diff --git a/.jenkins b/.jenkins new file mode 100644 index 000000000..685638cf3 --- /dev/null +++ b/.jenkins @@ -0,0 +1,101 @@ +pipeline { + agent any + + tools { + maven '3.9.9' + } + + environment { + DOCKER_IMAGE = "myregistry.io/myapp:${BUILD_NUMBER}" + REMOTE_USER = 'deploy' + REMOTE_HOST = 'your.server.com' + REMOTE_APP_NAME = 'myapp' + SSH_KEY_ID = 'my-ssh-key' + } + + stages { + stage('Checkout') { + steps { + echo '๐Ÿ“ฅ Cloning source code...' + git url: 'https://github.com/CxTyler/vulnado-project.git', branch: 'master' + } + } + + stage('Build') { + steps { + echo '๐Ÿ”ง Building the application...' + sh 'mvn clean package -DskipTests' + } + } + + stage('Unit Tests') { + steps { + echo '๐Ÿงช Running unit tests...' + sh 'mvn test' + } + post { + always { + sleep(time:12,unit:"SECONDS") + //junit '**/target/surefire-reports/*.xml' + } + } + } + + stage('Security Analysis (Checkmarx One)') { + steps { + echo '๐Ÿ” Running Checkmarx One scan...' + // Simulate or replace with real Checkmarx CLI command + //sh 'checkmarx-scan --project-name myapp --source .' + checkmarxASTScanner additionalOptions: '', baseAuthUrl: '', branchName: 'master', checkmarxInstallation: 'CxAST CLI Canary RSA 2025', credentialsId: '', projectName: 'VulnadoProject', serverUrl: '', tenantName: '' + } + } + + stage('Docker Build & Push') { + steps { + echo '๐Ÿณ Building Docker image...' + //sh 'docker build -t $DOCKER_IMAGE .' + echo '๐Ÿ“ค Pushing Docker image to registry...' + //sh 'docker push $DOCKER_IMAGE' + } + } + + stage('Deploy to Dev Server') { + steps { + echo '๐Ÿš€ Deploying to remote server via SSH...' + //sshagent (credentials: ["${SSH_KEY_ID}"]) { + //sh """ + //ssh ${REMOTE_USER}@${REMOTE_HOST} ' + //docker pull $DOCKER_IMAGE && + //docker stop ${REMOTE_APP_NAME} || true && + //docker rm ${REMOTE_APP_NAME} || true && + //docker run -d --name ${REMOTE_APP_NAME} -p 8080:8080 $DOCKER_IMAGE + //' + //""" + //} + } + } + + stage('Integration Tests') { + steps { + echo '๐Ÿ”— Running integration tests...' + //sh './scripts/integration-tests.sh' + } + } + + stage('Post-deploy SCA Check') { + steps { + echo '๐Ÿงฌ Running Software Composition Analysis (SCA)...' + //sh 'checkmarx-sca --source . --report-format html --output sca-report.html' + } + } + } + + post { + success { + echo 'โœ… Deployment pipeline completed successfully!' + } + failure { + echo 'โŒ Pipeline failed. Check logs and retry.' + } + } +} diff --git a/.vscode/settings.json b/.vscode/settings.json new file mode 100644 index 000000000..2651fe78b --- /dev/null +++ b/.vscode/settings.json @@ -0,0 +1,6 @@ +{ + "java.compile.nullAnalysis.mode": "disabled", + "githubPullRequests.ignoredPullRequestBranches": [ + "master" + ] +} \ No newline at end of file diff --git a/containers-resolution.json b/containers-resolution.json new file mode 100644 index 000000000..8893a7e4f --- /dev/null +++ b/containers-resolution.json @@ -0,0 +1 @@ +[{"ContainerImage":{"ImageName":"openjdk","ImageTag":"8","Distribution":"debian:11","ImageHash":"sha256:b273004037cc3af245d8e08cfbfa672b93ee7dcb289736c82d0b58936fb71702","ImageId":"openjdk:8","ImageLocations":[{"Origin":"Dockerfile","Path":"Dockerfile","FinalStage":true}],"Layers":["9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94","293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","53a0b163e9955ffb80569ef37e13fbf5d1074ddd67bc5ad09d7bd874b800396a","6b5aaff4425423d122ebe4f1514a1994ae60954fc8a2299787df0ddb1a12f6b9"],"History":[{"Order":0,"Size":123973398,"LayerId":"9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","Command":"/bin/sh -c #(nop) ADD file:d0f758e50c654c225f6c7f03e8a579efc9106437051573bdbae5e63b1c4b2c1f in / "},{"Order":1,"Size":0,"LayerId":"","Command":"/bin/sh -c #(nop) CMD [\"bash\"]"},{"Order":2,"Size":10673893,"LayerId":"03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94","Command":"/bin/sh -c set -eux; \tapt-get update; \tapt-get install -y --no-install-recommends \t\tca-certificates \t\tcurl \t\tnetbase \t\twget \t; \trm -rf /var/lib/apt/lists/*"},{"Order":3,"Size":18951151,"LayerId":"293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e","Command":"/bin/sh -c set -ex; \tif ! command -v gpg \u003e /dev/null; then \t\tapt-get update; \t\tapt-get install -y --no-install-recommends \t\t\tgnupg \t\t\tdirmngr \t\t; \t\trm -rf /var/lib/apt/lists/*; \tfi"},{"Order":4,"Size":151949705,"LayerId":"9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","Command":"/bin/sh -c apt-get update \u0026\u0026 apt-get install -y --no-install-recommends \t\tgit \t\tmercurial \t\topenssh-client \t\tsubversion \t\t\t\tprocps \t\u0026\u0026 rm -rf /var/lib/apt/lists/*"},{"Order":5,"Size":11314888,"LayerId":"b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","Command":"/bin/sh -c set -eux; \tapt-get update; \tapt-get install -y --no-install-recommends \t\tbzip2 \t\tunzip \t\txz-utils \t\t\t\tfontconfig libfreetype6 \t\t\t\tca-certificates p11-kit \t; \trm -rf /var/lib/apt/lists/*"},{"Order":6,"Size":0,"LayerId":"","Command":"/bin/sh -c #(nop) ENV JAVA_HOME=/usr/local/openjdk-8"},{"Order":7,"Size":27,"LayerId":"53a0b163e9955ffb80569ef37e13fbf5d1074ddd67bc5ad09d7bd874b800396a","Command":"/bin/sh -c { echo '#/bin/sh'; echo 'echo \"$JAVA_HOME\"'; } \u003e /usr/local/bin/docker-java-home \u0026\u0026 chmod +x /usr/local/bin/docker-java-home \u0026\u0026 [ \"$JAVA_HOME\" = \"$(docker-java-home)\" ] # backwards compatibility"},{"Order":8,"Size":0,"LayerId":"","Command":"/bin/sh -c #(nop) ENV PATH=/usr/local/openjdk-8/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"},{"Order":9,"Size":0,"LayerId":"","Command":"/bin/sh -c #(nop) ENV LANG=C.UTF-8"},{"Order":10,"Size":0,"LayerId":"","Command":"/bin/sh -c #(nop) ENV JAVA_VERSION=8u342"},{"Order":11,"Size":209156322,"LayerId":"6b5aaff4425423d122ebe4f1514a1994ae60954fc8a2299787df0ddb1a12f6b9","Command":"/bin/sh -c set -eux; \t\tarch=\"$(dpkg --print-architecture)\"; \tcase \"$arch\" in \t\t'amd64') \t\t\tdownloadUrl='https://github.com/AdoptOpenJDK/openjdk8-upstream-binaries/releases/download/jdk8u342-b07/OpenJDK8U-jdk_x64_linux_8u342b07.tar.gz'; \t\t\t;; \t\t'arm64') \t\t\tdownloadUrl='https://github.com/AdoptOpenJDK/openjdk8-upstream-binaries/releases/download/jdk8u342-b07/OpenJDK8U-jdk_aarch64_linux_8u342b07.tar.gz'; \t\t\t;; \t\t*) echo \u003e\u00262 \"error: unsupported architecture: '$arch'\"; exit 1 ;; \tesac; \t\twget --progress=dot:giga -O openjdk.tgz \"$downloadUrl\"; \twget --progress=dot:giga -O openjdk.tgz.asc \"$downloadUrl.sign\"; \t\texport GNUPGHOME=\"$(mktemp -d)\"; \tgpg --batch --keyserver keyserver.ubuntu.com --recv-keys EAC843EBD3EFDB98CC772FADA5CD6035332FA671; \tgpg --batch --keyserver keyserver.ubuntu.com --keyserver-options no-self-sigs-only --recv-keys CA5F11C6CE22644D42C6AC4492EF8D39DC13168F; \tgpg --batch --list-sigs --keyid-format 0xLONG CA5F11C6CE22644D42C6AC4492EF8D39DC13168F \t\t| tee /dev/stderr \t\t| grep '0xA5CD6035332FA671' \t\t| grep 'Andrew Haley'; \tgpg --batch --verify openjdk.tgz.asc openjdk.tgz; \tgpgconf --kill all; \trm -rf \"$GNUPGHOME\"; \t\tmkdir -p \"$JAVA_HOME\"; \ttar --extract \t\t--file openjdk.tgz \t\t--directory \"$JAVA_HOME\" \t\t--strip-components 1 \t\t--no-same-owner \t; \trm openjdk.tgz*; \t\t{ \t\techo '#!/usr/bin/env bash'; \t\techo 'set -Eeuo pipefail'; \t\techo 'trust extract --overwrite --format=java-cacerts --filter=ca-anchors --purpose=server-auth \"$JAVA_HOME/jre/lib/security/cacerts\"'; \t} \u003e /etc/ca-certificates/update.d/docker-openjdk; \tchmod +x /etc/ca-certificates/update.d/docker-openjdk; \t/etc/ca-certificates/update.d/docker-openjdk; \t\tfind \"$JAVA_HOME/lib\" -name '*.so' -exec dirname '{}' ';' | sort -u \u003e /etc/ld.so.conf.d/docker-openjdk.conf; \tldconfig; \t\tjavac -version; \tjava -version"}]},"ContainerPackages":[{"Name":"libss2","Version":"1.46.2-2","Distribution":"debian:11","Type":"Oval","SourceName":"e2fsprogs","SourceVersion":"1.46.2-2","Licenses":null,"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"python3-minimal","Version":"3.9.2-3","Distribution":"debian:11","Type":"Oval","SourceName":"python3-defaults","SourceVersion":"3.9.2-3","Licenses":null,"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873"]},{"Name":"nashorn","Version":"1.8.0_342-b07","Distribution":"debian:11","Type":"Maven","SourceName":"","SourceVersion":"","Licenses":null,"LayerIds":["6b5aaff4425423d122ebe4f1514a1994ae60954fc8a2299787df0ddb1a12f6b9"]},{"Name":"tools","Version":"UNKNOWN","Distribution":"debian:11","Type":"Maven","SourceName":"","SourceVersion":"","Licenses":null,"LayerIds":["6b5aaff4425423d122ebe4f1514a1994ae60954fc8a2299787df0ddb1a12f6b9"]},{"Name":"base-passwd","Version":"3.5.51","Distribution":"debian:11","Type":"Oval","SourceName":"","SourceVersion":"","Licenses":["GPL-2","public-domain"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"TransparentRuler","Version":"1.8.0_342","Distribution":"debian:11","Type":"Maven","SourceName":"","SourceVersion":"","Licenses":null,"LayerIds":["6b5aaff4425423d122ebe4f1514a1994ae60954fc8a2299787df0ddb1a12f6b9"]},{"Name":"US_export_policy","Version":"UNKNOWN","Distribution":"debian:11","Type":"Maven","SourceName":"","SourceVersion":"","Licenses":null,"LayerIds":["6b5aaff4425423d122ebe4f1514a1994ae60954fc8a2299787df0ddb1a12f6b9"]},{"Name":"libfreetype6","Version":"2.10.4+dfsg-1+deb11u1","Distribution":"debian:11","Type":"Oval","SourceName":"freetype","SourceVersion":"2.10.4+dfsg-1+deb11u1","Licenses":["Apache-2.0","BSD-3-Clause","FSFAP","FSFUL","FSFULLR","FTL","GPL-2","GPL-2+","GPL-3","GPL-3+","MIT","OFL-1.1","OpenGroup-BSD-like","Permissive","Public-Domain","Zlib"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b"]},{"Name":"libtinfo6","Version":"6.2+20201114-2","Distribution":"debian:11","Type":"Oval","SourceName":"ncurses","SourceVersion":"6.2+20201114-2","Licenses":["BSD-3-clause","MIT/X11","X11"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"libuuid1","Version":"2.36.1-8+deb11u1","Distribution":"debian:11","Type":"Oval","SourceName":"util-linux","SourceVersion":"2.36.1-8+deb11u1","Licenses":["BSD-2-clause","BSD-3-clause","BSD-4-clause","GPL-2","GPL-2+","GPL-3","GPL-3+","LGPL","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-3","LGPL-3+","MIT","public-domain"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"mawk","Version":"1.3.4.20200120-2","Distribution":"debian:11","Type":"Oval","SourceName":"","SourceVersion":"","Licenses":["GPL-2"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"ncurses-bin","Version":"6.2+20201114-2","Distribution":"debian:11","Type":"Oval","SourceName":"ncurses","SourceVersion":"6.2+20201114-2","Licenses":["BSD-3-clause","MIT/X11","X11"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"Font2DTest","Version":"1.8.0_342","Distribution":"debian:11","Type":"Maven","SourceName":"","SourceVersion":"","Licenses":null,"LayerIds":["6b5aaff4425423d122ebe4f1514a1994ae60954fc8a2299787df0ddb1a12f6b9"]},{"Name":"resources","Version":"1.8.0_342","Distribution":"debian:11","Type":"Maven","SourceName":"","SourceVersion":"","Licenses":null,"LayerIds":["6b5aaff4425423d122ebe4f1514a1994ae60954fc8a2299787df0ddb1a12f6b9"]},{"Name":"curl","Version":"7.74.0-1.3+deb11u1","Distribution":"debian:11","Type":"Oval","SourceName":"","SourceVersion":"","Licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94","03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94","03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94"]},{"Name":"grep","Version":"3.6-1","Distribution":"debian:11","Type":"Oval","SourceName":"","SourceVersion":"","Licenses":["GPL-3","GPL-3+"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"liblzma5","Version":"5.2.5-2.1~deb11u1","Distribution":"debian:11","Type":"Oval","SourceName":"xz-utils","SourceVersion":"5.2.5-2.1~deb11u1","Licenses":["Autoconf","GPL-2","GPL-2+","GPL-3","LGPL-2","LGPL-2.1","LGPL-2.1+","PD","PD-debian","config-h","noderivs","permissive-fsf","permissive-nowarranty","probably-PD"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"ucf","Version":"3.0043","Distribution":"debian:11","Type":"Oval","SourceName":"","SourceVersion":"","Licenses":["GPL-2"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873"]},{"Name":"zlib1g","Version":"1:1.2.11.dfsg-2+deb11u1","Distribution":"debian:11","Type":"Oval","SourceName":"zlib","SourceVersion":"1:1.2.11.dfsg-2+deb11u1","Licenses":["Zlib"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"charsets","Version":"UNKNOWN","Distribution":"debian:11","Type":"Maven","SourceName":"","SourceVersion":"","Licenses":null,"LayerIds":["6b5aaff4425423d122ebe4f1514a1994ae60954fc8a2299787df0ddb1a12f6b9"]},{"Name":"gpg-wks-client","Version":"2.2.27-2+deb11u2","Distribution":"debian:11","Type":"Oval","SourceName":"gnupg2","SourceVersion":"2.2.27-2+deb11u2","Licenses":["BSD-3-clause","CC0-1.0","Expat","GPL-3","GPL-3+","LGPL-2.1","LGPL-2.1+","LGPL-3","LGPL-3+","RFC-Reference","TinySCHEME","permissive"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e","293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e","293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e"]},{"Name":"libbrotli1","Version":"1.0.9-2+b2","Distribution":"debian:11","Type":"Oval","SourceName":"brotli","SourceVersion":"1.0.9-2","Licenses":["MIT"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94"]},{"Name":"libbsd0","Version":"0.11.3-1","Distribution":"debian:11","Type":"Oval","SourceName":"libbsd","SourceVersion":"0.11.3-1","Licenses":["BSD-2-clause","BSD-2-clause-NetBSD","BSD-2-clause-author","BSD-2-clause-verbatim","BSD-3-clause","BSD-3-clause-John-Birrell","BSD-3-clause-Regents","BSD-3-clause-author","BSD-4-clause-Christopher-G-Demetriou","BSD-4-clause-Niels-Provos","BSD-5-clause-Peter-Wemm","Beerware","Expat","ISC","ISC-Original","public-domain"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873"]},{"Name":"libacl1","Version":"2.2.53-10","Distribution":"debian:11","Type":"Oval","SourceName":"acl","SourceVersion":"2.2.53-10","Licenses":["GPL-2","GPL-2+","LGPL-2+","LGPL-2.1"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"libblkid1","Version":"2.36.1-8+deb11u1","Distribution":"debian:11","Type":"Oval","SourceName":"util-linux","SourceVersion":"2.36.1-8+deb11u1","Licenses":["BSD-2-clause","BSD-3-clause","BSD-4-clause","GPL-2","GPL-2+","GPL-3","GPL-3+","LGPL","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-3","LGPL-3+","MIT","public-domain"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"gpgconf","Version":"2.2.27-2+deb11u2","Distribution":"debian:11","Type":"Oval","SourceName":"gnupg2","SourceVersion":"2.2.27-2+deb11u2","Licenses":["BSD-3-clause","CC0-1.0","Expat","GPL-3","GPL-3+","LGPL-2.1","LGPL-2.1+","LGPL-3","LGPL-3+","RFC-Reference","TinySCHEME","permissive"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e","293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e","293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e"]},{"Name":"libpython3.9-minimal","Version":"3.9.2-1","Distribution":"debian:11","Type":"Oval","SourceName":"python3.9","SourceVersion":"3.9.2-1","Licenses":["By","GPL-2","Permission","Redistribution","This"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873"]},{"Name":"libsemanage-common","Version":"3.1-1","Distribution":"debian:11","Type":"Oval","SourceName":"libsemanage","SourceVersion":"3.1-1","Licenses":["GPL","LGPL"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"libext2fs2","Version":"1.46.2-2","Distribution":"debian:11","Type":"Oval","SourceName":"e2fsprogs","SourceVersion":"1.46.2-2","Licenses":["GPL-2","LGPL-2"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"adduser","Version":"3.118","Distribution":"debian:11","Type":"Oval","SourceName":"","SourceVersion":"","Licenses":["GPL-2"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"bzip2","Version":"1.0.8-4","Distribution":"debian:11","Type":"Oval","SourceName":"","SourceVersion":"","Licenses":["BSD-variant","GPL-2"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b"]},{"Name":"libcap-ng0","Version":"0.7.9-2.2+b1","Distribution":"debian:11","Type":"Oval","SourceName":"libcap-ng","SourceVersion":"0.7.9-2.2","Licenses":["GPL-2","GPL-3","LGPL-2.1"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"libssl1.1","Version":"1.1.1n-0+deb11u3","Distribution":"debian:11","Type":"Oval","SourceName":"openssl","SourceVersion":"1.1.1n-0+deb11u3","Licenses":null,"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"sysvinit-utils","Version":"2.96-7+deb11u1","Distribution":"debian:11","Type":"Oval","SourceName":"sysvinit","SourceVersion":"2.96-7+deb11u1","Licenses":["GPL-2","GPL-2+"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"SwingApplet","Version":"1.8.0_342","Distribution":"debian:11","Type":"Maven","SourceName":"","SourceVersion":"","Licenses":null,"LayerIds":["6b5aaff4425423d122ebe4f1514a1994ae60954fc8a2299787df0ddb1a12f6b9"]},{"Name":"jconsole","Version":"UNKNOWN","Distribution":"debian:11","Type":"Maven","SourceName":"","SourceVersion":"","Licenses":null,"LayerIds":["6b5aaff4425423d122ebe4f1514a1994ae60954fc8a2299787df0ddb1a12f6b9"]},{"Name":"debianutils","Version":"4.11.2","Distribution":"debian:11","Type":"Oval","SourceName":"","SourceVersion":"","Licenses":["GPL-2"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"libaudit-common","Version":"1:3.0-2","Distribution":"debian:11","Type":"Oval","SourceName":"audit","SourceVersion":"1:3.0-2","Licenses":["GPL-1","GPL-2","LGPL-2.1"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"liberror-perl","Version":"0.17029-1","Distribution":"debian:11","Type":"Oval","SourceName":"","SourceVersion":"","Licenses":["Artistic","GPL-1","GPL-1+","MIT/X11"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873"]},{"Name":"mount","Version":"2.36.1-8+deb11u1","Distribution":"debian:11","Type":"Oval","SourceName":"util-linux","SourceVersion":"2.36.1-8+deb11u1","Licenses":["BSD-2-clause","BSD-3-clause","BSD-4-clause","GPL-2","GPL-2+","GPL-3","GPL-3+","LGPL","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-3","LGPL-3+","MIT","public-domain"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"local_policy","Version":"UNKNOWN","Distribution":"debian:11","Type":"Maven","SourceName":"","SourceVersion":"","Licenses":null,"LayerIds":["6b5aaff4425423d122ebe4f1514a1994ae60954fc8a2299787df0ddb1a12f6b9"]},{"Name":"libpam0g","Version":"1.4.0-9+deb11u1","Distribution":"debian:11","Type":"Oval","SourceName":"pam","SourceVersion":"1.4.0-9+deb11u1","Licenses":["GPL"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"libp11-kit0","Version":"0.23.22-1","Distribution":"debian:11","Type":"Oval","SourceName":"p11-kit","SourceVersion":"0.23.22-1","Licenses":["BSD-3-Clause","ISC","ISC+IBM","permissive-like-automake-output","same-as-rest-of-p11kit"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"dt","Version":"UNKNOWN","Distribution":"debian:11","Type":"Maven","SourceName":"","SourceVersion":"","Licenses":null,"LayerIds":["6b5aaff4425423d122ebe4f1514a1994ae60954fc8a2299787df0ddb1a12f6b9"]},{"Name":"diffutils","Version":"1:3.7-5","Distribution":"debian:11","Type":"Oval","SourceName":"","SourceVersion":"","Licenses":["GFDL","GPL"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"git-man","Version":"1:2.30.2-1","Distribution":"debian:11","Type":"Oval","SourceName":"git","SourceVersion":"1:2.30.2-1","Licenses":["Apache-2.0","Artistic","Boost","EDL-1.0","Expat","GPL","GPL-1+","GPL-2","GPL-2+","ISC","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","dlmalloc","mingw-runtime"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873"]},{"Name":"libsystemd0","Version":"247.3-7","Distribution":"debian:11","Type":"Oval","SourceName":"systemd","SourceVersion":"247.3-7","Licenses":["CC0-1.0","Expat","GPL-2","GPL-2+","LGPL-2.1","LGPL-2.1+","public-domain"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"passwd","Version":"1:4.8.1-1","Distribution":"debian:11","Type":"Oval","SourceName":"shadow","SourceVersion":"1:4.8.1-1","Licenses":["GPL-2"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"CodePointIM","Version":"1.8.0_342","Distribution":"debian:11","Type":"Maven","SourceName":"","SourceVersion":"","Licenses":null,"LayerIds":["6b5aaff4425423d122ebe4f1514a1994ae60954fc8a2299787df0ddb1a12f6b9"]},{"Name":"zipfs","Version":"1.8.0_342","Distribution":"debian:11","Type":"Maven","SourceName":"","SourceVersion":"","Licenses":null,"LayerIds":["6b5aaff4425423d122ebe4f1514a1994ae60954fc8a2299787df0ddb1a12f6b9"]},{"Name":"libc-bin","Version":"2.31-13+deb11u3","Distribution":"debian:11","Type":"Oval","SourceName":"glibc","SourceVersion":"2.31-13+deb11u3","Licenses":["GPL-2","LGPL-2.1"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"hostname","Version":"3.23","Distribution":"debian:11","Type":"Oval","SourceName":"","SourceVersion":"","Licenses":["GPL-2"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"libaprutil1","Version":"1.6.1-5","Distribution":"debian:11","Type":"Oval","SourceName":"apr-util","SourceVersion":"1.6.1-5","Licenses":["Apache-2.0"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873"]},{"Name":"libutf8proc2","Version":"2.5.0-1","Distribution":"debian:11","Type":"Oval","SourceName":"utf8proc","SourceVersion":"2.5.0-1","Licenses":["Expat","Unicode"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873"]},{"Name":"perl-base","Version":"5.32.1-4+deb11u2","Distribution":"debian:11","Type":"Oval","SourceName":"perl","SourceVersion":"5.32.1-4+deb11u2","Licenses":["Artistic","Artistic-2","Artistic-dist","BSD-3-clause","BSD-3-clause-GENERIC","BSD-3-clause-with-weird-numbering","BSD-4-clause-POWERDOG","BZIP","DONT-CHANGE-THE-GPL","Expat","GPL-1","GPL-1+","GPL-2","GPL-2+","GPL-3+-WITH-BISON-EXCEPTION","HSIEH-BSD","HSIEH-DERIVATIVE","LGPL-2.1","REGCOMP","REGCOMP,","RRA-KEEP-THIS-NOTICE","SDBM-PUBLIC-DOMAIN","TEXT-TABS","Unicode","ZLIB"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"python3","Version":"3.9.2-3","Distribution":"debian:11","Type":"Oval","SourceName":"python3-defaults","SourceVersion":"3.9.2-3","Licenses":null,"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873"]},{"Name":"util-linux","Version":"2.36.1","Distribution":"debian:11","Type":"Unsupported","SourceName":"","SourceVersion":"","Licenses":null,"LayerIds":["9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"openjdk","Version":"1.8.0_342","Distribution":"debian:11","Type":"Unsupported","SourceName":"","SourceVersion":"","Licenses":null,"LayerIds":["6b5aaff4425423d122ebe4f1514a1994ae60954fc8a2299787df0ddb1a12f6b9"]},{"Name":"findutils","Version":"4.8.0-1","Distribution":"debian:11","Type":"Oval","SourceName":"","SourceVersion":"","Licenses":["GFDL-1.3","GPL-3"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"perl","Version":"5.32.1-4+deb11u2","Distribution":"debian:11","Type":"Oval","SourceName":"","SourceVersion":"","Licenses":["Artistic","Artistic-2","Artistic-dist","BSD-3-clause","BSD-3-clause-GENERIC","BSD-3-clause-with-weird-numbering","BSD-4-clause-POWERDOG","BZIP","DONT-CHANGE-THE-GPL","Expat","GPL-1","GPL-1+","GPL-2","GPL-2+","GPL-3+-WITH-BISON-EXCEPTION","HSIEH-BSD","HSIEH-DERIVATIVE","LGPL-2.1","REGCOMP","REGCOMP,","RRA-KEEP-THIS-NOTICE","SDBM-PUBLIC-DOMAIN","TEXT-TABS","Unicode","ZLIB"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873"]},{"Name":"tzdata","Version":"2021a-1+deb11u4","Distribution":"debian:11","Type":"Oval","SourceName":"","SourceVersion":"","Licenses":null,"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"util-linux","Version":"2.36.1-8+deb11u1","Distribution":"debian:11","Type":"Oval","SourceName":"","SourceVersion":"","Licenses":["BSD-2-clause","BSD-3-clause","BSD-4-clause","GPL-2","GPL-2+","GPL-3","GPL-3+","LGPL","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-3","LGPL-3+","MIT","public-domain"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"libpam-runtime","Version":"1.4.0-9+deb11u1","Distribution":"debian:11","Type":"Oval","SourceName":"pam","SourceVersion":"1.4.0-9+deb11u1","Licenses":["GPL"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"mercurial","Version":"5.6.1-4","Distribution":"debian:11","Type":"Oval","SourceName":"","SourceVersion":"","Licenses":["GPL-2","GPL-2+","LGPL-2.1","LGPL-2.1+"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873"]},{"Name":"tar","Version":"1.34+dfsg-1","Distribution":"debian:11","Type":"Oval","SourceName":"","SourceVersion":"","Licenses":["GPL-2","GPL-3"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"VerboseGC","Version":"1.8.0_342","Distribution":"debian:11","Type":"Maven","SourceName":"","SourceVersion":"","Licenses":null,"LayerIds":["6b5aaff4425423d122ebe4f1514a1994ae60954fc8a2299787df0ddb1a12f6b9"]},{"Name":"gnupg-l10n","Version":"2.2.27-2+deb11u2","Distribution":"debian:11","Type":"Oval","SourceName":"gnupg2","SourceVersion":"2.2.27-2+deb11u2","Licenses":["BSD-3-clause","CC0-1.0","Expat","GPL-3","GPL-3+","LGPL-2.1","LGPL-2.1+","LGPL-3","LGPL-3+","RFC-Reference","TinySCHEME","permissive"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e","293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e","293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e"]},{"Name":"libapt-pkg6.0","Version":"2.2.4","Distribution":"debian:11","Type":"Oval","SourceName":"apt","SourceVersion":"2.2.4","Licenses":["GPL-2","GPLv2+"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"libfontconfig1","Version":"2.13.1-4.2","Distribution":"debian:11","Type":"Oval","SourceName":"fontconfig","SourceVersion":"2.13.1-4.2","Licenses":null,"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b"]},{"Name":"libreadline8","Version":"8.1-1","Distribution":"debian:11","Type":"Oval","SourceName":"readline","SourceVersion":"8.1-1","Licenses":["GFDL","GPL-3"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e"]},{"Name":"com.sun:sunec","Version":"1.8.0_342","Distribution":"debian:11","Type":"Maven","SourceName":"","SourceVersion":"","Licenses":null,"LayerIds":["6b5aaff4425423d122ebe4f1514a1994ae60954fc8a2299787df0ddb1a12f6b9"]},{"Name":"xz","Version":"5.2.5","Distribution":"debian:11","Type":"Unsupported","SourceName":"","SourceVersion":"","Licenses":null,"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b"]},{"Name":"libgdbm-compat4","Version":"1.19-2","Distribution":"debian:11","Type":"Oval","SourceName":"gdbm","SourceVersion":"1.19-2","Licenses":["GFDL-NIV-1.3+","GPL-2","GPL-2+","GPL-3","GPL-3+"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873"]},{"Name":"libkeyutils1","Version":"1.6.1-2","Distribution":"debian:11","Type":"Oval","SourceName":"keyutils","SourceVersion":"1.6.1-2","Licenses":["GPL-2","GPL-2+","LGPL-2","LGPL-2+"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"libksba8","Version":"1.5.0-3","Distribution":"debian:11","Type":"Oval","SourceName":"libksba","SourceVersion":"1.5.0-3","Licenses":["FSFUL","GPL-3","LGPL-2.1-or-later"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e"]},{"Name":"libprocps8","Version":"2:3.3.17-5","Distribution":"debian:11","Type":"Oval","SourceName":"procps","SourceVersion":"2:3.3.17-5","Licenses":["GPL-2","GPL-2.0+","LGPL-2","LGPL-2.0+","LGPL-2.1","LGPL-2.1+"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873"]},{"Name":"libexpat1","Version":"2.2.10-2+deb11u3","Distribution":"debian:11","Type":"Oval","SourceName":"expat","SourceVersion":"2.2.10-2+deb11u3","Licenses":["MIT"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873"]},{"Name":"libkrb5-3","Version":"1.18.3-6+deb11u1","Distribution":"debian:11","Type":"Oval","SourceName":"krb5","SourceVersion":"1.18.3-6+deb11u1","Licenses":["GPL-2"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"libpython3.9-stdlib","Version":"3.9.2-1","Distribution":"debian:11","Type":"Oval","SourceName":"python3.9","SourceVersion":"3.9.2-1","Licenses":["By","GPL-2","Permission","Redistribution","This"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873"]},{"Name":"libperl5.32","Version":"5.32.1-4+deb11u2","Distribution":"debian:11","Type":"Oval","SourceName":"perl","SourceVersion":"5.32.1-4+deb11u2","Licenses":["Artistic","Artistic-2","Artistic-dist","BSD-3-clause","BSD-3-clause-GENERIC","BSD-3-clause-with-weird-numbering","BSD-4-clause-POWERDOG","BZIP","DONT-CHANGE-THE-GPL","Expat","GPL-1","GPL-1+","GPL-2","GPL-2+","GPL-3+-WITH-BISON-EXCEPTION","HSIEH-BSD","HSIEH-DERIVATIVE","LGPL-2.1","REGCOMP","REGCOMP,","RRA-KEEP-THIS-NOTICE","SDBM-PUBLIC-DOMAIN","TEXT-TABS","Unicode","ZLIB"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873"]},{"Name":"ncurses-base","Version":"6.2+20201114-2","Distribution":"debian:11","Type":"Oval","SourceName":"ncurses","SourceVersion":"6.2+20201114-2","Licenses":["BSD-3-clause","MIT/X11","X11"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"jfr","Version":"1.8.0_342","Distribution":"debian:11","Type":"Maven","SourceName":"","SourceVersion":"","Licenses":null,"LayerIds":["6b5aaff4425423d122ebe4f1514a1994ae60954fc8a2299787df0ddb1a12f6b9"]},{"Name":"ca-certificates","Version":"20210119","Distribution":"debian:11","Type":"Oval","SourceName":"","SourceVersion":"","Licenses":["GPL-2","GPL-2+","MPL-2.0"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94","03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94","03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94","03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94","03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94","03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94","03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94","03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94"]},{"Name":"libffi7","Version":"3.3-6","Distribution":"debian:11","Type":"Oval","SourceName":"libffi","SourceVersion":"3.3-6","Licenses":["GPL"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"libpcre3","Version":"2:8.39-13","Distribution":"debian:11","Type":"Oval","SourceName":"pcre3","SourceVersion":"2:8.39-13","Licenses":null,"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"libserf-1-1","Version":"1.3.9-10","Distribution":"debian:11","Type":"Oval","SourceName":"serf","SourceVersion":"1.3.9-10","Licenses":["Apache","Apache-2.0","Zlib"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873"]},{"Name":"examples","Version":"1.8.0_342","Distribution":"debian:11","Type":"Maven","SourceName":"","SourceVersion":"","Licenses":null,"LayerIds":["6b5aaff4425423d122ebe4f1514a1994ae60954fc8a2299787df0ddb1a12f6b9"]},{"Name":"gcc-10-base","Version":"10.2.1-6","Distribution":"debian:11","Type":"Oval","SourceName":"gcc-10","SourceVersion":"10.2.1-6","Licenses":["Artistic","GFDL-1.2","GPL","GPL-2","GPL-3","LGPL"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"lsb-base","Version":"11.1.0","Distribution":"debian:11","Type":"Oval","SourceName":"lsb","SourceVersion":"11.1.0","Licenses":["BSD-3-clause","GPL-2"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"minst","Version":"1.8.0_342","Distribution":"debian:11","Type":"Maven","SourceName":"","SourceVersion":"","Licenses":null,"LayerIds":["6b5aaff4425423d122ebe4f1514a1994ae60954fc8a2299787df0ddb1a12f6b9"]},{"Name":"jconsole-plugin","Version":"1.8.0_342","Distribution":"debian:11","Type":"Maven","SourceName":"","SourceVersion":"","Licenses":null,"LayerIds":["6b5aaff4425423d122ebe4f1514a1994ae60954fc8a2299787df0ddb1a12f6b9"]},{"Name":"debconf","Version":"1.5.77","Distribution":"debian:11","Type":"Oval","SourceName":"","SourceVersion":"","Licenses":["BSD-2-clause"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"gpg-agent","Version":"2.2.27-2+deb11u2","Distribution":"debian:11","Type":"Oval","SourceName":"gnupg2","SourceVersion":"2.2.27-2+deb11u2","Licenses":["BSD-3-clause","CC0-1.0","Expat","GPL-3","GPL-3+","LGPL-2.1","LGPL-2.1+","LGPL-3","LGPL-3+","RFC-Reference","TinySCHEME","permissive"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e","293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e","293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e","293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e","293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e","293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e"]},{"Name":"libbz2-1.0","Version":"1.0.8-4","Distribution":"debian:11","Type":"Oval","SourceName":"bzip2","SourceVersion":"1.0.8-4","Licenses":["BSD-variant","GPL-2"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"libtirpc3","Version":"1.3.1-1","Distribution":"debian:11","Type":"Oval","SourceName":"libtirpc","SourceVersion":"1.3.1-1","Licenses":["BSD-3-Clause","GPL-2","LGPL-2.1"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"debian-archive-keyring","Version":"2021.1.1","Distribution":"debian:11","Type":"Oval","SourceName":"","SourceVersion":"","Licenses":["GPL"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"libgpg-error0","Version":"1.38-2","Distribution":"debian:11","Type":"Oval","SourceName":"libgpg-error","SourceVersion":"1.38-2","Licenses":["BSD-3-clause","GPL-3","GPL-3+","LGPL-2.1","LGPL-2.1+","g10-permissive"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"libtirpc-common","Version":"1.3.1-1","Distribution":"debian:11","Type":"Oval","SourceName":"libtirpc","SourceVersion":"1.3.1-1","Licenses":["BSD-3-Clause","GPL-2","LGPL-2.1"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"libunistring2","Version":"0.9.10-4","Distribution":"debian:11","Type":"Oval","SourceName":"libunistring","SourceVersion":"0.9.10-4","Licenses":["FreeSoftware","GFDL-1.2","GFDL-1.2+","GPL-2","GPL-2+","GPL-3","GPL-3+","LGPL-3","LGPL-3+","MIT"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"libxxhash0","Version":"0.8.0-2","Distribution":"debian:11","Type":"Oval","SourceName":"xxhash","SourceVersion":"0.8.0-2","Licenses":["BSD-2-clause","GPL-2"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"libseccomp2","Version":"2.5.1-1+deb11u1","Distribution":"debian:11","Type":"Oval","SourceName":"libseccomp","SourceVersion":"2.5.1-1+deb11u1","Licenses":["LGPL-2.1"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"libstdc++6","Version":"10.2.1-6","Distribution":"debian:11","Type":"Oval","SourceName":"gcc-10","SourceVersion":"10.2.1-6","Licenses":["Artistic","GFDL-1.2","GPL","GPL-2","GPL-3","LGPL"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"media-types","Version":"4.0.0","Distribution":"debian:11","Type":"Oval","SourceName":"","SourceVersion":"","Licenses":["ad-hoc"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873"]},{"Name":"jaccess","Version":"UNKNOWN","Distribution":"debian:11","Type":"Maven","SourceName":"","SourceVersion":"","Licenses":null,"LayerIds":["6b5aaff4425423d122ebe4f1514a1994ae60954fc8a2299787df0ddb1a12f6b9"]},{"Name":"jsse","Version":"1.8.0_342","Distribution":"debian:11","Type":"Maven","SourceName":"","SourceVersion":"","Licenses":null,"LayerIds":["6b5aaff4425423d122ebe4f1514a1994ae60954fc8a2299787df0ddb1a12f6b9"]},{"Name":"fontconfig","Version":"2.13.1-4.2","Distribution":"debian:11","Type":"Oval","SourceName":"","SourceVersion":"","Licenses":null,"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b"]},{"Name":"init-system-helpers","Version":"1.60","Distribution":"debian:11","Type":"Oval","SourceName":"","SourceVersion":"","Licenses":["BSD-3-clause","GPL-2","GPL-2+"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"libgdbm6","Version":"1.19-2","Distribution":"debian:11","Type":"Oval","SourceName":"gdbm","SourceVersion":"1.19-2","Licenses":["GFDL-NIV-1.3+","GPL-2","GPL-2+","GPL-3","GPL-3+"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873"]},{"Name":"libnsl2","Version":"1.3.0-2","Distribution":"debian:11","Type":"Oval","SourceName":"libnsl","SourceVersion":"1.3.0-2","Licenses":["BSD-3-clause","GPL-2","GPL-2+-autoconf-exception","GPL-2+-libtool-exception","GPL-3","GPL-3+-autoconf-exception","LGPL-2.1","LGPL-2.1+","MIT","permissive-autoconf-m4","permissive-autoconf-m4-no-warranty","permissive-configure","permissive-fsf","permissive-makefile-in"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"localedata","Version":"UNKNOWN","Distribution":"debian:11","Type":"Maven","SourceName":"","SourceVersion":"","Licenses":null,"LayerIds":["6b5aaff4425423d122ebe4f1514a1994ae60954fc8a2299787df0ddb1a12f6b9"]},{"Name":"openssl","Version":"1.1.1n","Distribution":"debian:11","Type":"Unsupported","SourceName":"","SourceVersion":"","Licenses":null,"LayerIds":["03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94"]},{"Name":"libmount1","Version":"2.36.1-8+deb11u1","Distribution":"debian:11","Type":"Oval","SourceName":"util-linux","SourceVersion":"2.36.1-8+deb11u1","Licenses":["BSD-2-clause","BSD-3-clause","BSD-4-clause","GPL-2","GPL-2+","GPL-3","GPL-3+","LGPL","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-3","LGPL-3+","MIT","public-domain"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"libnettle8","Version":"3.7.3-1","Distribution":"debian:11","Type":"Oval","SourceName":"nettle","SourceVersion":"3.7.3-1","Licenses":["Expat","GAP","GPL","GPL-2","GPL-2+","GPL-3+","LGPL","LGPL-2","LGPL-2+","LGPL-3+","public-domain"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"libattr1","Version":"1:2.4.48-6","Distribution":"debian:11","Type":"Oval","SourceName":"attr","SourceVersion":"1:2.4.48-6","Licenses":["GPL-2","GPL-2+","LGPL-2+","LGPL-2.1"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"mtrace","Version":"1.8.0_342","Distribution":"debian:11","Type":"Maven","SourceName":"","SourceVersion":"","Licenses":null,"LayerIds":["6b5aaff4425423d122ebe4f1514a1994ae60954fc8a2299787df0ddb1a12f6b9"]},{"Name":"cldrdata","Version":"UNKNOWN","Distribution":"debian:11","Type":"Maven","SourceName":"","SourceVersion":"","Licenses":null,"LayerIds":["6b5aaff4425423d122ebe4f1514a1994ae60954fc8a2299787df0ddb1a12f6b9"]},{"Name":"git","Version":"1:2.30.2-1","Distribution":"debian:11","Type":"Oval","SourceName":"","SourceVersion":"","Licenses":["Apache-2.0","Artistic","Boost","EDL-1.0","Expat","GPL","GPL-1+","GPL-2","GPL-2+","ISC","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","dlmalloc","mingw-runtime"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873"]},{"Name":"gnupg-utils","Version":"2.2.27-2+deb11u2","Distribution":"debian:11","Type":"Oval","SourceName":"gnupg2","SourceVersion":"2.2.27-2+deb11u2","Licenses":["BSD-3-clause","CC0-1.0","Expat","GPL-3","GPL-3+","LGPL-2.1","LGPL-2.1+","LGPL-3","LGPL-3+","RFC-Reference","TinySCHEME","permissive"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e","293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e","293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e"]},{"Name":"libsmartcols1","Version":"2.36.1-8+deb11u1","Distribution":"debian:11","Type":"Oval","SourceName":"util-linux","SourceVersion":"2.36.1-8+deb11u1","Licenses":["BSD-2-clause","BSD-3-clause","BSD-4-clause","GPL-2","GPL-2+","GPL-3","GPL-3+","LGPL","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-3","LGPL-3+","MIT","public-domain"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"unzip","Version":"6.0-26","Distribution":"debian:11","Type":"Oval","SourceName":"","SourceVersion":"","Licenses":null,"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b"]},{"Name":"libedit2","Version":"3.1-20191231-2+b1","Distribution":"debian:11","Type":"Oval","SourceName":"libedit","SourceVersion":"3.1-20191231-2","Licenses":["BSD-3-clause"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873"]},{"Name":"libsemanage1","Version":"3.1-1+b2","Distribution":"debian:11","Type":"Oval","SourceName":"libsemanage","SourceVersion":"3.1-1","Licenses":["GPL","LGPL"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"libsvn1","Version":"1.14.1-3+deb11u1","Distribution":"debian:11","Type":"Oval","SourceName":"subversion","SourceVersion":"1.14.1-3+deb11u1","Licenses":["AFL-3","Apache-2.0","BSD-2-clause","BSD-3-clause","BoostAcMacros","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","Svnwrap","Unicode","Utfwidth"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873"]},{"Name":"MoleculeViewer","Version":"1.8.0_342","Distribution":"debian:11","Type":"Maven","SourceName":"","SourceVersion":"","Licenses":null,"LayerIds":["6b5aaff4425423d122ebe4f1514a1994ae60954fc8a2299787df0ddb1a12f6b9"]},{"Name":"Notepad","Version":"1.8.0_342","Distribution":"debian:11","Type":"Maven","SourceName":"","SourceVersion":"","Licenses":null,"LayerIds":["6b5aaff4425423d122ebe4f1514a1994ae60954fc8a2299787df0ddb1a12f6b9"]},{"Name":"gzip","Version":"1.10","Distribution":"debian:11","Type":"Unsupported","SourceName":"","SourceVersion":"","Licenses":null,"LayerIds":["9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"libnpth0","Version":"1.6-3","Distribution":"debian:11","Type":"Oval","SourceName":"npth","SourceVersion":"1.6-3","Licenses":["LGPL-2.1","LGPL-2.1+"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e"]},{"Name":"subversion","Version":"1.14.1-3+deb11u1","Distribution":"debian:11","Type":"Oval","SourceName":"","SourceVersion":"","Licenses":["AFL-3","Apache-2.0","BSD-2-clause","BSD-3-clause","BoostAcMacros","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","Svnwrap","Unicode","Utfwidth"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873"]},{"Name":"bash","Version":"5.1-2+deb11u1","Distribution":"debian:11","Type":"Oval","SourceName":"","SourceVersion":"","Licenses":["GPL-3"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"dirmngr","Version":"2.2.27-2+deb11u2","Distribution":"debian:11","Type":"Oval","SourceName":"gnupg2","SourceVersion":"2.2.27-2+deb11u2","Licenses":["BSD-3-clause","CC0-1.0","Expat","GPL-3","GPL-3+","LGPL-2.1","LGPL-2.1+","LGPL-3","LGPL-3+","RFC-Reference","TinySCHEME","permissive"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e","293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e","293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e","293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e","293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e","293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e","293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e"]},{"Name":"libudev1","Version":"247.3-7","Distribution":"debian:11","Type":"Oval","SourceName":"systemd","SourceVersion":"247.3-7","Licenses":["CC0-1.0","Expat","GPL-2","GPL-2+","LGPL-2.1","LGPL-2.1+","public-domain"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"readline-common","Version":"8.1-1","Distribution":"debian:11","Type":"Oval","SourceName":"readline","SourceVersion":"8.1-1","Licenses":["GFDL","GPL-3"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e","293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e","293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e","293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e","293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e"]},{"Name":"com.sun:sunjce_provider","Version":"1.8.0_342","Distribution":"debian:11","Type":"Maven","SourceName":"","SourceVersion":"","Licenses":null,"LayerIds":["6b5aaff4425423d122ebe4f1514a1994ae60954fc8a2299787df0ddb1a12f6b9"]},{"Name":"libassuan0","Version":"2.5.3-7.1","Distribution":"debian:11","Type":"Oval","SourceName":"libassuan","SourceVersion":"2.5.3-7.1","Licenses":["GAP","GAP~FSF","GPL-2","GPL-2+","GPL-3","GPL-3+","LGPL-2.1","LGPL-2.1+","LGPL-3","LGPL-3+"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e"]},{"Name":"libpng16-16","Version":"1.6.37-3","Distribution":"debian:11","Type":"Oval","SourceName":"libpng1.6","SourceVersion":"1.6.37-3","Licenses":["Apache-2.0","BSD-3-clause","BSD-like-with-advertising-clause","GPL-2","GPL-2+","expat","libpng"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b"]},{"Name":"libgssapi-krb5-2","Version":"1.18.3-6+deb11u1","Distribution":"debian:11","Type":"Oval","SourceName":"krb5","SourceVersion":"1.18.3-6+deb11u1","Licenses":["GPL-2"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"SampleTree","Version":"1.8.0_342","Distribution":"debian:11","Type":"Maven","SourceName":"","SourceVersion":"","Licenses":null,"LayerIds":["6b5aaff4425423d122ebe4f1514a1994ae60954fc8a2299787df0ddb1a12f6b9"]},{"Name":"heapTracker","Version":"1.8.0_342","Distribution":"debian:11","Type":"Maven","SourceName":"","SourceVersion":"","Licenses":null,"LayerIds":["6b5aaff4425423d122ebe4f1514a1994ae60954fc8a2299787df0ddb1a12f6b9"]},{"Name":"management-agent","Version":"UNKNOWN","Distribution":"debian:11","Type":"Maven","SourceName":"","SourceVersion":"","Licenses":null,"LayerIds":["6b5aaff4425423d122ebe4f1514a1994ae60954fc8a2299787df0ddb1a12f6b9"]},{"Name":"base-files","Version":"11.1+deb11u4","Distribution":"debian:11","Type":"Oval","SourceName":"","SourceVersion":"","Licenses":["GPL"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"libsasl2-modules-db","Version":"2.1.27+dfsg-2.1+deb11u1","Distribution":"debian:11","Type":"Oval","SourceName":"cyrus-sasl2","SourceVersion":"2.1.27+dfsg-2.1+deb11u1","Licenses":["BSD-4-clause","GPL-3","GPL-3+"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94"]},{"Name":"p11-kit","Version":"0.23.22-1","Distribution":"debian:11","Type":"Oval","SourceName":"","SourceVersion":"","Licenses":["BSD-3-Clause","ISC","ISC+IBM","permissive-like-automake-output","same-as-rest-of-p11kit"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b"]},{"Name":"gcc-9-base","Version":"9.3.0-22","Distribution":"debian:11","Type":"Oval","SourceName":"gcc-9","SourceVersion":"9.3.0-22","Licenses":["Artistic","GFDL-1.2","GPL","GPL-2","GPL-3","LGPL","LGPL-2.1+"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"libaudit1","Version":"1:3.0-2","Distribution":"debian:11","Type":"Oval","SourceName":"audit","SourceVersion":"1:3.0-2","Licenses":["GPL-1","GPL-2","LGPL-2.1"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"libcrypt1","Version":"1:4.4.18-4","Distribution":"debian:11","Type":"Oval","SourceName":"libxcrypt","SourceVersion":"1:4.4.18-4","Licenses":null,"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"libidn2-0","Version":"2.3.0-5","Distribution":"debian:11","Type":"Oval","SourceName":"libidn2","SourceVersion":"2.3.0-5","Licenses":["GPL-2","GPL-2+","GPL-3","GPL-3+","LGPL-3","LGPL-3+","Unicode"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"libselinux1","Version":"3.1-3","Distribution":"debian:11","Type":"Oval","SourceName":"libselinux","SourceVersion":"3.1-3","Licenses":["GPL-2","LGPL-2.1"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"mercurial-common","Version":"5.6.1-4","Distribution":"debian:11","Type":"Oval","SourceName":"mercurial","SourceVersion":"5.6.1-4","Licenses":["GPL-2","GPL-2+","LGPL-2.1","LGPL-2.1+"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873"]},{"Name":"fonts-dejavu-core","Version":"2.37-2","Distribution":"debian:11","Type":"Oval","SourceName":"fonts-dejavu","SourceVersion":"2.37-2","Licenses":["GPL-2","GPL-2+","bitstream-vera"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b"]},{"Name":"gzip","Version":"1.10-4+deb11u1","Distribution":"debian:11","Type":"Oval","SourceName":"","SourceVersion":"","Licenses":["FSF-manpages","GFDL-1.3+-no-invariant","GFDL-3","GPL-3","GPL-3+"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"libdb5.3","Version":"5.3.28+dfsg1-0.8","Distribution":"debian:11","Type":"Oval","SourceName":"db5.3","SourceVersion":"5.3.28+dfsg1-0.8","Licenses":null,"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"libldap-2.4-2","Version":"2.4.57+dfsg-3+deb11u1","Distribution":"debian:11","Type":"Oval","SourceName":"openldap","SourceVersion":"2.4.57+dfsg-3+deb11u1","Licenses":null,"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94"]},{"Name":"libssh2-1","Version":"1.9.0-2","Distribution":"debian:11","Type":"Oval","SourceName":"libssh2","SourceVersion":"1.9.0-2","Licenses":["BSD3"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94"]},{"Name":"bsdutils","Version":"1:2.36.1-8+deb11u1","Distribution":"debian:11","Type":"Oval","SourceName":"util-linux","SourceVersion":"2.36.1-8+deb11u1","Licenses":["BSD-2-clause","BSD-3-clause","BSD-4-clause","GPL-2","GPL-2+","GPL-3","GPL-3+","LGPL","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-3","LGPL-3+","MIT","public-domain"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"libgcc-s1","Version":"10.2.1-6","Distribution":"debian:11","Type":"Oval","SourceName":"gcc-10","SourceVersion":"10.2.1-6","Licenses":["Artistic","GFDL-1.2","GPL","GPL-2","GPL-3","LGPL"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"libgmp10","Version":"2:6.2.1+dfsg-1+deb11u1","Distribution":"debian:11","Type":"Oval","SourceName":"gmp","SourceVersion":"2:6.2.1+dfsg-1+deb11u1","Licenses":["GPL","GPL-2","GPL-3","LGPL-3"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"sensible-utils","Version":"0.0.14","Distribution":"debian:11","Type":"Oval","SourceName":"","SourceVersion":"","Licenses":["All-permissive","GPL-2","GPL-2+","configure","installsh"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873"]},{"Name":"libpython3-stdlib","Version":"3.9.2-3","Distribution":"debian:11","Type":"Oval","SourceName":"python3-defaults","SourceVersion":"3.9.2-3","Licenses":null,"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873"]},{"Name":"FullThreadDump","Version":"1.8.0_342","Distribution":"debian:11","Type":"Maven","SourceName":"","SourceVersion":"","Licenses":null,"LayerIds":["6b5aaff4425423d122ebe4f1514a1994ae60954fc8a2299787df0ddb1a12f6b9"]},{"Name":"libc6","Version":"2.31-13+deb11u3","Distribution":"debian:11","Type":"Oval","SourceName":"glibc","SourceVersion":"2.31-13+deb11u3","Licenses":["GPL-2","LGPL-2.1"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"apt","Version":"2.2.4","Distribution":"debian:11","Type":"Oval","SourceName":"","SourceVersion":"","Licenses":["GPL-2","GPLv2+"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"libpam-modules-bin","Version":"1.4.0-9+deb11u1","Distribution":"debian:11","Type":"Oval","SourceName":"pam","SourceVersion":"1.4.0-9+deb11u1","Licenses":["GPL"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"libsasl2-2","Version":"2.1.27+dfsg-2.1+deb11u1","Distribution":"debian:11","Type":"Oval","SourceName":"cyrus-sasl2","SourceVersion":"2.1.27+dfsg-2.1+deb11u1","Licenses":["BSD-4-clause","GPL-3","GPL-3+"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94"]},{"Name":"login","Version":"1:4.8.1-1","Distribution":"debian:11","Type":"Oval","SourceName":"shadow","SourceVersion":"1:4.8.1-1","Licenses":["GPL-2"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"dpkg","Version":"1.20.11","Distribution":"debian:11","Type":"Oval","SourceName":"","SourceVersion":"","Licenses":["BSD-2-clause","GPL-2","GPL-2+","public-domain-md5","public-domain-s-s-d"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"libmd0","Version":"1.0.3-3","Distribution":"debian:11","Type":"Oval","SourceName":"libmd","SourceVersion":"1.0.3-3","Licenses":["BSD-2-clause","BSD-2-clause-NetBSD","BSD-3-clause","BSD-3-clause-Aaron-D-Gifford","Beerware","ISC","public-domain-md4","public-domain-md5","public-domain-sha1"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873"]},{"Name":"python3.9-minimal","Version":"3.9.2-1","Distribution":"debian:11","Type":"Oval","SourceName":"python3.9","SourceVersion":"3.9.2-1","Licenses":["By","GPL-2","Permission","Redistribution","This"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873"]},{"Name":"libhogweed6","Version":"3.7.3-1","Distribution":"debian:11","Type":"Oval","SourceName":"nettle","SourceVersion":"3.7.3-1","Licenses":["Expat","GAP","GPL","GPL-2","GPL-2+","GPL-3+","LGPL","LGPL-2","LGPL-2+","LGPL-3+","public-domain"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"libmpdec3","Version":"2.5.1-1","Distribution":"debian:11","Type":"Oval","SourceName":"mpdecimal","SourceVersion":"2.5.1-1","Licenses":["BSD","GPL-2","GPL-2+"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873"]},{"Name":"libcom-err2","Version":"1.46.2-2","Distribution":"debian:11","Type":"Oval","SourceName":"e2fsprogs","SourceVersion":"1.46.2-2","Licenses":null,"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"libgcrypt20","Version":"1.8.7-6","Distribution":"debian:11","Type":"Oval","SourceName":"","SourceVersion":"","Licenses":["GPL-2","LGPL"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"libncurses6","Version":"6.2+20201114-2","Distribution":"debian:11","Type":"Oval","SourceName":"ncurses","SourceVersion":"6.2+20201114-2","Licenses":["BSD-3-clause","MIT/X11","X11"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"libpcre2-8-0","Version":"10.36-2","Distribution":"debian:11","Type":"Oval","SourceName":"pcre2","SourceVersion":"10.36-2","Licenses":null,"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"pinentry-curses","Version":"1.1.0-4","Distribution":"debian:11","Type":"Oval","SourceName":"pinentry","SourceVersion":"1.1.0-4","Licenses":["GPL-2","GPL-2+","LGPL-3","LGPL-3+","X11"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e","293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e","293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e","293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e","293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e"]},{"Name":"dnsns","Version":"UNKNOWN","Distribution":"debian:11","Type":"Maven","SourceName":"","SourceVersion":"","Licenses":null,"LayerIds":["6b5aaff4425423d122ebe4f1514a1994ae60954fc8a2299787df0ddb1a12f6b9"]},{"Name":"curl","Version":"7.74.0","Distribution":"debian:11","Type":"Unsupported","SourceName":"","SourceVersion":"","Licenses":null,"LayerIds":["03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94"]},{"Name":"e2fsprogs","Version":"1.46.2-2","Distribution":"debian:11","Type":"Oval","SourceName":"","SourceVersion":"","Licenses":["GPL-2","LGPL-2"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"libgnutls30","Version":"3.7.1-5+deb11u1","Distribution":"debian:11","Type":"Oval","SourceName":"gnutls28","SourceVersion":"3.7.1-5+deb11u1","Licenses":["Apache-2.0","BSD-3-Clause","CC0","Expat","GFDL-1.3","GPL","GPL-3","GPLv3+","LGPL","LGPL-3","LGPLv2.1+","LGPLv3+_or_GPLv2+","The"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"sed","Version":"4.7-1","Distribution":"debian:11","Type":"Oval","SourceName":"","SourceVersion":"","Licenses":["GPL-3"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"JTop","Version":"1.8.0_342","Distribution":"debian:11","Type":"Maven","SourceName":"","SourceVersion":"","Licenses":null,"LayerIds":["6b5aaff4425423d122ebe4f1514a1994ae60954fc8a2299787df0ddb1a12f6b9"]},{"Name":"sa-jdi","Version":"UNKNOWN","Distribution":"debian:11","Type":"Maven","SourceName":"","SourceVersion":"","Licenses":null,"LayerIds":["6b5aaff4425423d122ebe4f1514a1994ae60954fc8a2299787df0ddb1a12f6b9"]},{"Name":"libkrb5support0","Version":"1.18.3-6+deb11u1","Distribution":"debian:11","Type":"Oval","SourceName":"krb5","SourceVersion":"1.18.3-6+deb11u1","Licenses":["GPL-2"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"libncursesw6","Version":"6.2+20201114-2","Distribution":"debian:11","Type":"Oval","SourceName":"ncurses","SourceVersion":"6.2+20201114-2","Licenses":["BSD-3-clause","MIT/X11","X11"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"libnghttp2-14","Version":"1.43.0-1","Distribution":"debian:11","Type":"Oval","SourceName":"nghttp2","SourceVersion":"1.43.0-1","Licenses":["BSD-2-clause","Expat","GPL-3","GPL-3+","MIT","SIL-OFL-1.1","all-permissive"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94"]},{"Name":"libsqlite3-0","Version":"3.34.1-3","Distribution":"debian:11","Type":"Oval","SourceName":"sqlite3","SourceVersion":"3.34.1-3","Licenses":["GPL-2","GPL-2+","public-domain"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e"]},{"Name":"python3.9","Version":"3.9.2-1","Distribution":"debian:11","Type":"Oval","SourceName":"","SourceVersion":"","Licenses":["By","GPL-2","Permission","Redistribution","This"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873"]},{"Name":"com.sun:sunpkcs11","Version":"1.8.0_342","Distribution":"debian:11","Type":"Maven","SourceName":"","SourceVersion":"","Licenses":null,"LayerIds":["6b5aaff4425423d122ebe4f1514a1994ae60954fc8a2299787df0ddb1a12f6b9"]},{"Name":"Metalworks","Version":"1.8.0_342","Distribution":"debian:11","Type":"Maven","SourceName":"","SourceVersion":"","Licenses":null,"LayerIds":["6b5aaff4425423d122ebe4f1514a1994ae60954fc8a2299787df0ddb1a12f6b9"]},{"Name":"rt","Version":"1.8.0_342","Distribution":"debian:11","Type":"Maven","SourceName":"","SourceVersion":"","Licenses":null,"LayerIds":["6b5aaff4425423d122ebe4f1514a1994ae60954fc8a2299787df0ddb1a12f6b9"]},{"Name":"fontconfig-config","Version":"2.13.1-4.2","Distribution":"debian:11","Type":"Oval","SourceName":"fontconfig","SourceVersion":"2.13.1-4.2","Licenses":null,"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b"]},{"Name":"libapr1","Version":"1.7.0-6+deb11u1","Distribution":"debian:11","Type":"Oval","SourceName":"apr","SourceVersion":"1.7.0-6+deb11u1","Licenses":["Apache-2.0"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873"]},{"Name":"openssl","Version":"1.1.1n-0+deb11u3","Distribution":"debian:11","Type":"Oval","SourceName":"","SourceVersion":"","Licenses":null,"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94","03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94","03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94","03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94","03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94"]},{"Name":"p11-kit-modules","Version":"0.23.22-1","Distribution":"debian:11","Type":"Oval","SourceName":"p11-kit","SourceVersion":"0.23.22-1","Licenses":["BSD-3-Clause","ISC","ISC+IBM","permissive-like-automake-output","same-as-rest-of-p11kit"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"TableExample","Version":"1.8.0_342","Distribution":"debian:11","Type":"Maven","SourceName":"","SourceVersion":"","Licenses":null,"LayerIds":["6b5aaff4425423d122ebe4f1514a1994ae60954fc8a2299787df0ddb1a12f6b9"]},{"Name":"dash","Version":"0.5.11+git20200708+dd9ef66-5","Distribution":"debian:11","Type":"Oval","SourceName":"","SourceVersion":"","Licenses":["BSD-3-Clause","BSD-3-clause","Expat","FSFUL","FSFULLR","GPL-2","GPL-2+","public-domain"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"gpg","Version":"2.2.27-2+deb11u2","Distribution":"debian:11","Type":"Oval","SourceName":"gnupg2","SourceVersion":"2.2.27-2+deb11u2","Licenses":["BSD-3-clause","CC0-1.0","Expat","GPL-3","GPL-3+","LGPL-2.1","LGPL-2.1+","LGPL-3","LGPL-3+","RFC-Reference","TinySCHEME","permissive"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e","293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e","293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e"]},{"Name":"openssh-client","Version":"1:8.4p1-5+deb11u1","Distribution":"debian:11","Type":"Oval","SourceName":"openssh","SourceVersion":"1:8.4p1-5+deb11u1","Licenses":["BSD-2-clause","BSD-3-clause","Beer-ware","Expat-with-advertising-restriction","Mazieres-BSD-style","OpenSSH","Powell-BSD-style","public-domain"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873"]},{"Name":"com.sun:jce","Version":"1.8.0_342","Distribution":"debian:11","Type":"Maven","SourceName":"","SourceVersion":"","Licenses":null,"LayerIds":["6b5aaff4425423d122ebe4f1514a1994ae60954fc8a2299787df0ddb1a12f6b9"]},{"Name":"bash","Version":"5.1.4","Distribution":"debian:11","Type":"Unsupported","SourceName":"","SourceVersion":"","Licenses":null,"LayerIds":["9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"netbase","Version":"6.3","Distribution":"debian:11","Type":"Oval","SourceName":"","SourceVersion":"","Licenses":["GPL-2"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94","03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94","03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94","03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94","03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94","03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94"]},{"Name":"WireFrame","Version":"1.8.0_342","Distribution":"debian:11","Type":"Maven","SourceName":"","SourceVersion":"","Licenses":null,"LayerIds":["6b5aaff4425423d122ebe4f1514a1994ae60954fc8a2299787df0ddb1a12f6b9"]},{"Name":"MemoryMonitor","Version":"1.8.0_342","Distribution":"debian:11","Type":"Maven","SourceName":"","SourceVersion":"","Licenses":null,"LayerIds":["6b5aaff4425423d122ebe4f1514a1994ae60954fc8a2299787df0ddb1a12f6b9"]},{"Name":"gpgv","Version":"2.2.27-2+deb11u2","Distribution":"debian:11","Type":"Oval","SourceName":"gnupg2","SourceVersion":"2.2.27-2+deb11u2","Licenses":["BSD-3-clause","CC0-1.0","Expat","GPL-3","GPL-3+","LGPL-2.1","LGPL-2.1+","LGPL-3","LGPL-3+","RFC-Reference","TinySCHEME","permissive"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"libcbor0","Version":"0.5.0+dfsg-2","Distribution":"debian:11","Type":"Oval","SourceName":"libcbor","SourceVersion":"0.5.0+dfsg-2","Licenses":["Apache-2.0","Expat"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873"]},{"Name":"libsepol1","Version":"3.1-1","Distribution":"debian:11","Type":"Oval","SourceName":"libsepol","SourceVersion":"3.1-1","Licenses":["GPL","LGPL"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"logsave","Version":"1.46.2-2","Distribution":"debian:11","Type":"Oval","SourceName":"e2fsprogs","SourceVersion":"1.46.2-2","Licenses":["GPL-2","LGPL-2"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"libcurl3-gnutls","Version":"7.74.0-1.3+deb11u2","Distribution":"debian:11","Type":"Oval","SourceName":"curl","SourceVersion":"7.74.0-1.3+deb11u2","Licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873"]},{"Name":"libdebconfclient0","Version":"0.260","Distribution":"debian:11","Type":"Oval","SourceName":"cdebconf","SourceVersion":"0.260","Licenses":null,"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"libfido2-1","Version":"1.6.0-2","Distribution":"debian:11","Type":"Oval","SourceName":"libfido2","SourceVersion":"1.6.0-2","Licenses":["BSD-2-clause","ISC","public-domain"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873"]},{"Name":"libk5crypto3","Version":"1.18.3-6+deb11u1","Distribution":"debian:11","Type":"Oval","SourceName":"krb5","SourceVersion":"1.18.3-6+deb11u1","Licenses":["GPL-2"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"libpam-modules","Version":"1.4.0-9+deb11u1","Distribution":"debian:11","Type":"Oval","SourceName":"pam","SourceVersion":"1.4.0-9+deb11u1","Licenses":["GPL"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"procps","Version":"2:3.3.17-5","Distribution":"debian:11","Type":"Oval","SourceName":"","SourceVersion":"","Licenses":["GPL-2","GPL-2.0+","LGPL-2","LGPL-2.0+","LGPL-2.1","LGPL-2.1+"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873"]},{"Name":"liblz4-1","Version":"1.9.3-2","Distribution":"debian:11","Type":"Oval","SourceName":"lz4","SourceVersion":"1.9.3-2","Licenses":["BSD-2-clause","GPL-2","GPL-2+"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"libtasn1-6","Version":"4.16.0-2","Distribution":"debian:11","Type":"Oval","SourceName":"","SourceVersion":"","Licenses":["GFDL-1.3","GPL-3","LGPL","LGPL-2.1"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"wget","Version":"1.21-1+deb11u1","Distribution":"debian:11","Type":"Oval","SourceName":"","SourceVersion":"","Licenses":["GFDL-1.2","GPL-3"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94","03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94","03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94","03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94"]},{"Name":"xz-utils","Version":"5.2.5-2.1~deb11u1","Distribution":"debian:11","Type":"Oval","SourceName":"","SourceVersion":"","Licenses":["Autoconf","GPL-2","GPL-2+","GPL-3","LGPL-2","LGPL-2.1","LGPL-2.1+","PD","PD-debian","config-h","noderivs","permissive-fsf","permissive-nowarranty","probably-PD"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b"]},{"Name":"python","Version":"3.9.2","Distribution":"debian:11","Type":"Unsupported","SourceName":"","SourceVersion":"","Licenses":null,"LayerIds":["9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873"]},{"Name":"librtmp1","Version":"2.4+20151223.gitfa8646d.1-2+b2","Distribution":"debian:11","Type":"Oval","SourceName":"rtmpdump","SourceVersion":"2.4+20151223.gitfa8646d.1-2","Licenses":["GPL-2","LGPL-2.1"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94"]},{"Name":"coreutils","Version":"8.32-4+b1","Distribution":"debian:11","Type":"Oval","SourceName":"coreutils","SourceVersion":"8.32-4","Licenses":["GPL-3"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"gpg-wks-server","Version":"2.2.27-2+deb11u2","Distribution":"debian:11","Type":"Oval","SourceName":"gnupg2","SourceVersion":"2.2.27-2+deb11u2","Licenses":["BSD-3-clause","CC0-1.0","Expat","GPL-3","GPL-3+","LGPL-2.1","LGPL-2.1+","LGPL-3","LGPL-3+","RFC-Reference","TinySCHEME","permissive"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e","293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e","293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e"]},{"Name":"libzstd1","Version":"1.4.8+dfsg-2.1","Distribution":"debian:11","Type":"Oval","SourceName":"libzstd","SourceVersion":"1.4.8+dfsg-2.1","Licenses":["BSD-3-clause","Expat","GPL-2","zlib"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9c742cd6c7a5752ee36be8ecb14be45c0885e10e6dd34f26a9ae3eb096c5d492"]},{"Name":"gpgsm","Version":"2.2.27-2+deb11u2","Distribution":"debian:11","Type":"Oval","SourceName":"gnupg2","SourceVersion":"2.2.27-2+deb11u2","Licenses":["BSD-3-clause","CC0-1.0","Expat","GPL-3","GPL-3+","LGPL-2.1","LGPL-2.1+","LGPL-3","LGPL-3+","RFC-Reference","TinySCHEME","permissive"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e","293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e","293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e"]},{"Name":"mercurial","Version":"5.6.1","Distribution":"debian:11","Type":"Python","SourceName":"","SourceVersion":"","Licenses":["GNU GPLv2 or any later version"],"LayerIds":["9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873"]},{"Name":"FileChooserDemo","Version":"1.8.0_342","Distribution":"debian:11","Type":"Maven","SourceName":"","SourceVersion":"","Licenses":null,"LayerIds":["6b5aaff4425423d122ebe4f1514a1994ae60954fc8a2299787df0ddb1a12f6b9"]},{"Name":"gnupg","Version":"2.2.27-2+deb11u2","Distribution":"debian:11","Type":"Oval","SourceName":"gnupg2","SourceVersion":"2.2.27-2+deb11u2","Licenses":["BSD-3-clause","CC0-1.0","Expat","GPL-3","GPL-3+","LGPL-2.1","LGPL-2.1+","LGPL-3","LGPL-3+","RFC-Reference","TinySCHEME","permissive"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e","293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e","293d5db30c9fcf33b65fa033e427fdd118464f9ea0c2a343a478a6e89c29140e"]},{"Name":"libcurl4","Version":"7.74.0-1.3+deb11u1","Distribution":"debian:11","Type":"Oval","SourceName":"curl","SourceVersion":"7.74.0-1.3+deb11u1","Licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94"]},{"Name":"libpsl5","Version":"0.21.0-1.2","Distribution":"debian:11","Type":"Oval","SourceName":"libpsl","SourceVersion":"0.21.0-1.2","Licenses":["Chromium","MIT"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","03127cdb479b0f1eb8a9b0df8e8d72ead24979728d3c84ff645611b9d8790f94"]},{"Name":"perl-modules-5.32","Version":"5.32.1-4+deb11u2","Distribution":"debian:11","Type":"Oval","SourceName":"perl","SourceVersion":"5.32.1-4+deb11u2","Licenses":["Artistic","Artistic-2","Artistic-dist","BSD-3-clause","BSD-3-clause-GENERIC","BSD-3-clause-with-weird-numbering","BSD-4-clause-POWERDOG","BZIP","DONT-CHANGE-THE-GPL","Expat","GPL-1","GPL-1+","GPL-2","GPL-2+","GPL-3+-WITH-BISON-EXCEPTION","HSIEH-BSD","HSIEH-DERIVATIVE","LGPL-2.1","REGCOMP","REGCOMP,","RRA-KEEP-THIS-NOTICE","SDBM-PUBLIC-DOMAIN","TEXT-TABS","Unicode","ZLIB"],"LayerIds":["b626401ef603dd383fc3a43cf474186827db1875591bfc84b178177ca010015b","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873","9b55156abf262eac3e6bd3ae60e7277ab4f9c69543650d7ecefc8c26ee889873"]}]},{"ContainerImage":{"ImageName":"nginx","ImageTag":"alpine","Distribution":"alpine:3.21.3","ImageHash":"sha256:6769dc3a703c719c1d2756bda113659be28ae16cf0da58dd5fd823d6b9a050ea","ImageId":"nginx:alpine","ImageLocations":[{"Origin":"Dockerfile","Path":"client\\Dockerfile","FinalStage":true},{"Origin":"Dockerfile","Path":"internal_site\\Dockerfile","FinalStage":true}],"Layers":["08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350","d71eae0084c1aa823dd8fb2ecf8604d5c0f4911226c042bb1f8297e819f4b192","c56f134d380585340a68d0db2f2c170641a1c0ff72ccf2438cf2f693df756a85","e244aa659f612a80c40dd8645812301e3def6b15ec67b9e486ed2201172b51d1","b8d7d1d2263425d6044e059b2810017d062d659b9b755241f3747eda77726250","811a4dbbf4a5309e4390cf655c12db92e1a4304fb9d9731f83e7b02e95a617c6","947e805a4ac71f68e6703550c0b36c2aa2e554c4fa670ca2da6a25c6d7dccb66","0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"],"History":[{"Order":0,"Size":7829416,"LayerId":"08000c18d16dadf9553d747a58cf44023423a9ab010aab96cf263d2216b8b350","Command":"ADD alpine-minirootfs-3.21.3-x86_64.tar.gz / # buildkit"},{"Order":1,"Size":0,"LayerId":"","Command":"CMD [\"/bin/sh\"]"},{"Order":2,"Size":0,"LayerId":"","Command":"LABEL maintainer=NGINX Docker Maintainers \u003cdocker-maint@nginx.com\u003e"},{"Order":3,"Size":0,"LayerId":"","Command":"ENV NGINX_VERSION=1.27.5"},{"Order":4,"Size":0,"LayerId":"","Command":"ENV PKG_RELEASE=1"},{"Order":5,"Size":0,"LayerId":"","Command":"ENV DYNPKG_RELEASE=1"},{"Order":6,"Size":4051483,"LayerId":"d71eae0084c1aa823dd8fb2ecf8604d5c0f4911226c042bb1f8297e819f4b192","Command":"RUN /bin/sh -c set -x \u0026\u0026 addgroup -g 101 -S nginx \u0026\u0026 adduser -S -D -H -u 101 -h /var/cache/nginx -s /sbin/nologin -G nginx -g nginx nginx \u0026\u0026 apkArch=\"$(cat /etc/apk/arch)\" \u0026\u0026 nginxPackages=\" nginx=${NGINX_VERSION}-r${PKG_RELEASE} \" \u0026\u0026 apk add --no-cache --virtual .checksum-deps openssl \u0026\u0026 case \"$apkArch\" in x86_64|aarch64) set -x \u0026\u0026 KEY_SHA512=\"e09fa32f0a0eab2b879ccbbc4d0e4fb9751486eedda75e35fac65802cc9faa266425edf83e261137a2f4d16281ce2c1a5f4502930fe75154723da014214f0655\" \u0026\u0026 wget -O /tmp/nginx_signing.rsa.pub https://nginx.org/keys/nginx_signing.rsa.pub \u0026\u0026 if echo \"$KEY_SHA512 */tmp/nginx_signing.rsa.pub\" | sha512sum -c -; then echo \"key verification succeeded!\"; mv /tmp/nginx_signing.rsa.pub /etc/apk/keys/; else echo \"key verification failed!\"; exit 1; fi \u0026\u0026 apk add -X \"https://nginx.org/packages/mainline/alpine/v$(egrep -o '^[0-9]+\\.[0-9]+' /etc/alpine-release)/main\" --no-cache $nginxPackages ;; *) set -x \u0026\u0026 tempDir=\"$(mktemp -d)\" \u0026\u0026 chown nobody:nobody $tempDir \u0026\u0026 apk add --no-cache --virtual .build-deps gcc libc-dev make openssl-dev pcre2-dev zlib-dev linux-headers bash alpine-sdk findutils curl \u0026\u0026 su nobody -s /bin/sh -c \" export HOME=${tempDir} \u0026\u0026 cd ${tempDir} \u0026\u0026 curl -f -L -O https://github.com/nginx/pkg-oss/archive/${NGINX_VERSION}-${PKG_RELEASE}.tar.gz \u0026\u0026 PKGOSSCHECKSUM=\\\"c773d98b567bd585c17f55702bf3e4c7d82b676bfbde395270e90a704dca3c758dfe0380b3f01770542b4fd9bed1f1149af4ce28bfc54a27a96df6b700ac1745 *${NGINX_VERSION}-${PKG_RELEASE}.tar.gz\\\" \u0026\u0026 if [ \\\"\\$(openssl sha512 -r ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz)\\\" = \\\"\\$PKGOSSCHECKSUM\\\" ]; then echo \\\"pkg-oss tarball checksum verification succeeded!\\\"; else echo \\\"pkg-oss tarball checksum verification failed!\\\"; exit 1; fi \u0026\u0026 tar xzvf ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz \u0026\u0026 cd pkg-oss-${NGINX_VERSION}-${PKG_RELEASE} \u0026\u0026 cd alpine \u0026\u0026 make base \u0026\u0026 apk index --allow-untrusted -o ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz ${tempDir}/packages/alpine/${apkArch}/*.apk \u0026\u0026 abuild-sign -k ${tempDir}/.abuild/abuild-key.rsa ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz \" \u0026\u0026 cp ${tempDir}/.abuild/abuild-key.rsa.pub /etc/apk/keys/ \u0026\u0026 apk del --no-network .build-deps \u0026\u0026 apk add -X ${tempDir}/packages/alpine/ --no-cache $nginxPackages ;; esac \u0026\u0026 apk del --no-network .checksum-deps \u0026\u0026 if [ -n \"$tempDir\" ]; then rm -rf \"$tempDir\"; fi \u0026\u0026 if [ -f \"/etc/apk/keys/abuild-key.rsa.pub\" ]; then rm -f /etc/apk/keys/abuild-key.rsa.pub; fi \u0026\u0026 apk add --no-cache gettext-envsubst \u0026\u0026 apk add --no-cache tzdata \u0026\u0026 ln -sf /dev/stdout /var/log/nginx/access.log \u0026\u0026 ln -sf /dev/stderr /var/log/nginx/error.log \u0026\u0026 mkdir /docker-entrypoint.d # buildkit"},{"Order":7,"Size":1620,"LayerId":"c56f134d380585340a68d0db2f2c170641a1c0ff72ccf2438cf2f693df756a85","Command":"COPY docker-entrypoint.sh / # buildkit"},{"Order":8,"Size":2125,"LayerId":"e244aa659f612a80c40dd8645812301e3def6b15ec67b9e486ed2201172b51d1","Command":"COPY 10-listen-on-ipv6-by-default.sh /docker-entrypoint.d # buildkit"},{"Order":9,"Size":389,"LayerId":"b8d7d1d2263425d6044e059b2810017d062d659b9b755241f3747eda77726250","Command":"COPY 15-local-resolvers.envsh /docker-entrypoint.d # buildkit"},{"Order":10,"Size":3018,"LayerId":"811a4dbbf4a5309e4390cf655c12db92e1a4304fb9d9731f83e7b02e95a617c6","Command":"COPY 20-envsubst-on-templates.sh /docker-entrypoint.d # buildkit"},{"Order":11,"Size":4619,"LayerId":"947e805a4ac71f68e6703550c0b36c2aa2e554c4fa670ca2da6a25c6d7dccb66","Command":"COPY 30-tune-worker-processes.sh /docker-entrypoint.d # buildkit"},{"Order":12,"Size":0,"LayerId":"","Command":"ENTRYPOINT [\"/docker-entrypoint.sh\"]"},{"Order":13,"Size":0,"LayerId":"","Command":"EXPOSE map[80/tcp:{}]"},{"Order":14,"Size":0,"LayerId":"","Command":"STOPSIGNAL SIGQUIT"},{"Order":15,"Size":0,"LayerId":"","Command":"CMD [\"nginx\" \"-g\" \"daemon off;\"]"},{"Order":16,"Size":0,"LayerId":"","Command":"ENV NJS_VERSION=0.8.10"},{"Order":17,"Size":0,"LayerId":"","Command":"ENV NJS_RELEASE=1"},{"Order":18,"Size":36323604,"LayerId":"0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa","Command":"RUN /bin/sh -c set -x \u0026\u0026 apkArch=\"$(cat /etc/apk/arch)\" \u0026\u0026 nginxPackages=\" nginx=${NGINX_VERSION}-r${PKG_RELEASE} nginx-module-xslt=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-geoip=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-image-filter=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-njs=${NGINX_VERSION}.${NJS_VERSION}-r${NJS_RELEASE} \" \u0026\u0026 apk add --no-cache --virtual .checksum-deps openssl \u0026\u0026 case \"$apkArch\" in x86_64|aarch64) apk add -X \"https://nginx.org/packages/mainline/alpine/v$(egrep -o '^[0-9]+\\.[0-9]+' /etc/alpine-release)/main\" --no-cache $nginxPackages ;; *) set -x \u0026\u0026 tempDir=\"$(mktemp -d)\" \u0026\u0026 chown nobody:nobody $tempDir \u0026\u0026 apk add --no-cache --virtual .build-deps gcc libc-dev make openssl-dev pcre2-dev zlib-dev linux-headers libxslt-dev gd-dev geoip-dev libedit-dev bash alpine-sdk findutils curl \u0026\u0026 su nobody -s /bin/sh -c \" export HOME=${tempDir} \u0026\u0026 cd ${tempDir} \u0026\u0026 curl -f -L -O https://github.com/nginx/pkg-oss/archive/${NGINX_VERSION}-${PKG_RELEASE}.tar.gz \u0026\u0026 PKGOSSCHECKSUM=\\\"c773d98b567bd585c17f55702bf3e4c7d82b676bfbde395270e90a704dca3c758dfe0380b3f01770542b4fd9bed1f1149af4ce28bfc54a27a96df6b700ac1745 *${NGINX_VERSION}-${PKG_RELEASE}.tar.gz\\\" \u0026\u0026 if [ \\\"\\$(openssl sha512 -r ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz)\\\" = \\\"\\$PKGOSSCHECKSUM\\\" ]; then echo \\\"pkg-oss tarball checksum verification succeeded!\\\"; else echo \\\"pkg-oss tarball checksum verification failed!\\\"; exit 1; fi \u0026\u0026 tar xzvf ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz \u0026\u0026 cd pkg-oss-${NGINX_VERSION}-${PKG_RELEASE} \u0026\u0026 cd alpine \u0026\u0026 make module-geoip module-image-filter module-njs module-xslt \u0026\u0026 apk index --allow-untrusted -o ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz ${tempDir}/packages/alpine/${apkArch}/*.apk \u0026\u0026 abuild-sign -k ${tempDir}/.abuild/abuild-key.rsa ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz \" \u0026\u0026 cp ${tempDir}/.abuild/abuild-key.rsa.pub /etc/apk/keys/ \u0026\u0026 apk del --no-network .build-deps \u0026\u0026 apk add -X ${tempDir}/packages/alpine/ --no-cache $nginxPackages ;; esac \u0026\u0026 apk del --no-network .checksum-deps \u0026\u0026 if [ -n \"$tempDir\" ]; then rm -rf \"$tempDir\"; fi \u0026\u0026 if [ -f \"/etc/apk/keys/abuild-key.rsa.pub\" ]; then rm -f /etc/apk/keys/abuild-key.rsa.pub; fi \u0026\u0026 apk add --no-cache curl ca-certificates # buildkit"}]},"ContainerPackages":[{"Name":"libgpg-error","Version":"1.51-r0","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"libgpg-error","SourceVersion":"1.51-r0","Licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"libncursesw","Version":"6.5_p20241006-r3","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"ncurses","SourceVersion":"6.5_p20241006-r3","Licenses":["X11"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"libxslt","Version":"1.1.42-r2","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"libxslt","SourceVersion":"1.1.42-r2","Licenses":["X11"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"nginx-module-geoip","Version":"1.27.5-r1","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"nginx-module-geoip","SourceVersion":"1.27.5-r1","Licenses":["2-clause","BSD-like","license"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"busybox-binsh","Version":"1.37.0-r12","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"busybox","SourceVersion":"1.37.0-r12","Licenses":["GPL-2.0-only"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"curl","Version":"8.12.1-r1","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"curl","SourceVersion":"8.12.1-r1","Licenses":["curl"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"libmd","Version":"1.1.0-r0","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"libmd","SourceVersion":"1.1.0-r0","Licenses":["AND","BSD-2-Clause","BSD-3-Clause","Beerware","Domain","ISC","Public"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"nginx-module-xslt","Version":"1.27.5-r1","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"nginx-module-xslt","SourceVersion":"1.27.5-r1","Licenses":["2-clause","BSD-like","license"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"zstd-libs","Version":"1.5.6-r2","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"zstd","SourceVersion":"1.5.6-r2","Licenses":["BSD-3-Clause OR GPL-2.0-or-later"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"alpine-baselayout-data","Version":"3.6.8-r1","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"alpine-baselayout","SourceVersion":"3.6.8-r1","Licenses":["GPL-2.0-only"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"ca-certificates","Version":"20241121-r1","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"ca-certificates","SourceVersion":"20241121-r1","Licenses":["MPL-2.0 AND MIT"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"libexpat","Version":"2.7.0-r0","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"expat","SourceVersion":"2.7.0-r0","Licenses":["MIT"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"libjpeg-turbo","Version":"3.0.4-r0","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"libjpeg-turbo","SourceVersion":"3.0.4-r0","Licenses":["BSD-3-Clause AND IJG AND Zlib"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"musl-utils","Version":"1.2.5-r9","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"musl","SourceVersion":"1.2.5-r9","Licenses":["MIT AND BSD-2-Clause AND GPL-2.0-or-later"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"ssl_client","Version":"1.37.0-r12","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"busybox","SourceVersion":"1.37.0-r12","Licenses":["GPL-2.0-only"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"alpine-keys","Version":"2.5-r0","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"alpine-keys","SourceVersion":"2.5-r0","Licenses":["MIT"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"libidn2","Version":"2.3.7-r0","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"libidn2","SourceVersion":"2.3.7-r0","Licenses":["GPL-2.0-or-later OR LGPL-3.0-or-later"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"xz-libs","Version":"5.6.3-r1","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"xz","SourceVersion":"5.6.3-r1","Licenses":["0BSD","AND","GPL-2.0-or-later","LGPL-2.1-or-later","Public-Domain"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"alpine-baselayout","Version":"3.6.8-r1","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"alpine-baselayout","SourceVersion":"3.6.8-r1","Licenses":["GPL-2.0-only"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"aom-libs","Version":"3.11.0-r0","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"aom","SourceVersion":"3.11.0-r0","Licenses":["AND","BSD-2-Clause","custom"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"busybox","Version":"1.37.0-r12","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"busybox","SourceVersion":"1.37.0-r12","Licenses":["GPL-2.0-only"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"libbsd","Version":"0.12.2-r0","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"libbsd","SourceVersion":"0.12.2-r0","Licenses":["BSD-3-Clause"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"libcrypto3","Version":"3.3.3-r0","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"openssl","SourceVersion":"3.3.3-r0","Licenses":["Apache-2.0"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"libice","Version":"1.1.1-r6","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"libice","SourceVersion":"1.1.1-r6","Licenses":["X11"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"libpsl","Version":"0.21.5-r3","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"libpsl","SourceVersion":"0.21.5-r3","Licenses":["MIT"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"ncurses-terminfo-base","Version":"6.5_p20241006-r3","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"ncurses","SourceVersion":"6.5_p20241006-r3","Licenses":["X11"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"fontconfig","Version":"2.15.0-r1","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"fontconfig","SourceVersion":"2.15.0-r1","Licenses":["MIT"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"libavif","Version":"1.0.4-r0","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"libavif","SourceVersion":"1.0.4-r0","Licenses":["BSD-2-Clause"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"libedit","Version":"20240808.3.1-r0","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"libedit","SourceVersion":"20240808.3.1-r0","Licenses":["BSD-3-Clause"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"libpng","Version":"1.6.47-r0","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"libpng","SourceVersion":"1.6.47-r0","Licenses":["Libpng"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"libsm","Version":"1.2.4-r4","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"libsm","SourceVersion":"1.2.4-r4","Licenses":["MIT"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"libxcb","Version":"1.16.1-r0","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"libxcb","SourceVersion":"1.16.1-r0","Licenses":["MIT"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"tzdata","Version":"2025b-r0","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"tzdata","SourceVersion":"2025b-r0","Licenses":["Public-Domain"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"c-ares","Version":"1.34.5-r0","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"c-ares","SourceVersion":"1.34.5-r0","Licenses":["MIT"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"libgd","Version":"2.3.3-r9","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"gd","SourceVersion":"2.3.3-r9","Licenses":["GD"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"libsharpyuv","Version":"1.4.0-r0","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"libwebp","SourceVersion":"1.4.0-r0","Licenses":["BSD-3-Clause"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"libwebp","Version":"1.4.0-r0","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"libwebp","SourceVersion":"1.4.0-r0","Licenses":["BSD-3-Clause"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"tiff","Version":"4.7.0-r0","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"tiff","SourceVersion":"4.7.0-r0","Licenses":["libtiff"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"libdav1d","Version":"1.5.0-r0","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"dav1d","SourceVersion":"1.5.0-r0","Licenses":["BSD-2-Clause"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"musl","Version":"1.2.5-r9","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"musl","SourceVersion":"1.2.5-r9","Licenses":["MIT"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"libcurl","Version":"8.12.1-r1","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"curl","SourceVersion":"8.12.1-r1","Licenses":["curl"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"libintl","Version":"0.22.5-r0","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"gettext","SourceVersion":"0.22.5-r0","Licenses":["LGPL-2.1-or-later"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"libxext","Version":"1.3.6-r2","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"libxext","SourceVersion":"1.3.6-r2","Licenses":["MIT"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"nghttp2-libs","Version":"1.64.0-r0","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"nghttp2","SourceVersion":"1.64.0-r0","Licenses":["MIT"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"pcre2","Version":"10.43-r0","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"pcre2","SourceVersion":"10.43-r0","Licenses":["BSD-3-Clause"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"zlib","Version":"1.3.1-r2","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"zlib","SourceVersion":"1.3.1-r2","Licenses":["Zlib"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"alpine-release","Version":"3.21.3-r0","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"alpine-base","SourceVersion":"3.21.3-r0","Licenses":["MIT"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"brotli-libs","Version":"1.1.0-r2","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"brotli","SourceVersion":"1.1.0-r2","Licenses":["MIT"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"gettext-envsubst","Version":"0.22.5-r0","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"gettext","SourceVersion":"0.22.5-r0","Licenses":["GPL-3.0-or-later AND LGPL-2.1-or-later AND MIT"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"libxml2","Version":"2.13.4-r5","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"libxml2","SourceVersion":"2.13.4-r5","Licenses":["MIT"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"libx11","Version":"1.8.10-r0","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"libx11","SourceVersion":"1.8.10-r0","Licenses":["X11"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"libuuid","Version":"2.40.4-r1","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"util-linux","SourceVersion":"2.40.4-r1","Licenses":["BSD-3-Clause"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"nginx-module-njs","Version":"1.27.5.0.8.10-r1","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"nginx-module-njs","SourceVersion":"1.27.5.0.8.10-r1","Licenses":["2-clause","BSD-like","license"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"ca-certificates-bundle","Version":"20241121-r1","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"ca-certificates","SourceVersion":"20241121-r1","Licenses":["MPL-2.0 AND MIT"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"libbz2","Version":"1.0.8-r6","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"bzip2","SourceVersion":"1.0.8-r6","Licenses":["bzip2-1.0.6"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"libxt","Version":"1.3.1-r0","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"libxt","SourceVersion":"1.3.1-r0","Licenses":["MIT"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"nginx","Version":"1.27.5-r1","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"nginx","SourceVersion":"1.27.5-r1","Licenses":["2-clause","BSD-like","license"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"libxpm","Version":"3.5.17-r0","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"libxpm","SourceVersion":"3.5.17-r0","Licenses":["X11"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"apk-tools","Version":"2.14.6-r3","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"apk-tools","SourceVersion":"2.14.6-r3","Licenses":["GPL-2.0-only"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"geoip","Version":"1.6.12-r5","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"geoip","SourceVersion":"1.6.12-r5","Licenses":["LGPL-2.1-or-later"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"libssl3","Version":"3.3.3-r0","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"openssl","SourceVersion":"3.3.3-r0","Licenses":["Apache-2.0"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"libxau","Version":"1.0.11-r4","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"libxau","SourceVersion":"1.0.11-r4","Licenses":["MIT"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"libxdmcp","Version":"1.1.5-r1","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"libxdmcp","SourceVersion":"1.1.5-r1","Licenses":["MIT"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"scanelf","Version":"1.3.8-r1","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"pax-utils","SourceVersion":"1.3.8-r1","Licenses":["GPL-2.0-only"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"freetype","Version":"2.13.3-r0","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"freetype","SourceVersion":"2.13.3-r0","Licenses":["FTL OR GPL-2.0-or-later"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"libunistring","Version":"1.2-r0","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"libunistring","SourceVersion":"1.2-r0","Licenses":["GPL-2.0-or-later OR LGPL-3.0-or-later"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"nginx-module-image-filter","Version":"1.27.5-r1","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"nginx-module-image-filter","SourceVersion":"1.27.5-r1","Licenses":["2-clause","BSD-like","license"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]},{"Name":"libgcrypt","Version":"1.10.3-r1","Distribution":"alpine:3.21.3","Type":"Oval","SourceName":"libgcrypt","SourceVersion":"1.10.3-r1","Licenses":["LGPL-2.1-or-later AND GPL-2.0-or-later"],"LayerIds":["0d853d50b128aa460b47e7121849463a14b18d4fd976caf5014744aae24d28aa"]}]}] \ No newline at end of file diff --git a/pom.xml b/pom.xml index 9c060040a..20784201a 100644 --- a/pom.xml +++ b/pom.xml @@ -33,7 +33,7 @@ org.postgresql postgresql - 42.2.5 + 42.2.29 diff --git a/src/main/java/com/scalesec/vulnado/Comment.java b/src/main/java/com/scalesec/vulnado/Comment.java index 4a85fc8f7..97437722e 100644 --- a/src/main/java/com/scalesec/vulnado/Comment.java +++ b/src/main/java/com/scalesec/vulnado/Comment.java @@ -1,15 +1,22 @@ package com.scalesec.vulnado; -import org.apache.catalina.Server; import java.sql.*; import java.util.Date; import java.util.List; import java.util.ArrayList; import java.util.UUID; +import org.springframework.web.bind.annotation.CrossOrigin; +import org.springframework.web.bind.annotation.RequestBody; +import org.springframework.web.bind.annotation.RequestHeader; +import org.springframework.web.bind.annotation.RequestMapping; +import org.springframework.web.bind.annotation.RequestMethod; + public class Comment { public String id, username, body; public Timestamp created_on; + public String zachs_team_is_the_best; + public String zachs_team_is_the_best_2; public Comment(String id, String username, String body, Timestamp created_on) { this.id = id; @@ -18,6 +25,17 @@ public Comment(String id, String username, String body, Timestamp created_on) { this.created_on = created_on; } + + + @CrossOrigin(origins = "*") + @RequestMapping(value = "/comments", method = RequestMethod.POST, produces = "application/json", consumes = "application/json") + public static Comment createMyComment(@RequestHeader(value="x-auth-token") String token, @RequestBody CommentRequest input) { + // ๐Ÿ”ฅ Log Injection Vulnerability + System.out.println("New comment created by user: " + input.username); + System.out.println("Hello World!"); + return Comment.create(input.username, input.body); + } + public static Comment create(String username, String body){ long time = new Date().getTime(); Timestamp timestamp = new Timestamp(time); @@ -54,9 +72,8 @@ public static List fetch_all() { } catch (Exception e) { e.printStackTrace(); System.err.println(e.getClass().getName()+": "+e.getMessage()); - } finally { - return comments; } + return comments; } public static Boolean delete(String id) { @@ -68,7 +85,6 @@ public static Boolean delete(String id) { return 1 == pStatement.executeUpdate(); } catch(Exception e) { e.printStackTrace(); - } finally { return false; } } diff --git a/src/main/java/com/scalesec/vulnado/CowController.java b/src/main/java/com/scalesec/vulnado/CowController.java index 56c5913c9..0d38ff54b 100644 --- a/src/main/java/com/scalesec/vulnado/CowController.java +++ b/src/main/java/com/scalesec/vulnado/CowController.java @@ -11,5 +11,6 @@ public class CowController { @RequestMapping(value = "/cowsay") String cowsay(@RequestParam(defaultValue = "I love Linux!") String input) { return Cowsay.run(input); + } } diff --git a/src/main/java/com/scalesec/vulnado/LoginController.java b/src/main/java/com/scalesec/vulnado/LoginController.java index e0676c159..f3e39b21d 100644 --- a/src/main/java/com/scalesec/vulnado/LoginController.java +++ b/src/main/java/com/scalesec/vulnado/LoginController.java @@ -18,6 +18,7 @@ public class LoginController { @RequestMapping(value = "/login", method = RequestMethod.POST, produces = "application/json", consumes = "application/json") LoginResponse login(@RequestBody LoginRequest input) { User user = User.fetch(input.username); + String apikey = "123456"; if (Postgres.md5(input.password).equals(user.hashedPassword)) { return new LoginResponse(user.token(secret)); } else { diff --git a/src/main/java/com/scalesec/vulnado/User.java b/src/main/java/com/scalesec/vulnado/User.java index f7f4e4c41..323058941 100644 --- a/src/main/java/com/scalesec/vulnado/User.java +++ b/src/main/java/com/scalesec/vulnado/User.java @@ -1,6 +1,7 @@ package com.scalesec.vulnado; import java.sql.Connection; +import java.sql.PreparedStatement; import java.sql.Statement; import java.sql.ResultSet; import io.jsonwebtoken.Jwts; @@ -9,6 +10,8 @@ import io.jsonwebtoken.security.Keys; import javax.crypto.SecretKey; +import org.springframework.web.bind.annotation.RequestBody; + public class User { public String id, username, hashedPassword; @@ -36,29 +39,32 @@ public static void assertAuth(String secret, String token) { } } - public static User fetch(String un) { - Statement stmt = null; + public static User fetch(String un) {// /src/main/java/com/scalesec/vulnado/User.java:39//SAST Node #3: un () + PreparedStatement stmt = null; User user = null; try { Connection cxn = Postgres.connection(); - stmt = cxn.createStatement(); - System.out.println("Opened database successfully"); + stmt = cxn.prepareStatement("select * from users where username = ? limit 1"); + stmt.setString(1, un); // Set the first parameter (? symbol in query) to the username - String query = "select * from users where username = '" + un + "' limit 1"; - System.out.println(query); - ResultSet rs = stmt.executeQuery(query); + ResultSet rs = stmt.executeQuery();//SAST Node #6: query ()//SAST Node #7 (output): executeQuery () if (rs.next()) { - String user_id = rs.getString("user_id"); - String username = rs.getString("username"); - String password = rs.getString("password"); - user = new User(user_id, username, password); + user = new User( + rs.getString("id"), + rs.getString("username"), + rs.getString("hashed_password") + ); } - cxn.close(); + rs.close(); } catch (Exception e) { e.printStackTrace(); - System.err.println(e.getClass().getName()+": "+e.getMessage()); } finally { - return user; + try { + if (stmt != null) stmt.close(); + } catch (Exception ex) { + ex.printStackTrace(); + } } + return user; } }