306 lines
10 KiB
JSON
306 lines
10 KiB
JSON
{
|
|
"schema_version": 1,
|
|
"purpose": "Audit evidence only; not a release manifest or active installer configuration.",
|
|
"observed_at": "2026-09-08T03:56:47.666808+00:00",
|
|
"runtime_publication_held": true,
|
|
"website_deployment_held": true,
|
|
"scan_execution_complete": true,
|
|
"coverage_complete": false,
|
|
"scanner": {
|
|
"name": "Trivy",
|
|
"version": "0.74.0",
|
|
"binary_sha256": "d89bcc6510a267f11b773398cbf1be5520ce39f9e8b6633178c4487f05b7d791",
|
|
"database_metadata": {
|
|
"Version": 2,
|
|
"NextUpdate": "2026-09-08T19:06:01.154199291Z",
|
|
"UpdatedAt": "2026-09-07T19:06:01.154199452Z",
|
|
"DownloadedAt": "2026-09-07T23:30:53.198039224Z"
|
|
},
|
|
"source": "remote",
|
|
"scanners": [
|
|
"vuln"
|
|
],
|
|
"list_all_packages": true,
|
|
"images_executed": false,
|
|
"existing_docker_credentials_used": false,
|
|
"timeout": "8m",
|
|
"maximum_image_size": "2GB"
|
|
},
|
|
"evidence": {
|
|
"private_directory": "/home/zemion/.cache/govoplan-runtime-remediation.qfDSWHJh",
|
|
"summary_sha256": "0d44390408ab35270e4430516f77bf11aa7877334eff2ef19e11e9a863fe5c56",
|
|
"frozen_images_sha256": "d0cb156f4a88998531ec55ab950067a3f1350ded648f07650c463af101dad467",
|
|
"scanner_script_sha256": "f64c69e06efc2ad7b5a657a25aa73f9ff586e3685737d525456bcecbe3ab5f07"
|
|
},
|
|
"candidates": [
|
|
{
|
|
"name": "haproxy",
|
|
"image": "docker.io/library/haproxy:3.2.23-alpine@sha256:6343ce34a132a5dceaa24767d739df2bd519f8f7c1079ae39e4821334e8eb42e",
|
|
"disposition": "source_default_updated_binary_runtime_verification_pending",
|
|
"platforms": [
|
|
{
|
|
"platform": "linux/amd64",
|
|
"manifest_digest": "sha256:0666a2c2f41d341084ed2da85392b48cdcd766adfa28231f31305724ed5c6ea5",
|
|
"config_digest": "sha256:9621d75e50a8f26d3738ae3cdbf15e98c6aa5cd48e6baca0699492de502156f5",
|
|
"compressed_layer_bytes": 20516844,
|
|
"scan_exit_code": 0,
|
|
"os": {
|
|
"Family": "alpine",
|
|
"Name": "3.24.1"
|
|
},
|
|
"inventory": [
|
|
{
|
|
"type": "alpine",
|
|
"packages": 24
|
|
}
|
|
],
|
|
"counts": {
|
|
"CRITICAL": 0,
|
|
"HIGH": 0,
|
|
"MEDIUM": 0,
|
|
"LOW": 0,
|
|
"UNKNOWN": 0
|
|
},
|
|
"fixable_high_critical": 0,
|
|
"unique_cves": 0,
|
|
"report_sha256": "40cfc3db74e29f09723f38698660ccdd50ac935c8d6e1e75c6e0555b3e9361fb",
|
|
"log_sha256": "46881f695780f89c037d5b0b4dc0ded9ea4e459077c7658d80b786efc5754084"
|
|
},
|
|
{
|
|
"platform": "linux/arm64",
|
|
"manifest_digest": "sha256:cd20b9dc6b4713956a2a043997001a1948167d345e7c8d5bd5ff2e667166651f",
|
|
"config_digest": "sha256:19796bff8905d4a46c9463c576203b20cac8984d41b7b01ea9cbff55e8422c34",
|
|
"compressed_layer_bytes": 20970772,
|
|
"scan_exit_code": 0,
|
|
"os": {
|
|
"Family": "alpine",
|
|
"Name": "3.24.1"
|
|
},
|
|
"inventory": [
|
|
{
|
|
"type": "alpine",
|
|
"packages": 24
|
|
}
|
|
],
|
|
"counts": {
|
|
"CRITICAL": 0,
|
|
"HIGH": 0,
|
|
"MEDIUM": 0,
|
|
"LOW": 0,
|
|
"UNKNOWN": 0
|
|
},
|
|
"fixable_high_critical": 0,
|
|
"unique_cves": 0,
|
|
"report_sha256": "0e1326c58abf358d592fa55c94333228ce1094edf4e489fcc4ece6e32d3320f6",
|
|
"log_sha256": "397c2fbf1044cf50733d68b4b9cc4eb68211d96f1f302d5e9f8af0d11fb0de1c"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"name": "nginx-stable",
|
|
"image": "docker.io/nginxinc/nginx-unprivileged:1.30.4-alpine@sha256:442753882674b49ae2c1de83ed67896131c0777f56df5005e356e62bc3f7e7ce",
|
|
"disposition": "candidate_pending_compatibility",
|
|
"platforms": [
|
|
{
|
|
"platform": "linux/amd64",
|
|
"manifest_digest": "sha256:b8c179cd3c2ae222a873dd59fbae240fadc03836cae5198afc9e9c19919c3880",
|
|
"config_digest": "sha256:8b5953dae38d27a76bca22373bb920fd6ce8d9d7da21578d2926e678002de8a0",
|
|
"compressed_layer_bytes": 25526590,
|
|
"scan_exit_code": 0,
|
|
"os": {
|
|
"Family": "alpine",
|
|
"Name": "3.24.1"
|
|
},
|
|
"inventory": [
|
|
{
|
|
"type": "alpine",
|
|
"packages": 70
|
|
}
|
|
],
|
|
"counts": {
|
|
"CRITICAL": 0,
|
|
"HIGH": 0,
|
|
"MEDIUM": 0,
|
|
"LOW": 0,
|
|
"UNKNOWN": 0
|
|
},
|
|
"fixable_high_critical": 0,
|
|
"unique_cves": 0,
|
|
"report_sha256": "3ad164dae3cdf891b12e41451b8a8e65a5e1688824a7c01d848e1274363e6bf9",
|
|
"log_sha256": "0f99ff3d9b4396de48655bf8299df30c14ba0c579f480d37baa7d2f6a4c11f1d"
|
|
},
|
|
{
|
|
"platform": "linux/arm64",
|
|
"manifest_digest": "sha256:b6742a0cbd749add25346658991c3da06a8e38796949df120fed78db8c512576",
|
|
"config_digest": "sha256:4d8b10f5d2ff99e7aa5f161930d8a4693a86a26f288ec8c0d4cd47f2ef5af179",
|
|
"compressed_layer_bytes": 25892370,
|
|
"scan_exit_code": 0,
|
|
"os": {
|
|
"Family": "alpine",
|
|
"Name": "3.24.1"
|
|
},
|
|
"inventory": [
|
|
{
|
|
"type": "alpine",
|
|
"packages": 70
|
|
}
|
|
],
|
|
"counts": {
|
|
"CRITICAL": 0,
|
|
"HIGH": 0,
|
|
"MEDIUM": 0,
|
|
"LOW": 0,
|
|
"UNKNOWN": 0
|
|
},
|
|
"fixable_high_critical": 0,
|
|
"unique_cves": 0,
|
|
"report_sha256": "506fdeb97525ed8e4d9ae538c42bab7aa2217f662a7135f0f12d16d20410c7a6",
|
|
"log_sha256": "c41ef9ea091d00f18c7a097404672591bee85e7477ae17d8f5ca771d8e42b2bb"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"name": "caddy",
|
|
"image": "docker.io/library/caddy:2.11.4-alpine@sha256:5f5c8640aae01df9654968d946d8f1a56c497f1dd5c5cda4cf95ab7c14d58648",
|
|
"disposition": "not_selected_remaining_fixable_findings",
|
|
"platforms": [
|
|
{
|
|
"platform": "linux/amd64",
|
|
"manifest_digest": "sha256:98eb57d882ccd5213d1688764db10c1ca2c58a1ca3a6717a3411ad798f7a423a",
|
|
"config_digest": "sha256:af555904a0961945f16bb323a501457b13a4f7e9bde969b145b97da80b38ecbe",
|
|
"compressed_layer_bytes": 23907283,
|
|
"scan_exit_code": 0,
|
|
"os": {
|
|
"Family": "alpine",
|
|
"Name": "3.23.5"
|
|
},
|
|
"inventory": [
|
|
{
|
|
"type": "alpine",
|
|
"packages": 32
|
|
},
|
|
{
|
|
"type": "gobinary",
|
|
"packages": 146
|
|
}
|
|
],
|
|
"counts": {
|
|
"CRITICAL": 1,
|
|
"HIGH": 38,
|
|
"MEDIUM": 41,
|
|
"LOW": 12,
|
|
"UNKNOWN": 23
|
|
},
|
|
"fixable_high_critical": 39,
|
|
"unique_cves": 68,
|
|
"report_sha256": "e483352a1d5b9b97950dcf92e4dfcf4600f5b09306af3d0640b10ca229a07779",
|
|
"log_sha256": "9cd599d6dd8c101b421fdeb57036cec1f69f815d765a8bf1f850ec60061036f4"
|
|
},
|
|
{
|
|
"platform": "linux/arm64",
|
|
"manifest_digest": "sha256:1172d4213087d3fc30bafc7ff2c2896180eb0c41ff7f75f315568fb36cabdcba",
|
|
"config_digest": "sha256:6b08c1b9858ca9a7d99c1da13c3695081e0e604c6cf214ca26a7ce0e2c4fd9b4",
|
|
"compressed_layer_bytes": 22722712,
|
|
"scan_exit_code": 0,
|
|
"os": {
|
|
"Family": "alpine",
|
|
"Name": "3.23.5"
|
|
},
|
|
"inventory": [
|
|
{
|
|
"type": "alpine",
|
|
"packages": 32
|
|
},
|
|
{
|
|
"type": "gobinary",
|
|
"packages": 146
|
|
}
|
|
],
|
|
"counts": {
|
|
"CRITICAL": 1,
|
|
"HIGH": 38,
|
|
"MEDIUM": 41,
|
|
"LOW": 12,
|
|
"UNKNOWN": 23
|
|
},
|
|
"fixable_high_critical": 39,
|
|
"unique_cves": 68,
|
|
"report_sha256": "20e04d820e3b27d57575ea177e523e23109fd83344cdf57e184a4d2fad27e803",
|
|
"log_sha256": "a1d9c37aa7948c137db64040d95e5930c5859a8acd71ac5bc41ff168e2b270c5"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"name": "node-lts",
|
|
"image": "docker.io/library/node:24-alpine@sha256:e67514e5d0f6c46656005e1b693b2ec9d52e80b641307de684d4a015ba7a4eaf",
|
|
"disposition": "not_selected_remaining_fixable_findings",
|
|
"platforms": [
|
|
{
|
|
"platform": "linux/amd64",
|
|
"manifest_digest": "sha256:4caaaf42195bcd6f6f3559a413b20cb8f8ad089e231ee874cf7701643966689f",
|
|
"config_digest": "sha256:ee289c69ed1ac50a5a042112ea97f132800e2dd53e832da27784f00e45b3289c",
|
|
"compressed_layer_bytes": 58486244,
|
|
"scan_exit_code": 0,
|
|
"os": {
|
|
"Family": "alpine",
|
|
"Name": "3.24.1"
|
|
},
|
|
"inventory": [
|
|
{
|
|
"type": "alpine",
|
|
"packages": 18
|
|
},
|
|
{
|
|
"type": "node-pkg",
|
|
"packages": 146
|
|
}
|
|
],
|
|
"counts": {
|
|
"CRITICAL": 0,
|
|
"HIGH": 6,
|
|
"MEDIUM": 11,
|
|
"LOW": 12,
|
|
"UNKNOWN": 0
|
|
},
|
|
"fixable_high_critical": 6,
|
|
"unique_cves": 19,
|
|
"report_sha256": "c927d995dde700c92027f6328dc6c273f0f1445cd8154301480757cb962e02b2",
|
|
"log_sha256": "c7dc1900cbe39c9f91e228b2770bcbd394ec2914d2b3879478295fc7f8f77ab3"
|
|
},
|
|
{
|
|
"platform": "linux/arm64",
|
|
"manifest_digest": "sha256:d3724e44ee368606d753e0027eb8d2a94fc1f275e5d9e4620178a12edb655f5f",
|
|
"config_digest": "sha256:722cc1507731edf58a4c0bc3e29553c44ce5774d0849242c1b237abc79926a0a",
|
|
"compressed_layer_bytes": 58935654,
|
|
"scan_exit_code": 0,
|
|
"os": {
|
|
"Family": "alpine",
|
|
"Name": "3.24.1"
|
|
},
|
|
"inventory": [
|
|
{
|
|
"type": "alpine",
|
|
"packages": 18
|
|
},
|
|
{
|
|
"type": "node-pkg",
|
|
"packages": 146
|
|
}
|
|
],
|
|
"counts": {
|
|
"CRITICAL": 0,
|
|
"HIGH": 6,
|
|
"MEDIUM": 11,
|
|
"LOW": 12,
|
|
"UNKNOWN": 0
|
|
},
|
|
"fixable_high_critical": 6,
|
|
"unique_cves": 19,
|
|
"report_sha256": "e5f7799761f23cefc36929381b4186eeb3afb46a2a559c789d12a7eea5dc30d0",
|
|
"log_sha256": "fd24671f0da4d3b20dc8bcc2718531e6f6e19155d49bed15958965e21dd10813"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|