commit cc594aa406157bb879e2713f1a1df05b748258d4 Author: Vital A Pi Date: Tue Sep 22 02:26:53 2026 +0300 init diff --git a/README.md b/README.md new file mode 100644 index 0000000..a4c5917 --- /dev/null +++ b/README.md @@ -0,0 +1,50 @@ + +``` ++ syft scan dir:/rootfs -o cyclonedx-json + ✔ Indexed file system /rootfs + ✔ Cataloged contents 83b7387d3411e9d0b9e349f1e47f95630500de718e8a464db45ab2dd616f5cfa + ├── ✔ Packages [5 packages] + ├── ✔ File metadata [12 locations] + ├── ✔ File digests [12 files] + └── ✔ Executables [130 executables] [0000] WARN no explicit name and version provided for directory source, deriving artifact ID from the given path (which is +``` + +``` ++ trivy sbom sbom.json +2026-09-21T23:30:40Z INFO [vuln] Vulnerability scanning is enabled +2026-09-21T23:30:40Z INFO Detected SBOM format format="cyclonedx-json" +2026-09-21T23:30:40Z WARN Third-party SBOM may lead to inaccurate vulnerability detection +2026-09-21T23:30:40Z WARN Recommend using Trivy to generate SBOMs +2026-09-21T23:30:40Z INFO Detected OS family="ubuntu" version="24.04" +2026-09-21T23:30:40Z INFO [ubuntu] Detecting vulnerabilities... os_version="24.04" pkg_num=1 +2026-09-21T23:30:40Z INFO Number of language-specific files num=1 +2026-09-21T23:30:40Z INFO [python-pkg] Detecting vulnerabilities... + +Report Summary + +┌──────────────────────────┬────────────┬─────────────────┐ +│ Target │ Type │ Vulnerabilities │ +├──────────────────────────┼────────────┼─────────────────┤ +│ sbom.json (ubuntu 24.04) │ ubuntu │ 0 │ +├──────────────────────────┼────────────┼─────────────────┤ +│ Python │ python-pkg │ 0 │ +└──────────────────────────┴────────────┴─────────────────┘ +Legend: +- '-': Not scanned +- '0': Clean (no security findings detected) +``` + +``` ++ trivy rootfs --format sarif --output trivy-results.sarif /rootfs +2026-09-21T23:30:40Z INFO [vuln] Vulnerability scanning is enabled +2026-09-21T23:30:40Z INFO [secret] Secret scanning is enabled +2026-09-21T23:30:40Z INFO [secret] If your scanning is slow, please try '--scanners vuln' to disable secret scanning +2026-09-21T23:30:40Z INFO [secret] Please see https://trivy.dev/docs/v0.74/guide/scanner/secret#recommendation for faster secret detection +2026-09-21T23:30:40Z INFO [python] Licenses acquired from one or more METADATA files may be subject to additional terms. Use `--debug` flag to see all affected packages. +2026-09-21T23:30:40Z WARN No OS package is detected. Make sure you haven't deleted any files that contain information about the installed packages. +2026-09-21T23:30:40Z WARN e.g. files under "/lib/apk/db/", "/var/lib/dpkg/" and "/var/lib/rpm" +2026-09-21T23:30:40Z INFO Detected OS family="ubuntu" version="24.04" +2026-09-21T23:30:40Z INFO [ubuntu] Detecting vulnerabilities... os_version="24.04" pkg_num=0 +2026-09-21T23:30:40Z INFO Number of language-specific files num=1 +2026-09-21T23:30:40Z INFO [python-pkg] Detecting vulnerabilities... +``` diff --git a/sbom.json b/sbom.json new file mode 100644 index 0000000..7a75482 --- /dev/null +++ b/sbom.json @@ -0,0 +1 @@ +{"$schema":"http://cyclonedx.org/schema/bom-1.7.schema.json","bomFormat":"CycloneDX","specVersion":"1.7","serialNumber":"urn:uuid:2bb3dff9-1df7-4289-a282-a99f74c768b9","version":1,"metadata":{"timestamp":"2026-09-21T23:30:39Z","tools":{"components":[{"type":"application","author":"anchore","name":"syft","version":"1.52.0"}]},"component":{"bom-ref":"90b123e2b7193539","type":"file","name":"/rootfs"}},"components":[{"bom-ref":"pkg:generic/ffmpeg@8.1.1?package-id=7e6a84aafe48bbbd","type":"application","name":"ffmpeg","version":"8.1.1","cpe":"cpe:2.3:a:ffmpeg:ffmpeg:8.1.1:*:*:*:*:*:*:*","purl":"pkg:generic/ffmpeg@8.1.1","properties":[{"name":"syft:package:foundBy","value":"binary-classifier-cataloger"},{"name":"syft:package:type","value":"binary"},{"name":"syft:package:metadataType","value":"binary-signature"},{"name":"syft:location:0:path","value":"/opt/venv/lib/python3.12/site-packages/opencv_python_headless.libs/libavcodec-c4204469.so.62.28.101"},{"name":"syft:location:1:path","value":"/opt/venv/lib/python3.12/site-packages/opencv_python_headless.libs/libavformat-4762a711.so.62.12.101"},{"name":"syft:location:2:path","value":"/opt/venv/lib/python3.12/site-packages/opencv_python_headless.libs/libavutil-befbbc48.so.60.26.101"},{"name":"syft:location:3:path","value":"/opt/venv/lib/python3.12/site-packages/opencv_python_headless.libs/libswresample-2dfded3b.so.6.3.101"}]},{"bom-ref":"pkg:deb/ubuntu/gcc-14@14.2.0-4ubuntu2~24.04.1?distro=ubuntu&package-id=48193df765223c7a","type":"library","name":"gcc-14","version":"14.2.0-4ubuntu2~24.04.1","cpe":"cpe:2.3:a:gcc-14:gcc-14:14.2.0-4ubuntu2\\~24.04.1:*:*:*:*:*:*:*","purl":"pkg:deb/ubuntu/gcc-14@14.2.0-4ubuntu2~24.04.1?distro=ubuntu","properties":[{"name":"syft:package:foundBy","value":"elf-binary-package-cataloger"},{"name":"syft:package:type","value":"deb"},{"name":"syft:package:metadataType","value":"elf-binary-package-note-json-payload"},{"name":"syft:cpe23","value":"cpe:2.3:a:gcc-14:gcc_14:14.2.0-4ubuntu2\\~24.04.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gcc_14:gcc-14:14.2.0-4ubuntu2\\~24.04.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gcc_14:gcc_14:14.2.0-4ubuntu2\\~24.04.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gcc:gcc-14:14.2.0-4ubuntu2\\~24.04.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gcc:gcc_14:14.2.0-4ubuntu2\\~24.04.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/usr/lib/x86_64-linux-gnu/libgcc_s.so.1"},{"name":"syft:location:1:path","value":"/usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.33"}]},{"bom-ref":"pkg:pypi/numpy@2.5.3?package-id=ab7e21049eac4d74","type":"library","author":"Travis E. Oliphant et al.","name":"numpy","version":"2.5.3","licenses":[{"expression":"BSD-3-Clause AND 0BSD AND MIT AND Zlib AND CC0-1.0"}],"cpe":"cpe:2.3:a:travis_e__oliphant_et_al__project:python-numpy:2.5.3:*:*:*:*:*:*:*","purl":"pkg:pypi/numpy@2.5.3","properties":[{"name":"syft:package:foundBy","value":"python-installed-package-cataloger"},{"name":"syft:package:language","value":"python"},{"name":"syft:package:type","value":"python"},{"name":"syft:package:metadataType","value":"python-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:travis_e__oliphant_et_al__project:python_numpy:2.5.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:travis_e__oliphant_et_al_project:python-numpy:2.5.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:travis_e__oliphant_et_al_project:python_numpy:2.5.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:travis_e__oliphant_et_al__project:numpy:2.5.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:travis_e__oliphant_et_al_:python-numpy:2.5.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:travis_e__oliphant_et_al_:python_numpy:2.5.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:travis_e__oliphant_et_al_project:numpy:2.5.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:travis_e__oliphant_et_al_:numpy:2.5.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python-numpy:python-numpy:2.5.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python-numpy:python_numpy:2.5.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python_numpy:python-numpy:2.5.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python_numpy:python_numpy:2.5.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python:python-numpy:2.5.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python:python_numpy:2.5.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:numpy:python-numpy:2.5.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:numpy:python_numpy:2.5.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python-numpy:numpy:2.5.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python_numpy:numpy:2.5.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python:numpy:2.5.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:numpy:numpy:2.5.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/opt/venv/lib/python3.12/site-packages/numpy-2.5.3.dist-info/METADATA"},{"name":"syft:location:1:path","value":"/opt/venv/lib/python3.12/site-packages/numpy-2.5.3.dist-info/RECORD"}]},{"bom-ref":"pkg:pypi/opencv-python-headless@5.0.0.93?package-id=bc66c5fa80d207a4","type":"library","name":"opencv-python-headless","version":"5.0.0.93","licenses":[{"license":{"name":"Apache 2.0"}}],"cpe":"cpe:2.3:a:python-opencv-python-headless:python-opencv-python-headless:5.0.0.93:*:*:*:*:*:*:*","purl":"pkg:pypi/opencv-python-headless@5.0.0.93","properties":[{"name":"syft:package:foundBy","value":"python-installed-package-cataloger"},{"name":"syft:package:language","value":"python"},{"name":"syft:package:type","value":"python"},{"name":"syft:package:metadataType","value":"python-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:python-opencv-python-headless:python_opencv_python_headless:5.0.0.93:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python_opencv_python_headless:python-opencv-python-headless:5.0.0.93:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python_opencv_python_headless:python_opencv_python_headless:5.0.0.93:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:opencv-python-headless:python-opencv-python-headless:5.0.0.93:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:opencv-python-headless:python_opencv_python_headless:5.0.0.93:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:opencv_python_headless:python-opencv-python-headless:5.0.0.93:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:opencv_python_headless:python_opencv_python_headless:5.0.0.93:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python-opencv-python-headless:opencv-python-headless:5.0.0.93:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python-opencv-python-headless:opencv_python_headless:5.0.0.93:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python_opencv_python_headless:opencv-python-headless:5.0.0.93:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python_opencv_python_headless:opencv_python_headless:5.0.0.93:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python-opencv-python:python-opencv-python-headless:5.0.0.93:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python-opencv-python:python_opencv_python_headless:5.0.0.93:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python_opencv_python:python-opencv-python-headless:5.0.0.93:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python_opencv_python:python_opencv_python_headless:5.0.0.93:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:opencv-python-headless:opencv-python-headless:5.0.0.93:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:opencv-python-headless:opencv_python_headless:5.0.0.93:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:opencv_python_headless:opencv-python-headless:5.0.0.93:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:opencv_python_headless:opencv_python_headless:5.0.0.93:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:opencv-python:python-opencv-python-headless:5.0.0.93:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:opencv-python:python_opencv_python_headless:5.0.0.93:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:opencv_python:python-opencv-python-headless:5.0.0.93:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:opencv_python:python_opencv_python_headless:5.0.0.93:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python-opencv-python:opencv-python-headless:5.0.0.93:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python-opencv-python:opencv_python_headless:5.0.0.93:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python-opencv:python-opencv-python-headless:5.0.0.93:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python-opencv:python_opencv_python_headless:5.0.0.93:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python_opencv:python-opencv-python-headless:5.0.0.93:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python_opencv:python_opencv_python_headless:5.0.0.93:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python_opencv_python:opencv-python-headless:5.0.0.93:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python_opencv_python:opencv_python_headless:5.0.0.93:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:opencv-python:opencv-python-headless:5.0.0.93:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:opencv-python:opencv_python_headless:5.0.0.93:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:opencv:python-opencv-python-headless:5.0.0.93:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:opencv:python_opencv_python_headless:5.0.0.93:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:opencv_python:opencv-python-headless:5.0.0.93:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:opencv_python:opencv_python_headless:5.0.0.93:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python-opencv:opencv-python-headless:5.0.0.93:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python-opencv:opencv_python_headless:5.0.0.93:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python:python-opencv-python-headless:5.0.0.93:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python:python_opencv_python_headless:5.0.0.93:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python_opencv:opencv-python-headless:5.0.0.93:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python_opencv:opencv_python_headless:5.0.0.93:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:opencv:opencv-python-headless:5.0.0.93:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:opencv:opencv_python_headless:5.0.0.93:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python:opencv-python-headless:5.0.0.93:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:python:opencv_python_headless:5.0.0.93:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/opt/venv/lib/python3.12/site-packages/opencv_python_headless-5.0.0.93.dist-info/METADATA"},{"name":"syft:location:1:path","value":"/opt/venv/lib/python3.12/site-packages/opencv_python_headless-5.0.0.93.dist-info/RECORD"},{"name":"syft:location:2:path","value":"/opt/venv/lib/python3.12/site-packages/opencv_python_headless-5.0.0.93.dist-info/top_level.txt"}]},{"bom-ref":"pkg:generic/python@3.12.3?package-id=45a074cb15717c5e","type":"application","name":"python","version":"3.12.3","cpe":"cpe:2.3:a:python_software_foundation:python:3.12.3:*:*:*:*:*:*:*","purl":"pkg:generic/python@3.12.3","properties":[{"name":"syft:package:foundBy","value":"binary-classifier-cataloger"},{"name":"syft:package:type","value":"binary"},{"name":"syft:package:metadataType","value":"binary-signature"},{"name":"syft:cpe23","value":"cpe:2.3:a:python:python:3.12.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/usr/bin/python3.12"}]},{"bom-ref":"os:ubuntu@24.04","type":"operating-system","name":"ubuntu","version":"24.04","description":"Ubuntu 24.04.5 LTS","swid":{"tagId":"ubuntu","name":"ubuntu","version":"24.04"},"externalReferences":[{"url":"https://bugs.launchpad.net/ubuntu/","type":"issue-tracker"},{"url":"https://www.ubuntu.com/","type":"website"},{"url":"https://help.ubuntu.com/","comment":"support","type":"other"},{"url":"https://www.ubuntu.com/legal/terms-and-policies/privacy-policy","comment":"privacyPolicy","type":"other"}],"properties":[{"name":"syft:distro:extendedSupport","value":"false"},{"name":"syft:distro:id","value":"ubuntu"},{"name":"syft:distro:idLike:0","value":"debian"},{"name":"syft:distro:prettyName","value":"Ubuntu 24.04.5 LTS"},{"name":"syft:distro:versionCodename","value":"noble"},{"name":"syft:distro:versionID","value":"24.04"}]},{"bom-ref":"679d238de6686b29","type":"file","name":"/rootfs/opt/venv/lib/python3.12/site-packages/numpy-2.5.3.dist-info/METADATA","hashes":[{"alg":"SHA-1","content":"0adec79dfce7363cc418c798fb99f3fad1ed7000"},{"alg":"SHA-256","content":"451a9b8028000588e66b0b415587b6aef0bbc51a96d8e8a0cba0dc23acf64f99"}]},{"bom-ref":"a37849c52041658f","type":"file","name":"/rootfs/opt/venv/lib/python3.12/site-packages/numpy-2.5.3.dist-info/RECORD","hashes":[{"alg":"SHA-1","content":"b136a9d19d84548b4cabf41f4a5b747f125749c7"},{"alg":"SHA-256","content":"bc5a6b74169e3b8318c5137d4502f1906091d85a77024c7ab461b7a0a0d5ec1b"}]},{"bom-ref":"56be7d801e6a81fb","type":"file","name":"/rootfs/opt/venv/lib/python3.12/site-packages/opencv_python_headless-5.0.0.93.dist-info/METADATA","hashes":[{"alg":"SHA-1","content":"0c4a1560ebfa9eafe5eb180776e9e4ad9d525a0d"},{"alg":"SHA-256","content":"f8e9104b4dce58f708d4cc7af95ebd8a5d65a3e36209d42386eb61065ae50e1a"}]},{"bom-ref":"1cf91179c65b40e7","type":"file","name":"/rootfs/opt/venv/lib/python3.12/site-packages/opencv_python_headless-5.0.0.93.dist-info/RECORD","hashes":[{"alg":"SHA-1","content":"b0562e10854e2bed2ea0d2f6b45e7b1092940e87"},{"alg":"SHA-256","content":"a4172fa37f8a5c3352f206f392daabe05cfa35010d3b7dd9dd9d9f404be49abb"}]},{"bom-ref":"a419d176d704e348","type":"file","name":"/rootfs/opt/venv/lib/python3.12/site-packages/opencv_python_headless-5.0.0.93.dist-info/top_level.txt","hashes":[{"alg":"SHA-1","content":"b3fc5378c0c9394546c563357408ae3cfe07c0cd"},{"alg":"SHA-256","content":"498f2fadffec60e83df4e3fd7ae873eeadfaa4fcbfd952b9bdb784597c304a87"}]},{"bom-ref":"cc962a0387fb1225","type":"file","name":"/rootfs/opt/venv/lib/python3.12/site-packages/opencv_python_headless.libs/libavcodec-c4204469.so.62.28.101","hashes":[{"alg":"SHA-1","content":"21833b73aebbd9a040b065a905ca31c00a8db236"},{"alg":"SHA-256","content":"94401ecabe5cd87f7db30af2843c8ff0674e57947d102f307ebed8788740cbb9"}]},{"bom-ref":"6e4236b95f43b050","type":"file","name":"/rootfs/opt/venv/lib/python3.12/site-packages/opencv_python_headless.libs/libavformat-4762a711.so.62.12.101","hashes":[{"alg":"SHA-1","content":"db44ef54c13ed0349f11eafcc30c3117f1aa26b0"},{"alg":"SHA-256","content":"150705d76b62a20a16cbb131ba5c9e25c086ccb7914bf0b50c084bc66c15c0e1"}]},{"bom-ref":"0673617c7847ed6e","type":"file","name":"/rootfs/opt/venv/lib/python3.12/site-packages/opencv_python_headless.libs/libavutil-befbbc48.so.60.26.101","hashes":[{"alg":"SHA-1","content":"c681cec3e43bd026d1a58740f678c9965a6ab34b"},{"alg":"SHA-256","content":"fe9258859653c19d0d4029bbb84622bc5c39707d7936372df757661e6b961b18"}]},{"bom-ref":"950a9fc5f29031f7","type":"file","name":"/rootfs/opt/venv/lib/python3.12/site-packages/opencv_python_headless.libs/libswresample-2dfded3b.so.6.3.101","hashes":[{"alg":"SHA-1","content":"7b651a3206f3b408bc28dce3904360189cf8db4c"},{"alg":"SHA-256","content":"45f1bbfcae84449e2293c07398376c478a9ea1c4190c23e1c9a414a055b46657"}]},{"bom-ref":"21e3e5e11f2b6e87","type":"file","name":"/rootfs/usr/bin/python3.12","hashes":[{"alg":"SHA-1","content":"28193a4dd620900bf7ca026d310be71d3316c723"},{"alg":"SHA-256","content":"e50d468e8b0adfb05733f5b87b3cff34829c4a8c1aea50c865aa8bdfe4bb150f"}]},{"bom-ref":"42ad8ee48edd40fb","type":"file","name":"/rootfs/usr/lib/x86_64-linux-gnu/libgcc_s.so.1","hashes":[{"alg":"SHA-1","content":"1fde0ed3d1398c3f282749fb77e98d8c1e44733d"},{"alg":"SHA-256","content":"d93224d2b0dab4247598be683adca02f5cf00586f99c187579cd7e92058fb7cb"}]},{"bom-ref":"0a07155ca9c12f21","type":"file","name":"/rootfs/usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.33","hashes":[{"alg":"SHA-1","content":"676f5fe3d6a937728f212a9f8d6eb9ad3912bd76"},{"alg":"SHA-256","content":"1fd75fe70354a416d75aef22bcae68c47bd25d20e2d0568c30b1a9838cf62f11"}]}],"dependencies":[{"ref":"pkg:pypi/opencv-python-headless@5.0.0.93?package-id=bc66c5fa80d207a4","dependsOn":["pkg:pypi/numpy@2.5.3?package-id=ab7e21049eac4d74"]}]} diff --git a/trivy-results.sarif b/trivy-results.sarif new file mode 100644 index 0000000..20ae109 --- /dev/null +++ b/trivy-results.sarif @@ -0,0 +1,24 @@ +{ + "version": "2.1.0", + "$schema": "https://raw.githubusercontent.com/oasis-tcs/sarif-spec/main/sarif-2.1/schema/sarif-schema-2.1.0.json", + "runs": [ + { + "tool": { + "driver": { + "fullName": "Trivy Vulnerability Scanner", + "informationUri": "https://github.com/aquasecurity/trivy", + "name": "Trivy", + "rules": [], + "version": "0.74.0" + } + }, + "results": [], + "columnKind": "utf16CodeUnits", + "originalUriBaseIds": { + "ROOTPATH": { + "uri": "file:///rootfs/" + } + } + } + ] +} \ No newline at end of file