{
  "schema_version": 1,
  "purpose": "Audit evidence only; not a release manifest or active installer configuration.",
  "observed_at": "2026-09-08T03:56:47.666808+00:00",
  "runtime_publication_held": true,
  "website_deployment_held": true,
  "scan_execution_complete": true,
  "coverage_complete": false,
  "scanner": {
    "name": "Trivy",
    "version": "0.74.0",
    "binary_sha256": "d89bcc6510a267f11b773398cbf1be5520ce39f9e8b6633178c4487f05b7d791",
    "database_metadata": {
      "Version": 2,
      "NextUpdate": "2026-09-08T19:06:01.154199291Z",
      "UpdatedAt": "2026-09-07T19:06:01.154199452Z",
      "DownloadedAt": "2026-09-07T23:30:53.198039224Z"
    },
    "source": "remote",
    "scanners": [
      "vuln"
    ],
    "list_all_packages": true,
    "images_executed": false,
    "existing_docker_credentials_used": false,
    "timeout": "8m",
    "maximum_image_size": "2GB"
  },
  "evidence": {
    "private_directory": "/home/zemion/.cache/govoplan-runtime-remediation.qfDSWHJh",
    "summary_sha256": "0d44390408ab35270e4430516f77bf11aa7877334eff2ef19e11e9a863fe5c56",
    "frozen_images_sha256": "d0cb156f4a88998531ec55ab950067a3f1350ded648f07650c463af101dad467",
    "scanner_script_sha256": "f64c69e06efc2ad7b5a657a25aa73f9ff586e3685737d525456bcecbe3ab5f07"
  },
  "candidates": [
    {
      "name": "haproxy",
      "image": "docker.io/library/haproxy:3.2.23-alpine@sha256:6343ce34a132a5dceaa24767d739df2bd519f8f7c1079ae39e4821334e8eb42e",
      "disposition": "source_default_updated_binary_runtime_verification_pending",
      "platforms": [
        {
          "platform": "linux/amd64",
          "manifest_digest": "sha256:0666a2c2f41d341084ed2da85392b48cdcd766adfa28231f31305724ed5c6ea5",
          "config_digest": "sha256:9621d75e50a8f26d3738ae3cdbf15e98c6aa5cd48e6baca0699492de502156f5",
          "compressed_layer_bytes": 20516844,
          "scan_exit_code": 0,
          "os": {
            "Family": "alpine",
            "Name": "3.24.1"
          },
          "inventory": [
            {
              "type": "alpine",
              "packages": 24
            }
          ],
          "counts": {
            "CRITICAL": 0,
            "HIGH": 0,
            "MEDIUM": 0,
            "LOW": 0,
            "UNKNOWN": 0
          },
          "fixable_high_critical": 0,
          "unique_cves": 0,
          "report_sha256": "40cfc3db74e29f09723f38698660ccdd50ac935c8d6e1e75c6e0555b3e9361fb",
          "log_sha256": "46881f695780f89c037d5b0b4dc0ded9ea4e459077c7658d80b786efc5754084"
        },
        {
          "platform": "linux/arm64",
          "manifest_digest": "sha256:cd20b9dc6b4713956a2a043997001a1948167d345e7c8d5bd5ff2e667166651f",
          "config_digest": "sha256:19796bff8905d4a46c9463c576203b20cac8984d41b7b01ea9cbff55e8422c34",
          "compressed_layer_bytes": 20970772,
          "scan_exit_code": 0,
          "os": {
            "Family": "alpine",
            "Name": "3.24.1"
          },
          "inventory": [
            {
              "type": "alpine",
              "packages": 24
            }
          ],
          "counts": {
            "CRITICAL": 0,
            "HIGH": 0,
            "MEDIUM": 0,
            "LOW": 0,
            "UNKNOWN": 0
          },
          "fixable_high_critical": 0,
          "unique_cves": 0,
          "report_sha256": "0e1326c58abf358d592fa55c94333228ce1094edf4e489fcc4ece6e32d3320f6",
          "log_sha256": "397c2fbf1044cf50733d68b4b9cc4eb68211d96f1f302d5e9f8af0d11fb0de1c"
        }
      ]
    },
    {
      "name": "nginx-stable",
      "image": "docker.io/nginxinc/nginx-unprivileged:1.30.4-alpine@sha256:442753882674b49ae2c1de83ed67896131c0777f56df5005e356e62bc3f7e7ce",
      "disposition": "candidate_pending_compatibility",
      "platforms": [
        {
          "platform": "linux/amd64",
          "manifest_digest": "sha256:b8c179cd3c2ae222a873dd59fbae240fadc03836cae5198afc9e9c19919c3880",
          "config_digest": "sha256:8b5953dae38d27a76bca22373bb920fd6ce8d9d7da21578d2926e678002de8a0",
          "compressed_layer_bytes": 25526590,
          "scan_exit_code": 0,
          "os": {
            "Family": "alpine",
            "Name": "3.24.1"
          },
          "inventory": [
            {
              "type": "alpine",
              "packages": 70
            }
          ],
          "counts": {
            "CRITICAL": 0,
            "HIGH": 0,
            "MEDIUM": 0,
            "LOW": 0,
            "UNKNOWN": 0
          },
          "fixable_high_critical": 0,
          "unique_cves": 0,
          "report_sha256": "3ad164dae3cdf891b12e41451b8a8e65a5e1688824a7c01d848e1274363e6bf9",
          "log_sha256": "0f99ff3d9b4396de48655bf8299df30c14ba0c579f480d37baa7d2f6a4c11f1d"
        },
        {
          "platform": "linux/arm64",
          "manifest_digest": "sha256:b6742a0cbd749add25346658991c3da06a8e38796949df120fed78db8c512576",
          "config_digest": "sha256:4d8b10f5d2ff99e7aa5f161930d8a4693a86a26f288ec8c0d4cd47f2ef5af179",
          "compressed_layer_bytes": 25892370,
          "scan_exit_code": 0,
          "os": {
            "Family": "alpine",
            "Name": "3.24.1"
          },
          "inventory": [
            {
              "type": "alpine",
              "packages": 70
            }
          ],
          "counts": {
            "CRITICAL": 0,
            "HIGH": 0,
            "MEDIUM": 0,
            "LOW": 0,
            "UNKNOWN": 0
          },
          "fixable_high_critical": 0,
          "unique_cves": 0,
          "report_sha256": "506fdeb97525ed8e4d9ae538c42bab7aa2217f662a7135f0f12d16d20410c7a6",
          "log_sha256": "c41ef9ea091d00f18c7a097404672591bee85e7477ae17d8f5ca771d8e42b2bb"
        }
      ]
    },
    {
      "name": "caddy",
      "image": "docker.io/library/caddy:2.11.4-alpine@sha256:5f5c8640aae01df9654968d946d8f1a56c497f1dd5c5cda4cf95ab7c14d58648",
      "disposition": "not_selected_remaining_fixable_findings",
      "platforms": [
        {
          "platform": "linux/amd64",
          "manifest_digest": "sha256:98eb57d882ccd5213d1688764db10c1ca2c58a1ca3a6717a3411ad798f7a423a",
          "config_digest": "sha256:af555904a0961945f16bb323a501457b13a4f7e9bde969b145b97da80b38ecbe",
          "compressed_layer_bytes": 23907283,
          "scan_exit_code": 0,
          "os": {
            "Family": "alpine",
            "Name": "3.23.5"
          },
          "inventory": [
            {
              "type": "alpine",
              "packages": 32
            },
            {
              "type": "gobinary",
              "packages": 146
            }
          ],
          "counts": {
            "CRITICAL": 1,
            "HIGH": 38,
            "MEDIUM": 41,
            "LOW": 12,
            "UNKNOWN": 23
          },
          "fixable_high_critical": 39,
          "unique_cves": 68,
          "report_sha256": "e483352a1d5b9b97950dcf92e4dfcf4600f5b09306af3d0640b10ca229a07779",
          "log_sha256": "9cd599d6dd8c101b421fdeb57036cec1f69f815d765a8bf1f850ec60061036f4"
        },
        {
          "platform": "linux/arm64",
          "manifest_digest": "sha256:1172d4213087d3fc30bafc7ff2c2896180eb0c41ff7f75f315568fb36cabdcba",
          "config_digest": "sha256:6b08c1b9858ca9a7d99c1da13c3695081e0e604c6cf214ca26a7ce0e2c4fd9b4",
          "compressed_layer_bytes": 22722712,
          "scan_exit_code": 0,
          "os": {
            "Family": "alpine",
            "Name": "3.23.5"
          },
          "inventory": [
            {
              "type": "alpine",
              "packages": 32
            },
            {
              "type": "gobinary",
              "packages": 146
            }
          ],
          "counts": {
            "CRITICAL": 1,
            "HIGH": 38,
            "MEDIUM": 41,
            "LOW": 12,
            "UNKNOWN": 23
          },
          "fixable_high_critical": 39,
          "unique_cves": 68,
          "report_sha256": "20e04d820e3b27d57575ea177e523e23109fd83344cdf57e184a4d2fad27e803",
          "log_sha256": "a1d9c37aa7948c137db64040d95e5930c5859a8acd71ac5bc41ff168e2b270c5"
        }
      ]
    },
    {
      "name": "node-lts",
      "image": "docker.io/library/node:24-alpine@sha256:e67514e5d0f6c46656005e1b693b2ec9d52e80b641307de684d4a015ba7a4eaf",
      "disposition": "not_selected_remaining_fixable_findings",
      "platforms": [
        {
          "platform": "linux/amd64",
          "manifest_digest": "sha256:4caaaf42195bcd6f6f3559a413b20cb8f8ad089e231ee874cf7701643966689f",
          "config_digest": "sha256:ee289c69ed1ac50a5a042112ea97f132800e2dd53e832da27784f00e45b3289c",
          "compressed_layer_bytes": 58486244,
          "scan_exit_code": 0,
          "os": {
            "Family": "alpine",
            "Name": "3.24.1"
          },
          "inventory": [
            {
              "type": "alpine",
              "packages": 18
            },
            {
              "type": "node-pkg",
              "packages": 146
            }
          ],
          "counts": {
            "CRITICAL": 0,
            "HIGH": 6,
            "MEDIUM": 11,
            "LOW": 12,
            "UNKNOWN": 0
          },
          "fixable_high_critical": 6,
          "unique_cves": 19,
          "report_sha256": "c927d995dde700c92027f6328dc6c273f0f1445cd8154301480757cb962e02b2",
          "log_sha256": "c7dc1900cbe39c9f91e228b2770bcbd394ec2914d2b3879478295fc7f8f77ab3"
        },
        {
          "platform": "linux/arm64",
          "manifest_digest": "sha256:d3724e44ee368606d753e0027eb8d2a94fc1f275e5d9e4620178a12edb655f5f",
          "config_digest": "sha256:722cc1507731edf58a4c0bc3e29553c44ce5774d0849242c1b237abc79926a0a",
          "compressed_layer_bytes": 58935654,
          "scan_exit_code": 0,
          "os": {
            "Family": "alpine",
            "Name": "3.24.1"
          },
          "inventory": [
            {
              "type": "alpine",
              "packages": 18
            },
            {
              "type": "node-pkg",
              "packages": 146
            }
          ],
          "counts": {
            "CRITICAL": 0,
            "HIGH": 6,
            "MEDIUM": 11,
            "LOW": 12,
            "UNKNOWN": 0
          },
          "fixable_high_critical": 6,
          "unique_cves": 19,
          "report_sha256": "e5f7799761f23cefc36929381b4186eeb3afb46a2a559c789d12a7eea5dc30d0",
          "log_sha256": "fd24671f0da4d3b20dc8bcc2718531e6f6e19155d49bed15958965e21dd10813"
        }
      ]
    }
  ]
}