } + }(src) // generate SBOM logger.L().Debug("generating SBOM", helpers.String("imageID", imageID)) - syftSBOM, err = generateSBOM(name, s.Version(), src, &syftOpts.Catalog) - return err + id := clio.Identification{ + Name: name, + Version: s.Version(), + } + syftSBOM, err = syft.CreateSBOM(ctx, src, syftOpts.Catalog.ToSBOMConfig(id)) + if err != nil { + return fmt.Errorf("failed to generate SBOM: %w", err) + } + // scan for secrets + resolver, err := src.FileResolver(source.SquashedScope) + if err != nil { + return fmt.Errorf("unable to get file resolver: %w", err) + } + fileDetectionConfig := &secretdetector.FileDetectionConfig{ + SkipBinaryFiles: false, + SizeThreshold: 0, + } + result, err := secretdetector.SearchDirectoryForSecrets(resolver, fileDetectionConfig) + if err != nil { + return fmt.Errorf("failed to search directory for secrets: %w", err) + } + logger.L().Info("searched directory for secrets", + helpers.String("imageID", imageID), + helpers.Interface("result", result)) + return nil }) switch err { case deadline.ErrTimedOut: @@ -181,16 +211,7 @@ func defaultPackagesOptions() *packagesOptions { } func detectSource(userInput string, opts *packagesOptions, registryOptions *image.RegistryOptions) (source.Source, error) { - detection, err := source.Detect( - userInput, - source.DetectConfig{ - DefaultImageSource: opts.DefaultImagePullSource, - }, - ) - if err != nil { - return nil, fmt.Errorf("could not determine source: %w", err) - } - + var err error var platform *image.Platform if opts.Platform != "" { @@ -200,13 +221,8 @@ func detectSource(userInput string, opts *packagesOptions, registryOptions *imag } } - hashers, err := Hashers(opts.Source.File.Digests...) - if err != nil { - return nil, fmt.Errorf("invalid hash: %w", err) - } - - src, err := detection.NewSource( - source.DetectionSourceConfig{ + src, err := source.NewFromStereoscopeImage( + source.StereoscopeImageConfig{ Alias: source.Alias{ Name: opts.Source.Name, Version: opts.Source.Version, @@ -216,64 +232,14 @@ func detectSource(userInput string, opts *packagesOptions, registryOptions *imag Exclude: source.ExcludeConfig{ Paths: opts.Exclusions, }, - DigestAlgorithms: hashers, - BasePath: opts.BasePath, + Reference: userInput, + From: image.DetermineDefaultImagePullSource(userInput), }, ) return src, err } -func generateSBOM(toolName string, toolVersion string, src source.Source, opts *options.Catalog) (*sbom.SBOM, error) { - tasks, err := eventloop.Tasks(opts) - if err != nil { - return nil, err - } - - s := sbom.SBOM{ - Source: src.Describe(), - Descriptor: sbom.Descriptor{ - Name: toolName, - Version: toolVersion, - Configuration: opts, - }, - } - - err = buildRelationships(&s, src, tasks) - - return &s, err -} - -func buildRelationships(s *sbom.SBOM, src source.Source, tasks []eventloop.Task) error { - var errs error - - var relationships []<-chan artifact.Relationship - for _, task := range tasks { - c := make(chan artifact.Relationship) - relationships = append(relationships, c) - go func(task eventloop.Task) { - err := eventloop.RunTask(task, &s.Artifacts, src, c) - if err != nil { - errs = multierror.Append(errs, err) - } - }(task) - } - - s.Relationships = append(s.Relationships, mergeRelationships(relationships...)...) - - return errs -} - -func mergeRelationships(cs ...<-chan artifact.Relationship) (relationships []artifact.Relationship) { - for _, c := range cs { - for n := range c { - relationships = append(relationships, n) - } - } - - return relationships -} - // Version returns Syft's version which is used to tag SBOMs func (s *SyftAdapter) Version() string { return tools.PackageVersion("github.com/anchore/syft") diff --git a/adapters/v1/syft_test.go b/adapters/v1/syft_test.go index 5ffe25a..4dd89fe 100644 --- a/adapters/v1/syft_test.go +++ b/adapters/v1/syft_test.go @@ -35,6 +35,11 @@ func Test_syftAdapter_CreateSBOM(t *testing.T) { imageID: "library/hello-world@sha256:aa0cc8055b82dc2509bed2e19b275c8f463506616377219d9642221ab53cf9fe", format: string(fileContent("testdata/hello-world-sbom.format.json")), }, + { + name: "schema v1 image produces well-formed SBOM", + imageID: "quay.io/jitesoft/debian:stretch-slim", + format: string(fileContent("testdata/stretch-slim-sbom.format.json")), + }, { name: "valid image produces well-formed SBOM", imageID: "library/alpine@sha256:e2e16842c9b54d985bf1ef9242a313f36b856181f188de21313820e177002501", @@ -55,13 +60,13 @@ func Test_syftAdapter_CreateSBOM(t *testing.T) { }, }, }, - // { - // name: "big image produces incomplete SBOM", - // imageID: "library/alpine@sha256:e2e16842c9b54d985bf1ef9242a313f36b856181f188de21313820e177002501", - // format: "null", - // maxImageSize: 1, - // wantIncomplete: true, - // }, + { + name: "big image produces incomplete SBOM", + imageID: "library/alpine@sha256:e2e16842c9b54d985bf1ef9242a313f36b856181f188de21313820e177002501", + format: "null", + maxImageSize: 1, + wantIncomplete: true, + }, { name: "system tests image", imageID: "public-registry.systest-ns-bpf7:5000/nginx:test", diff --git a/adapters/v1/testdata/alpine-sbom.format.json b/adapters/v1/testdata/alpine-sbom.format.json index 904bf93..bc03451 100644 --- a/adapters/v1/testdata/alpine-sbom.format.json +++ b/adapters/v1/testdata/alpine-sbom.format.json @@ -3032,280 +3032,1000 @@ "location": { "path": "/bin/busybox", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 755, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "application/x-sharedlib", + "size": 841392 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "c9534b79e07b568ba108efe4cfe75b7cbddd6387" + }, + { + "algorithm": "sha256", + "value": "36d96947f81bee3a5e1d436a333a52209f051bb3556028352d4273a748e2d136" + } + ] }, { "id": "8d0f0e38c71439e1", "location": { "path": "/etc/apk/keys/alpine-devel@lists.alpinelinux.org-4a6a0840.rsa.pub", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 451 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "3af08548ef78cfdedcf349880c2c6a1a48763a0e" + }, + { + "algorithm": "sha256", + "value": "9c102bcc376af1498d549b77bdbfa815ae86faa1d2d82f040e616b18ef2df2d4" + } + ] }, { "id": "671d1f01c6f0063d", "location": { "path": "/etc/apk/keys/alpine-devel@lists.alpinelinux.org-5243ef4b.rsa.pub", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 451 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "bfb616658cc05a872568b0c8e398c482e23b60dd" + }, + { + "algorithm": "sha256", + "value": "ebf31683b56410ecc4c00acd9f6e2839e237a3b62b5ae7ef686705c7ba0396a9" + } + ] }, { "id": "6722cd9ee8e4cd77", "location": { "path": "/etc/apk/keys/alpine-devel@lists.alpinelinux.org-5261cecb.rsa.pub", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 451 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "3671ae0ec7503b1e193587c1dcdf7b78bc863e42" + }, + { + "algorithm": "sha256", + "value": "12f899e55a7691225603d6fb3324940fc51cd7f133e7ead788663c2b7eecb00c" + } + ] }, { "id": "627946275cda492f", "location": { "path": "/etc/apk/keys/alpine-devel@lists.alpinelinux.org-6165ee59.rsa.pub", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 800 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "95995311236b7a55933642ffa10ce6014f1af7d0" + }, + { + "algorithm": "sha256", + "value": "207e4696d3c05f7cb05966aee557307151f1f00217af4143c1bcaf33b8df733f" + } + ] }, { "id": "09bf3883b623158f", "location": { "path": "/etc/apk/keys/alpine-devel@lists.alpinelinux.org-61666e3f.rsa.pub", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 800 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "58d5ba4b2f3b1e927721d7a6432f298eedf72a6b" + }, + { + "algorithm": "sha256", + "value": "128d34d4aec39b0daedea8163cd8dc24dff36fd3d848630ab97eeb1d3084bbb3" + } + ] }, { "id": "7ff31e5e9ba0bfa9", "location": { "path": "/etc/crontabs/root", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 600, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/tab-separated-values", + "size": 283 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "bdf9356a9516238c8b2468613517749098b17ef6" + }, + { + "algorithm": "sha256", + "value": "575d810a9fae5f2f0671c9b2c0ce973e46c7207fbe5cb8d1b0d1836a6a0470e3" + } + ] }, { "id": "6b9abe7d80ee470b", "location": { "path": "/etc/fstab", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/csv", + "size": 89 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "d50ee135ef10a434b9df582ea8276b5c1ce803fa" + }, + { + "algorithm": "sha256", + "value": "a3efca2e8d62785c87517283092b4c800d88612b6f3f06b80a4c2f39d8e68841" + } + ] }, { "id": "fb8ddb3720060aa2", "location": { "path": "/etc/group", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 697 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "dcafa89498396b2cc7495354920819257b81fbd6" + }, + { + "algorithm": "sha256", + "value": "0632d55a68081065097472fe7bc7c66f0785f3b78f39fb23f622d24a7e09be9f" + } + ] }, { "id": "e456dfb5be04fdb7", "location": { "path": "/etc/hostname", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 10 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "ea75706155cffed0a1bd43ddba4543da27d73a67" + }, + { + "algorithm": "sha256", + "value": "d906aecb61d076a967d9ffe8821c7b04b063f72df9d9e35b33ef36b1c0d98f16" + } + ] }, { "id": "4fdfbb03676f495b", "location": { "path": "/etc/hosts", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 79 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "043eb324a653456caa1a73e2e2d49f77792bb0c5" + }, + { + "algorithm": "sha256", + "value": "e3998dbe02b51dada33de87ae43d18a93ab6915b9e34f5a751bf2b9b25a55492" + } + ] }, { "id": "2791973cba0a89bb", "location": { "path": "/etc/inittab", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 570 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "4ecb616e15bb4335917b513f34ac133ae0f8a477" + }, + { + "algorithm": "sha256", + "value": "54a5f36970125bf70cdf7b215c9e12a287d92ad76a693bd72aec4cbc5645df87" + } + ] }, { "id": "5f6a22a80b2c468e", "location": { "path": "/etc/logrotate.d/acpid", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 140 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "4f29720883559a74be03f4de69de2f66113b064b" + }, + { + "algorithm": "sha256", + "value": "d608a3b7715886b5735def0cc50a6359fd364fac2e0e0a459c588c04be471031" + } + ] }, { "id": "1071b0c6b4d98bb1", "location": { "path": "/etc/modprobe.d/aliases.conf", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 1545 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "5946e1e930583552bb7b863eb94bcbb3feef8aa9" + }, + { + "algorithm": "sha256", + "value": "3ebaba946f213670170c7d69949f690a3854553bd0b1560f1d980cba4c83a942" + } + ] }, { "id": "7b189c84b22c7f02", "location": { "path": "/etc/modprobe.d/blacklist.conf", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 2136 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "e1376014791376ddee402f8d06dae7b4e9e6f67e" + }, + { + "algorithm": "sha256", + "value": "5cd46031fc7dc7186e67c97fd34780597de4ebff51dbe41eba27220fe5e0d866" + } + ] }, { "id": "b103e8d521455a19", "location": { "path": "/etc/modprobe.d/i386.conf", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 122 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "a676b2fe78e7ea897d702b2c2fb2a2659f1eb657" + }, + { + "algorithm": "sha256", + "value": "6c46c4cbfb8b7594f19eb94801a350fa2221ae9ac5239a8819d15555caa76ae8" + } + ] }, { "id": "77282715f933737e", "location": { "path": "/etc/modprobe.d/kms.conf", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 91 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "ca76cb9f71980e9bda8db6bf95da759e26b27a88" + }, + { + "algorithm": "sha256", + "value": "50467fa732f809f3a2bb5738628765c5f895c3a237e1c1ad09f85d41fd9ca7c5" + } + ] }, { "id": "8108ab845e4ccbcb", "location": { "path": "/etc/modules", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 15 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "b68a208d48a91c670c8040a03c95fae12c144f53" + }, + { + "algorithm": "sha256", + "value": "2c881de75a5409c35d2433a24f180b8b02ba478ef2c1c60ea3434a35bcbc335d" + } + ] }, { "id": "35ab393f27e0bc39", "location": { "path": "/etc/motd", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 284 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "48b912f610627546cfc30af0f974745a1bf7c30f" + }, + { + "algorithm": "sha256", + "value": "ff044e9be5daa2eee2d3d10a4da72e5477e4c24c16f1792de2c91dae844c0e30" + } + ] }, { "id": "da2faa18609cadef", "location": { "path": "/etc/network/if-up.d/dad", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 775, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 265 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "3917fe94f44ab9881d90105c2a87af475b7ad10e" + }, + { + "algorithm": "sha256", + "value": "8ee2455448c12cd1fd0befbc84f1ace7b80ba46603aff0d67bc7bcad604ea466" + } + ] }, { "id": "4cf9c3537f896231", "location": { "path": "/etc/nsswitch.conf", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 205 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "f4306c327bf44767da8da4e3a13bf40bdd4d3aaa" + }, + { + "algorithm": "sha256", + "value": "0afd94c183d30a348b45057f6bf468e121aa448a7641109addb5bb8e282f514d" + } + ] }, { "id": "57e155e28050b71f", "location": { "path": "/etc/passwd", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 1172 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "4dc86eb8b51fbabd22cef7d9419c6037f2c9841f" + }, + { + "algorithm": "sha256", + "value": "2e0902cf0a7f64bf4e64ef2fad66ae977b4d01975dddf5352a84aea5c4e901f0" + } + ] }, { "id": "e549cedcbd486e69", "location": { "path": "/etc/profile", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 846 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "21ae544d7bd19001f595364af259bca9105d445e" + }, + { + "algorithm": "sha256", + "value": "2055f9abf0d8055e788deae8c6e5be0de008ea2dadc833a15b235bca435faa5e" + } + ] }, { "id": "d98fbe0bce78b009", "location": { "path": "/etc/profile.d/README", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 249 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "df9396b02cf3be70767e6171eb691baa6d40c759" + }, + { + "algorithm": "sha256", + "value": "b73284f27fe2da9ae1902b1fe9596c3ffc61a154e2805a034184f0468f8b09b0" + } + ] }, { "id": "02eba7befcbb3bfa", "location": { "path": "/etc/profile.d/color_prompt.sh.disabled", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 447 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "d5733d99d7b5676f6d58c19a3a47a8bc3fe6e2e5" + }, + { + "algorithm": "sha256", + "value": "ba24425c6864a5d17fa0fdaf914c4d21419e47c4d62080c33830af059fe46617" + } + ] }, { "id": "71fcfec0ece1a67a", "location": { "path": "/etc/profile.d/locale.sh", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 61 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "4bc8fe596ef5996c5f572f32b61a94ec7515a01c" + }, + { + "algorithm": "sha256", + "value": "84eb9034099d759ff08e6da5a731cacfc63a319547ad0f1dfc1c64853aca93f2" + } + ] }, { "id": "b58b2fb69e8b39c8", "location": { "path": "/etc/protocols", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 3144 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "d5f9654539089b96f1b1956848d783527da6fb47" + }, + { + "algorithm": "sha256", + "value": "4959498abbadaa1e50894a266f8d0d94500101cfe5b5f09dcad82e9d5bdfab46" + } + ] }, { "id": "7964b7b17ac34389", "location": { "path": "/etc/securetty", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 98 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "981f791ead8d513679f7d443892b23f70e45ace5" + }, + { + "algorithm": "sha256", + "value": "49382575069e4b954a36f1fb2248d1bd96ee7ba28a5b12798fa92d80a29d0fab" + } + ] }, { "id": "dfe56f19a55af4ab", "location": { "path": "/etc/services", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 12813 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "a0d7a229bf049f7fe17e8445226236e4024535d0" + }, + { + "algorithm": "sha256", + "value": "f6183055fd949f9c53d49ee620f85d0150123ea691d25ed1bba0c641b4ee2f48" + } + ] }, { "id": "6202d0483a0eaf70", "location": { "path": "/etc/shadow", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 640, + "type": "RegularFile", + "userID": 0, + "groupID": 42, + "mimeType": "text/plain", + "size": 422 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "258ab61690a3d3c96c2447483f55c6761ed21b01" + }, + { + "algorithm": "sha256", + "value": "cdcdf002dbf6a03de7cf3c024d12162d6227cb5e2d27ca58844a716301f03151" + } + ] }, { "id": "8668162f21426d67", "location": { "path": "/etc/shells", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 38 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "a239b661da4227a07f6a9183699fd275bdb12640" + }, + { + "algorithm": "sha256", + "value": "24be6ceb236610df45684c83b06c918ae45635be55f69975e43676b7595bbc5f" + } + ] }, { "id": "0fab6f59514f4740", "location": { "path": "/etc/ssl/certs/ca-certificates.crt", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 214222 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "0fc963623ee95ec46ae1dfde1c6358074198d7e2" + }, + { + "algorithm": "sha256", + "value": "92dd040a840947f00a14f66e9e17a799051ad7f88ddcde851b3711ee0a78a7ac" + } + ] }, { "id": "bacd9a5a78fe821e", "location": { "path": "/etc/ssl/ct_log_list.cnf", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 412 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "a2587c4e97408b64274e5e052b74e3754892c13a" + }, + { + "algorithm": "sha256", + "value": "f1c1803d13d1d0b755b13b23c28bd4e20e07baf9f2b744c9337ba5866aa0ec3b" + } + ] }, { "id": "0e7815a8b0d1ecdc", "location": { "path": "/etc/ssl/ct_log_list.cnf.dist", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 412 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "a2587c4e97408b64274e5e052b74e3754892c13a" + }, + { + "algorithm": "sha256", + "value": "f1c1803d13d1d0b755b13b23c28bd4e20e07baf9f2b744c9337ba5866aa0ec3b" + } + ] }, { "id": "d5b653bea57138f7", "location": { "path": "/etc/ssl/misc/CA.pl", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 755, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/x-perl", + "size": 8062 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "99ca8b6ceea241ef139900a8443a3315649c8ac4" + }, + { + "algorithm": "sha256", + "value": "35a85ebe05ac4ee42a0efe544c02ad2c70bf374c4dcd8bf5aaf403b7c1b6cdd8" + } + ] }, { "id": "2cb40ab7cf323e58", "location": { "path": "/etc/ssl/misc/tsget.pl", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 755, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/x-perl", + "size": 6746 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "4c0ec33c1491923f7ee5cff7cbc2c8b349428135" + }, + { + "algorithm": "sha256", + "value": "5a4651ac703c5c4c8abea58ec031e2d9ed352058cb7b0ac4cb6bbf197fb233ad" + } + ] }, { "id": "f280edcc4c0a74ca", "location": { "path": "/etc/ssl/openssl.cnf", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 12292 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "7ea62afe227ac7bd5c4e9afc7dc3b8ffa220c908" + }, + { + "algorithm": "sha256", + "value": "15c6ec001241f54bed98c135f0dab42f4a5e489f22544613b0671198f8ad8318" + } + ] }, { "id": "cd658a985edaf628", "location": { "path": "/etc/ssl/openssl.cnf.dist", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 12292 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "7ea62afe227ac7bd5c4e9afc7dc3b8ffa220c908" + }, + { + "algorithm": "sha256", + "value": "15c6ec001241f54bed98c135f0dab42f4a5e489f22544613b0671198f8ad8318" + } + ] }, { "id": "c7bb6e42ea2504f8", "location": { "path": "/etc/sysctl.conf", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 53 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "e2ea73ded7e7371664204b148569fb5e88b0f7a8" + }, + { + "algorithm": "sha256", + "value": "8bba47da45bc8715c69ac904a60410eabffaa7bbbef640f9c1368ab9c48493d0" + } + ] }, { "id": "faa5e8897571d717", "location": { "path": "/etc/udhcpd.conf", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 5636 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "1202c58e3ebba2edde32aa789b7af66639d0ed05" + }, + { + "algorithm": "sha256", + "value": "9249f3fd52c2500bfe3586def6765b82336ba7832b65cb8c6b8ca1999c31342e" + } + ] }, { "id": "c3b51a85a6a2d3e1", @@ -3319,259 +4039,925 @@ "location": { "path": "/lib/ld-musl-x86_64.so.1", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 755, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "application/x-sharedlib", + "size": 616992 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "b46c60c7614bac3fb4524d373540706db1224425" + }, + { + "algorithm": "sha256", + "value": "a0e80898190e34005a4d0598fa71e2e0b0ab2726a3cd73c3ad147770ca371173" + } + ] }, { "id": "1aa086f53c8c0808", "location": { "path": "/lib/libapk.so.3.12.0", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 755, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "application/x-sharedlib", + "size": 184008 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "a298e962a5e0ce6395a3b11b35ef25e57a25d3c8" + }, + { + "algorithm": "sha256", + "value": "f042925dae3decc473a8b88afbbfbdedfe740731aef7f41304b671a70950cf45" + } + ] }, { "id": "b5c42da9eeef9d95", "location": { "path": "/lib/libcrypto.so.3", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 755, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "application/x-sharedlib", + "size": 3882720 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "fec2861f154b154158028a36e452a3bc4682598e" + }, + { + "algorithm": "sha256", + "value": "eae45717efd099ddfc04aa53d3b80570290398e84560c0719e07cde644706beb" + } + ] }, { "id": "5c67196b8e1d1558", "location": { "path": "/lib/libssl.so.3", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 755, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "application/x-sharedlib", + "size": 602120 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "a7c33cda6eb0d441263ff08a593523509109adcd" + }, + { + "algorithm": "sha256", + "value": "7c6e060a33d5e0969aced1645e669666b58f223f27d783b8e49471088e3f756a" + } + ] }, { "id": "6d81ff77d1d5460a", "location": { "path": "/lib/libz.so.1.2.13", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 755, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "application/x-sharedlib", + "size": 100264 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "7698af4c7e324d69d09d311d28699431a97f0ac2" + }, + { + "algorithm": "sha256", + "value": "a7df4375fc9f37d5c284ef74e1d782d0100ce3a907ad2cbc6287f769cb90aac4" + } + ] }, { "id": "89c7ab9592844cbb", "location": { "path": "/lib/sysctl.d/00-alpine.conf", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 1278 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "1e9125cd6d7112098a7c446d4f2ee8a269a7aba7" + }, + { + "algorithm": "sha256", + "value": "ee169bea2cb6859420b55ca7a9c23fb68b50adc1d26c951f904dec9e8f767380" + } + ] }, { "id": "c765115741fe905b", "location": { "path": "/sbin/apk", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 755, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "application/x-sharedlib", + "size": 69560 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "ff86e638f7bf1f56211d1ce5ae3dbba2e7d384cc" + }, + { + "algorithm": "sha256", + "value": "e9779d79565729775dbf0779d198a01b7f2bec49ebfb5ab727993b10731d03ec" + } + ] }, { "id": "c911f25351778370", "location": { "path": "/sbin/ldconfig", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 755, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 393 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "2a36b6f8f3992b112450e66ac128c2ea499a103e" + }, + { + "algorithm": "sha256", + "value": "b4a2c06db38742e8c42c3c9838b285a7d8cdac6c091ff3df5ff9a15f1e41b9c7" + } + ] }, { "id": "e0a729e0af2c3974", "location": { "path": "/usr/bin/getconf", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 755, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "application/x-sharedlib", + "size": 34920 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "514468d67656129d5bc162ca39a16ff4c4641ae6" + }, + { + "algorithm": "sha256", + "value": "018f94905c92f3af3bb63db27909301dd21cbc6ed0b292e68a3c79f2d867d37e" + } + ] }, { "id": "51ddc107d90f5f4b", "location": { "path": "/usr/bin/getent", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 755, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "application/x-sharedlib", + "size": 48448 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "ceddd4e0b7e00ddcc5b85de5205ce4b506f99cbc" + }, + { + "algorithm": "sha256", + "value": "e1da9464434075598b13bca855bbfc23042f417a7b7745a30867d345fafb7157" + } + ] }, { "id": "47c9d14986fb43fc", "location": { "path": "/usr/bin/iconv", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 755, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "application/x-sharedlib", + "size": 24168 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "314af66ec460757ec81034fc55e6fcd9ab5badf9" + }, + { + "algorithm": "sha256", + "value": "76255619020c88ceb5135ca06c1faaaf39ca07dbe8f5efd3668e5ddb977b319e" + } + ] }, { "id": "bf51187b1c0aae54", "location": { "path": "/usr/bin/ldd", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 755, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 52 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "c850211a08262fb11181b200eca431c93cdfde4b" + }, + { + "algorithm": "sha256", + "value": "9a49c2541a439be89f1ef1496604ef3b607f460d589877c60775acf74cdb5dfb" + } + ] }, { "id": "6a7f2c32518c8dbc", "location": { "path": "/usr/bin/scanelf", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 755, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "application/x-sharedlib", + "size": 83840 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "368022b2c543b9a9d717528e125f2aac50376eca" + }, + { + "algorithm": "sha256", + "value": "9d67cee3e834a1c96ff488471e70de590886253ffca68f6f36a28044f4d09878" + } + ] }, { "id": "d7486c5ba43c6e31", "location": { "path": "/usr/bin/ssl_client", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 755, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "application/x-sharedlib", + "size": 14320 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "dd2841de918c0cbf11eecaaf0d578b38167a3f74" + }, + { + "algorithm": "sha256", + "value": "99a0361fb672afb60c11e11ae4139f69af1aad2ca7b38c5be8035a2551db683d" + } + ] }, { "id": "b6274398f5a1b17c", "location": { "path": "/usr/lib/engines-3/afalg.so", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 755, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "application/x-sharedlib", + "size": 22632 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "45d0ff9513edf92a5d5c4ee2aa8d46b557de2be0" + }, + { + "algorithm": "sha256", + "value": "b75ee5e1ac378b66dcfec99c5745624b8eac50d3000baeb31da241cd277914aa" + } + ] }, { "id": "e5d401ebaaead494", "location": { "path": "/usr/lib/engines-3/capi.so", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 755, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "application/x-sharedlib", + "size": 13848 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "446642893093fdbe85d7dd1f02acc9e827b3a933" + }, + { + "algorithm": "sha256", + "value": "857c3d3a882ea1ea4b1d5e24b910c90019b077eac0d1c0bf1f563222f5bb96b2" + } + ] }, { "id": "e05bfc6d7f257206", "location": { "path": "/usr/lib/engines-3/loader_attic.so", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 755, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "application/x-sharedlib", + "size": 47656 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "08cf36a0962c7719d4e7195d4a249e6322d39aca" + }, + { + "algorithm": "sha256", + "value": "b3950a419b3d76bb01475788dd8bdb93a2281a5d4d58ae1ecaa07059212a57df" + } + ] }, { "id": "76af347c7dbc737a", "location": { "path": "/usr/lib/engines-3/padlock.so", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 755, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "application/x-sharedlib", + "size": 22408 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "4abe87b5e76f02a564e3245a5019cbe09fa48c31" + }, + { + "algorithm": "sha256", + "value": "4c7ba20896a438112b10f897b6c4b5a648e40c8a126dee1161215c7d9f91edfd" + } + ] }, { "id": "1ae61640919b8dcb", "location": { "path": "/usr/lib/ossl-modules/legacy.so", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 755, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "application/x-sharedlib", + "size": 104328 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "54c240590a11101c8b0c8c44533030073b154691" + }, + { + "algorithm": "sha256", + "value": "9bfaa6a311b8af4190169369a241a693b69303f80f5833ac417015100ba79365" + } + ] }, { "id": "d7833aea1af90c3e", "location": { "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-4a6a0840.rsa.pub", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 451 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "3af08548ef78cfdedcf349880c2c6a1a48763a0e" + }, + { + "algorithm": "sha256", + "value": "9c102bcc376af1498d549b77bdbfa815ae86faa1d2d82f040e616b18ef2df2d4" + } + ] }, { "id": "f229e2967a4439ae", "location": { "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-5243ef4b.rsa.pub", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 451 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "bfb616658cc05a872568b0c8e398c482e23b60dd" + }, + { + "algorithm": "sha256", + "value": "ebf31683b56410ecc4c00acd9f6e2839e237a3b62b5ae7ef686705c7ba0396a9" + } + ] }, { "id": "5c344de6c0adfb41", "location": { "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-524d27bb.rsa.pub", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 451 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "053a92f87fd4532850bb31f0881978efe0532ae5" + }, + { + "algorithm": "sha256", + "value": "1bb2a846c0ea4ca9d0e7862f970863857fc33c32f5506098c636a62a726a847b" + } + ] }, { "id": "7e0eaf4903e2c594", "location": { "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-5261cecb.rsa.pub", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 451 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "3671ae0ec7503b1e193587c1dcdf7b78bc863e42" + }, + { + "algorithm": "sha256", + "value": "12f899e55a7691225603d6fb3324940fc51cd7f133e7ead788663c2b7eecb00c" + } + ] }, { "id": "c4d82f372f586c5d", "location": { "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-58199dcc.rsa.pub", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 451 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "39ac5d72c6ba018a0f74b8b453894edc9db07b5f" + }, + { + "algorithm": "sha256", + "value": "73867d92083f2f8ab899a26ccda7ef63dfaa0032a938620eda605558958a8041" + } + ] }, { "id": "c9f749c20ace3749", "location": { "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-58cbb476.rsa.pub", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 451 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "c8fabeb2eeb992c368c77b9707e0d1ecfd7cf905" + }, + { + "algorithm": "sha256", + "value": "9a4cd858d9710963848e6d5f555325dc199d1c952b01cf6e64da2c15deedbd97" + } + ] }, { "id": "3f37b052555a032a", "location": { "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-58e4f17d.rsa.pub", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 451 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "329643357d0b78b1ef48ec155325e25f1d7534dd" + }, + { + "algorithm": "sha256", + "value": "780b3ed41786772cbc7b68136546fa3f897f28a23b30c72dde6225319c44cfff" + } + ] }, { "id": "bd290647080920df", "location": { "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-5e69ca50.rsa.pub", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 451 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "825090fde25bbc0e71a9cb3076316b5afe459e4d" + }, + { + "algorithm": "sha256", + "value": "59c01c57b446633249f67c04b115dd6787f4378f183dff2bbf65406df93f176d" + } + ] }, { "id": "761377117b43797c", "location": { "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-60ac2099.rsa.pub", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 451 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "5d4743128353b6396fad2fa2ba793ace21602295" + }, + { + "algorithm": "sha256", + "value": "db0b49163f07ffba64a5ca198bcf1688610b0bd1f0d8d5afeaf78559d73f2278" + } + ] }, { "id": "81a031158e5a172a", "location": { "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-6165ee59.rsa.pub", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 800 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "95995311236b7a55933642ffa10ce6014f1af7d0" + }, + { + "algorithm": "sha256", + "value": "207e4696d3c05f7cb05966aee557307151f1f00217af4143c1bcaf33b8df733f" + } + ] }, { "id": "c0437528810bb1fb", "location": { "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-61666e3f.rsa.pub", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 800 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "58d5ba4b2f3b1e927721d7a6432f298eedf72a6b" + }, + { + "algorithm": "sha256", + "value": "128d34d4aec39b0daedea8163cd8dc24dff36fd3d848630ab97eeb1d3084bbb3" + } + ] }, { "id": "932c31c2300cc286", "location": { "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616a9724.rsa.pub", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 800 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "23d0f2ea1af269c2f66165e0f8a944e96bf011de" + }, + { + "algorithm": "sha256", + "value": "10877cce0a935e46ad88cb79e174a2491680508eccda08e92bf04fb9bf37fbc1" + } + ] }, { "id": "a11195f3b431951d", "location": { "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616abc23.rsa.pub", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 800 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "3529ec82670c6d4e20ee3e4968db34b551e91d50" + }, + { + "algorithm": "sha256", + "value": "4a095a9daca86da496a3cd9adcd95ee2197fdbeb84638656d469f05a4d740751" + } + ] }, { "id": "d15e3bb2fde54385", "location": { "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616ac3bc.rsa.pub", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 800 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "55a301064e11c6fe9ba0f2ca17e234f3943ccb61" + }, + { + "algorithm": "sha256", + "value": "0caf5662fde45616d88cfd7021b7bda269a2fcaf311e51c48945a967a609ec0b" + } + ] }, { "id": "e62c139013a804b7", "location": { "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616adfeb.rsa.pub", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 800 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "de1241307014aae3dba798e900f163408d98d6f4" + }, + { + "algorithm": "sha256", + "value": "ebe717d228555aa58133c202314a451f81e71f174781fd7ff8d8970d6cfa60da" + } + ] }, { "id": "5229138dd6e4ad25", "location": { "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616ae350.rsa.pub", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 800 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "57f6b93fda4a4496fab62844ddef0eeb168f80b5" + }, + { + "algorithm": "sha256", + "value": "d11f6b21c61b4274e182eb888883a8ba8acdbf820dcc7a6d82a7d9fc2fd2836d" + } + ] }, { "id": "75fcc462c95ba1ee", "location": { "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616db30d.rsa.pub", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 800 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "df02c9adc2906a3aa5e5ad69f50e3953e65710d0" + }, + { + "algorithm": "sha256", + "value": "40a216cbd163f22e5f16a9e0929de7cde221b9cbae8e36aa368b1e128afe0a31" + } + ] }, { "id": "c468e3fb98398685", "location": { "path": "/usr/share/udhcpc/default.script", "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } + }, + "metadata": { + "mode": 755, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 3688 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "1d6a46dde403f14a22e2692cd84dd24af3805216" + }, + { + "algorithm": "sha256", + "value": "c4e5a7c4783a7a73dec48dee009ee687015d2de7ff86b269679b95bef2c60e13" + } + ] } ], "source": { @@ -3598,7 +4984,7 @@ "repoDigests": [ "alpine@sha256:e2e16842c9b54d985bf1ef9242a313f36b856181f188de21313820e177002501" ], - "architecture": "amd64", + "architecture": "<>", "os": "linux" } }, @@ -3614,72 +5000,124 @@ "name": "name", "version": "unknown", "configuration": { - "catalogers": null, - "package": { - "cataloger": { - "enabled": true, - "scope": "squashed" - }, - "search-unindexed-archives": false, - "search-indexed-archives": true - }, - "golang": { - "search-local-mod-cache-licenses": false, - "local-mod-cache-dir": "", - "search-remote-licenses": false, - "proxy": "", - "no-proxy": "" - }, - "java": { - "use-network": false, - "maven-url": "", - "max-parent-recursive-depth": 0 - }, - "linux-kernel": { - "catalog-modules": true - }, - "python": { - "guess-unpinned-requirements": false - }, - "file-metadata": { - "cataloger": { - "enabled": false, - "scope": "squashed" - }, - "digests": [ - "sha256" + "catalogers": { + "requested": { + "default": [ + "image" + ] + }, + "used": [ + "alpm-db-cataloger", + "apk-db-cataloger", + "binary-cataloger", + "cargo-auditable-binary-cataloger", + "conan-info-cataloger", + "dotnet-portable-executable-cataloger", + "dpkg-db-cataloger", + "go-module-binary-cataloger", + "graalvm-native-image-cataloger", + "java-archive-cataloger", + "javascript-package-cataloger", + "nix-store-cataloger", + "php-composer-installed-cataloger", + "portage-cataloger", + "python-installed-package-cataloger", + "r-package-cataloger", + "rpm-db-cataloger", + "ruby-installed-gemspec-cataloger", + "sbom-cataloger" ] }, - "file-contents": { - "cataloger": { - "enabled": false, - "scope": "squashed" - }, - "skip-files-above-size": 1048576, - "globs": null - }, - "registry": { - "insecure-skip-tls-verify": false, - "insecure-use-http": false, - "auth": null, - "ca-cert": "" - }, - "exclude": null, - "platform": "", - "name": "", - "source": { - "name": "", - "version": "", - "file": { - "digests": [ - "sha256" - ] + "data-generation": { + "generate-cpes": true + }, + "files": { + "content": { + "globs": null, + "skip-files-above-size": 0 + }, + "hashers": [ + "sha-1", + "sha-256" + ], + "selection": "owned-by-package" + }, + "packages": { + "binary": [ + "python-binary", + "python-binary-lib", + "pypy-binary-lib", + "go-binary", + "julia-binary", + "helm", + "redis-binary", + "java-binary-openjdk", + "java-binary-ibm", + "java-binary-oracle", + "nodejs-binary", + "go-binary-hint", + "busybox-binary", + "haproxy-binary", + "perl-binary", + "php-cli-binary", + "php-fpm-binary", + "php-apache-binary", + "php-composer-binary", + "httpd-binary", + "memcached-binary", + "traefik-binary", + "postgresql-binary", + "mysql-binary", + "mysql-binary", + "mysql-binary", + "xtrabackup-binary", + "mariadb-binary", + "rust-standard-library-linux", + "rust-standard-library-macos", + "ruby-binary", + "erlang-binary", + "consul-binary", + "nginx-binary", + "bash-binary", + "openssl-binary", + "gcc-binary", + "wordpress-cli-binary" + ], + "golang": { + "local-mod-cache-dir": "<>", + "proxies": [ + "https://proxy.golang.org", + "direct" + ], + "search-local-mod-cache-licenses": false, + "search-remote-licenses": false + }, + "java-archive": { + "include-indexed-archives": true, + "include-unindexed-archives": false, + "maven-base-url": "https://repo1.maven.org/maven2", + "max-parent-recursive-depth": 5, + "use-network": false + }, + "javascript": { + "npm-base-url": "https://registry.npmjs.org", + "search-remote-licenses": false + }, + "linux-kernel": { + "catalog-modules": true + }, + "python": { + "guess-unpinned-requirements": false } }, - "parallelism": 4, - "default-image-pull-source": "", - "base-path": "", - "exclude-binary-overlap-by-ownership": true + "relationships": { + "exclude-binary-packages-with-file-ownership-overlap": true, + "package-file-ownership": true, + "package-file-ownership-overlap": true + }, + "search": { + "scope": "squashed" + } } }, "schema": { diff --git a/adapters/v1/testdata/alpine-sbom.json b/adapters/v1/testdata/alpine-sbom.json index 6c83ac3..b800a45 100644 --- a/adapters/v1/testdata/alpine-sbom.json +++ b/adapters/v1/testdata/alpine-sbom.json @@ -1,3689 +1,5127 @@ { - "artifacts": [ - { - "id": "0a3b4a9dae4049aa", - "name": "alpine-baselayout", - "version": "3.4.0-r0", - "type": "apk", - "foundBy": "apk-db-cataloger", - "locations": [ - { - "path": "/lib/apk/db/installed", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", - "accessPath": "/lib/apk/db/installed", - "annotations": { - "evidence": "primary" - } - } - ], - "licenses": [ - { - "value": "GPL-2.0-only", - "spdxExpression": "GPL-2.0-only", - "type": "declared", - "urls": [], - "locations": [ - { - "path": "/lib/apk/db/installed", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", - "accessPath": "/lib/apk/db/installed", - "annotations": { - "evidence": "primary" - } - } - ] - } - ], - "language": "", - "cpes": [ - "cpe:2.3:a:alpine-baselayout:alpine-baselayout:3.4.0-r0:*:*:*:*:*:*:*", - "cpe:2.3:a:alpine-baselayout:alpine_baselayout:3.4.0-r0:*:*:*:*:*:*:*", - "cpe:2.3:a:alpine_baselayout:alpine-baselayout:3.4.0-r0:*:*:*:*:*:*:*", - "cpe:2.3:a:alpine_baselayout:alpine_baselayout:3.4.0-r0:*:*:*:*:*:*:*", - "cpe:2.3:a:alpine:alpine-baselayout:3.4.0-r0:*:*:*:*:*:*:*", - "cpe:2.3:a:alpine:alpine_baselayout:3.4.0-r0:*:*:*:*:*:*:*" - ], - "purl": "pkg:apk/alpine/alpine-baselayout@3.4.0-r0?arch=x86_64&distro=alpine-3.17.2", - "metadataType": "apk-db-entry", - "metadata": { - "package": "alpine-baselayout", - "originPackage": "alpine-baselayout", - "maintainer": "Natanael Copa ", - "version": "3.4.0-r0", - "architecture": "x86_64", - "url": "https://git.alpinelinux.org/cgit/aports/tree/main/alpine-baselayout", - "description": "Alpine base dir structure and init scripts", - "size": 8890, - "installedSize": 331776, - "pullDependencies": [ - "alpine-baselayout-data=3.4.0-r0", - "/bin/sh" - ], - "provides": [], - "pullChecksum": "Q1/eXfmbYT1WXenFSqKjroYyK84NE=", - "gitCommitOfApkPort": "bd965a7ebf7fd8f07d7a0cc0d7375bf3e4eb9b24", - "files": [ - { - "path": "/dev" - }, - { - "path": "/dev/pts" - }, - { - "path": "/dev/shm" - }, - { - "path": "/etc" - }, - { - "path": "/etc/motd", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1SLkS9hBidUbPwwrw+XR0Whv3ww8=" - } - }, - { - "path": "/etc/apk" - }, - { - "path": "/etc/conf.d" - }, - { - "path": "/etc/crontabs" - }, - { - "path": "/etc/crontabs/root", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "600", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1vfk1apUWI4yLJGhhNRd0kJixfvY=" - } - }, - { - "path": "/etc/init.d" - }, - { - "path": "/etc/modprobe.d" - }, - { - "path": "/etc/modprobe.d/aliases.conf", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1WUbh6TBYNVK7e4Y+uUvLs/7viqk=" - } - }, - { - "path": "/etc/modprobe.d/blacklist.conf", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q14TdgFHkTdt3uQC+NBtrntOnm9n4=" - } - }, - { - "path": "/etc/modprobe.d/i386.conf", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1pnay/njn6ol9cCssL7KiZZ8etlc=" - } - }, - { - "path": "/etc/modprobe.d/kms.conf", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1ynbLn3GYDpvajba/ldp1niayeog=" - } - }, - { - "path": "/etc/modules-load.d" - }, - { - "path": "/etc/network" - }, - { - "path": "/etc/network/if-down.d" - }, - { - "path": "/etc/network/if-post-down.d" - }, - { - "path": "/etc/network/if-pre-up.d" - }, - { - "path": "/etc/network/if-up.d" - }, - { - "path": "/etc/opt" - }, - { - "path": "/etc/periodic" - }, - { - "path": "/etc/periodic/15min" - }, - { - "path": "/etc/periodic/daily" - }, - { - "path": "/etc/periodic/hourly" - }, - { - "path": "/etc/periodic/monthly" - }, - { - "path": "/etc/periodic/weekly" - }, - { - "path": "/etc/profile.d" - }, - { - "path": "/etc/profile.d/README", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q135OWsCzzvnB2fmFx62kbqm1Ax1k=" - } - }, - { - "path": "/etc/profile.d/color_prompt.sh.disabled", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q11XM9mde1Z29tWMGaOkeovD/m4uU=" - } - }, - { - "path": "/etc/profile.d/locale.sh", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1S8j+WW71mWxfVy8ythqU7HUVoBw=" - } - }, - { - "path": "/etc/sysctl.d" - }, - { - "path": "/home" - }, - { - "path": "/lib" - }, - { - "path": "/lib/firmware" - }, - { - "path": "/lib/mdev" - }, - { - "path": "/lib/modules-load.d" - }, - { - "path": "/lib/sysctl.d" - }, - { - "path": "/lib/sysctl.d/00-alpine.conf", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1HpElzW1xEgmKfERtTy7oommnq6c=" - } - }, - { - "path": "/media" - }, - { - "path": "/media/cdrom" - }, - { - "path": "/media/floppy" - }, - { - "path": "/media/usb" - }, - { - "path": "/mnt" - }, - { - "path": "/opt" - }, - { - "path": "/proc" - }, - { - "path": "/root", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "700" - }, - { - "path": "/run" - }, - { - "path": "/sbin" - }, - { - "path": "/srv" - }, - { - "path": "/sys" - }, - { - "path": "/tmp", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "1777" - }, - { - "path": "/usr" - }, - { - "path": "/usr/lib" - }, - { - "path": "/usr/lib/modules-load.d" - }, - { - "path": "/usr/local" - }, - { - "path": "/usr/local/bin" - }, - { - "path": "/usr/local/lib" - }, - { - "path": "/usr/local/share" - }, - { - "path": "/usr/sbin" - }, - { - "path": "/usr/share" - }, - { - "path": "/usr/share/man" - }, - { - "path": "/usr/share/misc" - }, - { - "path": "/var" - }, - { - "path": "/var/run", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "777", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q11/SNZz/8cK2dSKK+cJpVrZIuF4Q=" - } - }, - { - "path": "/var/cache" - }, - { - "path": "/var/cache/misc" - }, - { - "path": "/var/empty", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "555" - }, - { - "path": "/var/lib" - }, - { - "path": "/var/lib/misc" - }, - { - "path": "/var/local" - }, - { - "path": "/var/lock" - }, - { - "path": "/var/lock/subsys" - }, - { - "path": "/var/log" - }, - { - "path": "/var/mail" - }, - { - "path": "/var/opt" - }, - { - "path": "/var/spool" - }, - { - "path": "/var/spool/mail", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "777", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1dzbdazYZA2nTzSIG3YyNw7d4Juc=" - } - }, - { - "path": "/var/spool/cron" - }, - { - "path": "/var/spool/cron/crontabs", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "777", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1OFZt+ZMp7j0Gny0rqSKuWJyqYmA=" - } - }, - { - "path": "/var/tmp", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "1777" - } - ] - } - }, - { - "id": "008bcc1445f44203", - "name": "alpine-baselayout-data", - "version": "3.4.0-r0", - "type": "apk", - "foundBy": "apk-db-cataloger", - "locations": [ - { - "path": "/lib/apk/db/installed", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", - "accessPath": "/lib/apk/db/installed", - "annotations": { - "evidence": "primary" - } - } - ], - "licenses": [ - { - "value": "GPL-2.0-only", - "spdxExpression": "GPL-2.0-only", - "type": "declared", - "urls": [], - "locations": [ - { - "path": "/lib/apk/db/installed", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", - "accessPath": "/lib/apk/db/installed", - "annotations": { - "evidence": "primary" - } - } - ] - } - ], - "language": "", - "cpes": [ - "cpe:2.3:a:alpine-baselayout-data:alpine-baselayout-data:3.4.0-r0:*:*:*:*:*:*:*", - "cpe:2.3:a:alpine-baselayout-data:alpine_baselayout_data:3.4.0-r0:*:*:*:*:*:*:*", - "cpe:2.3:a:alpine_baselayout_data:alpine-baselayout-data:3.4.0-r0:*:*:*:*:*:*:*", - "cpe:2.3:a:alpine_baselayout_data:alpine_baselayout_data:3.4.0-r0:*:*:*:*:*:*:*", - "cpe:2.3:a:alpine-baselayout:alpine-baselayout-data:3.4.0-r0:*:*:*:*:*:*:*", - "cpe:2.3:a:alpine-baselayout:alpine_baselayout_data:3.4.0-r0:*:*:*:*:*:*:*", - "cpe:2.3:a:alpine_baselayout:alpine-baselayout-data:3.4.0-r0:*:*:*:*:*:*:*", - "cpe:2.3:a:alpine_baselayout:alpine_baselayout_data:3.4.0-r0:*:*:*:*:*:*:*", - "cpe:2.3:a:alpine:alpine-baselayout-data:3.4.0-r0:*:*:*:*:*:*:*", - "cpe:2.3:a:alpine:alpine_baselayout_data:3.4.0-r0:*:*:*:*:*:*:*" - ], - "purl": "pkg:apk/alpine/alpine-baselayout-data@3.4.0-r0?arch=x86_64&upstream=alpine-baselayout&distro=alpine-3.17.2", - "metadataType": "apk-db-entry", - "metadata": { - "package": "alpine-baselayout-data", - "originPackage": "alpine-baselayout", - "maintainer": "Natanael Copa ", - "version": "3.4.0-r0", - "architecture": "x86_64", - "url": "https://git.alpinelinux.org/cgit/aports/tree/main/alpine-baselayout", - "description": "Alpine base dir structure and init scripts", - "size": 11664, - "installedSize": 77824, - "pullDependencies": [], - "provides": [], - "pullChecksum": "Q1/JgpM8J6DWI/541tUX+uHEzSjqo=", - "gitCommitOfApkPort": "bd965a7ebf7fd8f07d7a0cc0d7375bf3e4eb9b24", - "files": [ - { - "path": "/etc" - }, - { - "path": "/etc/fstab", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q11Q7hNe8QpDS531guqCdrXBzoA/o=" - } - }, - { - "path": "/etc/group", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q13K+olJg5ayzHSVNUkggZJXuB+9Y=" - } - }, - { - "path": "/etc/hostname", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q16nVwYVXP/tChvUPdukVD2ifXOmc=" - } - }, - { - "path": "/etc/hosts", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1BD6zJKZTRWyqGnPi4tSfd3krsMU=" - } - }, - { - "path": "/etc/inittab", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1TsthbhW7QzWRe1E/NKwTOuD4pHc=" - } - }, - { - "path": "/etc/modules", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1toogjUipHGcMgECgPJX64SwUT1M=" - } - }, - { - "path": "/etc/mtab", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "777", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1kiljhXXH1LlQroHsEJIkPZg2eiw=" - } - }, - { - "path": "/etc/nsswitch.conf", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q19DBsMnv0R2fajaTjoTv0C91NOqo=" - } - }, - { - "path": "/etc/passwd", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1TchuuLUfur0izvfZQZxgN/LJhB8=" - } - }, - { - "path": "/etc/profile", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1Ia5UTXvRkAH1lTZK8lm8qRBdRF4=" - } - }, - { - "path": "/etc/protocols", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q11fllRTkIm5bxsZVoSNeDUn2m+0c=" - } - }, - { - "path": "/etc/services", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1oNeiKb8En3/hfoRFImI25AJFNdA=" - } - }, - { - "path": "/etc/shadow", - "ownerUid": "0", - "ownerGid": "42", - "permissions": "640", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1ltrPIAW2zHeDiajsex2Bdmq3uqA=" - } - }, - { - "path": "/etc/shells", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1ojm2YdpCJ6B/apGDaZ/Sdb2xJkA=" - } - }, - { - "path": "/etc/sysctl.conf", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q14upz3tfnNxZkIEsUhWn7Xoiw96g=" - } - } - ] - } - }, - { - "id": "f0def3051a26afc8", - "name": "alpine-keys", - "version": "2.4-r1", - "type": "apk", - "foundBy": "apk-db-cataloger", - "locations": [ - { - "path": "/lib/apk/db/installed", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", - "accessPath": "/lib/apk/db/installed", - "annotations": { - "evidence": "primary" - } - } - ], - "licenses": [ - { - "value": "MIT", - "spdxExpression": "MIT", - "type": "declared", - "urls": [], - "locations": [ - { - "path": "/lib/apk/db/installed", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", - "accessPath": "/lib/apk/db/installed", - "annotations": { - "evidence": "primary" - } - } - ] - } - ], - "language": "", - "cpes": [ - "cpe:2.3:a:alpine-keys:alpine-keys:2.4-r1:*:*:*:*:*:*:*", - "cpe:2.3:a:alpine-keys:alpine_keys:2.4-r1:*:*:*:*:*:*:*", - "cpe:2.3:a:alpine_keys:alpine-keys:2.4-r1:*:*:*:*:*:*:*", - "cpe:2.3:a:alpine_keys:alpine_keys:2.4-r1:*:*:*:*:*:*:*", - "cpe:2.3:a:alpine:alpine-keys:2.4-r1:*:*:*:*:*:*:*", - "cpe:2.3:a:alpine:alpine_keys:2.4-r1:*:*:*:*:*:*:*" - ], - "purl": "pkg:apk/alpine/alpine-keys@2.4-r1?arch=x86_64&distro=alpine-3.17.2", - "metadataType": "apk-db-entry", - "metadata": { - "package": "alpine-keys", - "originPackage": "alpine-keys", - "maintainer": "Natanael Copa ", - "version": "2.4-r1", - "architecture": "x86_64", - "url": "https://alpinelinux.org", - "description": "Public keys for Alpine Linux packages", - "size": 13361, - "installedSize": 159744, - "pullDependencies": [], - "provides": [], - "pullChecksum": "Q1KM01lfKVp+gEZn23awujqjSkrN8=", - "gitCommitOfApkPort": "aab68f8c9ab434a46710de8e12fb3206e2930a59", - "files": [ - { - "path": "/etc" - }, - { - "path": "/etc/apk" - }, - { - "path": "/etc/apk/keys" - }, - { - "path": "/etc/apk/keys/alpine-devel@lists.alpinelinux.org-4a6a0840.rsa.pub", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1OvCFSO94z97c80mIDCxqGkh2Og4=" - } - }, - { - "path": "/etc/apk/keys/alpine-devel@lists.alpinelinux.org-5243ef4b.rsa.pub", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1v7YWZYzAWoclaLDI45jEguI7YN0=" - } - }, - { - "path": "/etc/apk/keys/alpine-devel@lists.alpinelinux.org-5261cecb.rsa.pub", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1NnGuDsdQOx4ZNYfB3N97eLyGPkI=" - } - }, - { - "path": "/etc/apk/keys/alpine-devel@lists.alpinelinux.org-6165ee59.rsa.pub", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1lZlTESNrelWTNkL/oQzmAU8a99A=" - } - }, - { - "path": "/etc/apk/keys/alpine-devel@lists.alpinelinux.org-61666e3f.rsa.pub", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1WNW6Sy87HpJ3IdemQy8pju33Kms=" - } - }, - { - "path": "/usr" - }, - { - "path": "/usr/share" - }, - { - "path": "/usr/share/apk" - }, - { - "path": "/usr/share/apk/keys" - }, - { - "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-4a6a0840.rsa.pub", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1OvCFSO94z97c80mIDCxqGkh2Og4=" - } - }, - { - "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-5243ef4b.rsa.pub", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1v7YWZYzAWoclaLDI45jEguI7YN0=" - } - }, - { - "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-524d27bb.rsa.pub", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1BTqS+H/UUyhQuzHwiBl47+BTKuU=" - } - }, - { - "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-5261cecb.rsa.pub", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1NnGuDsdQOx4ZNYfB3N97eLyGPkI=" - } - }, - { - "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-58199dcc.rsa.pub", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1Oaxdcsa6AYoPdLi0U4lO3J2we18=" - } - }, - { - "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-58cbb476.rsa.pub", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1yPq+su65ksNox3uXB+DR7P18+QU=" - } - }, - { - "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-58e4f17d.rsa.pub", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1MpZDNX0LeLHvSOwVUyXiXx11NN0=" - } - }, - { - "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-5e69ca50.rsa.pub", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1glCQ/eJbvA5xqcswdjFrWv5Fnk0=" - } - }, - { - "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-60ac2099.rsa.pub", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1XUdDEoNTtjlvrS+iunk6ziFgIpU=" - } - }, - { - "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-6165ee59.rsa.pub", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1lZlTESNrelWTNkL/oQzmAU8a99A=" - } - }, - { - "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-61666e3f.rsa.pub", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1WNW6Sy87HpJ3IdemQy8pju33Kms=" - } - }, - { - "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616a9724.rsa.pub", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1I9Dy6hryacL2YWXg+KlE6WvwEd4=" - } - }, - { - "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616abc23.rsa.pub", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1NSnsgmcMbU4g7j5JaNs0tVHpHVA=" - } - }, - { - "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616ac3bc.rsa.pub", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1VaMBBk4Rxv6boPLKF+I085Q8y2E=" - } - }, - { - "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616adfeb.rsa.pub", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q13hJBMHAUquPbp5jpAPFjQI2Y1vQ=" - } - }, - { - "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616ae350.rsa.pub", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1V/a5P9pKRJb6tihE3e8O6xaPgLU=" - } - }, - { - "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616db30d.rsa.pub", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q13wLJrcKQajql5a1p9Q45U+ZXENA=" - } - }, - { - "path": "/usr/share/apk/keys/aarch64" - }, - { - "path": "/usr/share/apk/keys/aarch64/alpine-devel@lists.alpinelinux.org-58199dcc.rsa.pub", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "777", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q17j9nWJkQ+wfIuVQzIFrmFZ7fSOc=" - } - }, - { - "path": "/usr/share/apk/keys/aarch64/alpine-devel@lists.alpinelinux.org-616ae350.rsa.pub", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "777", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1snr+Q1UbfHyCr/cmmtVvMIS7SGs=" - } - }, - { - "path": "/usr/share/apk/keys/armhf" - }, - { - "path": "/usr/share/apk/keys/armhf/alpine-devel@lists.alpinelinux.org-524d27bb.rsa.pub", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "777", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1U9QtsdN+rYZ9Zh76EfXy00JZHMg=" - } - }, - { - "path": "/usr/share/apk/keys/armhf/alpine-devel@lists.alpinelinux.org-616a9724.rsa.pub", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "777", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1bC+AdQ0qWBTmefXiI0PvmYOJoVQ=" - } - }, - { - "path": "/usr/share/apk/keys/armv7" - }, - { - "path": "/usr/share/apk/keys/armv7/alpine-devel@lists.alpinelinux.org-524d27bb.rsa.pub", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "777", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1U9QtsdN+rYZ9Zh76EfXy00JZHMg=" - } - }, - { - "path": "/usr/share/apk/keys/armv7/alpine-devel@lists.alpinelinux.org-616adfeb.rsa.pub", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "777", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1xbIVu7ScwqGHxXGwI22aSe5OdUY=" - } - }, - { - "path": "/usr/share/apk/keys/mips64" - }, - { - "path": "/usr/share/apk/keys/mips64/alpine-devel@lists.alpinelinux.org-5e69ca50.rsa.pub", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "777", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1hCZdFx+LvzbLtPs753je78gEEBQ=" - } - }, - { - "path": "/usr/share/apk/keys/ppc64le" - }, - { - "path": "/usr/share/apk/keys/ppc64le/alpine-devel@lists.alpinelinux.org-58cbb476.rsa.pub", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "777", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1t21dhCLbTJmAHXSCeOMq/2vfSgo=" - } - }, - { - "path": "/usr/share/apk/keys/ppc64le/alpine-devel@lists.alpinelinux.org-616abc23.rsa.pub", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "777", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1PS9zNIPJanC8qcsc5qarEWqhV5Q=" - } - }, - { - "path": "/usr/share/apk/keys/riscv64" - }, - { - "path": "/usr/share/apk/keys/riscv64/alpine-devel@lists.alpinelinux.org-60ac2099.rsa.pub", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "777", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1NVPbZavaXpsItFwQYDWbpor7yYE=" - } - }, - { - "path": "/usr/share/apk/keys/riscv64/alpine-devel@lists.alpinelinux.org-616db30d.rsa.pub", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "777", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1U6tfuKRy5J8C6iaKPMZaT/e8tbA=" - } - }, - { - "path": "/usr/share/apk/keys/s390x" - }, - { - "path": "/usr/share/apk/keys/s390x/alpine-devel@lists.alpinelinux.org-58e4f17d.rsa.pub", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "777", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1sjbV2r2w0Ih2vwdzC4Jq6UI7cMQ=" - } - }, - { - "path": "/usr/share/apk/keys/s390x/alpine-devel@lists.alpinelinux.org-616ac3bc.rsa.pub", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "777", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1l09xa7RnbOIC1dI9FqbaCfS/GXY=" - } - }, - { - "path": "/usr/share/apk/keys/x86" - }, - { - "path": "/usr/share/apk/keys/x86/alpine-devel@lists.alpinelinux.org-4a6a0840.rsa.pub", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "777", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1Ii51i7Nrc4uft14HhqugaUqdH64=" - } - }, - { - "path": "/usr/share/apk/keys/x86/alpine-devel@lists.alpinelinux.org-5243ef4b.rsa.pub", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "777", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1Y49eVxhpvftbQ3yAdvlLfcrPLTU=" - } - }, - { - "path": "/usr/share/apk/keys/x86/alpine-devel@lists.alpinelinux.org-61666e3f.rsa.pub", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "777", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1HjdvcVkpBZzr1aSe3p7oQfAtm/E=" - } - }, - { - "path": "/usr/share/apk/keys/x86_64" - }, - { - "path": "/usr/share/apk/keys/x86_64/alpine-devel@lists.alpinelinux.org-4a6a0840.rsa.pub", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "777", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1Ii51i7Nrc4uft14HhqugaUqdH64=" - } - }, - { - "path": "/usr/share/apk/keys/x86_64/alpine-devel@lists.alpinelinux.org-5261cecb.rsa.pub", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "777", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1AUFY+fwSBTcrYetjT7NHvafrSQc=" - } - }, - { - "path": "/usr/share/apk/keys/x86_64/alpine-devel@lists.alpinelinux.org-6165ee59.rsa.pub", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "777", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1qKA23VzMUDle+Dqnrr5Kz+Xvty4=" - } - } - ] - } - }, - { - "id": "0faf8749e7caad06", - "name": "apk-tools", - "version": "2.12.10-r1", - "type": "apk", - "foundBy": "apk-db-cataloger", - "locations": [ - { - "path": "/lib/apk/db/installed", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", - "accessPath": "/lib/apk/db/installed", - "annotations": { - "evidence": "primary" - } - } - ], - "licenses": [ - { - "value": "GPL-2.0-only", - "spdxExpression": "GPL-2.0-only", - "type": "declared", - "urls": [], - "locations": [ - { - "path": "/lib/apk/db/installed", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", - "accessPath": "/lib/apk/db/installed", - "annotations": { - "evidence": "primary" - } - } - ] - } - ], - "language": "", - "cpes": [ - "cpe:2.3:a:apk-tools:apk-tools:2.12.10-r1:*:*:*:*:*:*:*", - "cpe:2.3:a:apk-tools:apk_tools:2.12.10-r1:*:*:*:*:*:*:*", - "cpe:2.3:a:apk_tools:apk-tools:2.12.10-r1:*:*:*:*:*:*:*", - "cpe:2.3:a:apk_tools:apk_tools:2.12.10-r1:*:*:*:*:*:*:*", - "cpe:2.3:a:apk:apk-tools:2.12.10-r1:*:*:*:*:*:*:*", - "cpe:2.3:a:apk:apk_tools:2.12.10-r1:*:*:*:*:*:*:*" - ], - "purl": "pkg:apk/alpine/apk-tools@2.12.10-r1?arch=x86_64&distro=alpine-3.17.2", - "metadataType": "apk-db-entry", - "metadata": { - "package": "apk-tools", - "originPackage": "apk-tools", - "maintainer": "Natanael Copa ", - "version": "2.12.10-r1", - "architecture": "x86_64", - "url": "https://gitlab.alpinelinux.org/alpine/apk-tools", - "description": "Alpine Package Keeper - package manager for alpine", - "size": 120973, - "installedSize": 307200, - "pullDependencies": [ - "musl>=1.2", - "ca-certificates-bundle", - "so:libc.musl-x86_64.so.1", - "so:libcrypto.so.3", - "so:libssl.so.3", - "so:libz.so.1" - ], - "provides": [ - "so:libapk.so.3.12.0=3.12.0", - "cmd:apk=2.12.10-r1" - ], - "pullChecksum": "Q1Ef3iwt+cMdGngEgaFr2URIJhKzQ=", - "gitCommitOfApkPort": "0188f510baadbae393472103427b9c1875117136", - "files": [ - { - "path": "/etc" - }, - { - "path": "/etc/apk" - }, - { - "path": "/etc/apk/keys" - }, - { - "path": "/etc/apk/protected_paths.d" - }, - { - "path": "/lib" - }, - { - "path": "/lib/libapk.so.3.12.0", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "755", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1opjpYqXgzmOVo7EbNe8l5Xol08g=" - } - }, - { - "path": "/lib/apk" - }, - { - "path": "/lib/apk/exec" - }, - { - "path": "/sbin" - }, - { - "path": "/sbin/apk", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "755", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1/4bmOPe/H1YhHRzlrj27oufThMw=" - } - }, - { - "path": "/var" - }, - { - "path": "/var/lib" - }, - { - "path": "/var/lib/apk" - } - ] - } - }, - { - "id": "edcf6e67eac04af0", - "name": "busybox", - "version": "1.35.0-r29", - "type": "apk", - "foundBy": "apk-db-cataloger", - "locations": [ - { - "path": "/lib/apk/db/installed", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", - "accessPath": "/lib/apk/db/installed", - "annotations": { - "evidence": "primary" - } - } - ], - "licenses": [ - { - "value": "GPL-2.0-only", - "spdxExpression": "GPL-2.0-only", - "type": "declared", - "urls": [], - "locations": [ - { - "path": "/lib/apk/db/installed", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", - "accessPath": "/lib/apk/db/installed", - "annotations": { - "evidence": "primary" - } - } - ] - } - ], - "language": "", - "cpes": [ - "cpe:2.3:a:busybox:busybox:1.35.0-r29:*:*:*:*:*:*:*" - ], - "purl": "pkg:apk/alpine/busybox@1.35.0-r29?arch=x86_64&distro=alpine-3.17.2", - "metadataType": "apk-db-entry", - "metadata": { - "package": "busybox", - "originPackage": "busybox", - "maintainer": "Sören Tempel ", - "version": "1.35.0-r29", - "architecture": "x86_64", - "url": "https://busybox.net/", - "description": "Size optimized toolbox of many common UNIX utilities", - "size": 509600, - "installedSize": 962560, - "pullDependencies": [ - "so:libc.musl-x86_64.so.1" - ], - "provides": [ - "cmd:busybox=1.35.0-r29" - ], - "pullChecksum": "Q1NN3sp0yr99btRysqty3nQUrWHaY=", - "gitCommitOfApkPort": "1dbf7a793afae640ea643a055b6dd4f430ac116b", - "files": [ - { - "path": "/bin" - }, - { - "path": "/bin/busybox", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "755", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1yVNLeeB7VouhCO/kz+dbfL3dY4c=" - } - }, - { - "path": "/etc" - }, - { - "path": "/etc/securetty", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1mB95Hq2NUTZ599RDiSsj9w5FrOU=" - } - }, - { - "path": "/etc/udhcpd.conf", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1EgLFjj67ou3eMqp4m3r2ZjnQ7QU=" - } - }, - { - "path": "/etc/logrotate.d" - }, - { - "path": "/etc/logrotate.d/acpid", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1TylyCINVmnS+A/Tead4vZhE7Bks=" - } - }, - { - "path": "/etc/network" - }, - { - "path": "/etc/network/if-down.d" - }, - { - "path": "/etc/network/if-post-down.d" - }, - { - "path": "/etc/network/if-post-up.d" - }, - { - "path": "/etc/network/if-pre-down.d" - }, - { - "path": "/etc/network/if-pre-up.d" - }, - { - "path": "/etc/network/if-up.d" - }, - { - "path": "/etc/network/if-up.d/dad", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "775", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1ORf+lPRKuYgdkBBcKoevR1t60Q4=" - } - }, - { - "path": "/sbin" - }, - { - "path": "/tmp", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "1777" - }, - { - "path": "/usr" - }, - { - "path": "/usr/sbin" - }, - { - "path": "/usr/share" - }, - { - "path": "/usr/share/udhcpc" - }, - { - "path": "/usr/share/udhcpc/default.script", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "755", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1HWpG3eQD8Uoi4mks2E3SSvOAUhY=" - } - }, - { - "path": "/var" - }, - { - "path": "/var/cache" - }, - { - "path": "/var/cache/misc" - }, - { - "path": "/var/lib" - }, - { - "path": "/var/lib/udhcpd" - } - ] - } - }, - { - "id": "10c99a42ed5bf9d4", - "name": "busybox-binsh", - "version": "1.35.0-r29", - "type": "apk", - "foundBy": "apk-db-cataloger", - "locations": [ - { - "path": "/lib/apk/db/installed", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", - "accessPath": "/lib/apk/db/installed", - "annotations": { - "evidence": "primary" - } - } - ], - "licenses": [ - { - "value": "GPL-2.0-only", - "spdxExpression": "GPL-2.0-only", - "type": "declared", - "urls": [], - "locations": [ - { - "path": "/lib/apk/db/installed", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", - "accessPath": "/lib/apk/db/installed", - "annotations": { - "evidence": "primary" - } - } - ] - } - ], - "language": "", - "cpes": [ - "cpe:2.3:a:busybox-binsh:busybox-binsh:1.35.0-r29:*:*:*:*:*:*:*", - "cpe:2.3:a:busybox-binsh:busybox_binsh:1.35.0-r29:*:*:*:*:*:*:*", - "cpe:2.3:a:busybox_binsh:busybox-binsh:1.35.0-r29:*:*:*:*:*:*:*", - "cpe:2.3:a:busybox_binsh:busybox_binsh:1.35.0-r29:*:*:*:*:*:*:*", - "cpe:2.3:a:busybox:busybox-binsh:1.35.0-r29:*:*:*:*:*:*:*", - "cpe:2.3:a:busybox:busybox_binsh:1.35.0-r29:*:*:*:*:*:*:*" - ], - "purl": "pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=x86_64&upstream=busybox&distro=alpine-3.17.2", - "metadataType": "apk-db-entry", - "metadata": { - "package": "busybox-binsh", - "originPackage": "busybox", - "maintainer": "Sören Tempel ", - "version": "1.35.0-r29", - "architecture": "x86_64", - "url": "https://busybox.net/", - "description": "busybox ash /bin/sh", - "size": 1547, - "installedSize": 8192, - "pullDependencies": [ - "busybox=1.35.0-r29" - ], - "provides": [ - "/bin/sh", - "cmd:sh=1.35.0-r29" - ], - "pullChecksum": "Q1miWwyhWKXVEiRYLhmArV1TKMs6A=", - "gitCommitOfApkPort": "1dbf7a793afae640ea643a055b6dd4f430ac116b", - "files": [ - { - "path": "/bin" - }, - { - "path": "/bin/sh", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "777", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1pcfTfDNEbNKQc2s1tia7da05M8Q=" - } - } - ] - } - }, - { - "id": "4cb49698ca5c72c1", - "name": "ca-certificates-bundle", - "version": "20220614-r4", - "type": "apk", - "foundBy": "apk-db-cataloger", - "locations": [ - { - "path": "/lib/apk/db/installed", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", - "accessPath": "/lib/apk/db/installed", - "annotations": { - "evidence": "primary" - } - } - ], - "licenses": [ - { - "value": "MPL-2.0 AND MIT", - "spdxExpression": "MPL-2.0 AND MIT", - "type": "declared", - "urls": [], - "locations": [ - { - "path": "/lib/apk/db/installed", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", - "accessPath": "/lib/apk/db/installed", - "annotations": { - "evidence": "primary" - } - } - ] - } - ], - "language": "", - "cpes": [ - "cpe:2.3:a:ca-certificates-bundle:ca-certificates-bundle:20220614-r4:*:*:*:*:*:*:*", - "cpe:2.3:a:ca-certificates-bundle:ca_certificates_bundle:20220614-r4:*:*:*:*:*:*:*", - "cpe:2.3:a:ca_certificates_bundle:ca-certificates-bundle:20220614-r4:*:*:*:*:*:*:*", - "cpe:2.3:a:ca_certificates_bundle:ca_certificates_bundle:20220614-r4:*:*:*:*:*:*:*", - "cpe:2.3:a:ca-certificates:ca-certificates-bundle:20220614-r4:*:*:*:*:*:*:*", - "cpe:2.3:a:ca-certificates:ca_certificates_bundle:20220614-r4:*:*:*:*:*:*:*", - "cpe:2.3:a:ca_certificates:ca-certificates-bundle:20220614-r4:*:*:*:*:*:*:*", - "cpe:2.3:a:ca_certificates:ca_certificates_bundle:20220614-r4:*:*:*:*:*:*:*", - "cpe:2.3:a:mozilla:ca-certificates-bundle:20220614-r4:*:*:*:*:*:*:*", - "cpe:2.3:a:mozilla:ca_certificates_bundle:20220614-r4:*:*:*:*:*:*:*", - "cpe:2.3:a:ca:ca-certificates-bundle:20220614-r4:*:*:*:*:*:*:*", - "cpe:2.3:a:ca:ca_certificates_bundle:20220614-r4:*:*:*:*:*:*:*" - ], - "purl": "pkg:apk/alpine/ca-certificates-bundle@20220614-r4?arch=x86_64&upstream=ca-certificates&distro=alpine-3.17.2", - "metadataType": "apk-db-entry", - "metadata": { - "package": "ca-certificates-bundle", - "originPackage": "ca-certificates", - "maintainer": "Natanael Copa ", - "version": "20220614-r4", - "architecture": "x86_64", - "url": "https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/", - "description": "Pre generated bundle of Mozilla certificates", - "size": 126296, - "installedSize": 237568, - "pullDependencies": [], - "provides": [ - "ca-certificates-cacert=20220614-r4" - ], - "pullChecksum": "Q14PFUzkDXTGDcHkiuEdFuzb+EvxQ=", - "gitCommitOfApkPort": "e1839fd45a096c9e21ac24f8a61991d357d11628", - "files": [ - { - "path": "/etc" - }, - { - "path": "/etc/ssl" - }, - { - "path": "/etc/ssl/cert.pem", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "777", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1Nj6gTBdkZpTFW/obJGdpfvK0StA=" - } - }, - { - "path": "/etc/ssl/certs" - }, - { - "path": "/etc/ssl/certs/ca-certificates.crt", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1D8ljYj7pXsRq4d/eHGNYB0GY1+I=" - } - }, - { - "path": "/etc/ssl1.1" - }, - { - "path": "/etc/ssl1.1/cert.pem", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "777", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1tlrPS9O4v/nypdyJVPoUkUfBJ3g=" - } - }, - { - "path": "/etc/ssl1.1/certs", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "777", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1qE3WqZ1tRpwrmptYdQcZwzvJgds=" - } - } - ] - } - }, - { - "id": "f95be16d8615d51f", - "name": "libc-utils", - "version": "0.7.2-r3", - "type": "apk", - "foundBy": "apk-db-cataloger", - "locations": [ - { - "path": "/lib/apk/db/installed", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", - "accessPath": "/lib/apk/db/installed", - "annotations": { - "evidence": "primary" - } - } - ], - "licenses": [ - { - "value": "BSD-2-Clause AND BSD-3-Clause", - "spdxExpression": "BSD-2-Clause AND BSD-3-Clause", - "type": "declared", - "urls": [], - "locations": [ - { - "path": "/lib/apk/db/installed", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", - "accessPath": "/lib/apk/db/installed", - "annotations": { - "evidence": "primary" - } - } - ] - } - ], - "language": "", - "cpes": [ - "cpe:2.3:a:libc-utils:libc-utils:0.7.2-r3:*:*:*:*:*:*:*", - "cpe:2.3:a:libc-utils:libc_utils:0.7.2-r3:*:*:*:*:*:*:*", - "cpe:2.3:a:libc_utils:libc-utils:0.7.2-r3:*:*:*:*:*:*:*", - "cpe:2.3:a:libc_utils:libc_utils:0.7.2-r3:*:*:*:*:*:*:*", - "cpe:2.3:a:libc:libc-utils:0.7.2-r3:*:*:*:*:*:*:*", - "cpe:2.3:a:libc:libc_utils:0.7.2-r3:*:*:*:*:*:*:*" - ], - "purl": "pkg:apk/alpine/libc-utils@0.7.2-r3?arch=x86_64&upstream=libc-dev&distro=alpine-3.17.2", - "metadataType": "apk-db-entry", - "metadata": { - "package": "libc-utils", - "originPackage": "libc-dev", - "maintainer": "Natanael Copa ", - "version": "0.7.2-r3", - "architecture": "x86_64", - "url": "https://alpinelinux.org", - "description": "Meta package to pull in correct libc", - "size": 1485, - "installedSize": 4096, - "pullDependencies": [ - "musl-utils" - ], - "provides": [], - "pullChecksum": "Q19Gg06pBPiiG9UN94ql7qImsHSUQ=", - "gitCommitOfApkPort": "60424133be2e79bbfeff3d58147a22886f817ce2", - "files": [] - } - }, - { - "id": "e5d4a79033ba84db", - "name": "libcrypto3", - "version": "3.0.8-r0", - "type": "apk", - "foundBy": "apk-db-cataloger", - "locations": [ - { - "path": "/lib/apk/db/installed", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", - "accessPath": "/lib/apk/db/installed", - "annotations": { - "evidence": "primary" - } - } - ], - "licenses": [ - { - "value": "Apache-2.0", - "spdxExpression": "Apache-2.0", - "type": "declared", - "urls": [], - "locations": [ - { - "path": "/lib/apk/db/installed", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", - "accessPath": "/lib/apk/db/installed", - "annotations": { - "evidence": "primary" - } - } - ] - } - ], - "language": "", - "cpes": [ - "cpe:2.3:a:libcrypto3:libcrypto3:3.0.8-r0:*:*:*:*:*:*:*", - "cpe:2.3:a:libcrypto3:libcrypto:3.0.8-r0:*:*:*:*:*:*:*", - "cpe:2.3:a:libcrypto:libcrypto3:3.0.8-r0:*:*:*:*:*:*:*", - "cpe:2.3:a:libcrypto:libcrypto:3.0.8-r0:*:*:*:*:*:*:*" - ], - "purl": "pkg:apk/alpine/libcrypto3@3.0.8-r0?arch=x86_64&upstream=openssl&distro=alpine-3.17.2", - "metadataType": "apk-db-entry", - "metadata": { - "package": "libcrypto3", - "originPackage": "openssl", - "maintainer": "Ariadne Conill ", - "version": "3.0.8-r0", - "architecture": "x86_64", - "url": "https://www.openssl.org/", - "description": "Crypto library from openssl", - "size": 1710217, - "installedSize": 4206592, - "pullDependencies": [ - "so:libc.musl-x86_64.so.1" - ], - "provides": [ - "so:libcrypto.so.3=3" - ], - "pullChecksum": "Q1lyWpurYeMlLEt60ys+OlTABmzgs=", - "gitCommitOfApkPort": "524302e205a5b43c2bb48d041bcb10ccf2b480f9", - "files": [ - { - "path": "/etc" - }, - { - "path": "/etc/ssl" - }, - { - "path": "/etc/ssl/ct_log_list.cnf", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1olh8TpdAi2QnTl4FK3TjdUiSwTo=" - } - }, - { - "path": "/etc/ssl/ct_log_list.cnf.dist", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1olh8TpdAi2QnTl4FK3TjdUiSwTo=" - } - }, - { - "path": "/etc/ssl/openssl.cnf", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1fqYq/iJ6x71cTpr8fcO4/6IgyQg=" - } - }, - { - "path": "/etc/ssl/openssl.cnf.dist", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1fqYq/iJ6x71cTpr8fcO4/6IgyQg=" - } - }, - { - "path": "/etc/ssl/certs" - }, - { - "path": "/etc/ssl/misc" - }, - { - "path": "/etc/ssl/misc/CA.pl", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "755", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1mcqLbO6iQe8TmQCoRDozFWScisQ=" - } - }, - { - "path": "/etc/ssl/misc/tsget", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "777", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q13NVgfr7dQUuGYxur0tNalH6EIjU=" - } - }, - { - "path": "/etc/ssl/misc/tsget.pl", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "755", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1TA7DPBSRkj9+5c/3y8LIs0lCgTU=" - } - }, - { - "path": "/etc/ssl/private" - }, - { - "path": "/lib" - }, - { - "path": "/lib/libcrypto.so.3", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "755", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1/sKGHxVLFUFYAoo25FKjvEaCWY4=" - } - }, - { - "path": "/usr" - }, - { - "path": "/usr/lib" - }, - { - "path": "/usr/lib/libcrypto.so.3", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "777", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1XK8nt7AyX7GIGpMOLlkJk5dy81c=" - } - }, - { - "path": "/usr/lib/engines-3" - }, - { - "path": "/usr/lib/engines-3/afalg.so", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "755", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1RdD/lRPt+SpdXE7iqo1GtVfeK+A=" - } - }, - { - "path": "/usr/lib/engines-3/capi.so", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "755", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1RGZCiTCT/b6F190fAqzJ6CezqTM=" - } - }, - { - "path": "/usr/lib/engines-3/loader_attic.so", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "755", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1CM82oJYsdxnU5xldSiSeYyLTmso=" - } - }, - { - "path": "/usr/lib/engines-3/padlock.so", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "755", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1Sr6HtedvAqVk4yRaUBnL4J+kjDE=" - } - }, - { - "path": "/usr/lib/ossl-modules" - }, - { - "path": "/usr/lib/ossl-modules/legacy.so", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "755", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1VMJAWQoREByLDIxEUzAwBzsVRpE=" - } - } - ] - } - }, - { - "id": "c0756f35a5e6d8b3", - "name": "libssl3", - "version": "3.0.8-r0", - "type": "apk", - "foundBy": "apk-db-cataloger", - "locations": [ - { - "path": "/lib/apk/db/installed", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", - "accessPath": "/lib/apk/db/installed", - "annotations": { - "evidence": "primary" - } - } - ], - "licenses": [ - { - "value": "Apache-2.0", - "spdxExpression": "Apache-2.0", - "type": "declared", - "urls": [], - "locations": [ - { - "path": "/lib/apk/db/installed", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", - "accessPath": "/lib/apk/db/installed", - "annotations": { - "evidence": "primary" - } - } - ] - } - ], - "language": "", - "cpes": [ - "cpe:2.3:a:libssl3:libssl3:3.0.8-r0:*:*:*:*:*:*:*", - "cpe:2.3:a:libssl3:libssl:3.0.8-r0:*:*:*:*:*:*:*", - "cpe:2.3:a:libssl:libssl3:3.0.8-r0:*:*:*:*:*:*:*", - "cpe:2.3:a:libssl:libssl:3.0.8-r0:*:*:*:*:*:*:*" - ], - "purl": "pkg:apk/alpine/libssl3@3.0.8-r0?arch=x86_64&upstream=openssl&distro=alpine-3.17.2", - "metadataType": "apk-db-entry", - "metadata": { - "package": "libssl3", - "originPackage": "openssl", - "maintainer": "Ariadne Conill ", - "version": "3.0.8-r0", - "architecture": "x86_64", - "url": "https://www.openssl.org/", - "description": "SSL shared libraries", - "size": 246853, - "installedSize": 622592, - "pullDependencies": [ - "so:libc.musl-x86_64.so.1", - "so:libcrypto.so.3" - ], - "provides": [ - "so:libssl.so.3=3" - ], - "pullChecksum": "Q1Z6/d/FKYkPehWzNtOtYnJ74oIkY=", - "gitCommitOfApkPort": "524302e205a5b43c2bb48d041bcb10ccf2b480f9", - "files": [ - { - "path": "/lib" - }, - { - "path": "/lib/libssl.so.3", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "755", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1p8M82m6w1EEmP/CKWTUjUJEJrc0=" - } - }, - { - "path": "/usr" - }, - { - "path": "/usr/lib" - }, - { - "path": "/usr/lib/libssl.so.3", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "777", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1oMqe3ENWHl40WtquaRE6llAmBfU=" - } - } - ] - } - }, - { - "id": "adaa708f703652d6", - "name": "musl", - "version": "1.2.3-r4", - "type": "apk", - "foundBy": "apk-db-cataloger", - "locations": [ - { - "path": "/lib/apk/db/installed", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", - "accessPath": "/lib/apk/db/installed", - "annotations": { - "evidence": "primary" - } - } - ], - "licenses": [ - { - "value": "MIT", - "spdxExpression": "MIT", - "type": "declared", - "urls": [], - "locations": [ - { - "path": "/lib/apk/db/installed", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", - "accessPath": "/lib/apk/db/installed", - "annotations": { - "evidence": "primary" - } - } - ] - } - ], - "language": "", - "cpes": [ - "cpe:2.3:a:musl-libc:musl:1.2.3-r4:*:*:*:*:*:*:*", - "cpe:2.3:a:musl_libc:musl:1.2.3-r4:*:*:*:*:*:*:*", - "cpe:2.3:a:musl:musl:1.2.3-r4:*:*:*:*:*:*:*" - ], - "purl": "pkg:apk/alpine/musl@1.2.3-r4?arch=x86_64&distro=alpine-3.17.2", - "metadataType": "apk-db-entry", - "metadata": { - "package": "musl", - "originPackage": "musl", - "maintainer": "Timo Teräs ", - "version": "1.2.3-r4", - "architecture": "x86_64", - "url": "https://musl.libc.org/", - "description": "the musl c library (libc) implementation", - "size": 388955, - "installedSize": 634880, - "pullDependencies": [], - "provides": [ - "so:libc.musl-x86_64.so.1=1" - ], - "pullChecksum": "Q1Pk7x1woArbB1nzkMPJPq1TECwus=", - "gitCommitOfApkPort": "f93af038c3de7146121c2ea8124ba5ce29b4b058", - "files": [ - { - "path": "/lib" - }, - { - "path": "/lib/ld-musl-x86_64.so.1", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "755", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1tGxgx2FLrD+0Uk03NUBwbbEiRCU=" - } - }, - { - "path": "/lib/libc.musl-x86_64.so.1", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "777", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q17yJ3JFNypA4mxhJJr0ou6CzsJVI=" - } - } - ] - } - }, - { - "id": "c0d6e0f3841a7244", - "name": "musl-utils", - "version": "1.2.3-r4", - "type": "apk", - "foundBy": "apk-db-cataloger", - "locations": [ - { - "path": "/lib/apk/db/installed", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", - "accessPath": "/lib/apk/db/installed", - "annotations": { - "evidence": "primary" - } - } - ], - "licenses": [ - { - "value": "MIT AND BSD-2-Clause AND GPL-2.0-or-later", - "spdxExpression": "MIT AND BSD-2-Clause AND GPL-2.0-or-later", - "type": "declared", - "urls": [], - "locations": [ - { - "path": "/lib/apk/db/installed", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", - "accessPath": "/lib/apk/db/installed", - "annotations": { - "evidence": "primary" - } - } - ] - } - ], - "language": "", - "cpes": [ - "cpe:2.3:a:musl-utils:musl-utils:1.2.3-r4:*:*:*:*:*:*:*", - "cpe:2.3:a:musl-utils:musl_utils:1.2.3-r4:*:*:*:*:*:*:*", - "cpe:2.3:a:musl_utils:musl-utils:1.2.3-r4:*:*:*:*:*:*:*", - "cpe:2.3:a:musl_utils:musl_utils:1.2.3-r4:*:*:*:*:*:*:*", - "cpe:2.3:a:musl-libc:musl-utils:1.2.3-r4:*:*:*:*:*:*:*", - "cpe:2.3:a:musl-libc:musl_utils:1.2.3-r4:*:*:*:*:*:*:*", - "cpe:2.3:a:musl:musl-utils:1.2.3-r4:*:*:*:*:*:*:*", - "cpe:2.3:a:musl:musl_utils:1.2.3-r4:*:*:*:*:*:*:*" - ], - "purl": "pkg:apk/alpine/musl-utils@1.2.3-r4?arch=x86_64&upstream=musl&distro=alpine-3.17.2", - "metadataType": "apk-db-entry", - "metadata": { - "package": "musl-utils", - "originPackage": "musl", - "maintainer": "Timo Teräs ", - "version": "1.2.3-r4", - "architecture": "x86_64", - "url": "https://musl.libc.org/", - "description": "the musl c library (libc) implementation", - "size": 36697, - "installedSize": 135168, - "pullDependencies": [ - "scanelf", - "so:libc.musl-x86_64.so.1" - ], - "provides": [ - "cmd:getconf=1.2.3-r4", - "cmd:getent=1.2.3-r4", - "cmd:iconv=1.2.3-r4", - "cmd:ldconfig=1.2.3-r4", - "cmd:ldd=1.2.3-r4" - ], - "pullChecksum": "Q1ZWJL4eySx8nPSjF1FAJgQyvuNs4=", - "gitCommitOfApkPort": "f93af038c3de7146121c2ea8124ba5ce29b4b058", - "files": [ - { - "path": "/sbin" - }, - { - "path": "/sbin/ldconfig", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "755", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1Kja2+POZKxEkUOZqwSjC6kmaED4=" - } - }, - { - "path": "/usr" - }, - { - "path": "/usr/bin" - }, - { - "path": "/usr/bin/getconf", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "755", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1UURo1nZWEp1bwWLKOaFv9MRkGuY=" - } - }, - { - "path": "/usr/bin/getent", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "755", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1zt3U4LfgDdzFuF3lIFzktQb5nLw=" - } - }, - { - "path": "/usr/bin/iconv", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "755", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1MUr2bsRgdX7IEDT8Veb82atbrfk=" - } - }, - { - "path": "/usr/bin/ldd", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "755", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1yFAhGggmL7ERgbIA7KQxyTzf3ks=" - } - } - ] - } - }, - { - "id": "544ec51c3fe9a624", - "name": "scanelf", - "version": "1.3.5-r1", - "type": "apk", - "foundBy": "apk-db-cataloger", - "locations": [ - { - "path": "/lib/apk/db/installed", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", - "accessPath": "/lib/apk/db/installed", - "annotations": { - "evidence": "primary" - } - } - ], - "licenses": [ - { - "value": "GPL-2.0-only", - "spdxExpression": "GPL-2.0-only", - "type": "declared", - "urls": [], - "locations": [ - { - "path": "/lib/apk/db/installed", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", - "accessPath": "/lib/apk/db/installed", - "annotations": { - "evidence": "primary" - } - } - ] - } - ], - "language": "", - "cpes": [ - "cpe:2.3:a:scanelf:scanelf:1.3.5-r1:*:*:*:*:*:*:*" - ], - "purl": "pkg:apk/alpine/scanelf@1.3.5-r1?arch=x86_64&upstream=pax-utils&distro=alpine-3.17.2", - "metadataType": "apk-db-entry", - "metadata": { - "package": "scanelf", - "originPackage": "pax-utils", - "maintainer": "Natanael Copa ", - "version": "1.3.5-r1", - "architecture": "x86_64", - "url": "https://wiki.gentoo.org/wiki/Hardened/PaX_Utilities", - "description": "Scan ELF binaries for stuff", - "size": 37687, - "installedSize": 98304, - "pullDependencies": [ - "so:libc.musl-x86_64.so.1" - ], - "provides": [ - "cmd:scanelf=1.3.5-r1" - ], - "pullChecksum": "Q11dxYFsHvBFAzzHGDo5gOTDNJDyQ=", - "gitCommitOfApkPort": "e52243dbb02069f10d48440ccc5fd41fa5fc2236", - "files": [ - { - "path": "/usr" - }, - { - "path": "/usr/bin" - }, - { - "path": "/usr/bin/scanelf", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "755", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1NoAissVDuanXF1KOEl8qrFA3bso=" - } - } - ] - } - }, - { - "id": "b37d6e2e45f66f33", - "name": "ssl_client", - "version": "1.35.0-r29", - "type": "apk", - "foundBy": "apk-db-cataloger", - "locations": [ - { - "path": "/lib/apk/db/installed", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", - "accessPath": "/lib/apk/db/installed", - "annotations": { - "evidence": "primary" - } - } - ], - "licenses": [ - { - "value": "GPL-2.0-only", - "spdxExpression": "GPL-2.0-only", - "type": "declared", - "urls": [], - "locations": [ - { - "path": "/lib/apk/db/installed", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", - "accessPath": "/lib/apk/db/installed", - "annotations": { - "evidence": "primary" - } - } - ] - } - ], - "language": "", - "cpes": [ - "cpe:2.3:a:ssl-client:ssl-client:1.35.0-r29:*:*:*:*:*:*:*", - "cpe:2.3:a:ssl-client:ssl_client:1.35.0-r29:*:*:*:*:*:*:*", - "cpe:2.3:a:ssl_client:ssl-client:1.35.0-r29:*:*:*:*:*:*:*", - "cpe:2.3:a:ssl_client:ssl_client:1.35.0-r29:*:*:*:*:*:*:*", - "cpe:2.3:a:ssl:ssl-client:1.35.0-r29:*:*:*:*:*:*:*", - "cpe:2.3:a:ssl:ssl_client:1.35.0-r29:*:*:*:*:*:*:*" - ], - "purl": "pkg:apk/alpine/ssl_client@1.35.0-r29?arch=x86_64&upstream=busybox&distro=alpine-3.17.2", - "metadataType": "apk-db-entry", - "metadata": { - "package": "ssl_client", - "originPackage": "busybox", - "maintainer": "Sören Tempel ", - "version": "1.35.0-r29", - "architecture": "x86_64", - "url": "https://busybox.net/", - "description": "EXternal ssl_client for busybox wget", - "size": 4929, - "installedSize": 28672, - "pullDependencies": [ - "so:libc.musl-x86_64.so.1", - "so:libcrypto.so.3", - "so:libssl.so.3" - ], - "provides": [ - "cmd:ssl_client=1.35.0-r29" - ], - "pullChecksum": "Q1QuqZjeP6XG85I29tOiCWofL8Cj0=", - "gitCommitOfApkPort": "1dbf7a793afae640ea643a055b6dd4f430ac116b", - "files": [ - { - "path": "/usr" - }, - { - "path": "/usr/bin" - }, - { - "path": "/usr/bin/ssl_client", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "755", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q13ShB3pGMDL8R7sqvDVeLOBZ6P3Q=" - } - } - ] - } - }, - { - "id": "6ad7c0b45a22318c", - "name": "zlib", - "version": "1.2.13-r0", - "type": "apk", - "foundBy": "apk-db-cataloger", - "locations": [ - { - "path": "/lib/apk/db/installed", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", - "accessPath": "/lib/apk/db/installed", - "annotations": { - "evidence": "primary" - } - } - ], - "licenses": [ - { - "value": "Zlib", - "spdxExpression": "Zlib", - "type": "declared", - "urls": [], - "locations": [ - { - "path": "/lib/apk/db/installed", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", - "accessPath": "/lib/apk/db/installed", - "annotations": { - "evidence": "primary" - } - } - ] - } - ], - "language": "", - "cpes": [ - "cpe:2.3:a:zlib:zlib:1.2.13-r0:*:*:*:*:*:*:*" - ], - "purl": "pkg:apk/alpine/zlib@1.2.13-r0?arch=x86_64&distro=alpine-3.17.2", - "metadataType": "apk-db-entry", - "metadata": { - "package": "zlib", - "originPackage": "zlib", - "maintainer": "Natanael Copa ", - "version": "1.2.13-r0", - "architecture": "x86_64", - "url": "https://zlib.net/", - "description": "A compression/decompression Library", - "size": 54258, - "installedSize": 110592, - "pullDependencies": [ - "so:libc.musl-x86_64.so.1" - ], - "provides": [ - "so:libz.so.1=1.2.13" - ], - "pullChecksum": "Q1rjnXT01l1PAxXheUxe4Oldl5rFk=", - "gitCommitOfApkPort": "bb37266b06a72d21d1fd850ef4b86665cf9ef70f", - "files": [ - { - "path": "/lib" - }, - { - "path": "/lib/libz.so.1", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "777", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q16A/yKXYR0EF3avf+wJzXcNLZHgU=" - } - }, - { - "path": "/lib/libz.so.1.2.13", - "ownerUid": "0", - "ownerGid": "0", - "permissions": "755", - "digest": { - "algorithm": "'Q1'+base64(sha1)", - "value": "Q1dpivTH4yTWnQnTEdKGmUMal/CsI=" - } - } - ] - } - } - ], - "artifactRelationships": [ - { - "parent": "008bcc1445f44203", - "child": "0a3b4a9dae4049aa", - "type": "dependency-of" - }, - { - "parent": "008bcc1445f44203", - "child": "2791973cba0a89bb", - "type": "contains" - }, - { - "parent": "008bcc1445f44203", - "child": "4cf9c3537f896231", - "type": "contains" - }, - { - "parent": "008bcc1445f44203", - "child": "4fdfbb03676f495b", - "type": "contains" - }, - { - "parent": "008bcc1445f44203", - "child": "57e155e28050b71f", - "type": "contains" - }, - { - "parent": "008bcc1445f44203", - "child": "6202d0483a0eaf70", - "type": "contains" - }, - { - "parent": "008bcc1445f44203", - "child": "6b9abe7d80ee470b", - "type": "contains" - }, - { - "parent": "008bcc1445f44203", - "child": "8108ab845e4ccbcb", - "type": "contains" - }, - { - "parent": "008bcc1445f44203", - "child": "8668162f21426d67", - "type": "contains" - }, - { - "parent": "008bcc1445f44203", - "child": "b58b2fb69e8b39c8", - "type": "contains" - }, - { - "parent": "008bcc1445f44203", - "child": "c3b51a85a6a2d3e1", - "type": "evident-by" - }, - { - "parent": "008bcc1445f44203", - "child": "c7bb6e42ea2504f8", - "type": "contains" - }, - { - "parent": "008bcc1445f44203", - "child": "dfe56f19a55af4ab", - "type": "contains" - }, - { - "parent": "008bcc1445f44203", - "child": "e456dfb5be04fdb7", - "type": "contains" - }, - { - "parent": "008bcc1445f44203", - "child": "e549cedcbd486e69", - "type": "contains" - }, - { - "parent": "008bcc1445f44203", - "child": "fb8ddb3720060aa2", - "type": "contains" - }, - { - "parent": "0a3b4a9dae4049aa", - "child": "02eba7befcbb3bfa", - "type": "contains" - }, - { - "parent": "0a3b4a9dae4049aa", - "child": "1071b0c6b4d98bb1", - "type": "contains" - }, - { - "parent": "0a3b4a9dae4049aa", - "child": "35ab393f27e0bc39", - "type": "contains" - }, - { - "parent": "0a3b4a9dae4049aa", - "child": "71fcfec0ece1a67a", - "type": "contains" - }, - { - "parent": "0a3b4a9dae4049aa", - "child": "77282715f933737e", - "type": "contains" - }, - { - "parent": "0a3b4a9dae4049aa", - "child": "7b189c84b22c7f02", - "type": "contains" - }, - { - "parent": "0a3b4a9dae4049aa", - "child": "7ff31e5e9ba0bfa9", - "type": "contains" - }, - { - "parent": "0a3b4a9dae4049aa", - "child": "89c7ab9592844cbb", - "type": "contains" - }, - { - "parent": "0a3b4a9dae4049aa", - "child": "b103e8d521455a19", - "type": "contains" - }, - { - "parent": "0a3b4a9dae4049aa", - "child": "c3b51a85a6a2d3e1", - "type": "evident-by" - }, - { - "parent": "0a3b4a9dae4049aa", - "child": "d98fbe0bce78b009", - "type": "contains" - }, - { - "parent": "0faf8749e7caad06", - "child": "1aa086f53c8c0808", - "type": "contains" - }, - { - "parent": "0faf8749e7caad06", - "child": "c3b51a85a6a2d3e1", - "type": "evident-by" - }, - { - "parent": "0faf8749e7caad06", - "child": "c765115741fe905b", - "type": "contains" - }, - { - "parent": "10c99a42ed5bf9d4", - "child": "0a3b4a9dae4049aa", - "type": "dependency-of" - }, - { - "parent": "10c99a42ed5bf9d4", - "child": "564026926225072e", - "type": "contains" - }, - { - "parent": "10c99a42ed5bf9d4", - "child": "c3b51a85a6a2d3e1", - "type": "evident-by" - }, - { - "parent": "4cb49698ca5c72c1", - "child": "0fab6f59514f4740", - "type": "contains" - }, - { - "parent": "4cb49698ca5c72c1", - "child": "0faf8749e7caad06", - "type": "dependency-of" - }, - { - "parent": "4cb49698ca5c72c1", - "child": "c3b51a85a6a2d3e1", - "type": "evident-by" - }, - { - "parent": "544ec51c3fe9a624", - "child": "6a7f2c32518c8dbc", - "type": "contains" - }, - { - "parent": "544ec51c3fe9a624", - "child": "c0d6e0f3841a7244", - "type": "dependency-of" - }, - { - "parent": "544ec51c3fe9a624", - "child": "c3b51a85a6a2d3e1", - "type": "evident-by" - }, - { - "parent": "6ad7c0b45a22318c", - "child": "0faf8749e7caad06", - "type": "dependency-of" - }, - { - "parent": "6ad7c0b45a22318c", - "child": "6d81ff77d1d5460a", - "type": "contains" - }, - { - "parent": "6ad7c0b45a22318c", - "child": "c3b51a85a6a2d3e1", - "type": "evident-by" - }, - { - "parent": "adaa708f703652d6", - "child": "0faf8749e7caad06", - "type": "dependency-of" - }, - { - "parent": "adaa708f703652d6", - "child": "0faf8749e7caad06", - "type": "dependency-of" - }, - { - "parent": "adaa708f703652d6", - "child": "544ec51c3fe9a624", - "type": "dependency-of" - }, - { - "parent": "adaa708f703652d6", - "child": "6ad7c0b45a22318c", - "type": "dependency-of" - }, - { - "parent": "adaa708f703652d6", - "child": "b37d6e2e45f66f33", - "type": "dependency-of" - }, - { - "parent": "adaa708f703652d6", - "child": "c0756f35a5e6d8b3", - "type": "dependency-of" - }, - { - "parent": "adaa708f703652d6", - "child": "c0d6e0f3841a7244", - "type": "dependency-of" - }, - { - "parent": "adaa708f703652d6", - "child": "c3b51a85a6a2d3e1", - "type": "evident-by" - }, - { - "parent": "adaa708f703652d6", - "child": "e5d4a79033ba84db", - "type": "dependency-of" - }, - { - "parent": "adaa708f703652d6", - "child": "edcf6e67eac04af0", - "type": "dependency-of" - }, - { - "parent": "adaa708f703652d6", - "child": "f45009f97952cd8e", - "type": "contains" - }, - { - "parent": "b37d6e2e45f66f33", - "child": "c3b51a85a6a2d3e1", - "type": "evident-by" - }, - { - "parent": "b37d6e2e45f66f33", - "child": "d7486c5ba43c6e31", - "type": "contains" - }, - { - "parent": "c0756f35a5e6d8b3", - "child": "0faf8749e7caad06", - "type": "dependency-of" - }, - { - "parent": "c0756f35a5e6d8b3", - "child": "5c67196b8e1d1558", - "type": "contains" - }, - { - "parent": "c0756f35a5e6d8b3", - "child": "b37d6e2e45f66f33", - "type": "dependency-of" - }, - { - "parent": "c0756f35a5e6d8b3", - "child": "c3b51a85a6a2d3e1", - "type": "evident-by" - }, - { - "parent": "c0d6e0f3841a7244", - "child": "47c9d14986fb43fc", - "type": "contains" - }, - { - "parent": "c0d6e0f3841a7244", - "child": "51ddc107d90f5f4b", - "type": "contains" - }, - { - "parent": "c0d6e0f3841a7244", - "child": "bf51187b1c0aae54", - "type": "contains" - }, - { - "parent": "c0d6e0f3841a7244", - "child": "c3b51a85a6a2d3e1", - "type": "evident-by" - }, - { - "parent": "c0d6e0f3841a7244", - "child": "c911f25351778370", - "type": "contains" - }, - { - "parent": "c0d6e0f3841a7244", - "child": "e0a729e0af2c3974", - "type": "contains" - }, - { - "parent": "c0d6e0f3841a7244", - "child": "f95be16d8615d51f", - "type": "dependency-of" - }, - { - "parent": "e2e16842c9b54d985bf1ef9242a313f36b856181f188de21313820e177002501", - "child": "008bcc1445f44203", - "type": "contains" - }, - { - "parent": "e2e16842c9b54d985bf1ef9242a313f36b856181f188de21313820e177002501", - "child": "0a3b4a9dae4049aa", - "type": "contains" - }, - { - "parent": "e2e16842c9b54d985bf1ef9242a313f36b856181f188de21313820e177002501", - "child": "0faf8749e7caad06", - "type": "contains" - }, - { - "parent": "e2e16842c9b54d985bf1ef9242a313f36b856181f188de21313820e177002501", - "child": "10c99a42ed5bf9d4", - "type": "contains" - }, - { - "parent": "e2e16842c9b54d985bf1ef9242a313f36b856181f188de21313820e177002501", - "child": "4cb49698ca5c72c1", - "type": "contains" - }, - { - "parent": "e2e16842c9b54d985bf1ef9242a313f36b856181f188de21313820e177002501", - "child": "544ec51c3fe9a624", - "type": "contains" - }, - { - "parent": "e2e16842c9b54d985bf1ef9242a313f36b856181f188de21313820e177002501", - "child": "6ad7c0b45a22318c", - "type": "contains" - }, - { - "parent": "e2e16842c9b54d985bf1ef9242a313f36b856181f188de21313820e177002501", - "child": "adaa708f703652d6", - "type": "contains" - }, - { - "parent": "e2e16842c9b54d985bf1ef9242a313f36b856181f188de21313820e177002501", - "child": "b37d6e2e45f66f33", - "type": "contains" - }, - { - "parent": "e2e16842c9b54d985bf1ef9242a313f36b856181f188de21313820e177002501", - "child": "c0756f35a5e6d8b3", - "type": "contains" - }, - { - "parent": "e2e16842c9b54d985bf1ef9242a313f36b856181f188de21313820e177002501", - "child": "c0d6e0f3841a7244", - "type": "contains" - }, - { - "parent": "e2e16842c9b54d985bf1ef9242a313f36b856181f188de21313820e177002501", - "child": "e5d4a79033ba84db", - "type": "contains" - }, - { - "parent": "e2e16842c9b54d985bf1ef9242a313f36b856181f188de21313820e177002501", - "child": "edcf6e67eac04af0", - "type": "contains" - }, - { - "parent": "e2e16842c9b54d985bf1ef9242a313f36b856181f188de21313820e177002501", - "child": "f0def3051a26afc8", - "type": "contains" - }, - { - "parent": "e2e16842c9b54d985bf1ef9242a313f36b856181f188de21313820e177002501", - "child": "f95be16d8615d51f", - "type": "contains" - }, - { - "parent": "e5d4a79033ba84db", - "child": "0e7815a8b0d1ecdc", - "type": "contains" - }, - { - "parent": "e5d4a79033ba84db", - "child": "0faf8749e7caad06", - "type": "dependency-of" - }, - { - "parent": "e5d4a79033ba84db", - "child": "1ae61640919b8dcb", - "type": "contains" - }, - { - "parent": "e5d4a79033ba84db", - "child": "2cb40ab7cf323e58", - "type": "contains" - }, - { - "parent": "e5d4a79033ba84db", - "child": "76af347c7dbc737a", - "type": "contains" - }, - { - "parent": "e5d4a79033ba84db", - "child": "b37d6e2e45f66f33", - "type": "dependency-of" - }, - { - "parent": "e5d4a79033ba84db", - "child": "b5c42da9eeef9d95", - "type": "contains" - }, - { - "parent": "e5d4a79033ba84db", - "child": "b6274398f5a1b17c", - "type": "contains" - }, - { - "parent": "e5d4a79033ba84db", - "child": "bacd9a5a78fe821e", - "type": "contains" - }, - { - "parent": "e5d4a79033ba84db", - "child": "c0756f35a5e6d8b3", - "type": "dependency-of" - }, - { - "parent": "e5d4a79033ba84db", - "child": "c3b51a85a6a2d3e1", - "type": "evident-by" - }, - { - "parent": "e5d4a79033ba84db", - "child": "cd658a985edaf628", - "type": "contains" - }, - { - "parent": "e5d4a79033ba84db", - "child": "d5b653bea57138f7", - "type": "contains" - }, - { - "parent": "e5d4a79033ba84db", - "child": "e05bfc6d7f257206", - "type": "contains" - }, - { - "parent": "e5d4a79033ba84db", - "child": "e5d401ebaaead494", - "type": "contains" - }, - { - "parent": "e5d4a79033ba84db", - "child": "f280edcc4c0a74ca", - "type": "contains" - }, - { - "parent": "edcf6e67eac04af0", - "child": "10c99a42ed5bf9d4", - "type": "dependency-of" - }, - { - "parent": "edcf6e67eac04af0", - "child": "564026926225072e", - "type": "contains" - }, - { - "parent": "edcf6e67eac04af0", - "child": "5f6a22a80b2c468e", - "type": "contains" - }, - { - "parent": "edcf6e67eac04af0", - "child": "7964b7b17ac34389", - "type": "contains" - }, - { - "parent": "edcf6e67eac04af0", - "child": "c3b51a85a6a2d3e1", - "type": "evident-by" - }, - { - "parent": "edcf6e67eac04af0", - "child": "c468e3fb98398685", - "type": "contains" - }, - { - "parent": "edcf6e67eac04af0", - "child": "da2faa18609cadef", - "type": "contains" - }, - { - "parent": "edcf6e67eac04af0", - "child": "faa5e8897571d717", - "type": "contains" - }, - { - "parent": "f0def3051a26afc8", - "child": "09bf3883b623158f", - "type": "contains" - }, - { - "parent": "f0def3051a26afc8", - "child": "3f37b052555a032a", - "type": "contains" - }, - { - "parent": "f0def3051a26afc8", - "child": "5229138dd6e4ad25", - "type": "contains" - }, - { - "parent": "f0def3051a26afc8", - "child": "5c344de6c0adfb41", - "type": "contains" - }, - { - "parent": "f0def3051a26afc8", - "child": "627946275cda492f", - "type": "contains" - }, - { - "parent": "f0def3051a26afc8", - "child": "671d1f01c6f0063d", - "type": "contains" - }, - { - "parent": "f0def3051a26afc8", - "child": "6722cd9ee8e4cd77", - "type": "contains" - }, - { - "parent": "f0def3051a26afc8", - "child": "75fcc462c95ba1ee", - "type": "contains" - }, - { - "parent": "f0def3051a26afc8", - "child": "761377117b43797c", - "type": "contains" - }, - { - "parent": "f0def3051a26afc8", - "child": "7e0eaf4903e2c594", - "type": "contains" - }, - { - "parent": "f0def3051a26afc8", - "child": "81a031158e5a172a", - "type": "contains" - }, - { - "parent": "f0def3051a26afc8", - "child": "8d0f0e38c71439e1", - "type": "contains" - }, - { - "parent": "f0def3051a26afc8", - "child": "932c31c2300cc286", - "type": "contains" - }, - { - "parent": "f0def3051a26afc8", - "child": "a11195f3b431951d", - "type": "contains" - }, - { - "parent": "f0def3051a26afc8", - "child": "bd290647080920df", - "type": "contains" - }, - { - "parent": "f0def3051a26afc8", - "child": "c0437528810bb1fb", - "type": "contains" - }, - { - "parent": "f0def3051a26afc8", - "child": "c3b51a85a6a2d3e1", - "type": "evident-by" - }, - { - "parent": "f0def3051a26afc8", - "child": "c4d82f372f586c5d", - "type": "contains" - }, - { - "parent": "f0def3051a26afc8", - "child": "c9f749c20ace3749", - "type": "contains" - }, - { - "parent": "f0def3051a26afc8", - "child": "d15e3bb2fde54385", - "type": "contains" - }, - { - "parent": "f0def3051a26afc8", - "child": "d7833aea1af90c3e", - "type": "contains" - }, - { - "parent": "f0def3051a26afc8", - "child": "e62c139013a804b7", - "type": "contains" - }, - { - "parent": "f0def3051a26afc8", - "child": "f229e2967a4439ae", - "type": "contains" - }, - { - "parent": "f95be16d8615d51f", - "child": "c3b51a85a6a2d3e1", - "type": "evident-by" + "artifacts": [ + { + "id": "0a3b4a9dae4049aa", + "name": "alpine-baselayout", + "version": "3.4.0-r0", + "type": "apk", + "foundBy": "apk-db-cataloger", + "locations": [ + { + "path": "/lib/apk/db/installed", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", + "accessPath": "/lib/apk/db/installed", + "annotations": { + "evidence": "primary" + } } - ], - "files": [ - { - "id": "564026926225072e", - "location": { - "path": "/bin/busybox", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + ], + "licenses": [ + { + "value": "GPL-2.0-only", + "spdxExpression": "GPL-2.0-only", + "type": "declared", + "urls": [], + "locations": [ + { + "path": "/lib/apk/db/installed", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", + "accessPath": "/lib/apk/db/installed", + "annotations": { + "evidence": "primary" + } } - }, - { - "id": "8d0f0e38c71439e1", - "location": { - "path": "/etc/apk/keys/alpine-devel@lists.alpinelinux.org-4a6a0840.rsa.pub", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + ] + } + ], + "language": "", + "cpes": [ + "cpe:2.3:a:alpine-baselayout:alpine-baselayout:3.4.0-r0:*:*:*:*:*:*:*", + "cpe:2.3:a:alpine-baselayout:alpine_baselayout:3.4.0-r0:*:*:*:*:*:*:*", + "cpe:2.3:a:alpine_baselayout:alpine-baselayout:3.4.0-r0:*:*:*:*:*:*:*", + "cpe:2.3:a:alpine_baselayout:alpine_baselayout:3.4.0-r0:*:*:*:*:*:*:*", + "cpe:2.3:a:alpine:alpine-baselayout:3.4.0-r0:*:*:*:*:*:*:*", + "cpe:2.3:a:alpine:alpine_baselayout:3.4.0-r0:*:*:*:*:*:*:*" + ], + "purl": "pkg:apk/alpine/alpine-baselayout@3.4.0-r0?arch=x86_64\u0026distro=alpine-3.17.2", + "metadataType": "apk-db-entry", + "metadata": { + "package": "alpine-baselayout", + "originPackage": "alpine-baselayout", + "maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", + "version": "3.4.0-r0", + "architecture": "x86_64", + "url": "https://git.alpinelinux.org/cgit/aports/tree/main/alpine-baselayout", + "description": "Alpine base dir structure and init scripts", + "size": 8890, + "installedSize": 331776, + "pullDependencies": [ + "alpine-baselayout-data=3.4.0-r0", + "/bin/sh" + ], + "provides": [], + "pullChecksum": "Q1/eXfmbYT1WXenFSqKjroYyK84NE=", + "gitCommitOfApkPort": "bd965a7ebf7fd8f07d7a0cc0d7375bf3e4eb9b24", + "files": [ + { + "path": "/dev" + }, + { + "path": "/dev/pts" + }, + { + "path": "/dev/shm" + }, + { + "path": "/etc" + }, + { + "path": "/etc/motd", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1SLkS9hBidUbPwwrw+XR0Whv3ww8=" } - }, - { - "id": "671d1f01c6f0063d", - "location": { - "path": "/etc/apk/keys/alpine-devel@lists.alpinelinux.org-5243ef4b.rsa.pub", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/etc/apk" + }, + { + "path": "/etc/conf.d" + }, + { + "path": "/etc/crontabs" + }, + { + "path": "/etc/crontabs/root", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "600", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1vfk1apUWI4yLJGhhNRd0kJixfvY=" } - }, - { - "id": "6722cd9ee8e4cd77", - "location": { - "path": "/etc/apk/keys/alpine-devel@lists.alpinelinux.org-5261cecb.rsa.pub", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/etc/init.d" + }, + { + "path": "/etc/modprobe.d" + }, + { + "path": "/etc/modprobe.d/aliases.conf", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1WUbh6TBYNVK7e4Y+uUvLs/7viqk=" } - }, - { - "id": "627946275cda492f", - "location": { - "path": "/etc/apk/keys/alpine-devel@lists.alpinelinux.org-6165ee59.rsa.pub", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/etc/modprobe.d/blacklist.conf", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q14TdgFHkTdt3uQC+NBtrntOnm9n4=" } - }, - { - "id": "09bf3883b623158f", - "location": { - "path": "/etc/apk/keys/alpine-devel@lists.alpinelinux.org-61666e3f.rsa.pub", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/etc/modprobe.d/i386.conf", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1pnay/njn6ol9cCssL7KiZZ8etlc=" } - }, - { - "id": "7ff31e5e9ba0bfa9", - "location": { - "path": "/etc/crontabs/root", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/etc/modprobe.d/kms.conf", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1ynbLn3GYDpvajba/ldp1niayeog=" } - }, - { - "id": "6b9abe7d80ee470b", - "location": { - "path": "/etc/fstab", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/etc/modules-load.d" + }, + { + "path": "/etc/network" + }, + { + "path": "/etc/network/if-down.d" + }, + { + "path": "/etc/network/if-post-down.d" + }, + { + "path": "/etc/network/if-pre-up.d" + }, + { + "path": "/etc/network/if-up.d" + }, + { + "path": "/etc/opt" + }, + { + "path": "/etc/periodic" + }, + { + "path": "/etc/periodic/15min" + }, + { + "path": "/etc/periodic/daily" + }, + { + "path": "/etc/periodic/hourly" + }, + { + "path": "/etc/periodic/monthly" + }, + { + "path": "/etc/periodic/weekly" + }, + { + "path": "/etc/profile.d" + }, + { + "path": "/etc/profile.d/README", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q135OWsCzzvnB2fmFx62kbqm1Ax1k=" } - }, - { - "id": "fb8ddb3720060aa2", - "location": { - "path": "/etc/group", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/etc/profile.d/color_prompt.sh.disabled", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q11XM9mde1Z29tWMGaOkeovD/m4uU=" } - }, - { - "id": "e456dfb5be04fdb7", - "location": { - "path": "/etc/hostname", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/etc/profile.d/locale.sh", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1S8j+WW71mWxfVy8ythqU7HUVoBw=" } - }, - { - "id": "4fdfbb03676f495b", - "location": { - "path": "/etc/hosts", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/etc/sysctl.d" + }, + { + "path": "/home" + }, + { + "path": "/lib" + }, + { + "path": "/lib/firmware" + }, + { + "path": "/lib/mdev" + }, + { + "path": "/lib/modules-load.d" + }, + { + "path": "/lib/sysctl.d" + }, + { + "path": "/lib/sysctl.d/00-alpine.conf", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1HpElzW1xEgmKfERtTy7oommnq6c=" } - }, - { - "id": "2791973cba0a89bb", - "location": { - "path": "/etc/inittab", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/media" + }, + { + "path": "/media/cdrom" + }, + { + "path": "/media/floppy" + }, + { + "path": "/media/usb" + }, + { + "path": "/mnt" + }, + { + "path": "/opt" + }, + { + "path": "/proc" + }, + { + "path": "/root", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "700" + }, + { + "path": "/run" + }, + { + "path": "/sbin" + }, + { + "path": "/srv" + }, + { + "path": "/sys" + }, + { + "path": "/tmp", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "1777" + }, + { + "path": "/usr" + }, + { + "path": "/usr/lib" + }, + { + "path": "/usr/lib/modules-load.d" + }, + { + "path": "/usr/local" + }, + { + "path": "/usr/local/bin" + }, + { + "path": "/usr/local/lib" + }, + { + "path": "/usr/local/share" + }, + { + "path": "/usr/sbin" + }, + { + "path": "/usr/share" + }, + { + "path": "/usr/share/man" + }, + { + "path": "/usr/share/misc" + }, + { + "path": "/var" + }, + { + "path": "/var/run", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "777", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q11/SNZz/8cK2dSKK+cJpVrZIuF4Q=" } - }, - { - "id": "5f6a22a80b2c468e", - "location": { - "path": "/etc/logrotate.d/acpid", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/var/cache" + }, + { + "path": "/var/cache/misc" + }, + { + "path": "/var/empty", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "555" + }, + { + "path": "/var/lib" + }, + { + "path": "/var/lib/misc" + }, + { + "path": "/var/local" + }, + { + "path": "/var/lock" + }, + { + "path": "/var/lock/subsys" + }, + { + "path": "/var/log" + }, + { + "path": "/var/mail" + }, + { + "path": "/var/opt" + }, + { + "path": "/var/spool" + }, + { + "path": "/var/spool/mail", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "777", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1dzbdazYZA2nTzSIG3YyNw7d4Juc=" } - }, - { - "id": "1071b0c6b4d98bb1", - "location": { - "path": "/etc/modprobe.d/aliases.conf", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/var/spool/cron" + }, + { + "path": "/var/spool/cron/crontabs", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "777", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1OFZt+ZMp7j0Gny0rqSKuWJyqYmA=" } - }, - { - "id": "7b189c84b22c7f02", - "location": { - "path": "/etc/modprobe.d/blacklist.conf", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/var/tmp", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "1777" + } + ] + } + }, + { + "id": "008bcc1445f44203", + "name": "alpine-baselayout-data", + "version": "3.4.0-r0", + "type": "apk", + "foundBy": "apk-db-cataloger", + "locations": [ + { + "path": "/lib/apk/db/installed", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", + "accessPath": "/lib/apk/db/installed", + "annotations": { + "evidence": "primary" + } + } + ], + "licenses": [ + { + "value": "GPL-2.0-only", + "spdxExpression": "GPL-2.0-only", + "type": "declared", + "urls": [], + "locations": [ + { + "path": "/lib/apk/db/installed", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", + "accessPath": "/lib/apk/db/installed", + "annotations": { + "evidence": "primary" + } } - }, - { - "id": "b103e8d521455a19", - "location": { - "path": "/etc/modprobe.d/i386.conf", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + ] + } + ], + "language": "", + "cpes": [ + "cpe:2.3:a:alpine-baselayout-data:alpine-baselayout-data:3.4.0-r0:*:*:*:*:*:*:*", + "cpe:2.3:a:alpine-baselayout-data:alpine_baselayout_data:3.4.0-r0:*:*:*:*:*:*:*", + "cpe:2.3:a:alpine_baselayout_data:alpine-baselayout-data:3.4.0-r0:*:*:*:*:*:*:*", + "cpe:2.3:a:alpine_baselayout_data:alpine_baselayout_data:3.4.0-r0:*:*:*:*:*:*:*", + "cpe:2.3:a:alpine-baselayout:alpine-baselayout-data:3.4.0-r0:*:*:*:*:*:*:*", + "cpe:2.3:a:alpine-baselayout:alpine_baselayout_data:3.4.0-r0:*:*:*:*:*:*:*", + "cpe:2.3:a:alpine_baselayout:alpine-baselayout-data:3.4.0-r0:*:*:*:*:*:*:*", + "cpe:2.3:a:alpine_baselayout:alpine_baselayout_data:3.4.0-r0:*:*:*:*:*:*:*", + "cpe:2.3:a:alpine:alpine-baselayout-data:3.4.0-r0:*:*:*:*:*:*:*", + "cpe:2.3:a:alpine:alpine_baselayout_data:3.4.0-r0:*:*:*:*:*:*:*" + ], + "purl": "pkg:apk/alpine/alpine-baselayout-data@3.4.0-r0?arch=x86_64\u0026upstream=alpine-baselayout\u0026distro=alpine-3.17.2", + "metadataType": "apk-db-entry", + "metadata": { + "package": "alpine-baselayout-data", + "originPackage": "alpine-baselayout", + "maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", + "version": "3.4.0-r0", + "architecture": "x86_64", + "url": "https://git.alpinelinux.org/cgit/aports/tree/main/alpine-baselayout", + "description": "Alpine base dir structure and init scripts", + "size": 11664, + "installedSize": 77824, + "pullDependencies": [], + "provides": [], + "pullChecksum": "Q1/JgpM8J6DWI/541tUX+uHEzSjqo=", + "gitCommitOfApkPort": "bd965a7ebf7fd8f07d7a0cc0d7375bf3e4eb9b24", + "files": [ + { + "path": "/etc" + }, + { + "path": "/etc/fstab", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q11Q7hNe8QpDS531guqCdrXBzoA/o=" } - }, - { - "id": "77282715f933737e", - "location": { - "path": "/etc/modprobe.d/kms.conf", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/etc/group", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q13K+olJg5ayzHSVNUkggZJXuB+9Y=" } - }, - { - "id": "8108ab845e4ccbcb", - "location": { - "path": "/etc/modules", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/etc/hostname", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q16nVwYVXP/tChvUPdukVD2ifXOmc=" } - }, - { - "id": "35ab393f27e0bc39", - "location": { - "path": "/etc/motd", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/etc/hosts", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1BD6zJKZTRWyqGnPi4tSfd3krsMU=" } - }, - { - "id": "da2faa18609cadef", - "location": { - "path": "/etc/network/if-up.d/dad", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/etc/inittab", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1TsthbhW7QzWRe1E/NKwTOuD4pHc=" } - }, - { - "id": "4cf9c3537f896231", - "location": { - "path": "/etc/nsswitch.conf", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/etc/modules", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1toogjUipHGcMgECgPJX64SwUT1M=" } - }, - { - "id": "57e155e28050b71f", - "location": { - "path": "/etc/passwd", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/etc/mtab", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "777", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1kiljhXXH1LlQroHsEJIkPZg2eiw=" } - }, - { - "id": "e549cedcbd486e69", - "location": { - "path": "/etc/profile", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/etc/nsswitch.conf", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q19DBsMnv0R2fajaTjoTv0C91NOqo=" } - }, - { - "id": "d98fbe0bce78b009", - "location": { - "path": "/etc/profile.d/README", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/etc/passwd", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1TchuuLUfur0izvfZQZxgN/LJhB8=" } - }, - { - "id": "02eba7befcbb3bfa", - "location": { - "path": "/etc/profile.d/color_prompt.sh.disabled", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/etc/profile", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1Ia5UTXvRkAH1lTZK8lm8qRBdRF4=" } - }, - { - "id": "71fcfec0ece1a67a", - "location": { - "path": "/etc/profile.d/locale.sh", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/etc/protocols", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q11fllRTkIm5bxsZVoSNeDUn2m+0c=" } - }, - { - "id": "b58b2fb69e8b39c8", - "location": { - "path": "/etc/protocols", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/etc/services", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1oNeiKb8En3/hfoRFImI25AJFNdA=" } - }, - { - "id": "7964b7b17ac34389", - "location": { - "path": "/etc/securetty", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/etc/shadow", + "ownerUid": "0", + "ownerGid": "42", + "permissions": "640", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1ltrPIAW2zHeDiajsex2Bdmq3uqA=" } - }, - { - "id": "dfe56f19a55af4ab", - "location": { - "path": "/etc/services", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/etc/shells", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1ojm2YdpCJ6B/apGDaZ/Sdb2xJkA=" } - }, - { - "id": "6202d0483a0eaf70", - "location": { - "path": "/etc/shadow", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/etc/sysctl.conf", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q14upz3tfnNxZkIEsUhWn7Xoiw96g=" } - }, - { - "id": "8668162f21426d67", - "location": { - "path": "/etc/shells", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + } + ] + } + }, + { + "id": "f0def3051a26afc8", + "name": "alpine-keys", + "version": "2.4-r1", + "type": "apk", + "foundBy": "apk-db-cataloger", + "locations": [ + { + "path": "/lib/apk/db/installed", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", + "accessPath": "/lib/apk/db/installed", + "annotations": { + "evidence": "primary" + } + } + ], + "licenses": [ + { + "value": "MIT", + "spdxExpression": "MIT", + "type": "declared", + "urls": [], + "locations": [ + { + "path": "/lib/apk/db/installed", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", + "accessPath": "/lib/apk/db/installed", + "annotations": { + "evidence": "primary" + } } - }, - { - "id": "0fab6f59514f4740", - "location": { - "path": "/etc/ssl/certs/ca-certificates.crt", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + ] + } + ], + "language": "", + "cpes": [ + "cpe:2.3:a:alpine-keys:alpine-keys:2.4-r1:*:*:*:*:*:*:*", + "cpe:2.3:a:alpine-keys:alpine_keys:2.4-r1:*:*:*:*:*:*:*", + "cpe:2.3:a:alpine_keys:alpine-keys:2.4-r1:*:*:*:*:*:*:*", + "cpe:2.3:a:alpine_keys:alpine_keys:2.4-r1:*:*:*:*:*:*:*", + "cpe:2.3:a:alpine:alpine-keys:2.4-r1:*:*:*:*:*:*:*", + "cpe:2.3:a:alpine:alpine_keys:2.4-r1:*:*:*:*:*:*:*" + ], + "purl": "pkg:apk/alpine/alpine-keys@2.4-r1?arch=x86_64\u0026distro=alpine-3.17.2", + "metadataType": "apk-db-entry", + "metadata": { + "package": "alpine-keys", + "originPackage": "alpine-keys", + "maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", + "version": "2.4-r1", + "architecture": "x86_64", + "url": "https://alpinelinux.org", + "description": "Public keys for Alpine Linux packages", + "size": 13361, + "installedSize": 159744, + "pullDependencies": [], + "provides": [], + "pullChecksum": "Q1KM01lfKVp+gEZn23awujqjSkrN8=", + "gitCommitOfApkPort": "aab68f8c9ab434a46710de8e12fb3206e2930a59", + "files": [ + { + "path": "/etc" + }, + { + "path": "/etc/apk" + }, + { + "path": "/etc/apk/keys" + }, + { + "path": "/etc/apk/keys/alpine-devel@lists.alpinelinux.org-4a6a0840.rsa.pub", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1OvCFSO94z97c80mIDCxqGkh2Og4=" } - }, - { - "id": "bacd9a5a78fe821e", - "location": { - "path": "/etc/ssl/ct_log_list.cnf", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/etc/apk/keys/alpine-devel@lists.alpinelinux.org-5243ef4b.rsa.pub", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1v7YWZYzAWoclaLDI45jEguI7YN0=" } - }, - { - "id": "0e7815a8b0d1ecdc", - "location": { - "path": "/etc/ssl/ct_log_list.cnf.dist", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/etc/apk/keys/alpine-devel@lists.alpinelinux.org-5261cecb.rsa.pub", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1NnGuDsdQOx4ZNYfB3N97eLyGPkI=" } - }, - { - "id": "d5b653bea57138f7", - "location": { - "path": "/etc/ssl/misc/CA.pl", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/etc/apk/keys/alpine-devel@lists.alpinelinux.org-6165ee59.rsa.pub", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1lZlTESNrelWTNkL/oQzmAU8a99A=" } - }, - { - "id": "2cb40ab7cf323e58", - "location": { - "path": "/etc/ssl/misc/tsget.pl", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/etc/apk/keys/alpine-devel@lists.alpinelinux.org-61666e3f.rsa.pub", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1WNW6Sy87HpJ3IdemQy8pju33Kms=" } - }, - { - "id": "f280edcc4c0a74ca", - "location": { - "path": "/etc/ssl/openssl.cnf", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/usr" + }, + { + "path": "/usr/share" + }, + { + "path": "/usr/share/apk" + }, + { + "path": "/usr/share/apk/keys" + }, + { + "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-4a6a0840.rsa.pub", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1OvCFSO94z97c80mIDCxqGkh2Og4=" } - }, - { - "id": "cd658a985edaf628", - "location": { - "path": "/etc/ssl/openssl.cnf.dist", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-5243ef4b.rsa.pub", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1v7YWZYzAWoclaLDI45jEguI7YN0=" } - }, - { - "id": "c7bb6e42ea2504f8", - "location": { - "path": "/etc/sysctl.conf", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-524d27bb.rsa.pub", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1BTqS+H/UUyhQuzHwiBl47+BTKuU=" } - }, - { - "id": "faa5e8897571d717", - "location": { - "path": "/etc/udhcpd.conf", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-5261cecb.rsa.pub", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1NnGuDsdQOx4ZNYfB3N97eLyGPkI=" } - }, - { - "id": "c3b51a85a6a2d3e1", - "location": { - "path": "/lib/apk/db/installed", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-58199dcc.rsa.pub", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1Oaxdcsa6AYoPdLi0U4lO3J2we18=" } - }, - { - "id": "f45009f97952cd8e", - "location": { - "path": "/lib/ld-musl-x86_64.so.1", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-58cbb476.rsa.pub", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1yPq+su65ksNox3uXB+DR7P18+QU=" } - }, - { - "id": "1aa086f53c8c0808", - "location": { - "path": "/lib/libapk.so.3.12.0", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-58e4f17d.rsa.pub", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1MpZDNX0LeLHvSOwVUyXiXx11NN0=" } - }, - { - "id": "b5c42da9eeef9d95", - "location": { - "path": "/lib/libcrypto.so.3", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-5e69ca50.rsa.pub", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1glCQ/eJbvA5xqcswdjFrWv5Fnk0=" } - }, - { - "id": "5c67196b8e1d1558", - "location": { - "path": "/lib/libssl.so.3", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-60ac2099.rsa.pub", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1XUdDEoNTtjlvrS+iunk6ziFgIpU=" } - }, - { - "id": "6d81ff77d1d5460a", - "location": { - "path": "/lib/libz.so.1.2.13", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-6165ee59.rsa.pub", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1lZlTESNrelWTNkL/oQzmAU8a99A=" } - }, - { - "id": "89c7ab9592844cbb", - "location": { - "path": "/lib/sysctl.d/00-alpine.conf", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-61666e3f.rsa.pub", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1WNW6Sy87HpJ3IdemQy8pju33Kms=" } - }, - { - "id": "c765115741fe905b", - "location": { - "path": "/sbin/apk", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616a9724.rsa.pub", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1I9Dy6hryacL2YWXg+KlE6WvwEd4=" } - }, - { - "id": "c911f25351778370", - "location": { - "path": "/sbin/ldconfig", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616abc23.rsa.pub", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1NSnsgmcMbU4g7j5JaNs0tVHpHVA=" } - }, - { - "id": "e0a729e0af2c3974", - "location": { - "path": "/usr/bin/getconf", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616ac3bc.rsa.pub", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1VaMBBk4Rxv6boPLKF+I085Q8y2E=" } - }, - { - "id": "51ddc107d90f5f4b", - "location": { - "path": "/usr/bin/getent", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616adfeb.rsa.pub", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q13hJBMHAUquPbp5jpAPFjQI2Y1vQ=" } - }, - { - "id": "47c9d14986fb43fc", - "location": { - "path": "/usr/bin/iconv", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616ae350.rsa.pub", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1V/a5P9pKRJb6tihE3e8O6xaPgLU=" } - }, - { - "id": "bf51187b1c0aae54", - "location": { - "path": "/usr/bin/ldd", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616db30d.rsa.pub", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q13wLJrcKQajql5a1p9Q45U+ZXENA=" } - }, - { - "id": "6a7f2c32518c8dbc", - "location": { - "path": "/usr/bin/scanelf", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/usr/share/apk/keys/aarch64" + }, + { + "path": "/usr/share/apk/keys/aarch64/alpine-devel@lists.alpinelinux.org-58199dcc.rsa.pub", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "777", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q17j9nWJkQ+wfIuVQzIFrmFZ7fSOc=" } - }, - { - "id": "d7486c5ba43c6e31", - "location": { - "path": "/usr/bin/ssl_client", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/usr/share/apk/keys/aarch64/alpine-devel@lists.alpinelinux.org-616ae350.rsa.pub", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "777", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1snr+Q1UbfHyCr/cmmtVvMIS7SGs=" } - }, - { - "id": "b6274398f5a1b17c", - "location": { - "path": "/usr/lib/engines-3/afalg.so", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/usr/share/apk/keys/armhf" + }, + { + "path": "/usr/share/apk/keys/armhf/alpine-devel@lists.alpinelinux.org-524d27bb.rsa.pub", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "777", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1U9QtsdN+rYZ9Zh76EfXy00JZHMg=" } - }, - { - "id": "e5d401ebaaead494", - "location": { - "path": "/usr/lib/engines-3/capi.so", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/usr/share/apk/keys/armhf/alpine-devel@lists.alpinelinux.org-616a9724.rsa.pub", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "777", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1bC+AdQ0qWBTmefXiI0PvmYOJoVQ=" } - }, - { - "id": "e05bfc6d7f257206", - "location": { - "path": "/usr/lib/engines-3/loader_attic.so", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/usr/share/apk/keys/armv7" + }, + { + "path": "/usr/share/apk/keys/armv7/alpine-devel@lists.alpinelinux.org-524d27bb.rsa.pub", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "777", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1U9QtsdN+rYZ9Zh76EfXy00JZHMg=" } - }, - { - "id": "76af347c7dbc737a", - "location": { - "path": "/usr/lib/engines-3/padlock.so", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/usr/share/apk/keys/armv7/alpine-devel@lists.alpinelinux.org-616adfeb.rsa.pub", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "777", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1xbIVu7ScwqGHxXGwI22aSe5OdUY=" } - }, - { - "id": "1ae61640919b8dcb", - "location": { - "path": "/usr/lib/ossl-modules/legacy.so", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/usr/share/apk/keys/mips64" + }, + { + "path": "/usr/share/apk/keys/mips64/alpine-devel@lists.alpinelinux.org-5e69ca50.rsa.pub", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "777", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1hCZdFx+LvzbLtPs753je78gEEBQ=" } - }, - { - "id": "d7833aea1af90c3e", - "location": { - "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-4a6a0840.rsa.pub", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/usr/share/apk/keys/ppc64le" + }, + { + "path": "/usr/share/apk/keys/ppc64le/alpine-devel@lists.alpinelinux.org-58cbb476.rsa.pub", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "777", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1t21dhCLbTJmAHXSCeOMq/2vfSgo=" } - }, - { - "id": "f229e2967a4439ae", - "location": { - "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-5243ef4b.rsa.pub", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/usr/share/apk/keys/ppc64le/alpine-devel@lists.alpinelinux.org-616abc23.rsa.pub", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "777", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1PS9zNIPJanC8qcsc5qarEWqhV5Q=" } - }, - { - "id": "5c344de6c0adfb41", - "location": { - "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-524d27bb.rsa.pub", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/usr/share/apk/keys/riscv64" + }, + { + "path": "/usr/share/apk/keys/riscv64/alpine-devel@lists.alpinelinux.org-60ac2099.rsa.pub", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "777", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1NVPbZavaXpsItFwQYDWbpor7yYE=" } - }, - { - "id": "7e0eaf4903e2c594", - "location": { - "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-5261cecb.rsa.pub", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/usr/share/apk/keys/riscv64/alpine-devel@lists.alpinelinux.org-616db30d.rsa.pub", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "777", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1U6tfuKRy5J8C6iaKPMZaT/e8tbA=" } - }, - { - "id": "c4d82f372f586c5d", - "location": { - "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-58199dcc.rsa.pub", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/usr/share/apk/keys/s390x" + }, + { + "path": "/usr/share/apk/keys/s390x/alpine-devel@lists.alpinelinux.org-58e4f17d.rsa.pub", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "777", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1sjbV2r2w0Ih2vwdzC4Jq6UI7cMQ=" } - }, - { - "id": "c9f749c20ace3749", - "location": { - "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-58cbb476.rsa.pub", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/usr/share/apk/keys/s390x/alpine-devel@lists.alpinelinux.org-616ac3bc.rsa.pub", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "777", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1l09xa7RnbOIC1dI9FqbaCfS/GXY=" } - }, - { - "id": "3f37b052555a032a", - "location": { - "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-58e4f17d.rsa.pub", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/usr/share/apk/keys/x86" + }, + { + "path": "/usr/share/apk/keys/x86/alpine-devel@lists.alpinelinux.org-4a6a0840.rsa.pub", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "777", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1Ii51i7Nrc4uft14HhqugaUqdH64=" } - }, - { - "id": "bd290647080920df", - "location": { - "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-5e69ca50.rsa.pub", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/usr/share/apk/keys/x86/alpine-devel@lists.alpinelinux.org-5243ef4b.rsa.pub", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "777", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1Y49eVxhpvftbQ3yAdvlLfcrPLTU=" } - }, - { - "id": "761377117b43797c", - "location": { - "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-60ac2099.rsa.pub", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/usr/share/apk/keys/x86/alpine-devel@lists.alpinelinux.org-61666e3f.rsa.pub", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "777", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1HjdvcVkpBZzr1aSe3p7oQfAtm/E=" } - }, - { - "id": "81a031158e5a172a", - "location": { - "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-6165ee59.rsa.pub", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/usr/share/apk/keys/x86_64" + }, + { + "path": "/usr/share/apk/keys/x86_64/alpine-devel@lists.alpinelinux.org-4a6a0840.rsa.pub", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "777", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1Ii51i7Nrc4uft14HhqugaUqdH64=" } - }, - { - "id": "c0437528810bb1fb", - "location": { - "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-61666e3f.rsa.pub", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/usr/share/apk/keys/x86_64/alpine-devel@lists.alpinelinux.org-5261cecb.rsa.pub", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "777", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1AUFY+fwSBTcrYetjT7NHvafrSQc=" } - }, - { - "id": "932c31c2300cc286", - "location": { - "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616a9724.rsa.pub", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/usr/share/apk/keys/x86_64/alpine-devel@lists.alpinelinux.org-6165ee59.rsa.pub", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "777", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1qKA23VzMUDle+Dqnrr5Kz+Xvty4=" } - }, - { - "id": "a11195f3b431951d", - "location": { - "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616abc23.rsa.pub", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + } + ] + } + }, + { + "id": "0faf8749e7caad06", + "name": "apk-tools", + "version": "2.12.10-r1", + "type": "apk", + "foundBy": "apk-db-cataloger", + "locations": [ + { + "path": "/lib/apk/db/installed", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", + "accessPath": "/lib/apk/db/installed", + "annotations": { + "evidence": "primary" + } + } + ], + "licenses": [ + { + "value": "GPL-2.0-only", + "spdxExpression": "GPL-2.0-only", + "type": "declared", + "urls": [], + "locations": [ + { + "path": "/lib/apk/db/installed", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", + "accessPath": "/lib/apk/db/installed", + "annotations": { + "evidence": "primary" + } } - }, - { - "id": "d15e3bb2fde54385", - "location": { - "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616ac3bc.rsa.pub", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + ] + } + ], + "language": "", + "cpes": [ + "cpe:2.3:a:apk-tools:apk-tools:2.12.10-r1:*:*:*:*:*:*:*", + "cpe:2.3:a:apk-tools:apk_tools:2.12.10-r1:*:*:*:*:*:*:*", + "cpe:2.3:a:apk_tools:apk-tools:2.12.10-r1:*:*:*:*:*:*:*", + "cpe:2.3:a:apk_tools:apk_tools:2.12.10-r1:*:*:*:*:*:*:*", + "cpe:2.3:a:apk:apk-tools:2.12.10-r1:*:*:*:*:*:*:*", + "cpe:2.3:a:apk:apk_tools:2.12.10-r1:*:*:*:*:*:*:*" + ], + "purl": "pkg:apk/alpine/apk-tools@2.12.10-r1?arch=x86_64\u0026distro=alpine-3.17.2", + "metadataType": "apk-db-entry", + "metadata": { + "package": "apk-tools", + "originPackage": "apk-tools", + "maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", + "version": "2.12.10-r1", + "architecture": "x86_64", + "url": "https://gitlab.alpinelinux.org/alpine/apk-tools", + "description": "Alpine Package Keeper - package manager for alpine", + "size": 120973, + "installedSize": 307200, + "pullDependencies": [ + "musl\u003e=1.2", + "ca-certificates-bundle", + "so:libc.musl-x86_64.so.1", + "so:libcrypto.so.3", + "so:libssl.so.3", + "so:libz.so.1" + ], + "provides": [ + "so:libapk.so.3.12.0=3.12.0", + "cmd:apk=2.12.10-r1" + ], + "pullChecksum": "Q1Ef3iwt+cMdGngEgaFr2URIJhKzQ=", + "gitCommitOfApkPort": "0188f510baadbae393472103427b9c1875117136", + "files": [ + { + "path": "/etc" + }, + { + "path": "/etc/apk" + }, + { + "path": "/etc/apk/keys" + }, + { + "path": "/etc/apk/protected_paths.d" + }, + { + "path": "/lib" + }, + { + "path": "/lib/libapk.so.3.12.0", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "755", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1opjpYqXgzmOVo7EbNe8l5Xol08g=" } - }, - { - "id": "e62c139013a804b7", - "location": { - "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616adfeb.rsa.pub", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/lib/apk" + }, + { + "path": "/lib/apk/exec" + }, + { + "path": "/sbin" + }, + { + "path": "/sbin/apk", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "755", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1/4bmOPe/H1YhHRzlrj27oufThMw=" } - }, - { - "id": "5229138dd6e4ad25", - "location": { - "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616ae350.rsa.pub", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + { + "path": "/var" + }, + { + "path": "/var/lib" + }, + { + "path": "/var/lib/apk" + } + ] + } + }, + { + "id": "edcf6e67eac04af0", + "name": "busybox", + "version": "1.35.0-r29", + "type": "apk", + "foundBy": "apk-db-cataloger", + "locations": [ + { + "path": "/lib/apk/db/installed", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", + "accessPath": "/lib/apk/db/installed", + "annotations": { + "evidence": "primary" + } + } + ], + "licenses": [ + { + "value": "GPL-2.0-only", + "spdxExpression": "GPL-2.0-only", + "type": "declared", + "urls": [], + "locations": [ + { + "path": "/lib/apk/db/installed", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", + "accessPath": "/lib/apk/db/installed", + "annotations": { + "evidence": "primary" + } } - }, - { - "id": "75fcc462c95ba1ee", - "location": { - "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616db30d.rsa.pub", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + ] + } + ], + "language": "", + "cpes": [ + "cpe:2.3:a:busybox:busybox:1.35.0-r29:*:*:*:*:*:*:*" + ], + "purl": "pkg:apk/alpine/busybox@1.35.0-r29?arch=x86_64\u0026distro=alpine-3.17.2", + "metadataType": "apk-db-entry", + "metadata": { + "package": "busybox", + "originPackage": "busybox", + "maintainer": "Sören Tempel \u003csoeren+alpine@soeren-tempel.net\u003e", + "version": "1.35.0-r29", + "architecture": "x86_64", + "url": "https://busybox.net/", + "description": "Size optimized toolbox of many common UNIX utilities", + "size": 509600, + "installedSize": 962560, + "pullDependencies": [ + "so:libc.musl-x86_64.so.1" + ], + "provides": [ + "cmd:busybox=1.35.0-r29" + ], + "pullChecksum": "Q1NN3sp0yr99btRysqty3nQUrWHaY=", + "gitCommitOfApkPort": "1dbf7a793afae640ea643a055b6dd4f430ac116b", + "files": [ + { + "path": "/bin" + }, + { + "path": "/bin/busybox", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "755", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1yVNLeeB7VouhCO/kz+dbfL3dY4c=" } - }, - { - "id": "c468e3fb98398685", - "location": { - "path": "/usr/share/udhcpc/default.script", - "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" - } - } - ], - "source": { - "id": "e2e16842c9b54d985bf1ef9242a313f36b856181f188de21313820e177002501", - "name": "alpine", - "version": "sha256:e2e16842c9b54d985bf1ef9242a313f36b856181f188de21313820e177002501", - "type": "image", - "metadata": { - "userInput": "alpine@sha256:e2e16842c9b54d985bf1ef9242a313f36b856181f188de21313820e177002501", - "imageID": "sha256:b2aa39c304c27b96c1fef0c06bee651ac9241d49c4fe34381cab8453f9a89c7d", - "manifestDigest": "sha256:e2e16842c9b54d985bf1ef9242a313f36b856181f188de21313820e177002501", - "mediaType": "application/vnd.docker.distribution.manifest.v2+json", - "tags": [], - "imageSize": 7044859, - "layers": [ - { - "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip", - "digest": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", - "size": 7044859 - } - ], - "manifest": "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", - "config": "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", - "repoDigests": [ - "index.docker.io/library/alpine@sha256:e2e16842c9b54d985bf1ef9242a313f36b856181f188de21313820e177002501" - ], - "architecture": "<>", - "os": "linux" - } - }, - "distro": { - "prettyName": "Alpine Linux v3.17", - "name": "Alpine Linux", - "id": "alpine", - "versionID": "3.17.2", - "homeURL": "https://alpinelinux.org/", - "bugReportURL": "https://gitlab.alpinelinux.org/alpine/aports/-/issues" - }, - "descriptor": { - "name": "syft", - "version": "0.98.0", - "configuration": { - "catalogers": null, - "package": { - "cataloger": { - "enabled": true, - "scope": "squashed" - }, - "search-unindexed-archives": false, - "search-indexed-archives": true - }, - "golang": { - "search-local-mod-cache-licenses": false, - "local-mod-cache-dir": "", - "search-remote-licenses": false, - "proxy": "", - "no-proxy": "" - }, - "java": { - "use-network": false, - "maven-url": "", - "max-parent-recursive-depth": 0 - }, - "linux-kernel": { - "catalog-modules": true - }, - "python": { - "guess-unpinned-requirements": false - }, - "file-metadata": { - "cataloger": { - "enabled": false, - "scope": "squashed" - }, - "digests": [ - "sha256" - ] - }, - "file-contents": { - "cataloger": { - "enabled": false, - "scope": "squashed" - }, - "skip-files-above-size": 1048576, - "globs": null - }, - "registry": { - "insecure-skip-tls-verify": false, - "insecure-use-http": false, - "auth": null, - "ca-cert": "" - }, - "exclude": [], - "platform": "", - "name": "", - "source": { - "name": "", - "version": "", - "file": { - "digests": [ - "sha256" - ] - } - }, - "parallelism": 1, - "default-image-pull-source": "", - "base-path": "", - "exclude-binary-overlap-by-ownership": true - } - }, - "schema": { - "version": "13.0.0", - "url": "https://raw.githubusercontent.com/anchore/syft/main/schema/json/schema-13.0.0.json" + }, + { + "path": "/etc" + }, + { + "path": "/etc/securetty", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1mB95Hq2NUTZ599RDiSsj9w5FrOU=" + } + }, + { + "path": "/etc/udhcpd.conf", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1EgLFjj67ou3eMqp4m3r2ZjnQ7QU=" + } + }, + { + "path": "/etc/logrotate.d" + }, + { + "path": "/etc/logrotate.d/acpid", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1TylyCINVmnS+A/Tead4vZhE7Bks=" + } + }, + { + "path": "/etc/network" + }, + { + "path": "/etc/network/if-down.d" + }, + { + "path": "/etc/network/if-post-down.d" + }, + { + "path": "/etc/network/if-post-up.d" + }, + { + "path": "/etc/network/if-pre-down.d" + }, + { + "path": "/etc/network/if-pre-up.d" + }, + { + "path": "/etc/network/if-up.d" + }, + { + "path": "/etc/network/if-up.d/dad", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "775", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1ORf+lPRKuYgdkBBcKoevR1t60Q4=" + } + }, + { + "path": "/sbin" + }, + { + "path": "/tmp", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "1777" + }, + { + "path": "/usr" + }, + { + "path": "/usr/sbin" + }, + { + "path": "/usr/share" + }, + { + "path": "/usr/share/udhcpc" + }, + { + "path": "/usr/share/udhcpc/default.script", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "755", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1HWpG3eQD8Uoi4mks2E3SSvOAUhY=" + } + }, + { + "path": "/var" + }, + { + "path": "/var/cache" + }, + { + "path": "/var/cache/misc" + }, + { + "path": "/var/lib" + }, + { + "path": "/var/lib/udhcpd" + } + ] + } + }, + { + "id": "10c99a42ed5bf9d4", + "name": "busybox-binsh", + "version": "1.35.0-r29", + "type": "apk", + "foundBy": "apk-db-cataloger", + "locations": [ + { + "path": "/lib/apk/db/installed", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", + "accessPath": "/lib/apk/db/installed", + "annotations": { + "evidence": "primary" + } + } + ], + "licenses": [ + { + "value": "GPL-2.0-only", + "spdxExpression": "GPL-2.0-only", + "type": "declared", + "urls": [], + "locations": [ + { + "path": "/lib/apk/db/installed", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", + "accessPath": "/lib/apk/db/installed", + "annotations": { + "evidence": "primary" + } + } + ] + } + ], + "language": "", + "cpes": [ + "cpe:2.3:a:busybox-binsh:busybox-binsh:1.35.0-r29:*:*:*:*:*:*:*", + "cpe:2.3:a:busybox-binsh:busybox_binsh:1.35.0-r29:*:*:*:*:*:*:*", + "cpe:2.3:a:busybox_binsh:busybox-binsh:1.35.0-r29:*:*:*:*:*:*:*", + "cpe:2.3:a:busybox_binsh:busybox_binsh:1.35.0-r29:*:*:*:*:*:*:*", + "cpe:2.3:a:busybox:busybox-binsh:1.35.0-r29:*:*:*:*:*:*:*", + "cpe:2.3:a:busybox:busybox_binsh:1.35.0-r29:*:*:*:*:*:*:*" + ], + "purl": "pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=x86_64\u0026upstream=busybox\u0026distro=alpine-3.17.2", + "metadataType": "apk-db-entry", + "metadata": { + "package": "busybox-binsh", + "originPackage": "busybox", + "maintainer": "Sören Tempel \u003csoeren+alpine@soeren-tempel.net\u003e", + "version": "1.35.0-r29", + "architecture": "x86_64", + "url": "https://busybox.net/", + "description": "busybox ash /bin/sh", + "size": 1547, + "installedSize": 8192, + "pullDependencies": [ + "busybox=1.35.0-r29" + ], + "provides": [ + "/bin/sh", + "cmd:sh=1.35.0-r29" + ], + "pullChecksum": "Q1miWwyhWKXVEiRYLhmArV1TKMs6A=", + "gitCommitOfApkPort": "1dbf7a793afae640ea643a055b6dd4f430ac116b", + "files": [ + { + "path": "/bin" + }, + { + "path": "/bin/sh", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "777", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1pcfTfDNEbNKQc2s1tia7da05M8Q=" + } + } + ] + } + }, + { + "id": "4cb49698ca5c72c1", + "name": "ca-certificates-bundle", + "version": "20220614-r4", + "type": "apk", + "foundBy": "apk-db-cataloger", + "locations": [ + { + "path": "/lib/apk/db/installed", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", + "accessPath": "/lib/apk/db/installed", + "annotations": { + "evidence": "primary" + } + } + ], + "licenses": [ + { + "value": "MPL-2.0 AND MIT", + "spdxExpression": "MPL-2.0 AND MIT", + "type": "declared", + "urls": [], + "locations": [ + { + "path": "/lib/apk/db/installed", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", + "accessPath": "/lib/apk/db/installed", + "annotations": { + "evidence": "primary" + } + } + ] + } + ], + "language": "", + "cpes": [ + "cpe:2.3:a:ca-certificates-bundle:ca-certificates-bundle:20220614-r4:*:*:*:*:*:*:*", + "cpe:2.3:a:ca-certificates-bundle:ca_certificates_bundle:20220614-r4:*:*:*:*:*:*:*", + "cpe:2.3:a:ca_certificates_bundle:ca-certificates-bundle:20220614-r4:*:*:*:*:*:*:*", + "cpe:2.3:a:ca_certificates_bundle:ca_certificates_bundle:20220614-r4:*:*:*:*:*:*:*", + "cpe:2.3:a:ca-certificates:ca-certificates-bundle:20220614-r4:*:*:*:*:*:*:*", + "cpe:2.3:a:ca-certificates:ca_certificates_bundle:20220614-r4:*:*:*:*:*:*:*", + "cpe:2.3:a:ca_certificates:ca-certificates-bundle:20220614-r4:*:*:*:*:*:*:*", + "cpe:2.3:a:ca_certificates:ca_certificates_bundle:20220614-r4:*:*:*:*:*:*:*", + "cpe:2.3:a:mozilla:ca-certificates-bundle:20220614-r4:*:*:*:*:*:*:*", + "cpe:2.3:a:mozilla:ca_certificates_bundle:20220614-r4:*:*:*:*:*:*:*", + "cpe:2.3:a:ca:ca-certificates-bundle:20220614-r4:*:*:*:*:*:*:*", + "cpe:2.3:a:ca:ca_certificates_bundle:20220614-r4:*:*:*:*:*:*:*" + ], + "purl": "pkg:apk/alpine/ca-certificates-bundle@20220614-r4?arch=x86_64\u0026upstream=ca-certificates\u0026distro=alpine-3.17.2", + "metadataType": "apk-db-entry", + "metadata": { + "package": "ca-certificates-bundle", + "originPackage": "ca-certificates", + "maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", + "version": "20220614-r4", + "architecture": "x86_64", + "url": "https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/", + "description": "Pre generated bundle of Mozilla certificates", + "size": 126296, + "installedSize": 237568, + "pullDependencies": [], + "provides": [ + "ca-certificates-cacert=20220614-r4" + ], + "pullChecksum": "Q14PFUzkDXTGDcHkiuEdFuzb+EvxQ=", + "gitCommitOfApkPort": "e1839fd45a096c9e21ac24f8a61991d357d11628", + "files": [ + { + "path": "/etc" + }, + { + "path": "/etc/ssl" + }, + { + "path": "/etc/ssl/cert.pem", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "777", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1Nj6gTBdkZpTFW/obJGdpfvK0StA=" + } + }, + { + "path": "/etc/ssl/certs" + }, + { + "path": "/etc/ssl/certs/ca-certificates.crt", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1D8ljYj7pXsRq4d/eHGNYB0GY1+I=" + } + }, + { + "path": "/etc/ssl1.1" + }, + { + "path": "/etc/ssl1.1/cert.pem", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "777", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1tlrPS9O4v/nypdyJVPoUkUfBJ3g=" + } + }, + { + "path": "/etc/ssl1.1/certs", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "777", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1qE3WqZ1tRpwrmptYdQcZwzvJgds=" + } + } + ] + } + }, + { + "id": "f95be16d8615d51f", + "name": "libc-utils", + "version": "0.7.2-r3", + "type": "apk", + "foundBy": "apk-db-cataloger", + "locations": [ + { + "path": "/lib/apk/db/installed", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", + "accessPath": "/lib/apk/db/installed", + "annotations": { + "evidence": "primary" + } + } + ], + "licenses": [ + { + "value": "BSD-2-Clause AND BSD-3-Clause", + "spdxExpression": "BSD-2-Clause AND BSD-3-Clause", + "type": "declared", + "urls": [], + "locations": [ + { + "path": "/lib/apk/db/installed", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", + "accessPath": "/lib/apk/db/installed", + "annotations": { + "evidence": "primary" + } + } + ] + } + ], + "language": "", + "cpes": [ + "cpe:2.3:a:libc-utils:libc-utils:0.7.2-r3:*:*:*:*:*:*:*", + "cpe:2.3:a:libc-utils:libc_utils:0.7.2-r3:*:*:*:*:*:*:*", + "cpe:2.3:a:libc_utils:libc-utils:0.7.2-r3:*:*:*:*:*:*:*", + "cpe:2.3:a:libc_utils:libc_utils:0.7.2-r3:*:*:*:*:*:*:*", + "cpe:2.3:a:libc:libc-utils:0.7.2-r3:*:*:*:*:*:*:*", + "cpe:2.3:a:libc:libc_utils:0.7.2-r3:*:*:*:*:*:*:*" + ], + "purl": "pkg:apk/alpine/libc-utils@0.7.2-r3?arch=x86_64\u0026upstream=libc-dev\u0026distro=alpine-3.17.2", + "metadataType": "apk-db-entry", + "metadata": { + "package": "libc-utils", + "originPackage": "libc-dev", + "maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", + "version": "0.7.2-r3", + "architecture": "x86_64", + "url": "https://alpinelinux.org", + "description": "Meta package to pull in correct libc", + "size": 1485, + "installedSize": 4096, + "pullDependencies": [ + "musl-utils" + ], + "provides": [], + "pullChecksum": "Q19Gg06pBPiiG9UN94ql7qImsHSUQ=", + "gitCommitOfApkPort": "60424133be2e79bbfeff3d58147a22886f817ce2", + "files": [] + } + }, + { + "id": "e5d4a79033ba84db", + "name": "libcrypto3", + "version": "3.0.8-r0", + "type": "apk", + "foundBy": "apk-db-cataloger", + "locations": [ + { + "path": "/lib/apk/db/installed", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", + "accessPath": "/lib/apk/db/installed", + "annotations": { + "evidence": "primary" + } + } + ], + "licenses": [ + { + "value": "Apache-2.0", + "spdxExpression": "Apache-2.0", + "type": "declared", + "urls": [], + "locations": [ + { + "path": "/lib/apk/db/installed", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", + "accessPath": "/lib/apk/db/installed", + "annotations": { + "evidence": "primary" + } + } + ] + } + ], + "language": "", + "cpes": [ + "cpe:2.3:a:libcrypto3:libcrypto3:3.0.8-r0:*:*:*:*:*:*:*", + "cpe:2.3:a:libcrypto3:libcrypto:3.0.8-r0:*:*:*:*:*:*:*", + "cpe:2.3:a:libcrypto:libcrypto3:3.0.8-r0:*:*:*:*:*:*:*", + "cpe:2.3:a:libcrypto:libcrypto:3.0.8-r0:*:*:*:*:*:*:*" + ], + "purl": "pkg:apk/alpine/libcrypto3@3.0.8-r0?arch=x86_64\u0026upstream=openssl\u0026distro=alpine-3.17.2", + "metadataType": "apk-db-entry", + "metadata": { + "package": "libcrypto3", + "originPackage": "openssl", + "maintainer": "Ariadne Conill \u003cariadne@dereferenced.org\u003e", + "version": "3.0.8-r0", + "architecture": "x86_64", + "url": "https://www.openssl.org/", + "description": "Crypto library from openssl", + "size": 1710217, + "installedSize": 4206592, + "pullDependencies": [ + "so:libc.musl-x86_64.so.1" + ], + "provides": [ + "so:libcrypto.so.3=3" + ], + "pullChecksum": "Q1lyWpurYeMlLEt60ys+OlTABmzgs=", + "gitCommitOfApkPort": "524302e205a5b43c2bb48d041bcb10ccf2b480f9", + "files": [ + { + "path": "/etc" + }, + { + "path": "/etc/ssl" + }, + { + "path": "/etc/ssl/ct_log_list.cnf", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1olh8TpdAi2QnTl4FK3TjdUiSwTo=" + } + }, + { + "path": "/etc/ssl/ct_log_list.cnf.dist", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1olh8TpdAi2QnTl4FK3TjdUiSwTo=" + } + }, + { + "path": "/etc/ssl/openssl.cnf", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1fqYq/iJ6x71cTpr8fcO4/6IgyQg=" + } + }, + { + "path": "/etc/ssl/openssl.cnf.dist", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1fqYq/iJ6x71cTpr8fcO4/6IgyQg=" + } + }, + { + "path": "/etc/ssl/certs" + }, + { + "path": "/etc/ssl/misc" + }, + { + "path": "/etc/ssl/misc/CA.pl", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "755", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1mcqLbO6iQe8TmQCoRDozFWScisQ=" + } + }, + { + "path": "/etc/ssl/misc/tsget", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "777", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q13NVgfr7dQUuGYxur0tNalH6EIjU=" + } + }, + { + "path": "/etc/ssl/misc/tsget.pl", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "755", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1TA7DPBSRkj9+5c/3y8LIs0lCgTU=" + } + }, + { + "path": "/etc/ssl/private" + }, + { + "path": "/lib" + }, + { + "path": "/lib/libcrypto.so.3", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "755", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1/sKGHxVLFUFYAoo25FKjvEaCWY4=" + } + }, + { + "path": "/usr" + }, + { + "path": "/usr/lib" + }, + { + "path": "/usr/lib/libcrypto.so.3", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "777", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1XK8nt7AyX7GIGpMOLlkJk5dy81c=" + } + }, + { + "path": "/usr/lib/engines-3" + }, + { + "path": "/usr/lib/engines-3/afalg.so", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "755", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1RdD/lRPt+SpdXE7iqo1GtVfeK+A=" + } + }, + { + "path": "/usr/lib/engines-3/capi.so", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "755", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1RGZCiTCT/b6F190fAqzJ6CezqTM=" + } + }, + { + "path": "/usr/lib/engines-3/loader_attic.so", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "755", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1CM82oJYsdxnU5xldSiSeYyLTmso=" + } + }, + { + "path": "/usr/lib/engines-3/padlock.so", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "755", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1Sr6HtedvAqVk4yRaUBnL4J+kjDE=" + } + }, + { + "path": "/usr/lib/ossl-modules" + }, + { + "path": "/usr/lib/ossl-modules/legacy.so", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "755", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1VMJAWQoREByLDIxEUzAwBzsVRpE=" + } + } + ] + } + }, + { + "id": "c0756f35a5e6d8b3", + "name": "libssl3", + "version": "3.0.8-r0", + "type": "apk", + "foundBy": "apk-db-cataloger", + "locations": [ + { + "path": "/lib/apk/db/installed", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", + "accessPath": "/lib/apk/db/installed", + "annotations": { + "evidence": "primary" + } + } + ], + "licenses": [ + { + "value": "Apache-2.0", + "spdxExpression": "Apache-2.0", + "type": "declared", + "urls": [], + "locations": [ + { + "path": "/lib/apk/db/installed", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", + "accessPath": "/lib/apk/db/installed", + "annotations": { + "evidence": "primary" + } + } + ] + } + ], + "language": "", + "cpes": [ + "cpe:2.3:a:libssl3:libssl3:3.0.8-r0:*:*:*:*:*:*:*", + "cpe:2.3:a:libssl3:libssl:3.0.8-r0:*:*:*:*:*:*:*", + "cpe:2.3:a:libssl:libssl3:3.0.8-r0:*:*:*:*:*:*:*", + "cpe:2.3:a:libssl:libssl:3.0.8-r0:*:*:*:*:*:*:*" + ], + "purl": "pkg:apk/alpine/libssl3@3.0.8-r0?arch=x86_64\u0026upstream=openssl\u0026distro=alpine-3.17.2", + "metadataType": "apk-db-entry", + "metadata": { + "package": "libssl3", + "originPackage": "openssl", + "maintainer": "Ariadne Conill \u003cariadne@dereferenced.org\u003e", + "version": "3.0.8-r0", + "architecture": "x86_64", + "url": "https://www.openssl.org/", + "description": "SSL shared libraries", + "size": 246853, + "installedSize": 622592, + "pullDependencies": [ + "so:libc.musl-x86_64.so.1", + "so:libcrypto.so.3" + ], + "provides": [ + "so:libssl.so.3=3" + ], + "pullChecksum": "Q1Z6/d/FKYkPehWzNtOtYnJ74oIkY=", + "gitCommitOfApkPort": "524302e205a5b43c2bb48d041bcb10ccf2b480f9", + "files": [ + { + "path": "/lib" + }, + { + "path": "/lib/libssl.so.3", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "755", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1p8M82m6w1EEmP/CKWTUjUJEJrc0=" + } + }, + { + "path": "/usr" + }, + { + "path": "/usr/lib" + }, + { + "path": "/usr/lib/libssl.so.3", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "777", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1oMqe3ENWHl40WtquaRE6llAmBfU=" + } + } + ] + } + }, + { + "id": "adaa708f703652d6", + "name": "musl", + "version": "1.2.3-r4", + "type": "apk", + "foundBy": "apk-db-cataloger", + "locations": [ + { + "path": "/lib/apk/db/installed", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", + "accessPath": "/lib/apk/db/installed", + "annotations": { + "evidence": "primary" + } + } + ], + "licenses": [ + { + "value": "MIT", + "spdxExpression": "MIT", + "type": "declared", + "urls": [], + "locations": [ + { + "path": "/lib/apk/db/installed", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", + "accessPath": "/lib/apk/db/installed", + "annotations": { + "evidence": "primary" + } + } + ] + } + ], + "language": "", + "cpes": [ + "cpe:2.3:a:musl-libc:musl:1.2.3-r4:*:*:*:*:*:*:*", + "cpe:2.3:a:musl_libc:musl:1.2.3-r4:*:*:*:*:*:*:*", + "cpe:2.3:a:musl:musl:1.2.3-r4:*:*:*:*:*:*:*" + ], + "purl": "pkg:apk/alpine/musl@1.2.3-r4?arch=x86_64\u0026distro=alpine-3.17.2", + "metadataType": "apk-db-entry", + "metadata": { + "package": "musl", + "originPackage": "musl", + "maintainer": "Timo Teräs \u003ctimo.teras@iki.fi\u003e", + "version": "1.2.3-r4", + "architecture": "x86_64", + "url": "https://musl.libc.org/", + "description": "the musl c library (libc) implementation", + "size": 388955, + "installedSize": 634880, + "pullDependencies": [], + "provides": [ + "so:libc.musl-x86_64.so.1=1" + ], + "pullChecksum": "Q1Pk7x1woArbB1nzkMPJPq1TECwus=", + "gitCommitOfApkPort": "f93af038c3de7146121c2ea8124ba5ce29b4b058", + "files": [ + { + "path": "/lib" + }, + { + "path": "/lib/ld-musl-x86_64.so.1", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "755", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1tGxgx2FLrD+0Uk03NUBwbbEiRCU=" + } + }, + { + "path": "/lib/libc.musl-x86_64.so.1", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "777", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q17yJ3JFNypA4mxhJJr0ou6CzsJVI=" + } + } + ] + } + }, + { + "id": "c0d6e0f3841a7244", + "name": "musl-utils", + "version": "1.2.3-r4", + "type": "apk", + "foundBy": "apk-db-cataloger", + "locations": [ + { + "path": "/lib/apk/db/installed", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", + "accessPath": "/lib/apk/db/installed", + "annotations": { + "evidence": "primary" + } + } + ], + "licenses": [ + { + "value": "MIT AND BSD-2-Clause AND GPL-2.0-or-later", + "spdxExpression": "MIT AND BSD-2-Clause AND GPL-2.0-or-later", + "type": "declared", + "urls": [], + "locations": [ + { + "path": "/lib/apk/db/installed", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", + "accessPath": "/lib/apk/db/installed", + "annotations": { + "evidence": "primary" + } + } + ] + } + ], + "language": "", + "cpes": [ + "cpe:2.3:a:musl-utils:musl-utils:1.2.3-r4:*:*:*:*:*:*:*", + "cpe:2.3:a:musl-utils:musl_utils:1.2.3-r4:*:*:*:*:*:*:*", + "cpe:2.3:a:musl_utils:musl-utils:1.2.3-r4:*:*:*:*:*:*:*", + "cpe:2.3:a:musl_utils:musl_utils:1.2.3-r4:*:*:*:*:*:*:*", + "cpe:2.3:a:musl-libc:musl-utils:1.2.3-r4:*:*:*:*:*:*:*", + "cpe:2.3:a:musl-libc:musl_utils:1.2.3-r4:*:*:*:*:*:*:*", + "cpe:2.3:a:musl:musl-utils:1.2.3-r4:*:*:*:*:*:*:*", + "cpe:2.3:a:musl:musl_utils:1.2.3-r4:*:*:*:*:*:*:*" + ], + "purl": "pkg:apk/alpine/musl-utils@1.2.3-r4?arch=x86_64\u0026upstream=musl\u0026distro=alpine-3.17.2", + "metadataType": "apk-db-entry", + "metadata": { + "package": "musl-utils", + "originPackage": "musl", + "maintainer": "Timo Teräs \u003ctimo.teras@iki.fi\u003e", + "version": "1.2.3-r4", + "architecture": "x86_64", + "url": "https://musl.libc.org/", + "description": "the musl c library (libc) implementation", + "size": 36697, + "installedSize": 135168, + "pullDependencies": [ + "scanelf", + "so:libc.musl-x86_64.so.1" + ], + "provides": [ + "cmd:getconf=1.2.3-r4", + "cmd:getent=1.2.3-r4", + "cmd:iconv=1.2.3-r4", + "cmd:ldconfig=1.2.3-r4", + "cmd:ldd=1.2.3-r4" + ], + "pullChecksum": "Q1ZWJL4eySx8nPSjF1FAJgQyvuNs4=", + "gitCommitOfApkPort": "f93af038c3de7146121c2ea8124ba5ce29b4b058", + "files": [ + { + "path": "/sbin" + }, + { + "path": "/sbin/ldconfig", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "755", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1Kja2+POZKxEkUOZqwSjC6kmaED4=" + } + }, + { + "path": "/usr" + }, + { + "path": "/usr/bin" + }, + { + "path": "/usr/bin/getconf", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "755", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1UURo1nZWEp1bwWLKOaFv9MRkGuY=" + } + }, + { + "path": "/usr/bin/getent", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "755", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1zt3U4LfgDdzFuF3lIFzktQb5nLw=" + } + }, + { + "path": "/usr/bin/iconv", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "755", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1MUr2bsRgdX7IEDT8Veb82atbrfk=" + } + }, + { + "path": "/usr/bin/ldd", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "755", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1yFAhGggmL7ERgbIA7KQxyTzf3ks=" + } + } + ] + } + }, + { + "id": "544ec51c3fe9a624", + "name": "scanelf", + "version": "1.3.5-r1", + "type": "apk", + "foundBy": "apk-db-cataloger", + "locations": [ + { + "path": "/lib/apk/db/installed", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", + "accessPath": "/lib/apk/db/installed", + "annotations": { + "evidence": "primary" + } + } + ], + "licenses": [ + { + "value": "GPL-2.0-only", + "spdxExpression": "GPL-2.0-only", + "type": "declared", + "urls": [], + "locations": [ + { + "path": "/lib/apk/db/installed", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", + "accessPath": "/lib/apk/db/installed", + "annotations": { + "evidence": "primary" + } + } + ] + } + ], + "language": "", + "cpes": [ + "cpe:2.3:a:scanelf:scanelf:1.3.5-r1:*:*:*:*:*:*:*" + ], + "purl": "pkg:apk/alpine/scanelf@1.3.5-r1?arch=x86_64\u0026upstream=pax-utils\u0026distro=alpine-3.17.2", + "metadataType": "apk-db-entry", + "metadata": { + "package": "scanelf", + "originPackage": "pax-utils", + "maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", + "version": "1.3.5-r1", + "architecture": "x86_64", + "url": "https://wiki.gentoo.org/wiki/Hardened/PaX_Utilities", + "description": "Scan ELF binaries for stuff", + "size": 37687, + "installedSize": 98304, + "pullDependencies": [ + "so:libc.musl-x86_64.so.1" + ], + "provides": [ + "cmd:scanelf=1.3.5-r1" + ], + "pullChecksum": "Q11dxYFsHvBFAzzHGDo5gOTDNJDyQ=", + "gitCommitOfApkPort": "e52243dbb02069f10d48440ccc5fd41fa5fc2236", + "files": [ + { + "path": "/usr" + }, + { + "path": "/usr/bin" + }, + { + "path": "/usr/bin/scanelf", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "755", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1NoAissVDuanXF1KOEl8qrFA3bso=" + } + } + ] + } + }, + { + "id": "b37d6e2e45f66f33", + "name": "ssl_client", + "version": "1.35.0-r29", + "type": "apk", + "foundBy": "apk-db-cataloger", + "locations": [ + { + "path": "/lib/apk/db/installed", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", + "accessPath": "/lib/apk/db/installed", + "annotations": { + "evidence": "primary" + } + } + ], + "licenses": [ + { + "value": "GPL-2.0-only", + "spdxExpression": "GPL-2.0-only", + "type": "declared", + "urls": [], + "locations": [ + { + "path": "/lib/apk/db/installed", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", + "accessPath": "/lib/apk/db/installed", + "annotations": { + "evidence": "primary" + } + } + ] + } + ], + "language": "", + "cpes": [ + "cpe:2.3:a:ssl-client:ssl-client:1.35.0-r29:*:*:*:*:*:*:*", + "cpe:2.3:a:ssl-client:ssl_client:1.35.0-r29:*:*:*:*:*:*:*", + "cpe:2.3:a:ssl_client:ssl-client:1.35.0-r29:*:*:*:*:*:*:*", + "cpe:2.3:a:ssl_client:ssl_client:1.35.0-r29:*:*:*:*:*:*:*", + "cpe:2.3:a:ssl:ssl-client:1.35.0-r29:*:*:*:*:*:*:*", + "cpe:2.3:a:ssl:ssl_client:1.35.0-r29:*:*:*:*:*:*:*" + ], + "purl": "pkg:apk/alpine/ssl_client@1.35.0-r29?arch=x86_64\u0026upstream=busybox\u0026distro=alpine-3.17.2", + "metadataType": "apk-db-entry", + "metadata": { + "package": "ssl_client", + "originPackage": "busybox", + "maintainer": "Sören Tempel \u003csoeren+alpine@soeren-tempel.net\u003e", + "version": "1.35.0-r29", + "architecture": "x86_64", + "url": "https://busybox.net/", + "description": "EXternal ssl_client for busybox wget", + "size": 4929, + "installedSize": 28672, + "pullDependencies": [ + "so:libc.musl-x86_64.so.1", + "so:libcrypto.so.3", + "so:libssl.so.3" + ], + "provides": [ + "cmd:ssl_client=1.35.0-r29" + ], + "pullChecksum": "Q1QuqZjeP6XG85I29tOiCWofL8Cj0=", + "gitCommitOfApkPort": "1dbf7a793afae640ea643a055b6dd4f430ac116b", + "files": [ + { + "path": "/usr" + }, + { + "path": "/usr/bin" + }, + { + "path": "/usr/bin/ssl_client", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "755", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q13ShB3pGMDL8R7sqvDVeLOBZ6P3Q=" + } + } + ] + } + }, + { + "id": "6ad7c0b45a22318c", + "name": "zlib", + "version": "1.2.13-r0", + "type": "apk", + "foundBy": "apk-db-cataloger", + "locations": [ + { + "path": "/lib/apk/db/installed", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", + "accessPath": "/lib/apk/db/installed", + "annotations": { + "evidence": "primary" + } + } + ], + "licenses": [ + { + "value": "Zlib", + "spdxExpression": "Zlib", + "type": "declared", + "urls": [], + "locations": [ + { + "path": "/lib/apk/db/installed", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", + "accessPath": "/lib/apk/db/installed", + "annotations": { + "evidence": "primary" + } + } + ] + } + ], + "language": "", + "cpes": [ + "cpe:2.3:a:zlib:zlib:1.2.13-r0:*:*:*:*:*:*:*" + ], + "purl": "pkg:apk/alpine/zlib@1.2.13-r0?arch=x86_64\u0026distro=alpine-3.17.2", + "metadataType": "apk-db-entry", + "metadata": { + "package": "zlib", + "originPackage": "zlib", + "maintainer": "Natanael Copa \u003cncopa@alpinelinux.org\u003e", + "version": "1.2.13-r0", + "architecture": "x86_64", + "url": "https://zlib.net/", + "description": "A compression/decompression Library", + "size": 54258, + "installedSize": 110592, + "pullDependencies": [ + "so:libc.musl-x86_64.so.1" + ], + "provides": [ + "so:libz.so.1=1.2.13" + ], + "pullChecksum": "Q1rjnXT01l1PAxXheUxe4Oldl5rFk=", + "gitCommitOfApkPort": "bb37266b06a72d21d1fd850ef4b86665cf9ef70f", + "files": [ + { + "path": "/lib" + }, + { + "path": "/lib/libz.so.1", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "777", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q16A/yKXYR0EF3avf+wJzXcNLZHgU=" + } + }, + { + "path": "/lib/libz.so.1.2.13", + "ownerUid": "0", + "ownerGid": "0", + "permissions": "755", + "digest": { + "algorithm": "'Q1'+base64(sha1)", + "value": "Q1dpivTH4yTWnQnTEdKGmUMal/CsI=" + } + } + ] + } + } + ], + "artifactRelationships": [ + { + "parent": "008bcc1445f44203", + "child": "0a3b4a9dae4049aa", + "type": "dependency-of" + }, + { + "parent": "008bcc1445f44203", + "child": "2791973cba0a89bb", + "type": "contains" + }, + { + "parent": "008bcc1445f44203", + "child": "4cf9c3537f896231", + "type": "contains" + }, + { + "parent": "008bcc1445f44203", + "child": "4fdfbb03676f495b", + "type": "contains" + }, + { + "parent": "008bcc1445f44203", + "child": "57e155e28050b71f", + "type": "contains" + }, + { + "parent": "008bcc1445f44203", + "child": "6202d0483a0eaf70", + "type": "contains" + }, + { + "parent": "008bcc1445f44203", + "child": "6b9abe7d80ee470b", + "type": "contains" + }, + { + "parent": "008bcc1445f44203", + "child": "8108ab845e4ccbcb", + "type": "contains" + }, + { + "parent": "008bcc1445f44203", + "child": "8668162f21426d67", + "type": "contains" + }, + { + "parent": "008bcc1445f44203", + "child": "b58b2fb69e8b39c8", + "type": "contains" + }, + { + "parent": "008bcc1445f44203", + "child": "c3b51a85a6a2d3e1", + "type": "evident-by" + }, + { + "parent": "008bcc1445f44203", + "child": "c7bb6e42ea2504f8", + "type": "contains" + }, + { + "parent": "008bcc1445f44203", + "child": "dfe56f19a55af4ab", + "type": "contains" + }, + { + "parent": "008bcc1445f44203", + "child": "e456dfb5be04fdb7", + "type": "contains" + }, + { + "parent": "008bcc1445f44203", + "child": "e549cedcbd486e69", + "type": "contains" + }, + { + "parent": "008bcc1445f44203", + "child": "fb8ddb3720060aa2", + "type": "contains" + }, + { + "parent": "0a3b4a9dae4049aa", + "child": "02eba7befcbb3bfa", + "type": "contains" + }, + { + "parent": "0a3b4a9dae4049aa", + "child": "1071b0c6b4d98bb1", + "type": "contains" + }, + { + "parent": "0a3b4a9dae4049aa", + "child": "35ab393f27e0bc39", + "type": "contains" + }, + { + "parent": "0a3b4a9dae4049aa", + "child": "71fcfec0ece1a67a", + "type": "contains" + }, + { + "parent": "0a3b4a9dae4049aa", + "child": "77282715f933737e", + "type": "contains" + }, + { + "parent": "0a3b4a9dae4049aa", + "child": "7b189c84b22c7f02", + "type": "contains" + }, + { + "parent": "0a3b4a9dae4049aa", + "child": "7ff31e5e9ba0bfa9", + "type": "contains" + }, + { + "parent": "0a3b4a9dae4049aa", + "child": "89c7ab9592844cbb", + "type": "contains" + }, + { + "parent": "0a3b4a9dae4049aa", + "child": "b103e8d521455a19", + "type": "contains" + }, + { + "parent": "0a3b4a9dae4049aa", + "child": "c3b51a85a6a2d3e1", + "type": "evident-by" + }, + { + "parent": "0a3b4a9dae4049aa", + "child": "d98fbe0bce78b009", + "type": "contains" + }, + { + "parent": "0faf8749e7caad06", + "child": "1aa086f53c8c0808", + "type": "contains" + }, + { + "parent": "0faf8749e7caad06", + "child": "c3b51a85a6a2d3e1", + "type": "evident-by" + }, + { + "parent": "0faf8749e7caad06", + "child": "c765115741fe905b", + "type": "contains" + }, + { + "parent": "10c99a42ed5bf9d4", + "child": "0a3b4a9dae4049aa", + "type": "dependency-of" + }, + { + "parent": "10c99a42ed5bf9d4", + "child": "564026926225072e", + "type": "contains" + }, + { + "parent": "10c99a42ed5bf9d4", + "child": "c3b51a85a6a2d3e1", + "type": "evident-by" + }, + { + "parent": "4cb49698ca5c72c1", + "child": "0fab6f59514f4740", + "type": "contains" + }, + { + "parent": "4cb49698ca5c72c1", + "child": "0faf8749e7caad06", + "type": "dependency-of" + }, + { + "parent": "4cb49698ca5c72c1", + "child": "c3b51a85a6a2d3e1", + "type": "evident-by" + }, + { + "parent": "544ec51c3fe9a624", + "child": "6a7f2c32518c8dbc", + "type": "contains" + }, + { + "parent": "544ec51c3fe9a624", + "child": "c0d6e0f3841a7244", + "type": "dependency-of" + }, + { + "parent": "544ec51c3fe9a624", + "child": "c3b51a85a6a2d3e1", + "type": "evident-by" + }, + { + "parent": "6ad7c0b45a22318c", + "child": "0faf8749e7caad06", + "type": "dependency-of" + }, + { + "parent": "6ad7c0b45a22318c", + "child": "6d81ff77d1d5460a", + "type": "contains" + }, + { + "parent": "6ad7c0b45a22318c", + "child": "c3b51a85a6a2d3e1", + "type": "evident-by" + }, + { + "parent": "adaa708f703652d6", + "child": "0faf8749e7caad06", + "type": "dependency-of" + }, + { + "parent": "adaa708f703652d6", + "child": "0faf8749e7caad06", + "type": "dependency-of" + }, + { + "parent": "adaa708f703652d6", + "child": "544ec51c3fe9a624", + "type": "dependency-of" + }, + { + "parent": "adaa708f703652d6", + "child": "6ad7c0b45a22318c", + "type": "dependency-of" + }, + { + "parent": "adaa708f703652d6", + "child": "b37d6e2e45f66f33", + "type": "dependency-of" + }, + { + "parent": "adaa708f703652d6", + "child": "c0756f35a5e6d8b3", + "type": "dependency-of" + }, + { + "parent": "adaa708f703652d6", + "child": "c0d6e0f3841a7244", + "type": "dependency-of" + }, + { + "parent": "adaa708f703652d6", + "child": "c3b51a85a6a2d3e1", + "type": "evident-by" + }, + { + "parent": "adaa708f703652d6", + "child": "e5d4a79033ba84db", + "type": "dependency-of" + }, + { + "parent": "adaa708f703652d6", + "child": "edcf6e67eac04af0", + "type": "dependency-of" + }, + { + "parent": "adaa708f703652d6", + "child": "f45009f97952cd8e", + "type": "contains" + }, + { + "parent": "b37d6e2e45f66f33", + "child": "c3b51a85a6a2d3e1", + "type": "evident-by" + }, + { + "parent": "b37d6e2e45f66f33", + "child": "d7486c5ba43c6e31", + "type": "contains" + }, + { + "parent": "c0756f35a5e6d8b3", + "child": "0faf8749e7caad06", + "type": "dependency-of" + }, + { + "parent": "c0756f35a5e6d8b3", + "child": "5c67196b8e1d1558", + "type": "contains" + }, + { + "parent": "c0756f35a5e6d8b3", + "child": "b37d6e2e45f66f33", + "type": "dependency-of" + }, + { + "parent": "c0756f35a5e6d8b3", + "child": "c3b51a85a6a2d3e1", + "type": "evident-by" + }, + { + "parent": "c0d6e0f3841a7244", + "child": "47c9d14986fb43fc", + "type": "contains" + }, + { + "parent": "c0d6e0f3841a7244", + "child": "51ddc107d90f5f4b", + "type": "contains" + }, + { + "parent": "c0d6e0f3841a7244", + "child": "bf51187b1c0aae54", + "type": "contains" + }, + { + "parent": "c0d6e0f3841a7244", + "child": "c3b51a85a6a2d3e1", + "type": "evident-by" + }, + { + "parent": "c0d6e0f3841a7244", + "child": "c911f25351778370", + "type": "contains" + }, + { + "parent": "c0d6e0f3841a7244", + "child": "e0a729e0af2c3974", + "type": "contains" + }, + { + "parent": "c0d6e0f3841a7244", + "child": "f95be16d8615d51f", + "type": "dependency-of" + }, + { + "parent": "e5d4a79033ba84db", + "child": "0e7815a8b0d1ecdc", + "type": "contains" + }, + { + "parent": "e5d4a79033ba84db", + "child": "0faf8749e7caad06", + "type": "dependency-of" + }, + { + "parent": "e5d4a79033ba84db", + "child": "1ae61640919b8dcb", + "type": "contains" + }, + { + "parent": "e5d4a79033ba84db", + "child": "2cb40ab7cf323e58", + "type": "contains" + }, + { + "parent": "e5d4a79033ba84db", + "child": "76af347c7dbc737a", + "type": "contains" + }, + { + "parent": "e5d4a79033ba84db", + "child": "b37d6e2e45f66f33", + "type": "dependency-of" + }, + { + "parent": "e5d4a79033ba84db", + "child": "b5c42da9eeef9d95", + "type": "contains" + }, + { + "parent": "e5d4a79033ba84db", + "child": "b6274398f5a1b17c", + "type": "contains" + }, + { + "parent": "e5d4a79033ba84db", + "child": "bacd9a5a78fe821e", + "type": "contains" + }, + { + "parent": "e5d4a79033ba84db", + "child": "c0756f35a5e6d8b3", + "type": "dependency-of" + }, + { + "parent": "e5d4a79033ba84db", + "child": "c3b51a85a6a2d3e1", + "type": "evident-by" + }, + { + "parent": "e5d4a79033ba84db", + "child": "cd658a985edaf628", + "type": "contains" + }, + { + "parent": "e5d4a79033ba84db", + "child": "d5b653bea57138f7", + "type": "contains" + }, + { + "parent": "e5d4a79033ba84db", + "child": "e05bfc6d7f257206", + "type": "contains" + }, + { + "parent": "e5d4a79033ba84db", + "child": "e5d401ebaaead494", + "type": "contains" + }, + { + "parent": "e5d4a79033ba84db", + "child": "f280edcc4c0a74ca", + "type": "contains" + }, + { + "parent": "edcf6e67eac04af0", + "child": "10c99a42ed5bf9d4", + "type": "dependency-of" + }, + { + "parent": "edcf6e67eac04af0", + "child": "564026926225072e", + "type": "contains" + }, + { + "parent": "edcf6e67eac04af0", + "child": "5f6a22a80b2c468e", + "type": "contains" + }, + { + "parent": "edcf6e67eac04af0", + "child": "7964b7b17ac34389", + "type": "contains" + }, + { + "parent": "edcf6e67eac04af0", + "child": "c3b51a85a6a2d3e1", + "type": "evident-by" + }, + { + "parent": "edcf6e67eac04af0", + "child": "c468e3fb98398685", + "type": "contains" + }, + { + "parent": "edcf6e67eac04af0", + "child": "da2faa18609cadef", + "type": "contains" + }, + { + "parent": "edcf6e67eac04af0", + "child": "faa5e8897571d717", + "type": "contains" + }, + { + "parent": "f0def3051a26afc8", + "child": "09bf3883b623158f", + "type": "contains" + }, + { + "parent": "f0def3051a26afc8", + "child": "3f37b052555a032a", + "type": "contains" + }, + { + "parent": "f0def3051a26afc8", + "child": "5229138dd6e4ad25", + "type": "contains" + }, + { + "parent": "f0def3051a26afc8", + "child": "5c344de6c0adfb41", + "type": "contains" + }, + { + "parent": "f0def3051a26afc8", + "child": "627946275cda492f", + "type": "contains" + }, + { + "parent": "f0def3051a26afc8", + "child": "671d1f01c6f0063d", + "type": "contains" + }, + { + "parent": "f0def3051a26afc8", + "child": "6722cd9ee8e4cd77", + "type": "contains" + }, + { + "parent": "f0def3051a26afc8", + "child": "75fcc462c95ba1ee", + "type": "contains" + }, + { + "parent": "f0def3051a26afc8", + "child": "761377117b43797c", + "type": "contains" + }, + { + "parent": "f0def3051a26afc8", + "child": "7e0eaf4903e2c594", + "type": "contains" + }, + { + "parent": "f0def3051a26afc8", + "child": "81a031158e5a172a", + "type": "contains" + }, + { + "parent": "f0def3051a26afc8", + "child": "8d0f0e38c71439e1", + "type": "contains" + }, + { + "parent": "f0def3051a26afc8", + "child": "932c31c2300cc286", + "type": "contains" + }, + { + "parent": "f0def3051a26afc8", + "child": "a11195f3b431951d", + "type": "contains" + }, + { + "parent": "f0def3051a26afc8", + "child": "bd290647080920df", + "type": "contains" + }, + { + "parent": "f0def3051a26afc8", + "child": "c0437528810bb1fb", + "type": "contains" + }, + { + "parent": "f0def3051a26afc8", + "child": "c3b51a85a6a2d3e1", + "type": "evident-by" + }, + { + "parent": "f0def3051a26afc8", + "child": "c4d82f372f586c5d", + "type": "contains" + }, + { + "parent": "f0def3051a26afc8", + "child": "c9f749c20ace3749", + "type": "contains" + }, + { + "parent": "f0def3051a26afc8", + "child": "d15e3bb2fde54385", + "type": "contains" + }, + { + "parent": "f0def3051a26afc8", + "child": "d7833aea1af90c3e", + "type": "contains" + }, + { + "parent": "f0def3051a26afc8", + "child": "e62c139013a804b7", + "type": "contains" + }, + { + "parent": "f0def3051a26afc8", + "child": "f229e2967a4439ae", + "type": "contains" + }, + { + "parent": "f95be16d8615d51f", + "child": "c3b51a85a6a2d3e1", + "type": "evident-by" + }, + { + "parent": "fd6275a37d2472b9d3be70c3261087b8d65e441c21342ae7313096312bcda2b3", + "child": "008bcc1445f44203", + "type": "contains" + }, + { + "parent": "fd6275a37d2472b9d3be70c3261087b8d65e441c21342ae7313096312bcda2b3", + "child": "0a3b4a9dae4049aa", + "type": "contains" + }, + { + "parent": "fd6275a37d2472b9d3be70c3261087b8d65e441c21342ae7313096312bcda2b3", + "child": "0faf8749e7caad06", + "type": "contains" + }, + { + "parent": "fd6275a37d2472b9d3be70c3261087b8d65e441c21342ae7313096312bcda2b3", + "child": "10c99a42ed5bf9d4", + "type": "contains" + }, + { + "parent": "fd6275a37d2472b9d3be70c3261087b8d65e441c21342ae7313096312bcda2b3", + "child": "4cb49698ca5c72c1", + "type": "contains" + }, + { + "parent": "fd6275a37d2472b9d3be70c3261087b8d65e441c21342ae7313096312bcda2b3", + "child": "544ec51c3fe9a624", + "type": "contains" + }, + { + "parent": "fd6275a37d2472b9d3be70c3261087b8d65e441c21342ae7313096312bcda2b3", + "child": "6ad7c0b45a22318c", + "type": "contains" + }, + { + "parent": "fd6275a37d2472b9d3be70c3261087b8d65e441c21342ae7313096312bcda2b3", + "child": "adaa708f703652d6", + "type": "contains" + }, + { + "parent": "fd6275a37d2472b9d3be70c3261087b8d65e441c21342ae7313096312bcda2b3", + "child": "b37d6e2e45f66f33", + "type": "contains" + }, + { + "parent": "fd6275a37d2472b9d3be70c3261087b8d65e441c21342ae7313096312bcda2b3", + "child": "c0756f35a5e6d8b3", + "type": "contains" + }, + { + "parent": "fd6275a37d2472b9d3be70c3261087b8d65e441c21342ae7313096312bcda2b3", + "child": "c0d6e0f3841a7244", + "type": "contains" + }, + { + "parent": "fd6275a37d2472b9d3be70c3261087b8d65e441c21342ae7313096312bcda2b3", + "child": "e5d4a79033ba84db", + "type": "contains" + }, + { + "parent": "fd6275a37d2472b9d3be70c3261087b8d65e441c21342ae7313096312bcda2b3", + "child": "edcf6e67eac04af0", + "type": "contains" + }, + { + "parent": "fd6275a37d2472b9d3be70c3261087b8d65e441c21342ae7313096312bcda2b3", + "child": "f0def3051a26afc8", + "type": "contains" + }, + { + "parent": "fd6275a37d2472b9d3be70c3261087b8d65e441c21342ae7313096312bcda2b3", + "child": "f95be16d8615d51f", + "type": "contains" + } + ], + "files": [ + { + "id": "564026926225072e", + "location": { + "path": "/bin/busybox", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 755, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "application/x-sharedlib", + "size": 841392 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "c9534b79e07b568ba108efe4cfe75b7cbddd6387" + }, + { + "algorithm": "sha256", + "value": "36d96947f81bee3a5e1d436a333a52209f051bb3556028352d4273a748e2d136" + } + ] + }, + { + "id": "8d0f0e38c71439e1", + "location": { + "path": "/etc/apk/keys/alpine-devel@lists.alpinelinux.org-4a6a0840.rsa.pub", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 451 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "3af08548ef78cfdedcf349880c2c6a1a48763a0e" + }, + { + "algorithm": "sha256", + "value": "9c102bcc376af1498d549b77bdbfa815ae86faa1d2d82f040e616b18ef2df2d4" + } + ] + }, + { + "id": "671d1f01c6f0063d", + "location": { + "path": "/etc/apk/keys/alpine-devel@lists.alpinelinux.org-5243ef4b.rsa.pub", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 451 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "bfb616658cc05a872568b0c8e398c482e23b60dd" + }, + { + "algorithm": "sha256", + "value": "ebf31683b56410ecc4c00acd9f6e2839e237a3b62b5ae7ef686705c7ba0396a9" + } + ] + }, + { + "id": "6722cd9ee8e4cd77", + "location": { + "path": "/etc/apk/keys/alpine-devel@lists.alpinelinux.org-5261cecb.rsa.pub", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 451 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "3671ae0ec7503b1e193587c1dcdf7b78bc863e42" + }, + { + "algorithm": "sha256", + "value": "12f899e55a7691225603d6fb3324940fc51cd7f133e7ead788663c2b7eecb00c" + } + ] + }, + { + "id": "627946275cda492f", + "location": { + "path": "/etc/apk/keys/alpine-devel@lists.alpinelinux.org-6165ee59.rsa.pub", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 800 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "95995311236b7a55933642ffa10ce6014f1af7d0" + }, + { + "algorithm": "sha256", + "value": "207e4696d3c05f7cb05966aee557307151f1f00217af4143c1bcaf33b8df733f" + } + ] + }, + { + "id": "09bf3883b623158f", + "location": { + "path": "/etc/apk/keys/alpine-devel@lists.alpinelinux.org-61666e3f.rsa.pub", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 800 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "58d5ba4b2f3b1e927721d7a6432f298eedf72a6b" + }, + { + "algorithm": "sha256", + "value": "128d34d4aec39b0daedea8163cd8dc24dff36fd3d848630ab97eeb1d3084bbb3" + } + ] + }, + { + "id": "7ff31e5e9ba0bfa9", + "location": { + "path": "/etc/crontabs/root", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 600, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/tab-separated-values", + "size": 283 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "bdf9356a9516238c8b2468613517749098b17ef6" + }, + { + "algorithm": "sha256", + "value": "575d810a9fae5f2f0671c9b2c0ce973e46c7207fbe5cb8d1b0d1836a6a0470e3" + } + ] + }, + { + "id": "6b9abe7d80ee470b", + "location": { + "path": "/etc/fstab", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/csv", + "size": 89 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "d50ee135ef10a434b9df582ea8276b5c1ce803fa" + }, + { + "algorithm": "sha256", + "value": "a3efca2e8d62785c87517283092b4c800d88612b6f3f06b80a4c2f39d8e68841" + } + ] + }, + { + "id": "fb8ddb3720060aa2", + "location": { + "path": "/etc/group", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 697 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "dcafa89498396b2cc7495354920819257b81fbd6" + }, + { + "algorithm": "sha256", + "value": "0632d55a68081065097472fe7bc7c66f0785f3b78f39fb23f622d24a7e09be9f" + } + ] + }, + { + "id": "e456dfb5be04fdb7", + "location": { + "path": "/etc/hostname", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 10 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "ea75706155cffed0a1bd43ddba4543da27d73a67" + }, + { + "algorithm": "sha256", + "value": "d906aecb61d076a967d9ffe8821c7b04b063f72df9d9e35b33ef36b1c0d98f16" + } + ] + }, + { + "id": "4fdfbb03676f495b", + "location": { + "path": "/etc/hosts", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 79 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "043eb324a653456caa1a73e2e2d49f77792bb0c5" + }, + { + "algorithm": "sha256", + "value": "e3998dbe02b51dada33de87ae43d18a93ab6915b9e34f5a751bf2b9b25a55492" + } + ] + }, + { + "id": "2791973cba0a89bb", + "location": { + "path": "/etc/inittab", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 570 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "4ecb616e15bb4335917b513f34ac133ae0f8a477" + }, + { + "algorithm": "sha256", + "value": "54a5f36970125bf70cdf7b215c9e12a287d92ad76a693bd72aec4cbc5645df87" + } + ] + }, + { + "id": "5f6a22a80b2c468e", + "location": { + "path": "/etc/logrotate.d/acpid", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 140 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "4f29720883559a74be03f4de69de2f66113b064b" + }, + { + "algorithm": "sha256", + "value": "d608a3b7715886b5735def0cc50a6359fd364fac2e0e0a459c588c04be471031" + } + ] + }, + { + "id": "1071b0c6b4d98bb1", + "location": { + "path": "/etc/modprobe.d/aliases.conf", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 1545 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "5946e1e930583552bb7b863eb94bcbb3feef8aa9" + }, + { + "algorithm": "sha256", + "value": "3ebaba946f213670170c7d69949f690a3854553bd0b1560f1d980cba4c83a942" + } + ] + }, + { + "id": "7b189c84b22c7f02", + "location": { + "path": "/etc/modprobe.d/blacklist.conf", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 2136 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "e1376014791376ddee402f8d06dae7b4e9e6f67e" + }, + { + "algorithm": "sha256", + "value": "5cd46031fc7dc7186e67c97fd34780597de4ebff51dbe41eba27220fe5e0d866" + } + ] + }, + { + "id": "b103e8d521455a19", + "location": { + "path": "/etc/modprobe.d/i386.conf", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 122 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "a676b2fe78e7ea897d702b2c2fb2a2659f1eb657" + }, + { + "algorithm": "sha256", + "value": "6c46c4cbfb8b7594f19eb94801a350fa2221ae9ac5239a8819d15555caa76ae8" + } + ] + }, + { + "id": "77282715f933737e", + "location": { + "path": "/etc/modprobe.d/kms.conf", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 91 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "ca76cb9f71980e9bda8db6bf95da759e26b27a88" + }, + { + "algorithm": "sha256", + "value": "50467fa732f809f3a2bb5738628765c5f895c3a237e1c1ad09f85d41fd9ca7c5" + } + ] + }, + { + "id": "8108ab845e4ccbcb", + "location": { + "path": "/etc/modules", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 15 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "b68a208d48a91c670c8040a03c95fae12c144f53" + }, + { + "algorithm": "sha256", + "value": "2c881de75a5409c35d2433a24f180b8b02ba478ef2c1c60ea3434a35bcbc335d" + } + ] + }, + { + "id": "35ab393f27e0bc39", + "location": { + "path": "/etc/motd", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 284 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "48b912f610627546cfc30af0f974745a1bf7c30f" + }, + { + "algorithm": "sha256", + "value": "ff044e9be5daa2eee2d3d10a4da72e5477e4c24c16f1792de2c91dae844c0e30" + } + ] + }, + { + "id": "da2faa18609cadef", + "location": { + "path": "/etc/network/if-up.d/dad", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 775, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 265 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "3917fe94f44ab9881d90105c2a87af475b7ad10e" + }, + { + "algorithm": "sha256", + "value": "8ee2455448c12cd1fd0befbc84f1ace7b80ba46603aff0d67bc7bcad604ea466" + } + ] + }, + { + "id": "4cf9c3537f896231", + "location": { + "path": "/etc/nsswitch.conf", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 205 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "f4306c327bf44767da8da4e3a13bf40bdd4d3aaa" + }, + { + "algorithm": "sha256", + "value": "0afd94c183d30a348b45057f6bf468e121aa448a7641109addb5bb8e282f514d" + } + ] + }, + { + "id": "57e155e28050b71f", + "location": { + "path": "/etc/passwd", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 1172 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "4dc86eb8b51fbabd22cef7d9419c6037f2c9841f" + }, + { + "algorithm": "sha256", + "value": "2e0902cf0a7f64bf4e64ef2fad66ae977b4d01975dddf5352a84aea5c4e901f0" + } + ] + }, + { + "id": "e549cedcbd486e69", + "location": { + "path": "/etc/profile", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 846 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "21ae544d7bd19001f595364af259bca9105d445e" + }, + { + "algorithm": "sha256", + "value": "2055f9abf0d8055e788deae8c6e5be0de008ea2dadc833a15b235bca435faa5e" + } + ] + }, + { + "id": "d98fbe0bce78b009", + "location": { + "path": "/etc/profile.d/README", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 249 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "df9396b02cf3be70767e6171eb691baa6d40c759" + }, + { + "algorithm": "sha256", + "value": "b73284f27fe2da9ae1902b1fe9596c3ffc61a154e2805a034184f0468f8b09b0" + } + ] + }, + { + "id": "02eba7befcbb3bfa", + "location": { + "path": "/etc/profile.d/color_prompt.sh.disabled", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 447 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "d5733d99d7b5676f6d58c19a3a47a8bc3fe6e2e5" + }, + { + "algorithm": "sha256", + "value": "ba24425c6864a5d17fa0fdaf914c4d21419e47c4d62080c33830af059fe46617" + } + ] + }, + { + "id": "71fcfec0ece1a67a", + "location": { + "path": "/etc/profile.d/locale.sh", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 61 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "4bc8fe596ef5996c5f572f32b61a94ec7515a01c" + }, + { + "algorithm": "sha256", + "value": "84eb9034099d759ff08e6da5a731cacfc63a319547ad0f1dfc1c64853aca93f2" + } + ] + }, + { + "id": "b58b2fb69e8b39c8", + "location": { + "path": "/etc/protocols", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 3144 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "d5f9654539089b96f1b1956848d783527da6fb47" + }, + { + "algorithm": "sha256", + "value": "4959498abbadaa1e50894a266f8d0d94500101cfe5b5f09dcad82e9d5bdfab46" + } + ] + }, + { + "id": "7964b7b17ac34389", + "location": { + "path": "/etc/securetty", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 98 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "981f791ead8d513679f7d443892b23f70e45ace5" + }, + { + "algorithm": "sha256", + "value": "49382575069e4b954a36f1fb2248d1bd96ee7ba28a5b12798fa92d80a29d0fab" + } + ] + }, + { + "id": "dfe56f19a55af4ab", + "location": { + "path": "/etc/services", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 12813 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "a0d7a229bf049f7fe17e8445226236e4024535d0" + }, + { + "algorithm": "sha256", + "value": "f6183055fd949f9c53d49ee620f85d0150123ea691d25ed1bba0c641b4ee2f48" + } + ] + }, + { + "id": "6202d0483a0eaf70", + "location": { + "path": "/etc/shadow", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 640, + "type": "RegularFile", + "userID": 0, + "groupID": 42, + "mimeType": "text/plain", + "size": 422 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "258ab61690a3d3c96c2447483f55c6761ed21b01" + }, + { + "algorithm": "sha256", + "value": "cdcdf002dbf6a03de7cf3c024d12162d6227cb5e2d27ca58844a716301f03151" + } + ] + }, + { + "id": "8668162f21426d67", + "location": { + "path": "/etc/shells", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 38 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "a239b661da4227a07f6a9183699fd275bdb12640" + }, + { + "algorithm": "sha256", + "value": "24be6ceb236610df45684c83b06c918ae45635be55f69975e43676b7595bbc5f" + } + ] + }, + { + "id": "0fab6f59514f4740", + "location": { + "path": "/etc/ssl/certs/ca-certificates.crt", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 214222 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "0fc963623ee95ec46ae1dfde1c6358074198d7e2" + }, + { + "algorithm": "sha256", + "value": "92dd040a840947f00a14f66e9e17a799051ad7f88ddcde851b3711ee0a78a7ac" + } + ] + }, + { + "id": "bacd9a5a78fe821e", + "location": { + "path": "/etc/ssl/ct_log_list.cnf", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 412 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "a2587c4e97408b64274e5e052b74e3754892c13a" + }, + { + "algorithm": "sha256", + "value": "f1c1803d13d1d0b755b13b23c28bd4e20e07baf9f2b744c9337ba5866aa0ec3b" + } + ] + }, + { + "id": "0e7815a8b0d1ecdc", + "location": { + "path": "/etc/ssl/ct_log_list.cnf.dist", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 412 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "a2587c4e97408b64274e5e052b74e3754892c13a" + }, + { + "algorithm": "sha256", + "value": "f1c1803d13d1d0b755b13b23c28bd4e20e07baf9f2b744c9337ba5866aa0ec3b" + } + ] + }, + { + "id": "d5b653bea57138f7", + "location": { + "path": "/etc/ssl/misc/CA.pl", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 755, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/x-perl", + "size": 8062 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "99ca8b6ceea241ef139900a8443a3315649c8ac4" + }, + { + "algorithm": "sha256", + "value": "35a85ebe05ac4ee42a0efe544c02ad2c70bf374c4dcd8bf5aaf403b7c1b6cdd8" + } + ] + }, + { + "id": "2cb40ab7cf323e58", + "location": { + "path": "/etc/ssl/misc/tsget.pl", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 755, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/x-perl", + "size": 6746 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "4c0ec33c1491923f7ee5cff7cbc2c8b349428135" + }, + { + "algorithm": "sha256", + "value": "5a4651ac703c5c4c8abea58ec031e2d9ed352058cb7b0ac4cb6bbf197fb233ad" + } + ] + }, + { + "id": "f280edcc4c0a74ca", + "location": { + "path": "/etc/ssl/openssl.cnf", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 12292 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "7ea62afe227ac7bd5c4e9afc7dc3b8ffa220c908" + }, + { + "algorithm": "sha256", + "value": "15c6ec001241f54bed98c135f0dab42f4a5e489f22544613b0671198f8ad8318" + } + ] + }, + { + "id": "cd658a985edaf628", + "location": { + "path": "/etc/ssl/openssl.cnf.dist", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 12292 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "7ea62afe227ac7bd5c4e9afc7dc3b8ffa220c908" + }, + { + "algorithm": "sha256", + "value": "15c6ec001241f54bed98c135f0dab42f4a5e489f22544613b0671198f8ad8318" + } + ] + }, + { + "id": "c7bb6e42ea2504f8", + "location": { + "path": "/etc/sysctl.conf", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 53 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "e2ea73ded7e7371664204b148569fb5e88b0f7a8" + }, + { + "algorithm": "sha256", + "value": "8bba47da45bc8715c69ac904a60410eabffaa7bbbef640f9c1368ab9c48493d0" + } + ] + }, + { + "id": "faa5e8897571d717", + "location": { + "path": "/etc/udhcpd.conf", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 5636 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "1202c58e3ebba2edde32aa789b7af66639d0ed05" + }, + { + "algorithm": "sha256", + "value": "9249f3fd52c2500bfe3586def6765b82336ba7832b65cb8c6b8ca1999c31342e" + } + ] + }, + { + "id": "c3b51a85a6a2d3e1", + "location": { + "path": "/lib/apk/db/installed", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + } + }, + { + "id": "f45009f97952cd8e", + "location": { + "path": "/lib/ld-musl-x86_64.so.1", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 755, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "application/x-sharedlib", + "size": 616992 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "b46c60c7614bac3fb4524d373540706db1224425" + }, + { + "algorithm": "sha256", + "value": "a0e80898190e34005a4d0598fa71e2e0b0ab2726a3cd73c3ad147770ca371173" + } + ] + }, + { + "id": "1aa086f53c8c0808", + "location": { + "path": "/lib/libapk.so.3.12.0", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 755, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "application/x-sharedlib", + "size": 184008 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "a298e962a5e0ce6395a3b11b35ef25e57a25d3c8" + }, + { + "algorithm": "sha256", + "value": "f042925dae3decc473a8b88afbbfbdedfe740731aef7f41304b671a70950cf45" + } + ] + }, + { + "id": "b5c42da9eeef9d95", + "location": { + "path": "/lib/libcrypto.so.3", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 755, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "application/x-sharedlib", + "size": 3882720 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "fec2861f154b154158028a36e452a3bc4682598e" + }, + { + "algorithm": "sha256", + "value": "eae45717efd099ddfc04aa53d3b80570290398e84560c0719e07cde644706beb" + } + ] + }, + { + "id": "5c67196b8e1d1558", + "location": { + "path": "/lib/libssl.so.3", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 755, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "application/x-sharedlib", + "size": 602120 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "a7c33cda6eb0d441263ff08a593523509109adcd" + }, + { + "algorithm": "sha256", + "value": "7c6e060a33d5e0969aced1645e669666b58f223f27d783b8e49471088e3f756a" + } + ] + }, + { + "id": "6d81ff77d1d5460a", + "location": { + "path": "/lib/libz.so.1.2.13", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 755, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "application/x-sharedlib", + "size": 100264 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "7698af4c7e324d69d09d311d28699431a97f0ac2" + }, + { + "algorithm": "sha256", + "value": "a7df4375fc9f37d5c284ef74e1d782d0100ce3a907ad2cbc6287f769cb90aac4" + } + ] + }, + { + "id": "89c7ab9592844cbb", + "location": { + "path": "/lib/sysctl.d/00-alpine.conf", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 1278 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "1e9125cd6d7112098a7c446d4f2ee8a269a7aba7" + }, + { + "algorithm": "sha256", + "value": "ee169bea2cb6859420b55ca7a9c23fb68b50adc1d26c951f904dec9e8f767380" + } + ] + }, + { + "id": "c765115741fe905b", + "location": { + "path": "/sbin/apk", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 755, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "application/x-sharedlib", + "size": 69560 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "ff86e638f7bf1f56211d1ce5ae3dbba2e7d384cc" + }, + { + "algorithm": "sha256", + "value": "e9779d79565729775dbf0779d198a01b7f2bec49ebfb5ab727993b10731d03ec" + } + ] + }, + { + "id": "c911f25351778370", + "location": { + "path": "/sbin/ldconfig", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 755, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 393 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "2a36b6f8f3992b112450e66ac128c2ea499a103e" + }, + { + "algorithm": "sha256", + "value": "b4a2c06db38742e8c42c3c9838b285a7d8cdac6c091ff3df5ff9a15f1e41b9c7" + } + ] + }, + { + "id": "e0a729e0af2c3974", + "location": { + "path": "/usr/bin/getconf", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 755, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "application/x-sharedlib", + "size": 34920 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "514468d67656129d5bc162ca39a16ff4c4641ae6" + }, + { + "algorithm": "sha256", + "value": "018f94905c92f3af3bb63db27909301dd21cbc6ed0b292e68a3c79f2d867d37e" + } + ] + }, + { + "id": "51ddc107d90f5f4b", + "location": { + "path": "/usr/bin/getent", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 755, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "application/x-sharedlib", + "size": 48448 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "ceddd4e0b7e00ddcc5b85de5205ce4b506f99cbc" + }, + { + "algorithm": "sha256", + "value": "e1da9464434075598b13bca855bbfc23042f417a7b7745a30867d345fafb7157" + } + ] + }, + { + "id": "47c9d14986fb43fc", + "location": { + "path": "/usr/bin/iconv", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 755, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "application/x-sharedlib", + "size": 24168 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "314af66ec460757ec81034fc55e6fcd9ab5badf9" + }, + { + "algorithm": "sha256", + "value": "76255619020c88ceb5135ca06c1faaaf39ca07dbe8f5efd3668e5ddb977b319e" + } + ] + }, + { + "id": "bf51187b1c0aae54", + "location": { + "path": "/usr/bin/ldd", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 755, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 52 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "c850211a08262fb11181b200eca431c93cdfde4b" + }, + { + "algorithm": "sha256", + "value": "9a49c2541a439be89f1ef1496604ef3b607f460d589877c60775acf74cdb5dfb" + } + ] + }, + { + "id": "6a7f2c32518c8dbc", + "location": { + "path": "/usr/bin/scanelf", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 755, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "application/x-sharedlib", + "size": 83840 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "368022b2c543b9a9d717528e125f2aac50376eca" + }, + { + "algorithm": "sha256", + "value": "9d67cee3e834a1c96ff488471e70de590886253ffca68f6f36a28044f4d09878" + } + ] + }, + { + "id": "d7486c5ba43c6e31", + "location": { + "path": "/usr/bin/ssl_client", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 755, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "application/x-sharedlib", + "size": 14320 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "dd2841de918c0cbf11eecaaf0d578b38167a3f74" + }, + { + "algorithm": "sha256", + "value": "99a0361fb672afb60c11e11ae4139f69af1aad2ca7b38c5be8035a2551db683d" + } + ] + }, + { + "id": "b6274398f5a1b17c", + "location": { + "path": "/usr/lib/engines-3/afalg.so", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 755, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "application/x-sharedlib", + "size": 22632 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "45d0ff9513edf92a5d5c4ee2aa8d46b557de2be0" + }, + { + "algorithm": "sha256", + "value": "b75ee5e1ac378b66dcfec99c5745624b8eac50d3000baeb31da241cd277914aa" + } + ] + }, + { + "id": "e5d401ebaaead494", + "location": { + "path": "/usr/lib/engines-3/capi.so", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 755, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "application/x-sharedlib", + "size": 13848 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "446642893093fdbe85d7dd1f02acc9e827b3a933" + }, + { + "algorithm": "sha256", + "value": "857c3d3a882ea1ea4b1d5e24b910c90019b077eac0d1c0bf1f563222f5bb96b2" + } + ] + }, + { + "id": "e05bfc6d7f257206", + "location": { + "path": "/usr/lib/engines-3/loader_attic.so", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 755, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "application/x-sharedlib", + "size": 47656 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "08cf36a0962c7719d4e7195d4a249e6322d39aca" + }, + { + "algorithm": "sha256", + "value": "b3950a419b3d76bb01475788dd8bdb93a2281a5d4d58ae1ecaa07059212a57df" + } + ] + }, + { + "id": "76af347c7dbc737a", + "location": { + "path": "/usr/lib/engines-3/padlock.so", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 755, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "application/x-sharedlib", + "size": 22408 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "4abe87b5e76f02a564e3245a5019cbe09fa48c31" + }, + { + "algorithm": "sha256", + "value": "4c7ba20896a438112b10f897b6c4b5a648e40c8a126dee1161215c7d9f91edfd" + } + ] + }, + { + "id": "1ae61640919b8dcb", + "location": { + "path": "/usr/lib/ossl-modules/legacy.so", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 755, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "application/x-sharedlib", + "size": 104328 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "54c240590a11101c8b0c8c44533030073b154691" + }, + { + "algorithm": "sha256", + "value": "9bfaa6a311b8af4190169369a241a693b69303f80f5833ac417015100ba79365" + } + ] + }, + { + "id": "d7833aea1af90c3e", + "location": { + "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-4a6a0840.rsa.pub", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 451 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "3af08548ef78cfdedcf349880c2c6a1a48763a0e" + }, + { + "algorithm": "sha256", + "value": "9c102bcc376af1498d549b77bdbfa815ae86faa1d2d82f040e616b18ef2df2d4" + } + ] + }, + { + "id": "f229e2967a4439ae", + "location": { + "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-5243ef4b.rsa.pub", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 451 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "bfb616658cc05a872568b0c8e398c482e23b60dd" + }, + { + "algorithm": "sha256", + "value": "ebf31683b56410ecc4c00acd9f6e2839e237a3b62b5ae7ef686705c7ba0396a9" + } + ] + }, + { + "id": "5c344de6c0adfb41", + "location": { + "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-524d27bb.rsa.pub", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 451 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "053a92f87fd4532850bb31f0881978efe0532ae5" + }, + { + "algorithm": "sha256", + "value": "1bb2a846c0ea4ca9d0e7862f970863857fc33c32f5506098c636a62a726a847b" + } + ] + }, + { + "id": "7e0eaf4903e2c594", + "location": { + "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-5261cecb.rsa.pub", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 451 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "3671ae0ec7503b1e193587c1dcdf7b78bc863e42" + }, + { + "algorithm": "sha256", + "value": "12f899e55a7691225603d6fb3324940fc51cd7f133e7ead788663c2b7eecb00c" + } + ] + }, + { + "id": "c4d82f372f586c5d", + "location": { + "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-58199dcc.rsa.pub", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 451 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "39ac5d72c6ba018a0f74b8b453894edc9db07b5f" + }, + { + "algorithm": "sha256", + "value": "73867d92083f2f8ab899a26ccda7ef63dfaa0032a938620eda605558958a8041" + } + ] + }, + { + "id": "c9f749c20ace3749", + "location": { + "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-58cbb476.rsa.pub", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 451 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "c8fabeb2eeb992c368c77b9707e0d1ecfd7cf905" + }, + { + "algorithm": "sha256", + "value": "9a4cd858d9710963848e6d5f555325dc199d1c952b01cf6e64da2c15deedbd97" + } + ] + }, + { + "id": "3f37b052555a032a", + "location": { + "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-58e4f17d.rsa.pub", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 451 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "329643357d0b78b1ef48ec155325e25f1d7534dd" + }, + { + "algorithm": "sha256", + "value": "780b3ed41786772cbc7b68136546fa3f897f28a23b30c72dde6225319c44cfff" + } + ] + }, + { + "id": "bd290647080920df", + "location": { + "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-5e69ca50.rsa.pub", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 451 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "825090fde25bbc0e71a9cb3076316b5afe459e4d" + }, + { + "algorithm": "sha256", + "value": "59c01c57b446633249f67c04b115dd6787f4378f183dff2bbf65406df93f176d" + } + ] + }, + { + "id": "761377117b43797c", + "location": { + "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-60ac2099.rsa.pub", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 451 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "5d4743128353b6396fad2fa2ba793ace21602295" + }, + { + "algorithm": "sha256", + "value": "db0b49163f07ffba64a5ca198bcf1688610b0bd1f0d8d5afeaf78559d73f2278" + } + ] + }, + { + "id": "81a031158e5a172a", + "location": { + "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-6165ee59.rsa.pub", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 800 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "95995311236b7a55933642ffa10ce6014f1af7d0" + }, + { + "algorithm": "sha256", + "value": "207e4696d3c05f7cb05966aee557307151f1f00217af4143c1bcaf33b8df733f" + } + ] + }, + { + "id": "c0437528810bb1fb", + "location": { + "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-61666e3f.rsa.pub", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 800 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "58d5ba4b2f3b1e927721d7a6432f298eedf72a6b" + }, + { + "algorithm": "sha256", + "value": "128d34d4aec39b0daedea8163cd8dc24dff36fd3d848630ab97eeb1d3084bbb3" + } + ] + }, + { + "id": "932c31c2300cc286", + "location": { + "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616a9724.rsa.pub", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 800 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "23d0f2ea1af269c2f66165e0f8a944e96bf011de" + }, + { + "algorithm": "sha256", + "value": "10877cce0a935e46ad88cb79e174a2491680508eccda08e92bf04fb9bf37fbc1" + } + ] + }, + { + "id": "a11195f3b431951d", + "location": { + "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616abc23.rsa.pub", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 800 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "3529ec82670c6d4e20ee3e4968db34b551e91d50" + }, + { + "algorithm": "sha256", + "value": "4a095a9daca86da496a3cd9adcd95ee2197fdbeb84638656d469f05a4d740751" + } + ] + }, + { + "id": "d15e3bb2fde54385", + "location": { + "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616ac3bc.rsa.pub", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 800 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "55a301064e11c6fe9ba0f2ca17e234f3943ccb61" + }, + { + "algorithm": "sha256", + "value": "0caf5662fde45616d88cfd7021b7bda269a2fcaf311e51c48945a967a609ec0b" + } + ] + }, + { + "id": "e62c139013a804b7", + "location": { + "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616adfeb.rsa.pub", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 800 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "de1241307014aae3dba798e900f163408d98d6f4" + }, + { + "algorithm": "sha256", + "value": "ebe717d228555aa58133c202314a451f81e71f174781fd7ff8d8970d6cfa60da" + } + ] + }, + { + "id": "5229138dd6e4ad25", + "location": { + "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616ae350.rsa.pub", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 800 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "57f6b93fda4a4496fab62844ddef0eeb168f80b5" + }, + { + "algorithm": "sha256", + "value": "d11f6b21c61b4274e182eb888883a8ba8acdbf820dcc7a6d82a7d9fc2fd2836d" + } + ] + }, + { + "id": "75fcc462c95ba1ee", + "location": { + "path": "/usr/share/apk/keys/alpine-devel@lists.alpinelinux.org-616db30d.rsa.pub", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 644, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 800 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "df02c9adc2906a3aa5e5ad69f50e3953e65710d0" + }, + { + "algorithm": "sha256", + "value": "40a216cbd163f22e5f16a9e0929de7cde221b9cbae8e36aa368b1e128afe0a31" + } + ] + }, + { + "id": "c468e3fb98398685", + "location": { + "path": "/usr/share/udhcpc/default.script", + "layerID": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39" + }, + "metadata": { + "mode": 755, + "type": "RegularFile", + "userID": 0, + "groupID": 0, + "mimeType": "text/plain", + "size": 3688 + }, + "digests": [ + { + "algorithm": "sha1", + "value": "1d6a46dde403f14a22e2692cd84dd24af3805216" + }, + { + "algorithm": "sha256", + "value": "c4e5a7c4783a7a73dec48dee009ee687015d2de7ff86b269679b95bef2c60e13" + } + ] + } + ], + "source": { + "id": "fd6275a37d2472b9d3be70c3261087b8d65e441c21342ae7313096312bcda2b3", + "name": "library/alpine", + "version": "sha256:e2e16842c9b54d985bf1ef9242a313f36b856181f188de21313820e177002501", + "type": "image", + "metadata": { + "userInput": "library/alpine@sha256:e2e16842c9b54d985bf1ef9242a313f36b856181f188de21313820e177002501", + "imageID": "sha256:b2aa39c304c27b96c1fef0c06bee651ac9241d49c4fe34381cab8453f9a89c7d", + "manifestDigest": "sha256:fd6275a37d2472b9d3be70c3261087b8d65e441c21342ae7313096312bcda2b3", + "mediaType": "application/vnd.docker.distribution.manifest.v2+json", + "tags": [], + "imageSize": 7044859, + "layers": [ + { + "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip", + "digest": "sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39", + "size": 7044859 + } + ], + "manifest": "eyJzY2hlbWFWZXJzaW9uIjoyLCJtZWRpYVR5cGUiOiJhcHBsaWNhdGlvbi92bmQuZG9ja2VyLmRpc3RyaWJ1dGlvbi5tYW5pZmVzdC52Mitqc29uIiwiY29uZmlnIjp7Im1lZGlhVHlwZSI6ImFwcGxpY2F0aW9uL3ZuZC5kb2NrZXIuY29udGFpbmVyLmltYWdlLnYxK2pzb24iLCJzaXplIjoxNDcyLCJkaWdlc3QiOiJzaGEyNTY6YjJhYTM5YzMwNGMyN2I5NmMxZmVmMGMwNmJlZTY1MWFjOTI0MWQ0OWM0ZmUzNDM4MWNhYjg0NTNmOWE4OWM3ZCJ9LCJsYXllcnMiOlt7Im1lZGlhVHlwZSI6ImFwcGxpY2F0aW9uL3ZuZC5kb2NrZXIuaW1hZ2Uucm9vdGZzLmRpZmYudGFyLmd6aXAiLCJzaXplIjo3MzM3OTg0LCJkaWdlc3QiOiJzaGEyNTY6N2NkNTI4NDdhZDc3NWE1ZGRjNGI1ODMyNmNmODg0YmVlZTM0NTQ0Mjk2NDAyYzYyOTJlZDc2NDc0YzY4NmQzOSJ9XX0=", + "config": "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", + "repoDigests": [ + "alpine@sha256:e2e16842c9b54d985bf1ef9242a313f36b856181f188de21313820e177002501" + ], + "architecture": "amd64", + "os": "linux" + } + }, + "distro": { + "prettyName": "Alpine Linux v3.17", + "name": "Alpine Linux", + "id": "alpine", + "versionID": "3.17.2", + "homeURL": "https://alpinelinux.org/", + "bugReportURL": "https://gitlab.alpinelinux.org/alpine/aports/-/issues" + }, + "descriptor": { + "name": "name", + "version": "unknown", + "configuration": { + "catalogers": { + "requested": { + "default": [ + "image" + ] + }, + "used": [ + "alpm-db-cataloger", + "apk-db-cataloger", + "binary-cataloger", + "cargo-auditable-binary-cataloger", + "conan-info-cataloger", + "dotnet-portable-executable-cataloger", + "dpkg-db-cataloger", + "go-module-binary-cataloger", + "graalvm-native-image-cataloger", + "java-archive-cataloger", + "javascript-package-cataloger", + "nix-store-cataloger", + "php-composer-installed-cataloger", + "portage-cataloger", + "python-installed-package-cataloger", + "r-package-cataloger", + "rpm-db-cataloger", + "ruby-installed-gemspec-cataloger", + "sbom-cataloger" + ] + }, + "data-generation": { + "generate-cpes": true + }, + "files": { + "content": { + "globs": null, + "skip-files-above-size": 0 + }, + "hashers": [ + "sha-1", + "sha-256" + ], + "selection": "owned-by-package" + }, + "packages": { + "binary": [ + "python-binary", + "python-binary-lib", + "pypy-binary-lib", + "go-binary", + "julia-binary", + "helm", + "redis-binary", + "java-binary-openjdk", + "java-binary-ibm", + "java-binary-oracle", + "nodejs-binary", + "go-binary-hint", + "busybox-binary", + "haproxy-binary", + "perl-binary", + "php-cli-binary", + "php-fpm-binary", + "php-apache-binary", + "php-composer-binary", + "httpd-binary", + "memcached-binary", + "traefik-binary", + "postgresql-binary", + "mysql-binary", + "mysql-binary", + "mysql-binary", + "xtrabackup-binary", + "mariadb-binary", + "rust-standard-library-linux", + "rust-standard-library-macos", + "ruby-binary", + "erlang-binary", + "consul-binary", + "nginx-binary", + "bash-binary", + "openssl-binary", + "gcc-binary", + "wordpress-cli-binary" + ], + "golang": { + "local-mod-cache-dir": "/home/matthiasbertschy/go/pkg/mod", + "proxies": [ + "https://proxy.golang.org", + "direct" + ], + "search-local-mod-cache-licenses": false, + "search-remote-licenses": false + }, + "java-archive": { + "include-indexed-archives": true, + "include-unindexed-archives": false, + "maven-base-url": "https://repo1.maven.org/maven2", + "max-parent-recursive-depth": 5, + "use-network": false + }, + "javascript": { + "npm-base-url": "https://registry.npmjs.org", + "search-remote-licenses": false + }, + "linux-kernel": { + "catalog-modules": true + }, + "python": { + "guess-unpinned-requirements": false + } + }, + "relationships": { + "exclude-binary-packages-with-file-ownership-overlap": true, + "package-file-ownership": true, + "package-file-ownership-overlap": true + }, + "search": { + "scope": "squashed" + } } + }, + "schema": { + "version": "13.0.0", + "url": "https://raw.githubusercontent.com/anchore/syft/main/schema/json/schema-13.0.0.json" + } } \ No newline at end of file diff --git a/adapters/v1/testdata/hello-world-sbom.format.json b/adapters/v1/testdata/hello-world-sbom.format.json index e1e9b19..d9f8a3d 100644 --- a/adapters/v1/testdata/hello-world-sbom.format.json +++ b/adapters/v1/testdata/hello-world-sbom.format.json @@ -1,109 +1,161 @@ { - "artifacts": [], - "artifactRelationships": [], - "source": { - "id": "03a75d703fcd471cc09ed0dfffde55b74d95598343411e7fa3bcebc18d91bb8b", - "name": "library/hello-world", - "version": "sha256:aa0cc8055b82dc2509bed2e19b275c8f463506616377219d9642221ab53cf9fe", - "type": "image", - "metadata": { - "userInput": "library/hello-world@sha256:aa0cc8055b82dc2509bed2e19b275c8f463506616377219d9642221ab53cf9fe", - "imageID": "sha256:feb5d9fea6a5e9606aa995e879d862b825965ba48de054caab5ef356dc6b3412", - "manifestDigest": "sha256:03a75d703fcd471cc09ed0dfffde55b74d95598343411e7fa3bcebc18d91bb8b", - "mediaType": "application/vnd.docker.distribution.manifest.v2+json", - "tags": [], - "imageSize": 13256, - "layers": [ - { - "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip", - "digest": "sha256:e07ee1baac5fae6a26f30cabfe54a36d3402f96afda318fe0a96cec4ca393359", - "size": 13256 - } - ], - "manifest": "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", - "config": "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", - "repoDigests": [ - "hello-world@sha256:aa0cc8055b82dc2509bed2e19b275c8f463506616377219d9642221ab53cf9fe" - ], - "architecture": "<>", - "os": "linux" + "artifacts": [], + "artifactRelationships": [], + "source": { + "id": "03a75d703fcd471cc09ed0dfffde55b74d95598343411e7fa3bcebc18d91bb8b", + "name": "library/hello-world", + "version": "sha256:aa0cc8055b82dc2509bed2e19b275c8f463506616377219d9642221ab53cf9fe", + "type": "image", + "metadata": { + "userInput": "library/hello-world@sha256:aa0cc8055b82dc2509bed2e19b275c8f463506616377219d9642221ab53cf9fe", + "imageID": "sha256:feb5d9fea6a5e9606aa995e879d862b825965ba48de054caab5ef356dc6b3412", + "manifestDigest": "sha256:03a75d703fcd471cc09ed0dfffde55b74d95598343411e7fa3bcebc18d91bb8b", + "mediaType": "application/vnd.docker.distribution.manifest.v2+json", + "tags": [], + "imageSize": 13256, + "layers": [ + { + "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip", + "digest": "sha256:e07ee1baac5fae6a26f30cabfe54a36d3402f96afda318fe0a96cec4ca393359", + "size": 13256 } - }, - "distro": {}, - "descriptor": { - "name": "name", - "version": "unknown", - "configuration": { - "catalogers": null, - "package": { - "cataloger": { - "enabled": true, - "scope": "squashed" - }, - "search-unindexed-archives": false, - "search-indexed-archives": true - }, - "golang": { - "search-local-mod-cache-licenses": false, - "local-mod-cache-dir": "", - "search-remote-licenses": false, - "proxy": "", - "no-proxy": "" - }, - "java": { - "use-network": false, - "maven-url": "", - "max-parent-recursive-depth": 0 - }, - "linux-kernel": { - "catalog-modules": true - }, - "python": { - "guess-unpinned-requirements": false - }, - "file-metadata": { - "cataloger": { - "enabled": false, - "scope": "squashed" - }, - "digests": [ - "sha256" - ] - }, - "file-contents": { - "cataloger": { - "enabled": false, - "scope": "squashed" - }, - "skip-files-above-size": 1048576, - "globs": null - }, - "registry": { - "insecure-skip-tls-verify": false, - "insecure-use-http": false, - "auth": null, - "ca-cert": "" - }, - "exclude": null, - "platform": "", - "name": "", - "source": { - "name": "", - "version": "", - "file": { - "digests": [ - "sha256" - ] - } - }, - "parallelism": 4, - "default-image-pull-source": "", - "base-path": "", - "exclude-binary-overlap-by-ownership": true + ], + "manifest": "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", + "config": "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", + "repoDigests": [ + "hello-world@sha256:aa0cc8055b82dc2509bed2e19b275c8f463506616377219d9642221ab53cf9fe" + ], + "architecture": "<>", + "os": "linux" + } + }, + "distro": {}, + "descriptor": { + "name": "name", + "version": "unknown", + "configuration": { + "catalogers": { + "requested": { + "default": [ + "image" + ] + }, + "used": [ + "alpm-db-cataloger", + "apk-db-cataloger", + "binary-cataloger", + "cargo-auditable-binary-cataloger", + "conan-info-cataloger", + "dotnet-portable-executable-cataloger", + "dpkg-db-cataloger", + "go-module-binary-cataloger", + "graalvm-native-image-cataloger", + "java-archive-cataloger", + "javascript-package-cataloger", + "nix-store-cataloger", + "php-composer-installed-cataloger", + "portage-cataloger", + "python-installed-package-cataloger", + "r-package-cataloger", + "rpm-db-cataloger", + "ruby-installed-gemspec-cataloger", + "sbom-cataloger" + ] + }, + "data-generation": { + "generate-cpes": true + }, + "files": { + "content": { + "globs": null, + "skip-files-above-size": 0 + }, + "hashers": [ + "sha-1", + "sha-256" + ], + "selection": "owned-by-package" + }, + "packages": { + "binary": [ + "python-binary", + "python-binary-lib", + "pypy-binary-lib", + "go-binary", + "julia-binary", + "helm", + "redis-binary", + "java-binary-openjdk", + "java-binary-ibm", + "java-binary-oracle", + "nodejs-binary", + "go-binary-hint", + "busybox-binary", + "haproxy-binary", + "perl-binary", + "php-cli-binary", + "php-fpm-binary", + "php-apache-binary", + "php-composer-binary", + "httpd-binary", + "memcached-binary", + "traefik-binary", + "postgresql-binary", + "mysql-binary", + "mysql-binary", + "mysql-binary", + "xtrabackup-binary", + "mariadb-binary", + "rust-standard-library-linux", + "rust-standard-library-macos", + "ruby-binary", + "erlang-binary", + "consul-binary", + "nginx-binary", + "bash-binary", + "openssl-binary", + "gcc-binary", + "wordpress-cli-binary" + ], + "golang": { + "local-mod-cache-dir": "<>", + "proxies": [ + "https://proxy.golang.org", + "direct" + ], + "search-local-mod-cache-licenses": false, + "search-remote-licenses": false + }, + "java-archive": { + "include-indexed-archives": true, + "include-unindexed-archives": false, + "maven-base-url": "https://repo1.maven.org/maven2", + "max-parent-recursive-depth": 5, + "use-network": false + }, + "javascript": { + "npm-base-url": "https://registry.npmjs.org", + "search-remote-licenses": false + }, + "linux-kernel": { + "catalog-modules": true + }, + "python": { + "guess-unpinned-requirements": false } - }, - "schema": { - "version": "13.0.0", - "url": "https://raw.githubusercontent.com/anchore/syft/main/schema/json/schema-13.0.0.json" + }, + "relationships": { + "exclude-binary-packages-with-file-ownership-overlap": true, + "package-file-ownership": true, + "package-file-ownership-overlap": true + }, + "search": { + "scope": "squashed" + } } -} + }, + "schema": { + "version": "13.0.0", + "url": "https://raw.githubusercontent.com/anchore/syft/main/schema/json/schema-13.0.0.json" + } +} \ No newline at end of file diff --git a/adapters/v1/testdata/hello-world-sbom.json b/adapters/v1/testdata/hello-world-sbom.json index 0ce0390..a945bc2 100644 --- a/adapters/v1/testdata/hello-world-sbom.json +++ b/adapters/v1/testdata/hello-world-sbom.json @@ -1,109 +1,161 @@ { - "artifacts": [], - "artifactRelationships": [], - "source": { - "id": "03a75d703fcd471cc09ed0dfffde55b74d95598343411e7fa3bcebc18d91bb8b", - "name": "library/hello-world", - "version": "sha256:aa0cc8055b82dc2509bed2e19b275c8f463506616377219d9642221ab53cf9fe", - "type": "image", - "metadata": { - "userInput": "library/hello-world@sha256:aa0cc8055b82dc2509bed2e19b275c8f463506616377219d9642221ab53cf9fe", - "imageID": "sha256:feb5d9fea6a5e9606aa995e879d862b825965ba48de054caab5ef356dc6b3412", - "manifestDigest": "sha256:03a75d703fcd471cc09ed0dfffde55b74d95598343411e7fa3bcebc18d91bb8b", - "mediaType": "application/vnd.docker.distribution.manifest.v2+json", - "tags": [], - "imageSize": 13256, - "layers": [ - { - "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip", - "digest": "sha256:e07ee1baac5fae6a26f30cabfe54a36d3402f96afda318fe0a96cec4ca393359", - "size": 13256 - } - ], - "manifest": "eyJzY2hlbWFWZXJzaW9uIjoyLCJtZWRpYVR5cGUiOiJhcHBsaWNhdGlvbi92bmQuZG9ja2VyLmRpc3RyaWJ1dGlvbi5tYW5pZmVzdC52Mitqc29uIiwiY29uZmlnIjp7Im1lZGlhVHlwZSI6ImFwcGxpY2F0aW9uL3ZuZC5kb2NrZXIuY29udGFpbmVyLmltYWdlLnYxK2pzb24iLCJzaXplIjoxNDY5LCJkaWdlc3QiOiJzaGEyNTY6ZmViNWQ5ZmVhNmE1ZTk2MDZhYTk5NWU4NzlkODYyYjgyNTk2NWJhNDhkZTA1NGNhYWI1ZWYzNTZkYzZiMzQxMiJ9LCJsYXllcnMiOlt7Im1lZGlhVHlwZSI6ImFwcGxpY2F0aW9uL3ZuZC5kb2NrZXIuaW1hZ2Uucm9vdGZzLmRpZmYudGFyLmd6aXAiLCJzaXplIjoxNDg0OCwiZGlnZXN0Ijoic2hhMjU2OmUwN2VlMWJhYWM1ZmFlNmEyNmYzMGNhYmZlNTRhMzZkMzQwMmY5NmFmZGEzMThmZTBhOTZjZWM0Y2EzOTMzNTkifV19", - "config": "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", - "repoDigests": [ - "hello-world@sha256:aa0cc8055b82dc2509bed2e19b275c8f463506616377219d9642221ab53cf9fe" - ], - "architecture": "<>", - "os": "linux" + "artifacts": [], + "artifactRelationships": [], + "source": { + "id": "03a75d703fcd471cc09ed0dfffde55b74d95598343411e7fa3bcebc18d91bb8b", + "name": "library/hello-world", + "version": "sha256:aa0cc8055b82dc2509bed2e19b275c8f463506616377219d9642221ab53cf9fe", + "type": "image", + "metadata": { + "userInput": "library/hello-world@sha256:aa0cc8055b82dc2509bed2e19b275c8f463506616377219d9642221ab53cf9fe", + "imageID": "sha256:feb5d9fea6a5e9606aa995e879d862b825965ba48de054caab5ef356dc6b3412", + "manifestDigest": "sha256:03a75d703fcd471cc09ed0dfffde55b74d95598343411e7fa3bcebc18d91bb8b", + "mediaType": "application/vnd.docker.distribution.manifest.v2+json", + "tags": [], + "imageSize": 13256, + "layers": [ + { + "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip", + "digest": "sha256:e07ee1baac5fae6a26f30cabfe54a36d3402f96afda318fe0a96cec4ca393359", + "size": 13256 } - }, - "distro": {}, - "descriptor": { - "name": "syft", - "version": "0.98.0", - "configuration": { - "catalogers": null, - "package": { - "cataloger": { - "enabled": true, - "scope": "squashed" - }, - "search-unindexed-archives": false, - "search-indexed-archives": true - }, - "golang": { - "search-local-mod-cache-licenses": false, - "local-mod-cache-dir": "", - "search-remote-licenses": false, - "proxy": "", - "no-proxy": "" - }, - "java": { - "use-network": false, - "maven-url": "", - "max-parent-recursive-depth": 0 - }, - "linux-kernel": { - "catalog-modules": true - }, - "python": { - "guess-unpinned-requirements": false - }, - "file-metadata": { - "cataloger": { - "enabled": false, - "scope": "squashed" - }, - "digests": [ - "sha256" - ] - }, - "file-contents": { - "cataloger": { - "enabled": false, - "scope": "squashed" - }, - "skip-files-above-size": 1048576, - "globs": null - }, - "registry": { - "insecure-skip-tls-verify": false, - "insecure-use-http": false, - "auth": null, - "ca-cert": "" - }, - "exclude": [], - "platform": "", - "name": "", - "source": { - "name": "", - "version": "", - "file": { - "digests": [ - "sha256" - ] - } - }, - "parallelism": 1, - "default-image-pull-source": "", - "base-path": "", - "exclude-binary-overlap-by-ownership": true + ], + "manifest": "eyJzY2hlbWFWZXJzaW9uIjoyLCJtZWRpYVR5cGUiOiJhcHBsaWNhdGlvbi92bmQuZG9ja2VyLmRpc3RyaWJ1dGlvbi5tYW5pZmVzdC52Mitqc29uIiwiY29uZmlnIjp7Im1lZGlhVHlwZSI6ImFwcGxpY2F0aW9uL3ZuZC5kb2NrZXIuY29udGFpbmVyLmltYWdlLnYxK2pzb24iLCJzaXplIjoxNDY5LCJkaWdlc3QiOiJzaGEyNTY6ZmViNWQ5ZmVhNmE1ZTk2MDZhYTk5NWU4NzlkODYyYjgyNTk2NWJhNDhkZTA1NGNhYWI1ZWYzNTZkYzZiMzQxMiJ9LCJsYXllcnMiOlt7Im1lZGlhVHlwZSI6ImFwcGxpY2F0aW9uL3ZuZC5kb2NrZXIuaW1hZ2Uucm9vdGZzLmRpZmYudGFyLmd6aXAiLCJzaXplIjoxNDg0OCwiZGlnZXN0Ijoic2hhMjU2OmUwN2VlMWJhYWM1ZmFlNmEyNmYzMGNhYmZlNTRhMzZkMzQwMmY5NmFmZGEzMThmZTBhOTZjZWM0Y2EzOTMzNTkifV19", + "config": "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", + "repoDigests": [ + "hello-world@sha256:aa0cc8055b82dc2509bed2e19b275c8f463506616377219d9642221ab53cf9fe" + ], + "architecture": "amd64", + "os": "linux" + } + }, + "distro": {}, + "descriptor": { + "name": "name", + "version": "unknown", + "configuration": { + "catalogers": { + "requested": { + "default": [ + "image" + ] + }, + "used": [ + "alpm-db-cataloger", + "apk-db-cataloger", + "binary-cataloger", + "cargo-auditable-binary-cataloger", + "conan-info-cataloger", + "dotnet-portable-executable-cataloger", + "dpkg-db-cataloger", + "go-module-binary-cataloger", + "graalvm-native-image-cataloger", + "java-archive-cataloger", + "javascript-package-cataloger", + "nix-store-cataloger", + "php-composer-installed-cataloger", + "portage-cataloger", + "python-installed-package-cataloger", + "r-package-cataloger", + "rpm-db-cataloger", + "ruby-installed-gemspec-cataloger", + "sbom-cataloger" + ] + }, + "data-generation": { + "generate-cpes": true + }, + "files": { + "content": { + "globs": null, + "skip-files-above-size": 0 + }, + "hashers": [ + "sha-1", + "sha-256" + ], + "selection": "owned-by-package" + }, + "packages": { + "binary": [ + "python-binary", + "python-binary-lib", + "pypy-binary-lib", + "go-binary", + "julia-binary", + "helm", + "redis-binary", + "java-binary-openjdk", + "java-binary-ibm", + "java-binary-oracle", + "nodejs-binary", + "go-binary-hint", + "busybox-binary", + "haproxy-binary", + "perl-binary", + "php-cli-binary", + "php-fpm-binary", + "php-apache-binary", + "php-composer-binary", + "httpd-binary", + "memcached-binary", + "traefik-binary", + "postgresql-binary", + "mysql-binary", + "mysql-binary", + "mysql-binary", + "xtrabackup-binary", + "mariadb-binary", + "rust-standard-library-linux", + "rust-standard-library-macos", + "ruby-binary", + "erlang-binary", + "consul-binary", + "nginx-binary", + "bash-binary", + "openssl-binary", + "gcc-binary", + "wordpress-cli-binary" + ], + "golang": { + "local-mod-cache-dir": "/home/matthiasbertschy/go/pkg/mod", + "proxies": [ + "https://proxy.golang.org", + "direct" + ], + "search-local-mod-cache-licenses": false, + "search-remote-licenses": false + }, + "java-archive": { + "include-indexed-archives": true, + "include-unindexed-archives": false, + "maven-base-url": "https://repo1.maven.org/maven2", + "max-parent-recursive-depth": 5, + "use-network": false + }, + "javascript": { + "npm-base-url": "https://registry.npmjs.org", + "search-remote-licenses": false + }, + "linux-kernel": { + "catalog-modules": true + }, + "python": { + "guess-unpinned-requirements": false } - }, - "schema": { - "version": "13.0.0", - "url": "https://raw.githubusercontent.com/anchore/syft/main/schema/json/schema-13.0.0.json" + }, + "relationships": { + "exclude-binary-packages-with-file-ownership-overlap": true, + "package-file-ownership": true, + "package-file-ownership-overlap": true + }, + "search": { + "scope": "squashed" + } } -} + }, + "schema": { + "version": "13.0.0", + "url": "https://raw.githubusercontent.com/anchore/syft/main/schema/json/schema-13.0.0.json" + } +} \ No newline at end of file diff --git a/adapters/v1/testdata/stretch-slim-sbom.format.json b/adapters/v1/testdata/stretch-slim-sbom.format.json new file mode 100644 index 0000000..ff5a0ef --- /dev/null +++ b/adapters/v1/testdata/stretch-slim-sbom.format.json @@ -0,0 +1,186 @@ +{ + "artifacts": "<>", + "artifactRelationships": "<>", + "files": "<>", + "source": { + "id": "0839f8a5953c84602733cc22e08cc58fff197230394c0f53e16ebe4b1f82bebc", + "name": "quay.io/jitesoft/debian", + "version": "stretch-slim", + "type": "image", + "metadata": { + "userInput": "quay.io/jitesoft/debian:stretch-slim", + "imageID": "sha256:79fa621e5e02554e75cc49e33ec6e7a0ce97a1d6ccb955dc23a13966cc9b09d8", + "manifestDigest": "sha256:0839f8a5953c84602733cc22e08cc58fff197230394c0f53e16ebe4b1f82bebc", + "mediaType": "application/vnd.docker.distribution.manifest.v2+json", + "tags": [ + "quay.io/jitesoft/debian:stretch-slim" + ], + "imageSize": 55294181, + "layers": [ + { + "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip", + "digest": "sha256:ddae06c659b4e2c0761685617730fe3e4d5cb864a868a4b2be677c8533dc0426", + "size": 55294181 + } + ], + "manifest": "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", + "config": "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", + "repoDigests": [ + "quay.io/jitesoft/debian@sha256:aa12141fb9e387cdc9f933d5048ab58ba0aa4f3eb2c4d5fe804efce52e0b14eb" + ], + "architecture": "amd64", + "os": "linux", + "labels": { + "com.jitesoft.app.debian.version": "9.11", + "com.jitesoft.app.debian.version.name": "stretch", + "com.jitesoft.build.arch": "x86_64", + "com.jitesoft.project.registry.uri": "registry.gitlab.com/jitesoft/dockerfiles/debian", + "com.jitesoft.project.repo.issues": "https://gitlab.com/jitesoft/dockerfiles/debian/issues", + "com.jitesoft.project.repo.type": "git", + "com.jitesoft.project.repo.uri": "https://gitlab.com/jitesoft/dockerfiles/debian", + "maintainer": "Johannes Tegnér \u003cjohannes@jitesoft.com\u003e", + "maintainer.org": "Jitesoft", + "maintainer.org.uri": "https://jitesoft.com" + } + } + }, + "distro": { + "prettyName": "Debian GNU/Linux 9 (stretch)", + "name": "Debian GNU/Linux", + "id": "debian", + "version": "9 (stretch)", + "versionID": "9", + "versionCodename": "stretch", + "homeURL": "https://www.debian.org/", + "supportURL": "https://www.debian.org/support", + "bugReportURL": "https://bugs.debian.org/" + }, + "descriptor": { + "name": "name", + "version": "unknown", + "configuration": { + "catalogers": { + "requested": { + "default": [ + "image" + ] + }, + "used": [ + "alpm-db-cataloger", + "apk-db-cataloger", + "binary-cataloger", + "cargo-auditable-binary-cataloger", + "conan-info-cataloger", + "dotnet-portable-executable-cataloger", + "dpkg-db-cataloger", + "go-module-binary-cataloger", + "graalvm-native-image-cataloger", + "java-archive-cataloger", + "javascript-package-cataloger", + "nix-store-cataloger", + "php-composer-installed-cataloger", + "portage-cataloger", + "python-installed-package-cataloger", + "r-package-cataloger", + "rpm-db-cataloger", + "ruby-installed-gemspec-cataloger", + "sbom-cataloger" + ] + }, + "data-generation": { + "generate-cpes": true + }, + "files": { + "content": { + "globs": null, + "skip-files-above-size": 0 + }, + "hashers": [ + "sha-1", + "sha-256" + ], + "selection": "owned-by-package" + }, + "packages": { + "binary": [ + "python-binary", + "python-binary-lib", + "pypy-binary-lib", + "go-binary", + "julia-binary", + "helm", + "redis-binary", + "java-binary-openjdk", + "java-binary-ibm", + "java-binary-oracle", + "nodejs-binary", + "go-binary-hint", + "busybox-binary", + "haproxy-binary", + "perl-binary", + "php-cli-binary", + "php-fpm-binary", + "php-apache-binary", + "php-composer-binary", + "httpd-binary", + "memcached-binary", + "traefik-binary", + "postgresql-binary", + "mysql-binary", + "mysql-binary", + "mysql-binary", + "xtrabackup-binary", + "mariadb-binary", + "rust-standard-library-linux", + "rust-standard-library-macos", + "ruby-binary", + "erlang-binary", + "consul-binary", + "nginx-binary", + "bash-binary", + "openssl-binary", + "gcc-binary", + "wordpress-cli-binary" + ], + "golang": { + "local-mod-cache-dir": "<>", + "proxies": [ + "https://proxy.golang.org", + "direct" + ], + "search-local-mod-cache-licenses": false, + "search-remote-licenses": false + }, + "java-archive": { + "include-indexed-archives": true, + "include-unindexed-archives": false, + "maven-base-url": "https://repo1.maven.org/maven2", + "max-parent-recursive-depth": 5, + "use-network": false + }, + "javascript": { + "npm-base-url": "https://registry.npmjs.org", + "search-remote-licenses": false + }, + "linux-kernel": { + "catalog-modules": true + }, + "python": { + "guess-unpinned-requirements": false + } + }, + "relationships": { + "exclude-binary-packages-with-file-ownership-overlap": true, + "package-file-ownership": true, + "package-file-ownership-overlap": true + }, + "search": { + "scope": "squashed" + } + } + }, + "schema": { + "version": "13.0.0", + "url": "https://raw.githubusercontent.com/anchore/syft/main/schema/json/schema-13.0.0.json" + } +} \ No newline at end of file diff --git a/controllers/http_test.go b/controllers/http_test.go index f418674..673f309 100644 --- a/controllers/http_test.go +++ b/controllers/http_test.go @@ -7,7 +7,7 @@ import ( "testing" wssc "github.com/armosec/armoapi-go/apis" - "github.com/docker/docker/api/types" + "github.com/docker/docker/api/types/registry" "github.com/gammazero/workerpool" "github.com/gin-gonic/gin" "github.com/kubescape/kubevuln/core/ports" @@ -221,7 +221,7 @@ func Test_registryScanCommandToScanCommand(t *testing.T) { { wssc.RegistryScanCommand{ ImageScanParams: wssc.ImageScanParams{ - Credentialslist: []types.AuthConfig{}, + Credentialslist: []registry.AuthConfig{}, ImageTag: "docker.io/library/nginx:1.14.1", JobID: "some Job ID for nginx", ParentJobID: "some Parent Job ID for nginx", @@ -231,7 +231,7 @@ func Test_registryScanCommandToScanCommand(t *testing.T) { { wssc.RegistryScanCommand{ ImageScanParams: wssc.ImageScanParams{ - Credentialslist: []types.AuthConfig{}, + Credentialslist: []registry.AuthConfig{}, ImageTag: "nginx@sha256:73e957703f1266530db0aeac1fd6a3f87c1e59943f4c13eb340bb8521c6041d7", JobID: "some Job ID for nginx sha", ParentJobID: "some Parent Job ID for nginx sha", @@ -241,7 +241,7 @@ func Test_registryScanCommandToScanCommand(t *testing.T) { { wssc.RegistryScanCommand{ ImageScanParams: wssc.ImageScanParams{ - Credentialslist: []types.AuthConfig{}, + Credentialslist: []registry.AuthConfig{}, ImageTag: "nginx:latest", JobID: "some Job ID for nginx latest", ParentJobID: "some Parent Job ID for nginx latest", @@ -251,7 +251,7 @@ func Test_registryScanCommandToScanCommand(t *testing.T) { { wssc.RegistryScanCommand{ ImageScanParams: wssc.ImageScanParams{ - Credentialslist: []types.AuthConfig{}, + Credentialslist: []registry.AuthConfig{}, ImageTag: "docker.io/library/nginx:latest", JobID: "some Job ID for nginx latest with docker hub", ParentJobID: "some Parent Job ID for nginx latest with docker hub", @@ -261,7 +261,7 @@ func Test_registryScanCommandToScanCommand(t *testing.T) { { wssc.RegistryScanCommand{ ImageScanParams: wssc.ImageScanParams{ - Credentialslist: []types.AuthConfig{}, + Credentialslist: []registry.AuthConfig{}, ImageTag: "docker.io/library/nginx:latest@sha256:73e957703f1266530db0aeac1fd6a3f87c1e59943f4c13eb340bb8521c6041d7", JobID: "some Job ID for nginx latest with docker hub library", ParentJobID: "some Parent Job ID for nginx latest with docker hub library", diff --git a/core/domain/scan.go b/core/domain/scan.go index 2159f08..ca13e77 100644 --- a/core/domain/scan.go +++ b/core/domain/scan.go @@ -4,7 +4,7 @@ import ( "errors" "github.com/armosec/armoapi-go/identifiers" - "github.com/docker/docker/api/types" + "github.com/docker/docker/api/types/registry" ) const ( @@ -40,7 +40,7 @@ type ScanCommand struct { ContainerName string ParentJobID string ImageHash string - CredentialsList []types.AuthConfig + CredentialsList []registry.AuthConfig Session Session LastAction int } diff --git a/core/services/scan_test.go b/core/services/scan_test.go index 5d11d91..41473e6 100644 --- a/core/services/scan_test.go +++ b/core/services/scan_test.go @@ -7,7 +7,6 @@ import ( "os" "testing" - "github.com/docker/docker/api/types" "github.com/docker/docker/api/types/registry" "github.com/kubescape/kubevuln/adapters" v1 "github.com/kubescape/kubevuln/adapters/v1" @@ -97,7 +96,7 @@ func TestScanService_GenerateSBOM(t *testing.T) { ImageSlug: "imageSlug", ImageHash: "k8s.gcr.io/kube-proxy@sha256:c1b135231b5b1a6799346cd701da4b59e5b7ef8e694ec7b04fb23b8dbe144137", } - workload.CredentialsList = []types.AuthConfig{ + workload.CredentialsList = []registry.AuthConfig{ { Username: "test", Password: "test", @@ -496,7 +495,7 @@ func TestScanService_ScanRegistry(t *testing.T) { ImageSlug: "imageSlug", ImageTag: "k8s.gcr.io/kube-proxy:v1.24.3", } - workload.CredentialsList = []types.AuthConfig{ + workload.CredentialsList = []registry.AuthConfig{ { Username: "test", Password: "test", diff --git a/go.mod b/go.mod index eddc4ca..9a645c3 100644 --- a/go.mod +++ b/go.mod @@ -6,21 +6,21 @@ require ( github.com/adrg/xdg v0.4.0 github.com/akyoto/cache v1.0.6 github.com/anchore/clio v0.0.0-20231016125544-c98a83e1c7fc - github.com/anchore/grype v0.73.4 - github.com/anchore/stereoscope v0.0.0-20231117203853-3610f4ef3e83 - github.com/anchore/syft v0.98.0 + github.com/anchore/grype v0.74.2 + github.com/anchore/stereoscope v0.0.0-20240118133533-eb656fc71793 + github.com/anchore/syft v0.101.1 github.com/aquilax/truncate v1.0.0 - github.com/armosec/armoapi-go v0.0.294 + github.com/armosec/armoapi-go v0.0.308 github.com/armosec/utils-go v0.0.56 github.com/armosec/utils-k8s-go v0.0.23 github.com/distribution/distribution v2.8.2+incompatible - github.com/docker/docker v24.0.7+incompatible + github.com/docker/docker v25.0.0+incompatible github.com/eapache/go-resiliency v1.3.0 github.com/gammazero/workerpool v1.1.3 github.com/gin-gonic/gin v1.9.1 github.com/google/go-cmp v0.6.0 - github.com/google/go-containerregistry v0.16.1 - github.com/google/uuid v1.4.0 + github.com/google/go-containerregistry v0.18.0 + github.com/google/uuid v1.5.0 github.com/hashicorp/go-multierror v1.1.1 github.com/kinbiko/jsonassert v1.1.1 github.com/kubescape/backend v0.0.18-0.20231228073313-741ad2d0a7ad @@ -56,19 +56,19 @@ require ( github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/authorization/armauthorization/v2 v2.1.1 // indirect github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/containerservice/armcontainerservice/v2 v2.4.0 // indirect github.com/AzureAD/microsoft-authentication-library-for-go v1.0.0 // indirect - github.com/CycloneDX/cyclonedx-go v0.7.2 // indirect + github.com/CycloneDX/cyclonedx-go v0.8.0 // indirect github.com/DataDog/zstd v1.4.5 // indirect github.com/Masterminds/goutils v1.1.1 // indirect github.com/Masterminds/semver v1.5.0 // indirect github.com/Masterminds/semver/v3 v3.2.1 // indirect github.com/Masterminds/sprig/v3 v3.2.3 // indirect github.com/Microsoft/go-winio v0.6.1 // indirect - github.com/Microsoft/hcsshim v0.11.1 // indirect + github.com/Microsoft/hcsshim v0.11.4 // indirect github.com/OneOfOne/xxhash v1.2.8 // indirect github.com/ProtonMail/go-crypto v0.0.0-20230828082145-3c4c8a2d2371 // indirect github.com/acobaugh/osrelease v0.1.0 // indirect github.com/agnivade/levenshtein v1.1.1 // indirect - github.com/anchore/fangs v0.0.0-20231106214039-d96c8f312db4 // indirect + github.com/anchore/fangs v0.0.0-20231201140849-5075d28d6d8b // indirect github.com/anchore/go-logger v0.0.0-20230725134548-c21dafa1ec5a // indirect github.com/anchore/go-macholibre v0.0.0-20220308212642-53e6d0aaf6fb // indirect github.com/anchore/go-struct-converter v0.0.0-20221118182256-c68fdcfa2092 // indirect @@ -106,7 +106,7 @@ require ( github.com/chenzhuoyu/base64x v0.0.0-20221115062448-fe3a3abad311 // indirect github.com/cloudflare/circl v1.3.7 // indirect github.com/containerd/cgroups v1.1.0 // indirect - github.com/containerd/containerd v1.7.8 // indirect + github.com/containerd/containerd v1.7.11 // indirect github.com/containerd/continuity v0.4.2 // indirect github.com/containerd/fifo v1.1.0 // indirect github.com/containerd/log v0.1.0 // indirect @@ -133,6 +133,7 @@ require ( github.com/facebookincubator/nvdtools v0.1.5 // indirect github.com/fatih/color v1.15.0 // indirect github.com/felixge/fgprof v0.9.3 // indirect + github.com/felixge/httpsnoop v1.0.3 // indirect github.com/francoispqt/gojay v1.2.13 // indirect github.com/fsnotify/fsnotify v1.7.0 // indirect github.com/gabriel-vasile/mimetype v1.4.3 // indirect @@ -253,7 +254,7 @@ require ( github.com/rcrowley/go-metrics v0.0.0-20200313005456-10cdbea86bc0 // indirect github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec // indirect github.com/rivo/uniseg v0.2.0 // indirect - github.com/saferwall/pe v1.4.7 // indirect + github.com/saferwall/pe v1.4.8 // indirect github.com/sagikazarmark/locafero v0.3.0 // indirect github.com/sagikazarmark/slog-shim v0.1.0 // indirect github.com/saintfish/chardet v0.0.0-20230101081208-5e3ef4b5456d // indirect @@ -294,6 +295,7 @@ require ( github.com/yashtewari/glob-intersection v0.2.0 // indirect go.mozilla.org/pkcs7 v0.0.0-20210826202110-33d05740a352 // indirect go.opencensus.io v0.24.0 // indirect + go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.45.0 // indirect go.opentelemetry.io/contrib/instrumentation/runtime v0.44.0 // indirect go.opentelemetry.io/otel/exporters/otlp/otlpmetric v0.41.0 // indirect go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v0.41.0 // indirect @@ -307,14 +309,14 @@ require ( go.uber.org/multierr v1.11.0 // indirect go.uber.org/zap v1.26.0 // indirect golang.org/x/arch v0.3.0 // indirect - golang.org/x/crypto v0.17.0 // indirect + golang.org/x/crypto v0.18.0 // indirect golang.org/x/exp v0.0.0-20231006140011-7918f672742d // indirect golang.org/x/mod v0.14.0 // indirect - golang.org/x/net v0.19.0 // indirect + golang.org/x/net v0.20.0 // indirect golang.org/x/oauth2 v0.15.0 // indirect golang.org/x/sync v0.5.0 // indirect - golang.org/x/sys v0.15.0 // indirect - golang.org/x/term v0.15.0 // indirect + golang.org/x/sys v0.16.0 // indirect + golang.org/x/term v0.16.0 // indirect golang.org/x/text v0.14.0 // indirect golang.org/x/time v0.5.0 // indirect golang.org/x/tools v0.14.0 // indirect @@ -339,9 +341,11 @@ require ( modernc.org/libc v1.29.0 // indirect modernc.org/mathutil v1.6.0 // indirect modernc.org/memory v1.7.2 // indirect - modernc.org/sqlite v1.27.0 // indirect + modernc.org/sqlite v1.28.0 // indirect sigs.k8s.io/controller-runtime v0.15.0 // indirect sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd // indirect sigs.k8s.io/structured-merge-diff/v4 v4.4.1 // indirect sigs.k8s.io/yaml v1.3.0 // indirect ) + +replace github.com/anchore/stereoscope => github.com/matthyx/stereoscope v0.0.0-20240124133739-1f15a5d360d1 diff --git a/go.sum b/go.sum index 28f11b2..067acf7 100644 --- a/go.sum +++ b/go.sum @@ -226,8 +226,8 @@ github.com/BurntSushi/toml v0.3.1/go.mod h1:xHWCNGjB5oqiDr8zfno3MHue2Ht5sIBksp03 github.com/BurntSushi/toml v0.4.1/go.mod h1:CxXYINrC8qIiEnFrOxCa7Jy5BFHlXnUU2pbicEuybxQ= github.com/BurntSushi/toml v1.2.1/go.mod h1:CxXYINrC8qIiEnFrOxCa7Jy5BFHlXnUU2pbicEuybxQ= github.com/BurntSushi/xgb v0.0.0-20160522181843-27f122750802/go.mod h1:IVnqGOEym/WlBOVXweHU+Q+/VP0lqqI8lqeDx9IjBqo= -github.com/CycloneDX/cyclonedx-go v0.7.2 h1:kKQ0t1dPOlugSIYVOMiMtFqeXI2wp/f5DBIdfux8gnQ= -github.com/CycloneDX/cyclonedx-go v0.7.2/go.mod h1:K2bA+324+Og0X84fA8HhN2X066K7Bxz4rpMQ4ZhjtSk= +github.com/CycloneDX/cyclonedx-go v0.8.0 h1:FyWVj6x6hoJrui5uRQdYZcSievw3Z32Z88uYzG/0D6M= +github.com/CycloneDX/cyclonedx-go v0.8.0/go.mod h1:K2bA+324+Og0X84fA8HhN2X066K7Bxz4rpMQ4ZhjtSk= github.com/DataDog/datadog-go v3.2.0+incompatible/go.mod h1:LButxg5PwREeZtORoXG3tL4fMGNddJ+vMq1mwgfaqoQ= github.com/DataDog/zstd v1.4.5 h1:EndNeuB0l9syBZhut0wns3gV1hL8zX8LIu6ZiVHWLIQ= github.com/DataDog/zstd v1.4.5/go.mod h1:1jcaCB/ufaK+sKp1NBhlGmpz41jOoPQ35bpF36t7BBo= @@ -243,8 +243,8 @@ github.com/Masterminds/sprig/v3 v3.2.3/go.mod h1:rXcFaZ2zZbLRJv/xSysmlgIM1u11eBa github.com/Microsoft/go-winio v0.5.2/go.mod h1:WpS1mjBmmwHBEWmogvA2mj8546UReBk4v8QkMxJ6pZY= github.com/Microsoft/go-winio v0.6.1 h1:9/kr64B9VUZrLm5YYwbGtUJnMgqWVOdUAXu6Migciow= github.com/Microsoft/go-winio v0.6.1/go.mod h1:LRdKpFKfdobln8UmuiYcKPot9D2v6svN5+sAH+4kjUM= -github.com/Microsoft/hcsshim v0.11.1 h1:hJ3s7GbWlGK4YVV92sO88BQSyF4ZLVy7/awqOlPxFbA= -github.com/Microsoft/hcsshim v0.11.1/go.mod h1:nFJmaO4Zr5Y7eADdFOpYswDDlNVbvcIJJNJLECr5JQg= +github.com/Microsoft/hcsshim v0.11.4 h1:68vKo2VN8DE9AdN4tnkWnmdhqdbpUFM8OF3Airm7fz8= +github.com/Microsoft/hcsshim v0.11.4/go.mod h1:smjE4dvqPX9Zldna+t5FG3rnoHhaB7QYxPRqGcpAD9w= github.com/OneOfOne/xxhash v1.2.2/go.mod h1:HSdplMjZKSmBqAxg5vPj2TmRDmfkzw+cTzAElWljhcU= github.com/OneOfOne/xxhash v1.2.8 h1:31czK/TI9sNkxIKfaUfGlU47BAxQ0ztGgd9vPyqimf8= github.com/OneOfOne/xxhash v1.2.8/go.mod h1:eZbhyaAYD41SGSSsnmcpxVoRiQ/MPUTjUdIIOT9Um7Q= @@ -264,8 +264,8 @@ github.com/alecthomas/units v0.0.0-20151022065526-2efee857e7cf/go.mod h1:ybxpYRF github.com/alecthomas/units v0.0.0-20190717042225-c3de453c63f4/go.mod h1:ybxpYRFXyAe+OPACYpWeL0wqObRcbAqCMya13uyzqw0= github.com/anchore/clio v0.0.0-20231016125544-c98a83e1c7fc h1:A1KFO+zZZmbNlz1+WKsCF0RKVx6XRoxsAG3lrqH9hUQ= github.com/anchore/clio v0.0.0-20231016125544-c98a83e1c7fc/go.mod h1:QeWvNzxsrUNxcs6haQo3OtISfXUXW0qAuiG4EQiz0GU= -github.com/anchore/fangs v0.0.0-20231106214039-d96c8f312db4 h1:3jHs159SUguPb0YMH/mKN2+eKKme76r+6iwAZ1xlu7c= -github.com/anchore/fangs v0.0.0-20231106214039-d96c8f312db4/go.mod h1:yPsN3NUGhU5dcBtYBa1dMNzGu1yT5ZAfSjKq9DY4aV8= +github.com/anchore/fangs v0.0.0-20231201140849-5075d28d6d8b h1:L/djgY7ZbZ/38+wUtdkk398W3PIBJLkt1N8nU/7e47A= +github.com/anchore/fangs v0.0.0-20231201140849-5075d28d6d8b/go.mod h1:TLcE0RE5+8oIx2/NPWem/dq1DeaMoC+fPEH7hoSzPLo= github.com/anchore/go-logger v0.0.0-20230725134548-c21dafa1ec5a h1:nJ2G8zWKASyVClGVgG7sfM5mwoZlZ2zYpIzN2OhjWkw= github.com/anchore/go-logger v0.0.0-20230725134548-c21dafa1ec5a/go.mod h1:ubLFmlsv8/DFUQrZwY5syT5/8Er3ugSr4rDFwHsE3hg= github.com/anchore/go-macholibre v0.0.0-20220308212642-53e6d0aaf6fb h1:iDMnx6LIjtjZ46C0akqveX83WFzhpTD3eqOthawb5vU= @@ -276,14 +276,12 @@ github.com/anchore/go-testutils v0.0.0-20200925183923-d5f45b0d3c04 h1:VzprUTpc0v github.com/anchore/go-testutils v0.0.0-20200925183923-d5f45b0d3c04/go.mod h1:6dK64g27Qi1qGQZ67gFmBFvEHScy0/C8qhQhNe5B5pQ= github.com/anchore/go-version v1.2.2-0.20210903204242-51efa5b487c4 h1:rmZG77uXgE+o2gozGEBoUMpX27lsku+xrMwlmBZJtbg= github.com/anchore/go-version v1.2.2-0.20210903204242-51efa5b487c4/go.mod h1:Bkc+JYWjMCF8OyZ340IMSIi2Ebf3uwByOk6ho4wne1E= -github.com/anchore/grype v0.73.4 h1:j8HzRHbXLLZ6U2lmDDRFILd+VZtWbsfg/RYhatRZW9E= -github.com/anchore/grype v0.73.4/go.mod h1:5kJSAsHPoK47DsGZLHHArCfhHVGFGRkCfL2H87GdrdY= +github.com/anchore/grype v0.74.2 h1:njw0O7kWyiZ6OB7357D09XTS1yB8pETyr7zyG7M8898= +github.com/anchore/grype v0.74.2/go.mod h1:LY/xJs0E5hF7xoEH6AZUFf0a0Lb8RMMwHlcvHYB/VMQ= github.com/anchore/packageurl-go v0.1.1-0.20230104203445-02e0a6721501 h1:AV7qjwMcM4r8wFhJq3jLRztew3ywIyPTRapl2T1s9o8= github.com/anchore/packageurl-go v0.1.1-0.20230104203445-02e0a6721501/go.mod h1:Blo6OgJNiYF41ufcgHKkbCKF2MDOMlrqhXv/ij6ocR4= -github.com/anchore/stereoscope v0.0.0-20231117203853-3610f4ef3e83 h1:mxGIOmj+asEm8LUkPTG3/v0hi27WIlDVjiEVsUB9eqY= -github.com/anchore/stereoscope v0.0.0-20231117203853-3610f4ef3e83/go.mod h1:GKAnytSVV1hoqB5r5Gd9M5Ph3Rzqq0zPdEJesewjC2w= -github.com/anchore/syft v0.98.0 h1:mPDah48zZCFeSiGweqPd2C2++rOUh3/cAZylEy1VPwU= -github.com/anchore/syft v0.98.0/go.mod h1:FMj8zZFF3mP4IAuTxb6n14CZ6ouWXpI9RZqXpnkLK+Y= +github.com/anchore/syft v0.101.1 h1:PTh7XBdtXq3BYhuPz67rrC6AFPZxC1Rt8jgqv7Z75rA= +github.com/anchore/syft v0.101.1/go.mod h1:6rbrRWQN16TFENxXG1uFQOh9RCIp/UHJqPAJnHSKhjQ= github.com/andreyvit/diff v0.0.0-20170406064948-c7f18ee00883/go.mod h1:rCTlJbsFo29Kk6CurOXKm700vrz8f0KW0JNfpkRJY/8= github.com/andybalholm/brotli v1.0.1/go.mod h1:loMXtMfwqflxFJPmdbJO0a3KNoPuLBgiu3qAvBg8x/Y= github.com/andybalholm/brotli v1.0.4 h1:V7DdXeJtZscaqfNuAdSRuRFzuiKlHSC/Zh3zl9qY3JY= @@ -307,14 +305,16 @@ github.com/armon/go-radix v0.0.0-20180808171621-7fddfc383310/go.mod h1:ufUuZ+zHj github.com/armon/go-radix v1.0.0/go.mod h1:ufUuZ+zHj4x4TnLV4JWEpy2hxWSpsRywHrMgIH9cCH8= github.com/armon/go-socks5 v0.0.0-20160902184237-e75332964ef5 h1:0CwZNZbxp69SHPdPJAN/hZIm0C4OItdklCFmMRWYpio= github.com/armon/go-socks5 v0.0.0-20160902184237-e75332964ef5/go.mod h1:wHh0iHkYZB8zMSxRWpUBQtwG5a7fFgvEO+odwuTv2gs= -github.com/armosec/armoapi-go v0.0.294 h1:eCX3HymAJXaMNEwT7UQ4Noi8tiIuEsqID+nWK/kz5Ko= -github.com/armosec/armoapi-go v0.0.294/go.mod h1:CJT5iH5VF30zjdQYXaQhsAm8IEHtM1T87HcFVXeLX54= +github.com/armosec/armoapi-go v0.0.308 h1:Lbb6fYzlgEfH6+A1196DNhyydV+awBPQeXluU6Mye1c= +github.com/armosec/armoapi-go v0.0.308/go.mod h1:owUDyS9ME9jkpAkz8nZA7/CQj2m8gMx/uTyeal4LHAo= github.com/armosec/gojay v1.2.15 h1:sSB2vnAvacUNkw9nzUYZKcPzhJOyk6/5LK2JCNdmoZY= github.com/armosec/gojay v1.2.15/go.mod h1:vzVAaay2TWJAngOpxu8aqLbye9jMgoKleuAOK+xsOts= github.com/armosec/utils-go v0.0.56 h1:fxn+xH0hxfvyKOTTotl0s+UWPNPPajgHX0mrTW8qhFc= github.com/armosec/utils-go v0.0.56/go.mod h1:1HwWqN+gi13UoouZpv+6PXxTNPK1WjvHH/bx69P25X8= github.com/armosec/utils-k8s-go v0.0.23 h1:+nPV0NL2lYPwSFdXGymytNvrtMMgFjA+Ia5Efwg9ZiQ= github.com/armosec/utils-k8s-go v0.0.23/go.mod h1:CXgkHFgY8xlKN+wiQ8TyjwNj0+VSgj6NolB3itZ2lY8= +github.com/atotto/clipboard v0.1.4 h1:EH0zSVneZPSuFR11BlR9YppQTVDbh5+16AmcJi4g1z4= +github.com/atotto/clipboard v0.1.4/go.mod h1:ZY9tmq7sm5xIbd9bOK4onWV4S6X0u6GY7Vn0Yu86PYI= github.com/aws/aws-sdk-go v1.44.122/go.mod h1:y4AeaBuwd2Lk+GepC1E9v0qOiTws0MIWAX4oIKwKHZo= github.com/aws/aws-sdk-go v1.44.312 h1:llrElfzeqG/YOLFFKjg1xNpZCFJ2xraIi3PqSuP+95k= github.com/aws/aws-sdk-go v1.44.312/go.mod h1:aVsgQcEevwlmQ7qHE9I3h+dtQgpqhFB+i8Phjh7fkwI= @@ -351,6 +351,8 @@ github.com/aws/aws-sdk-go-v2/service/sts v1.20.1 h1:U7h9CPoyMfVoN5jUglB0LglCMP10 github.com/aws/aws-sdk-go-v2/service/sts v1.20.1/go.mod h1:BUHusg4cOA1TFGegj7x8/eoWrbdHzJfoMrXcbMQAG0k= github.com/aws/smithy-go v1.13.5 h1:hgz0X/DX0dGqTYpGALqXJoRKRj5oQ7150i5FdTePzO8= github.com/aws/smithy-go v1.13.5/go.mod h1:Tg+OJXh4MB2R/uN61Ko2f6hTZwB/ZYGOtib8J3gBHzA= +github.com/aymanbagabas/go-osc52/v2 v2.0.1 h1:HwpRHbFMcZLEVr42D4p7XBqjyuxQH5SMiErDT4WkJ2k= +github.com/aymanbagabas/go-osc52/v2 v2.0.1/go.mod h1:uYgXzlJ7ZpABp8OJ+exZzJJhRNQ2ASbcXHWsFqH8hp8= github.com/becheran/wildmatch-go v1.0.0 h1:mE3dGGkTmpKtT4Z+88t8RStG40yN9T+kFEGj2PZFSzA= github.com/becheran/wildmatch-go v1.0.0/go.mod h1:gbMvj0NtVdJ15Mg/mH9uxk2R1QCistMyU7d9KFzroX4= github.com/beorn7/perks v0.0.0-20180321164747-3a771d992973/go.mod h1:Dwedo/Wpr24TaqPxmxbtue+5NUziq4I4S80YR8gNf3Q= @@ -386,6 +388,12 @@ github.com/cespare/xxhash/v2 v2.1.1/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XL github.com/cespare/xxhash/v2 v2.1.2/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XLFGgcrjCOs= github.com/cespare/xxhash/v2 v2.2.0 h1:DC2CZ1Ep5Y4k3ZQ899DldepgrayRUGE6BBZ/cd9Cj44= github.com/cespare/xxhash/v2 v2.2.0/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XLFGgcrjCOs= +github.com/charmbracelet/bubbles v0.17.1 h1:0SIyjOnkrsfDo88YvPgAWvZMwXe26TP6drRvmkjyUu4= +github.com/charmbracelet/bubbles v0.17.1/go.mod h1:9HxZWlkCqz2PRwsCbYl7a3KXvGzFaDHpYbSYMJ+nE3o= +github.com/charmbracelet/bubbletea v0.25.0 h1:bAfwk7jRz7FKFl9RzlIULPkStffg5k6pNt5dywy4TcM= +github.com/charmbracelet/bubbletea v0.25.0/go.mod h1:EN3QDR1T5ZdWmdfDzYcqOCAps45+QIJbLOBxmVNWNNg= +github.com/charmbracelet/lipgloss v0.9.1 h1:PNyd3jvaJbg4jRHKWXnCj1akQm4rh8dbEzN1p/u1KWg= +github.com/charmbracelet/lipgloss v0.9.1/go.mod h1:1mPmG4cxScwUQALAAnacHaigiiHB9Pmr+v1VEawJl6I= github.com/checkpoint-restore/go-criu/v5 v5.3.0/go.mod h1:E/eQpaFtUKGOOSEBZgmKAcn+zUUwWxqcaKZlF54wK8E= github.com/cheggaaa/pb v1.0.27/go.mod h1:pQciLPpbU0oxA0h+VJYYLxO+XeDQb5pZijXscXHm81s= github.com/chenzhuoyu/base64x v0.0.0-20211019084208-fb5309c8db06/go.mod h1:DH46F32mSOjUmXrMHnKwZdA8wcEefY7UVqBKYGjpdQY= @@ -414,8 +422,10 @@ github.com/cncf/xds/go v0.0.0-20211130200136-a8f946100490/go.mod h1:eXthEFrGJvWH github.com/containerd/cgroups v1.1.0 h1:v8rEWFl6EoqHB+swVNjVoCJE8o3jX7e8nqBGPLaDFBM= github.com/containerd/cgroups v1.1.0/go.mod h1:6ppBcbh/NOOUU+dMKrykgaBnK9lCIBxHqJDGwsa1mIw= github.com/containerd/console v1.0.3/go.mod h1:7LqA/THxQ86k76b8c/EMSiaJ3h1eZkMkXar0TQ1gf3U= -github.com/containerd/containerd v1.7.8 h1:RkwgOW3AVUT3H/dyT0W03Dc8AzlpMG65lX48KftOFSM= -github.com/containerd/containerd v1.7.8/go.mod h1:L/Hn9qylJtUFT7cPeM0Sr3fATj+WjHwRQ0lyrYk3OPY= +github.com/containerd/console v1.0.4-0.20230313162750-1ae8d489ac81 h1:q2hJAaP1k2wIvVRd/hEHD7lacgqrCPS+k8g1MndzfWY= +github.com/containerd/console v1.0.4-0.20230313162750-1ae8d489ac81/go.mod h1:YynlIjWYF8myEu6sdkwKIvGQq+cOckRm6So2avqoYAk= +github.com/containerd/containerd v1.7.11 h1:lfGKw3eU35sjV0aG2eYZTiwFEY1pCzxdzicHP3SZILw= +github.com/containerd/containerd v1.7.11/go.mod h1:5UluHxHTX2rdvYuZ5OJTC5m/KJNs0Zs9wVoJm9zf5ZE= github.com/containerd/continuity v0.4.2 h1:v3y/4Yz5jwnvqPKJJ+7Wf93fyWoCB3F5EclWG023MDM= github.com/containerd/continuity v0.4.2/go.mod h1:F6PTNCKepoxEaXLQp3wDAjygEnImnZ/7o4JzpodfroQ= github.com/containerd/fifo v1.1.0 h1:4I2mbh5stb1u6ycIABlBw9zgtlK8viPI9QkQNRQEEmY= @@ -464,8 +474,8 @@ github.com/docker/cli v24.0.0+incompatible h1:0+1VshNwBQzQAx9lOl+OYCTCEAD8fKs/qe github.com/docker/cli v24.0.0+incompatible/go.mod h1:JLrzqnKDaYBop7H2jaqPtU4hHvMKP+vjCwu2uszcLI8= github.com/docker/distribution v2.8.3+incompatible h1:AtKxIZ36LoNK51+Z6RpzLpddBirtxJnzDrHLEKxTAYk= github.com/docker/distribution v2.8.3+incompatible/go.mod h1:J2gT2udsDAN96Uj4KfcMRqY0/ypR+oyYUYmja8H+y+w= -github.com/docker/docker v24.0.7+incompatible h1:Wo6l37AuwP3JaMnZa226lzVXGA3F9Ig1seQen0cKYlM= -github.com/docker/docker v24.0.7+incompatible/go.mod h1:eEKB0N0r5NX/I1kEveEz05bcu8tLC/8azJZsviup8Sk= +github.com/docker/docker v25.0.0+incompatible h1:g9b6wZTblhMgzOT2tspESstfw6ySZ9kdm94BLDKaZac= +github.com/docker/docker v25.0.0+incompatible/go.mod h1:eEKB0N0r5NX/I1kEveEz05bcu8tLC/8azJZsviup8Sk= github.com/docker/docker-credential-helpers v0.7.0 h1:xtCHsjxogADNZcdv1pKUHXryefjlVRqWqIhk/uXJp0A= github.com/docker/docker-credential-helpers v0.7.0/go.mod h1:rETQfLdHNT3foU5kuNkFR1R1V12OJRRO5lzt2D1b5X0= github.com/docker/go-connections v0.4.0 h1:El9xVISelRB7BuFusrZozjnkIM5YnzCViNKohAFqRJQ= @@ -676,8 +686,8 @@ github.com/google/go-cmp v0.5.8/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeN github.com/google/go-cmp v0.5.9/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY= github.com/google/go-cmp v0.6.0 h1:ofyhxvXcZhMsU5ulbFiLKl/XBFqE1GSq7atu8tAmTRI= github.com/google/go-cmp v0.6.0/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY= -github.com/google/go-containerregistry v0.16.1 h1:rUEt426sR6nyrL3gt+18ibRcvYpKYdpsa5ZW7MA08dQ= -github.com/google/go-containerregistry v0.16.1/go.mod h1:u0qB2l7mvtWVR5kNcbFIhFY1hLbf8eeGapA+vbFDCtQ= +github.com/google/go-containerregistry v0.18.0 h1:ShE7erKNPqRh5ue6Z9DUOlk04WsnFWPO6YGr3OxnfoQ= +github.com/google/go-containerregistry v0.18.0/go.mod h1:u0qB2l7mvtWVR5kNcbFIhFY1hLbf8eeGapA+vbFDCtQ= github.com/google/go-github v17.0.0+incompatible/go.mod h1:zLgOLi98H3fifZn+44m+umXrS52loVEgC2AApnigrVQ= github.com/google/go-querystring v1.0.0/go.mod h1:odCYkC5MyYFN7vkCjXpyrEuKhc/BUO6wN/zVPAxq5ck= github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg= @@ -715,8 +725,8 @@ github.com/google/s2a-go v0.1.7/go.mod h1:50CgR4k1jNlWBu4UfS4AcfhVe1r6pdZPygJ3R8 github.com/google/uuid v1.1.1/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo= github.com/google/uuid v1.1.2/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo= github.com/google/uuid v1.3.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo= -github.com/google/uuid v1.4.0 h1:MtMxsa51/r9yyhkyLsVeVt0B+BGQZzpQiTQ4eHZ8bc4= -github.com/google/uuid v1.4.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo= +github.com/google/uuid v1.5.0 h1:1p67kYwdtXjb0gL0BPiP1Av9wiZPo5A8z2cWkTZ+eyU= +github.com/google/uuid v1.5.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo= github.com/googleapis/enterprise-certificate-proxy v0.0.0-20220520183353-fd19c99a87aa/go.mod h1:17drOmN3MwGY7t0e+Ei9b45FFGA3fBs3x36SsCg1hq8= github.com/googleapis/enterprise-certificate-proxy v0.1.0/go.mod h1:17drOmN3MwGY7t0e+Ei9b45FFGA3fBs3x36SsCg1hq8= github.com/googleapis/enterprise-certificate-proxy v0.2.0/go.mod h1:8C0jb7/mgJe/9KK8Lm7X9ctZC2t60YyIpYEI16jx0Qg= @@ -885,6 +895,8 @@ github.com/leodido/go-urn v1.2.4 h1:XlAE/cm/ms7TE/VMVoduSpNBoyc2dOxHs5MZSwAN63Q= github.com/leodido/go-urn v1.2.4/go.mod h1:7ZrI8mTSeBSHl/UaRyKQW1qZeMgak41ANeCNaVckg+4= github.com/logrusorgru/aurora v0.0.0-20200102142835-e9ef32dff381 h1:bqDmpDG49ZRnB5PcgP0RXtQvnMSgIF14M7CBd2shtXs= github.com/logrusorgru/aurora v0.0.0-20200102142835-e9ef32dff381/go.mod h1:7rIyQOR62GCctdiQpZ/zOJlFyk6y+94wXzv6RNZgaR4= +github.com/lucasb-eyer/go-colorful v1.2.0 h1:1nnpGOrhyZZuNyfu1QjKiUICQ74+3FNCN69Aj6K7nkY= +github.com/lucasb-eyer/go-colorful v1.2.0/go.mod h1:R4dSotOR9KMtayYi1e77YzuveK+i7ruzyGqttikkLy0= github.com/lunixbochs/vtclean v1.0.0/go.mod h1:pHhQNgMf3btfWnGBVipUOjRYhoOsdGqdm/+2c2E2WMI= github.com/lyft/protoc-gen-star v0.5.3/go.mod h1:V0xaHgaf5oCCqmcxYcWiDfTiKsZsRc87/1qhoTACD8w= github.com/magiconair/properties v1.8.5/go.mod h1:y3VJvCyxH9uVvJTWEGAELF3aiYNyPKd5NZ3oSwXrF60= @@ -895,6 +907,8 @@ github.com/mailru/easyjson v0.7.7 h1:UGYAvKxe3sBsEDzO8ZeWOSlIQfWFlxbzLZe7hwFURr0 github.com/mailru/easyjson v0.7.7/go.mod h1:xzfreul335JAWq5oZzymOObrkdz5UnU4kGfJJLY9Nlc= github.com/masahiro331/go-mvn-version v0.0.0-20210429150710-d3157d602a08 h1:AevUBW4cc99rAF8q8vmddIP8qd/0J5s/UyltGbp66dg= github.com/masahiro331/go-mvn-version v0.0.0-20210429150710-d3157d602a08/go.mod h1:JOkBRrE1HvgTyjk6diFtNGgr8XJMtIfiBzkL5krqzVk= +github.com/matthyx/stereoscope v0.0.0-20240124133739-1f15a5d360d1 h1:vEeX5GcIo08jmscprDbtz7xifvkzU86J2map4JC6tvM= +github.com/matthyx/stereoscope v0.0.0-20240124133739-1f15a5d360d1/go.mod h1:IylG7ofLoUKHwS1XDF6rPhOmaE3GgpAgsMdvvYfooTU= github.com/mattn/go-colorable v0.0.9/go.mod h1:9vuHe8Xs5qXnSaW/c/ABM9alt+Vo+STaOChaDxuIBZU= github.com/mattn/go-colorable v0.1.4/go.mod h1:U0ppj6V5qS13XJ6of8GYAs25YV2eR4EVcfRqFIhoBtE= github.com/mattn/go-colorable v0.1.6/go.mod h1:u6P/XSegPjTcexA+o6vUJrdnUu04hMope9wVRipJSqc= @@ -912,6 +926,8 @@ github.com/mattn/go-isatty v0.0.14/go.mod h1:7GGIvUiUoEMVVmxf/4nioHXj79iQHKdU27k github.com/mattn/go-isatty v0.0.16/go.mod h1:kYGgaQfpe5nmfYZH+SKPsOc2e4SrIfOl2e/yFXSvRLM= github.com/mattn/go-isatty v0.0.19 h1:JITubQf0MOLdlGRuRq+jtsDlekdYPia9ZFsB8h/APPA= github.com/mattn/go-isatty v0.0.19/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y= +github.com/mattn/go-localereader v0.0.2-0.20220822084749-2491eb6c1c75 h1:P8UmIzZMYDR+NGImiFvErt6VWfIRPuGM+vyjiEdkmIw= +github.com/mattn/go-localereader v0.0.2-0.20220822084749-2491eb6c1c75/go.mod h1:8fBrzywKY7BI3czFoHkuzRoWE9C+EiG4R1k4Cjx5p88= github.com/mattn/go-runewidth v0.0.4/go.mod h1:LwmH8dsx7+W8Uxz3IHJYH5QSwggIsqBzpuz5H//U1FU= github.com/mattn/go-runewidth v0.0.9/go.mod h1:H031xJmbD/WCDINGzjvQ9THkh0rPKHF+m2gUSrubnMI= github.com/mattn/go-runewidth v0.0.15 h1:UNAjwbU9l54TA3KzvqLGxwWjHmMgBUVhBiTjelZgg3U= @@ -971,6 +987,14 @@ github.com/modern-go/reflect2 v1.0.2/go.mod h1:yWuevngMOJpCy52FWWMvUC8ws7m/LJsjY github.com/morikuni/aec v1.0.0 h1:nP9CBfwrvYnBRgY6qfDQkygYDmYwOilePFkwzv4dU8A= github.com/morikuni/aec v1.0.0/go.mod h1:BbKIizmSmc5MMPqRYbxO4ZU0S0+P200+tUnFx7PXmsc= github.com/mrunalp/fileutils v0.5.0/go.mod h1:M1WthSahJixYnrXQl/DFQuteStB1weuxD2QJNHXfbSQ= +github.com/muesli/ansi v0.0.0-20211031195517-c9f0611b6c70 h1:kMlmsLSbjkikxQJ1IPwaM+7LJ9ltFu/fi8CRzvSnQmA= +github.com/muesli/ansi v0.0.0-20211031195517-c9f0611b6c70/go.mod h1:fQuZ0gauxyBcmsdE3ZT4NasjaRdxmbCS0jRHsrWu3Ho= +github.com/muesli/cancelreader v0.2.2 h1:3I4Kt4BQjOR54NavqnDogx/MIoWBFa0StPA8ELUXHmA= +github.com/muesli/cancelreader v0.2.2/go.mod h1:3XuTXfFS2VjM+HTLZY9Ak0l6eUKfijIfMUZ4EgX0QYo= +github.com/muesli/reflow v0.3.0 h1:IFsN6K9NfGtjeggFP+68I4chLZV2yIKsXJFNZ+eWh6s= +github.com/muesli/reflow v0.3.0/go.mod h1:pbwTDkVPibjO2kyvBQRBxTWEEGDGq0FlB1BIKtnHY/8= +github.com/muesli/termenv v0.15.2 h1:GohcuySI0QmI3wN8Ok9PtKGkgkFIk7y6Vpb5PvrY+Wo= +github.com/muesli/termenv v0.15.2/go.mod h1:Epx+iuz8sNs7mNKhxzH4fWXGNpZwUaJKRS1noLXviQ8= github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 h1:C3w9PqII01/Oq1c1nUAm88MOHcQC9l5mIlSMApZMrHA= github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822/go.mod h1:+n7T8mK8HuQTcFwEeznm/DIxMOiR9yIdICNftLE1DvQ= github.com/mwitkow/go-conntrack v0.0.0-20161129095857-cc309e4a2223/go.mod h1:qRWi+5nqEBWmkhHvq77mSJWrCKwh8bxhgT7d/eI7P4U= @@ -1074,13 +1098,15 @@ github.com/russross/blackfriday v1.5.2/go.mod h1:JO/DiYxRf+HjHt06OyowR9PTA263kcR github.com/russross/blackfriday/v2 v2.0.1/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM= github.com/russross/blackfriday/v2 v2.1.0/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM= github.com/ryanuber/columnize v0.0.0-20160712163229-9b3edd62028f/go.mod h1:sm1tb6uqfes/u+d4ooFouqFdy9/2g9QGwK3SQygK0Ts= -github.com/saferwall/pe v1.4.7 h1:A+G3DxX49paJ5OsxBfHKskhyDtmTjShlDmBd81IsHlQ= -github.com/saferwall/pe v1.4.7/go.mod h1:SNzv3cdgk8SBI0UwHfyTcdjawfdnN+nbydnEL7GZ25s= +github.com/saferwall/pe v1.4.8 h1:ey/L8FGBMrJ1Xh+Rltj1MAFPZ4LOQYGJqNa5B1Na6B0= +github.com/saferwall/pe v1.4.8/go.mod h1:SNzv3cdgk8SBI0UwHfyTcdjawfdnN+nbydnEL7GZ25s= github.com/sagikazarmark/crypt v0.3.0/go.mod h1:uD/D+6UF4SrIR1uGEv7bBNkNqLGqUr43MRiaGWX1Nig= github.com/sagikazarmark/locafero v0.3.0 h1:zT7VEGWC2DTflmccN/5T1etyKvxSxpHsjb9cJvm4SvQ= github.com/sagikazarmark/locafero v0.3.0/go.mod h1:w+v7UsPNFwzF1cHuOajOOzoq4U7v/ig1mpRjqV+Bu1U= github.com/sagikazarmark/slog-shim v0.1.0 h1:diDBnUNK9N/354PgrxMywXnAwEr1QZcOr6gto+ugjYE= github.com/sagikazarmark/slog-shim v0.1.0/go.mod h1:SrcSrq8aKtyuqEI1uvTDTK1arOWRIczQRv+GVI1AkeQ= +github.com/sahilm/fuzzy v0.1.1-0.20230530133925-c48e322e2a8f h1:MvTmaQdww/z0Q4wrYjDSCcZ78NoftLQyHBSLW/Cx79Y= +github.com/sahilm/fuzzy v0.1.1-0.20230530133925-c48e322e2a8f/go.mod h1:VFvziUEIMCrT6A6tw2RFIXPXXmzXbOsSHF0DOI8ZK9Y= github.com/saintfish/chardet v0.0.0-20230101081208-5e3ef4b5456d h1:hrujxIzL1woJ7AwssoOcM/tq5JjjG2yYOc8odClEiXA= github.com/saintfish/chardet v0.0.0-20230101081208-5e3ef4b5456d/go.mod h1:uugorj2VCxiV1x+LzaIdVa9b4S4qGAcH6cbhh4qVxOU= github.com/sanity-io/litter v1.5.5 h1:iE+sBxPBzoK6uaEP5Lt3fHNgpKcHXc/A2HGETy0uJQo= @@ -1261,8 +1287,8 @@ go.opencensus.io v0.24.0 h1:y73uSU6J157QMP2kn2r30vwW1A2W2WFwSCGnAVxeaD0= go.opencensus.io v0.24.0/go.mod h1:vNK8G9p7aAivkbmorf4v+7Hgx+Zs0yY+0fOtgBfjQKo= go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin v0.44.0 h1:vSuzwGXaJ3nm8a6JGeRc2V28qP1NB4iRTcobhU/z3Fs= go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin v0.44.0/go.mod h1:+H7htXVkUjPfQ45PNlcbXUmMXUr16uXDvuR+7TAGfVQ= -go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.44.0 h1:KfYpVmrjI7JuToy5k8XV3nkapjWx48k4E4JOtVstzQI= -go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.44.0/go.mod h1:SeQhzAEccGVZVEy7aH87Nh0km+utSpo1pTv6eMMop48= +go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.45.0 h1:x8Z78aZx8cOF0+Kkazoc7lwUNMGy0LrzEMxTm4BbTxg= +go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.45.0/go.mod h1:62CPTSry9QZtOaSsE3tOzhx6LzDhHnXJ6xHeMNNiM6Q= go.opentelemetry.io/contrib/instrumentation/runtime v0.44.0 h1:TXu20nL4yYfJlQeqG/D3Ia6b0p2HZmLfJto9hqJTQ/c= go.opentelemetry.io/contrib/instrumentation/runtime v0.44.0/go.mod h1:tQ5gBnfjndV1su3+DiLuu6rnd9hBBzg4rkRILnjSNFg= go.opentelemetry.io/contrib/propagators/b3 v1.19.0 h1:ulz44cpm6V5oAeg5Aw9HyqGFMS6XM7untlMEhD7YzzA= @@ -1277,6 +1303,8 @@ go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.20.0 h1:DeFD0VgTZ+Cj6hxravY go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.20.0/go.mod h1:GijYcYmNpX1KazD5JmWGsi4P7dDTTTnfv1UbGn84MnU= go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.20.0 h1:gvmNvqrPYovvyRmCSygkUDyL8lC5Tl845MLEwqpxhEU= go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.20.0/go.mod h1:vNUq47TGFioo+ffTSnKNdob241vePmtNZnAODKapKd0= +go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.19.0 h1:IeMeyr1aBvBiPVYihXIaeIZba6b8E1bYp7lbdxK8CQg= +go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.19.0/go.mod h1:oVdCUtjq9MK9BlS7TtucsQwUcXcymNiEDjgDD2jMtZU= go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.18.0 h1:hSWWvDjXHVLq9DkmB+77fl8v7+t+yYiS+eNkiplDK54= go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.18.0/go.mod h1:zG7KQql1WjZCaUJd+L/ReSYx4bjbYJxg5ws9ws+mYes= go.opentelemetry.io/otel/metric v1.20.0 h1:ZlrO8Hu9+GAhnepmRGhSU7/VkpjrNowxRN9GyKR4wzA= @@ -1323,8 +1351,8 @@ golang.org/x/crypto v0.0.0-20220622213112-05595931fe9d/go.mod h1:IxCIyHEi3zRg3s0 golang.org/x/crypto v0.3.0/go.mod h1:hebNnKkNXi2UzZN1eVRvBB7co0a+JxK6XbPiWVs/3J4= golang.org/x/crypto v0.3.1-0.20221117191849-2c476679df9a/go.mod h1:hebNnKkNXi2UzZN1eVRvBB7co0a+JxK6XbPiWVs/3J4= golang.org/x/crypto v0.7.0/go.mod h1:pYwdfH91IfpZVANVyUOhSIPZaFoJGxTFbZhFTx+dXZU= -golang.org/x/crypto v0.17.0 h1:r8bRNjWL3GshPW3gkd+RpvzWrZAwPS49OmTGZ/uhM4k= -golang.org/x/crypto v0.17.0/go.mod h1:gCAAfMLgwOJRpTjQ2zCCt2OcSfYMTeZVSRtQlPC7Nq4= +golang.org/x/crypto v0.18.0 h1:PGVlW0xEltQnzFZ55hkuX5+KLyrMYhHld1YHO4AKcdc= +golang.org/x/crypto v0.18.0/go.mod h1:R0j02AL6hcrfOiy9T4ZYp/rcWeMxM3L6QYxlOuEG1mg= golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA= golang.org/x/exp v0.0.0-20190306152737-a1d7652674e8/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA= golang.org/x/exp v0.0.0-20190510132918-efd6b22b2522/go.mod h1:ZjyILWgesfNpC6sMxTJOJm9Kp84zZh5NQWvqDGG3Qr8= @@ -1431,8 +1459,8 @@ golang.org/x/net v0.1.0/go.mod h1:Cx3nUiGt4eDBEyega/BKRp+/AlGL8hYe7U9odMt2Cco= golang.org/x/net v0.2.0/go.mod h1:KqCZLdyyvdV855qA2rE3GC2aiw5xGR5TEjj8smXukLY= golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs= golang.org/x/net v0.8.0/go.mod h1:QVkue5JL9kW//ek3r6jTKnTFis1tRmNAW2P1shuFdJc= -golang.org/x/net v0.19.0 h1:zTwKpTd2XuCqf8huc7Fo2iSy+4RHPd10s4KzeTnVr1c= -golang.org/x/net v0.19.0/go.mod h1:CfAk/cbD4CthTvqiEl8NpboMuiuOYsAr/7NOjZJtv1U= +golang.org/x/net v0.20.0 h1:aCL9BSgETF1k+blQaYUBx9hJ9LOGP3gAVemcZlf1Kpo= +golang.org/x/net v0.20.0/go.mod h1:z8BVo6PvndSri0LbOE3hAn0apkU+1YvI6E70E9jsnvY= golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U= golang.org/x/oauth2 v0.0.0-20181017192945-9dcd33a902f4/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U= golang.org/x/oauth2 v0.0.0-20181203162652-d668ce993890/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U= @@ -1580,8 +1608,8 @@ golang.org/x/sys v0.2.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.3.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= -golang.org/x/sys v0.15.0 h1:h48lPFYpsTvQJZF4EKyI4aLHaev3CxivZmv7yZig9pc= -golang.org/x/sys v0.15.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA= +golang.org/x/sys v0.16.0 h1:xWw16ngr6ZMtmxDyKyIgsE93KNKz5HKmMa3b8ALHidU= +golang.org/x/sys v0.16.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA= golang.org/x/term v0.0.0-20201117132131-f5c789dd3221/go.mod h1:Nr5EML6q2oocZ2LXRh80K7BxOlk5/8JxuGnuhpl+muw= golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo= golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8= @@ -1589,8 +1617,8 @@ golang.org/x/term v0.1.0/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8= golang.org/x/term v0.2.0/go.mod h1:TVmDHMZPmdnySmBfhjOoOdhjzdE1h4u1VwSiw2l1Nuc= golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k= golang.org/x/term v0.6.0/go.mod h1:m6U89DPEgQRMq3DNkDClhWw02AUbt2daBVO4cn4Hv9U= -golang.org/x/term v0.15.0 h1:y/Oo/a/q3IXu26lQgl04j/gjuBDOBlx7X6Om1j2CPW4= -golang.org/x/term v0.15.0/go.mod h1:BDl952bC7+uMoWR75FIrCDx79TPU9oHkTZ9yRbYOrX0= +golang.org/x/term v0.16.0 h1:m+B6fahuftsE9qjo0VWp2FW0mB3MTJvR0BaMQrq0pmE= +golang.org/x/term v0.16.0/go.mod h1:yn7UURbUtPyrVJPGPq404EukNFxcm/foM+bV/bfcDsY= golang.org/x/text v0.0.0-20170915032832-14c0d48ead0c/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= golang.org/x/text v0.3.1-0.20180807135948-17ff2d5776d2/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= @@ -1981,8 +2009,8 @@ modernc.org/mathutil v1.6.0 h1:fRe9+AmYlaej+64JsEEhoWuAYBkOtQiMEU7n/XgfYi4= modernc.org/mathutil v1.6.0/go.mod h1:Ui5Q9q1TR2gFm0AQRqQUaBWFLAhQpCwNcuhBOSedWPo= modernc.org/memory v1.7.2 h1:Klh90S215mmH8c9gO98QxQFsY+W451E8AnzjoE2ee1E= modernc.org/memory v1.7.2/go.mod h1:NO4NVCQy0N7ln+T9ngWqOQfi7ley4vpwvARR+Hjw95E= -modernc.org/sqlite v1.27.0 h1:MpKAHoyYB7xqcwnUwkuD+npwEa0fojF0B5QRbN+auJ8= -modernc.org/sqlite v1.27.0/go.mod h1:Qxpazz0zH8Z1xCFyi5GSL3FzbtZ3fvbjmywNogldEW0= +modernc.org/sqlite v1.28.0 h1:Zx+LyDDmXczNnEQdvPuEfcFVA2ZPyaD7UCZDjef3BHQ= +modernc.org/sqlite v1.28.0/go.mod h1:Qxpazz0zH8Z1xCFyi5GSL3FzbtZ3fvbjmywNogldEW0= rsc.io/binaryregexp v0.2.0/go.mod h1:qTv7/COck+e2FymRvadv62gMdZztPaShugOCi3I+8D8= rsc.io/pdf v0.1.1/go.mod h1:n8OzWcQ6Sp37PL01nO98y4iUCRdTGarVfzxY20ICaU4= rsc.io/quote/v3 v3.1.0/go.mod h1:yEA65RcK8LyAZtP9Kv3t0HmxON59tX3rD+tICJqUlj0= diff --git a/pkg/secretdetector/detector.go b/pkg/secretdetector/detector.go new file mode 100644 index 0000000..588764b --- /dev/null +++ b/pkg/secretdetector/detector.go @@ -0,0 +1,123 @@ +package secretdetector + +import ( + "fmt" + stereoscopeFile "github.com/anchore/stereoscope/pkg/file" + syftFile "github.com/anchore/syft/syft/file" +) + +const ( + MAX_READ_SIZE = 8 * 1024 * 1024 +) + +// SearchDirectoryForSecrets searches a directory for files containing secrets +func SearchDirectoryForSecrets(resolver syftFile.Resolver, config *FileDetectionConfig) ([]FileDetectionResult, error) { + var results []FileDetectionResult + + detectionRules, err := CompileDefaultRegexpRules() + if err != nil { + return nil, err + } + + // Iterate over files in directory and its subdirectories + for location := range resolver.AllLocations() { + resolvedLocations, err := resolver.FilesByPath(location.RealPath) + if err != nil { + continue + } + for _, resolvedLocation := range resolvedLocations { + metadata, err := resolver.FileMetadataByLocation(resolvedLocation) + if err != nil { + continue + } + if metadata.Type != stereoscopeFile.TypeRegular { + continue + } + + fmt.Printf("Scanning file %s\n", resolvedLocation.Path()) + + // For each file, check if it contains a secret + detectionResult, err := SearchFileForSecrets(resolver, resolvedLocation, metadata, config, detectionRules) + if err != nil { + results = append(results, FileDetectionResult{ + Path: resolvedLocation.Path(), + Err: err, + }) + } + + // If it does, add it to the results + if detectionResult != nil { + results = append(results, *detectionResult) + } + } + } + + // Return the results + return results, nil +} + +func SearchFileForSecrets(resolver syftFile.Resolver, location syftFile.Location, fileInfo syftFile.Metadata, config *FileDetectionConfig, detectors []CompiledRegexpDetectionRule) (*FileDetectionResult, error) { + + if config != nil && config.SizeThreshold > 0 && fileInfo.Size() > config.SizeThreshold { + return nil, nil + } + + file, err := resolver.FileContentsByLocation(location) + if err != nil { + return nil, err + } + defer file.Close() + + result := &FileDetectionResult{ + Path: location.Path(), + Err: nil, + } + + // Read the file contents but no more than 8MB of data at a time + for { + data := make([]byte, MAX_READ_SIZE) + count, err := file.Read(data) + if err != nil { + break + } + + if config != nil && config.SkipBinaryFiles { + for _, b := range data[:count] { + if b == 0 { + return nil, nil + } + } + } + + for _, detector := range detectors { + if foundIndices := detector.Regexp.FindAllIndex(data[:count], -1); foundIndices != nil { + for _, foundIndex := range foundIndices { + last_ndx := 0 + for i, foundSubIndex := range foundIndex { + if i%2 == 0 { + last_ndx = foundSubIndex + } else { + quaterLen := (foundSubIndex - last_ndx) / 8 + result.Results = append(result.Results, SecretDetectionResult{ + Type: detector.Rule.Description, + Value: fmt.Sprintf("%s ... %s", data[last_ndx:last_ndx+quaterLen], data[foundSubIndex-quaterLen:foundSubIndex]), + Line: 0, + Index: last_ndx, + Length: foundSubIndex - last_ndx, + }) + } + } + } + } + } + + if count < MAX_READ_SIZE { + break + } + } + + if len(result.Results) == 0 { + return nil, nil + } + return result, nil +} diff --git a/pkg/secretdetector/rules.go b/pkg/secretdetector/rules.go new file mode 100644 index 0000000..a370519 --- /dev/null +++ b/pkg/secretdetector/rules.go @@ -0,0 +1,202 @@ +package secretdetector + +import "regexp" + +type RegexpDetectionRule struct { + // The name of the rule + Name string `json:"name"` + // The severity of the rule + Severity string `json:"severity"` + // Description of the rule + Description string `json:"description"` + // The regular expression to match + Regexp string `json:"regexp"` +} + +type CompiledRegexpDetectionRule struct { + Rule RegexpDetectionRule + // The compiled regular expression + Regexp *regexp.Regexp +} + +var DefaultRegexpRules = []RegexpDetectionRule{ + { + Name: "aws-access-key-id", + Severity: "HIGH", + Description: "AWS Access Key ID", + Regexp: "[\"']?(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}[\"']?(\\s+|$)", + }, + { + Name: "aws-secret-access-key", + Severity: "CRITICAL", + Description: "AWS Secret Access Key", + Regexp: "(?i)(^|\\s+)[\"']?(aws)?_?(sec(ret)?)?_?(access)?_?key[\"']?\\s*(:|=>|=)?\\s*[\"']?[A-Za-z0-9\\/\\+=]{40}[\"']?(\\s+|$)", + }, + { + Name: "github-pat", + Severity: "CRITICAL", + Description: "GitHub Personal Access Token", + Regexp: "ghp_[0-9a-zA-Z]{36}", + }, + { + Name: "github-oauth", + Severity: "CRITICAL", + Description: "GitHub OAuth Access Token", + Regexp: "gho_[0-9a-zA-Z]{36}", + }, + { + Name: "github-app-token", + Severity: "CRITICAL", + Description: "GitHub App Token", + Regexp: "(ghu|ghs)_[0-9a-zA-Z]{36}", + }, + { + Name: "github-refresh-token", + Severity: "CRITICAL", + Description: "GitHub Refresh Token", + Regexp: "ghr_[0-9a-zA-Z]{76}", + }, + { + Name: "github-fine-grained-pat", + Severity: "CRITICAL", + Description: "GitHub Fine-grained personal access tokens", + Regexp: "github_pat_[a-zA-Z0-9]{22}_[a-zA-Z0-9]{59}", + }, + { + Name: "gitlab-pat", + Severity: "CRITICAL", + Description: "GitLab Personal Access Token", + Regexp: "glpat-[0-9a-zA-Z\\-\\_]{20}", + }, + { + Name: "private-key", + Severity: "CRITICAL", + Description: "PEM Private Key", + Regexp: "(?i)-----\\s*?BEGIN[ A-Z0-9_-]*?PRIVATE KEY( BLOCK)?\\s*?-----[\\s]*?[\\sA-Za-z0-9=+/\\\\\\r\\n]+[\\s]*?-----\\s*?END[ A-Z0-9_-]*? PRIVATE KEY( BLOCK)?\\s*?-----", + }, + { + Name: "shopify-token", + Severity: "HIGH", + Description: "Shopify token", + Regexp: "shp(ss|at|ca|pa)_[a-fA-F0-9]{32}", + }, + { + Name: "slack-access-token", + Severity: "HIGH", + Description: "Slack token", + Regexp: "xox[baprs]-([0-9a-zA-Z]{10,48})", + }, + { + Name: "stripe-secret-token", + Severity: "CRITICAL", + Description: "Stripe Secret Key", + Regexp: "(?i)sk_(test|live)_[0-9a-z]{10,32}", + }, + { + Name: "pypi-upload-token", + Severity: "HIGH", + Description: "PyPI upload token", + Regexp: "pypi-AgEIcHlwaS5vcmc[A-Za-z0-9\\-_]{50,1000}", + }, + { + Name: "gcp-service-account", + Severity: "CRITICAL", + Description: "Google (GCP) Service-account", + Regexp: "\\\"type\\\": \\\"service_account\\\"", + }, + { + Name: "heroku-api-key", + Severity: "HIGH", + Description: "Heroku API Key", + Regexp: " (?i)(?Pheroku[a-z0-9_ .\\-,]{0,25})(=|>|:=|\\|\\|:|<=|=>|:).{0,5}['\\\"][0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}['\\\"]", + }, + { + Name: "alibaba-access-key-id", + Severity: "HIGH", + Description: "Alibaba AccessKey ID", + Regexp: "([^0-9A-Za-z]|^)(LTAI)(?i)[a-z0-9]{20}([^0-9A-Za-z]|$)", + }, + { + Name: "alibaba-secret-key", + Severity: "HIGH", + Description: "Alibaba Secret Key", + Regexp: "(?i)(?Palibaba[a-z0-9_ .\\-,]{0,25})(=|>|:=|\\|\\|:|<=|=>|:).{0,5}['\\\"][a-z0-9]{30}['\\\"]", + }, + { + Name: "atlassian-api-token", + Severity: "HIGH", + Description: "Atlassian API token", + Regexp: "(?i)(?Patlassian[a-z0-9_ .\\-,]{0,25})(=|>|:=|\\|\\|:|<=|=>|:).{0,5}['\\\"][a-z0-9]{24}['\\\"]", + }, + { + Name: "bitbucket-client-id", + Severity: "HIGH", + Description: "Bitbucket client ID", + Regexp: "(?i)(?Pbitbucket[a-z0-9_ .\\-,]{0,25})(=|>|:=|\\|\\|:|<=|=>|:).{0,5}['\\\"][a-z0-9]{32}['\\\"]", + }, + { + Name: "bitbucket-client-secret", + Severity: "HIGH", + Description: "Bitbucket client secret", + Regexp: "(?i)(?Pbitbucket[a-z0-9_ .\\-,]{0,25})(=|>|:=|\\|\\|:|<=|=>|:).{0,5}['\\\"][a-z0-9_\\-]{64}['\\\"]", + }, + { + Name: "dropbox-api-secret", + Severity: "HIGH", + Description: "Dropbox API secret/key", + Regexp: "(?i)(dropbox[a-z0-9_ .\\-,]{0,25})(=|>|:=|\\|\\|:|<=|=>|:).{0,5}['\\\"]([a-z0-9]{15})['\\\"]", + }, + { + Name: "dropbox-short-lived-api-token", + Severity: "HIGH", + Description: "Dropbox short lived API token", + Regexp: "(?i)(dropbox[a-z0-9_ .\\-,]{0,25})(=|>|:=|\\|\\|:|<=|=>|:).{0,5}['\\\"](sl\\.[a-z0-9\\-=_]{135})['\\\"]", + }, + { + Name: "dropbox-long-lived-api-token", + Severity: "HIGH", + Description: "Dropbox long lived API token", + Regexp: "(?i)(dropbox[a-z0-9_ .\\-,]{0,25})(=|>|:=|\\|\\|:|<=|=>|:).{0,5}['\\\"][a-z0-9]{11}(AAAAAAAAAA)[a-z0-9\\-_=]{43}['\\\"]", + }, + { + Name: "npm-access-token", + Severity: "CRITICAL", + Description: "npm access token", + Regexp: "['\\\"](npm_(?i)[a-z0-9]{36})['\\\"]", + }, + { + Name: "pulumi-api-token", + Severity: "HIGH", + Description: "Pulumi API token", + Regexp: "pul-[a-f0-9]{40}", + }, + { + Name: "dockerconfig-secret", + Severity: "HIGH", + Description: "Dockerconfig secret exposed", + Regexp: "(?i)(\\.(dockerconfigjson|dockercfg):\\s*\\|*\\s*(ey|ew)+[A-Za-z0-9\\/\\+=]+)", + }, +} + +func CompileDefaultRegexpRules() ([]CompiledRegexpDetectionRule, error) { + var compiledRules []CompiledRegexpDetectionRule + for _, rule := range DefaultRegexpRules { + compiledRule, err := CompileRegexpDetectionRule(rule) + if err != nil { + return nil, err + } + compiledRules = append(compiledRules, compiledRule) + } + return compiledRules, nil +} + +func CompileRegexpDetectionRule(rule RegexpDetectionRule) (CompiledRegexpDetectionRule, error) { + compiledRegexp, err := regexp.Compile(rule.Regexp) + if err != nil { + return CompiledRegexpDetectionRule{}, err + } + return CompiledRegexpDetectionRule{ + Rule: rule, + Regexp: compiledRegexp, + }, nil +} diff --git a/pkg/secretdetector/types.go b/pkg/secretdetector/types.go new file mode 100644 index 0000000..36b44e5 --- /dev/null +++ b/pkg/secretdetector/types.go @@ -0,0 +1,21 @@ +package secretdetector + +// SecretDetectionResult is a struct for holding the result of a secret detection +type SecretDetectionResult struct { + Type string + Value string + Line int + Index int + Length int +} + +type FileDetectionConfig struct { + SkipBinaryFiles bool + SizeThreshold int64 +} + +type FileDetectionResult struct { + Path string + Err error + Results []SecretDetectionResult +}