{ "_type": "https://in-toto.io/Statement/v0.1", "predicateType": "https://cosign.sigstore.dev/attestation/vuln/v1", "subject": [ { "name": "", "digest": { "sha256": "" } } ], "predicate": { "invocation": { "parameters": null, "uri": "", "event_id": "", "builder.id": "" }, "scanner": { "uri": "pkg:github.com/neuvector/scanner@0212004", "version": "0212004", "db": { "uri": "pkg:github.com/neuvector/vul-dbgen@4.114", "version": "4.114" }, "result": { "error_message": "", "report": { "image_id": "706b272a257d7361f41cd7920beb331118c8364bbb968ca91e2b0baec4e0cae2", "registry": "", "repository": "bci/bci-busybox", "tag": "15.7-299.1", "digest": "", "size": 12467968, "author": "", "base_os": "sles:15.7", "created_at": "0001-01-01T00:00:00Z", "cvedb_version": "4.114", "cvedb_create_time": "2026-03-25T01:40:56Z", "layers": [], "vulnerabilities": [], "modules": [ { "name": "busybox-tunctl", "version": "1.37.0-150700.12.11.1", "source": "sles:15.7" }, { "name": "busybox-patch", "version": "1.37.0-150700.12.11.1", "source": "sles:15.7" }, { "name": "busybox-dos2unix", "version": "1.37.0-150700.12.11.1", "source": "sles:15.7" }, { "name": "busybox-vlan", "version": "1.37.0-150700.12.11.1", "source": "sles:15.7" }, { "name": "busybox-util-linux", "version": "1.37.0-150700.12.11.1", "source": "sles:15.7" }, { "name": "busybox-sha3sum", "version": "1.37.0-150700.12.11.1", "source": "sles:15.7" }, { "name": "busybox-policycoreutils", "version": "1.37.0-150700.12.11.1", "source": "sles:15.7" }, { "name": "busybox-gawk", "version": "1.37.0-150700.12.11.1", "source": "sles:15.7" }, { "name": "busybox-coreutils", "version": "1.37.0-150700.12.11.1", "source": "sles:15.7" }, { "name": "filesystem", "version": "15.0-11.8.1", "source": "sles:15.7" }, { "name": "libcrypt1", "version": "4.4.15-150300.4.7.1", "source": "sles:15.7" }, { "name": "busybox-vi", "version": "1.37.0-150700.12.11.1", "source": "sles:15.7" }, { "name": "busybox-udhcpc", "version": "1.37.0-150700.12.11.1", "source": "sles:15.7" }, { "name": "busybox-tar", "version": "1.37.0-150700.12.11.1", "source": "sles:15.7" }, { "name": "busybox-psmisc", "version": "1.37.0-150700.12.11.1", "source": "sles:15.7" }, { "name": "busybox-ncurses-utils", "version": "1.37.0-150700.12.11.1", "source": "sles:15.7" }, { "name": "busybox-kbd", "version": "1.37.0-150700.12.11.1", "source": "sles:15.7" }, { "name": "busybox-hostname", "version": "1.37.0-150700.12.11.1", "source": "sles:15.7" }, { "name": "busybox-gzip", "version": "1.37.0-150700.12.11.1", "source": "sles:15.7" }, { "name": "libselinux1", "version": "3.5-150600.3.3.1", "source": "sles:15.7" }, { "name": "busybox-which", "version": "1.37.0-150700.12.11.1", "source": "sles:15.7" }, { "name": "busybox-time", "version": "1.37.0-150700.12.11.1", "source": "sles:15.7" }, { "name": "busybox-sed", "version": "1.37.0-150700.12.11.1", "source": "sles:15.7" }, { "name": "busybox-netcat", "version": "1.37.0-150700.12.11.1", "source": "sles:15.7" }, { "name": "busybox-findutils", "version": "1.37.0-150700.12.11.1", "source": "sles:15.7" }, { "name": "busybox-sysvinit-tools", "version": "1.37.0-150700.12.11.1", "source": "sles:15.7" }, { "name": "busybox-bzip2", "version": "1.37.0-150700.12.11.1", "source": "sles:15.7" }, { "name": "ca-certificates-mozilla-prebuilt", "version": "2.84-150200.44.1", "source": "sles:15.7" }, { "name": "libpcre2-8-0", "version": "10.42-150600.1.26", "source": "sles:15.7" }, { "name": "busybox-sh", "version": "1.37.0-150700.12.11.1", "source": "sles:15.7" }, { "name": "busybox-sendmail", "version": "1.37.0-150700.12.11.1", "source": "sles:15.7" }, { "name": "busybox-net-tools", "version": "1.37.0-150700.12.11.1", "source": "sles:15.7" }, { "name": "busybox-hexedit", "version": "1.37.0-150700.12.11.1", "source": "sles:15.7" }, { "name": "busybox-cpio", "version": "1.37.0-150700.12.11.1", "source": "sles:15.7" }, { "name": "system-user-root", "version": "20190513-3.3.1", "source": "sles:15.7" }, { "name": "busybox-traceroute", "version": "1.37.0-150700.12.11.1", "source": "sles:15.7" }, { "name": "busybox-misc", "version": "1.37.0-150700.12.11.1", "source": "sles:15.7" }, { "name": "busybox-man", "version": "1.37.0-150700.12.11.1", "source": "sles:15.7" }, { "name": "busybox-less", "version": "1.37.0-150700.12.11.1", "source": "sles:15.7" }, { "name": "busybox-diffutils", "version": "1.37.0-150700.12.11.1", "source": "sles:15.7" }, { "name": "busybox-links", "version": "1.37.0-150700.12.11.1", "source": "sles:15.7" }, { "name": "glibc", "version": "2.38-150600.14.43.1", "source": "sles:15.7" }, { "name": "busybox-selinux-tools", "version": "1.37.0-150700.12.11.1", "source": "sles:15.7" }, { "name": "sysuser-shadow", "version": "3.2-150400.3.5.3", "source": "sles:15.7" }, { "name": "sles-release", "version": "15.7-150700.28.1", "source": "sles:15.7" }, { "name": "busybox-ed", "version": "1.37.0-150700.12.11.1", "source": "sles:15.7" }, { "name": "busybox", "version": "1.37.0-150700.18.15.1", "source": "sles:15.7" }, { "name": "busybox-telnet", "version": "1.37.0-150700.12.11.1", "source": "sles:15.7" }, { "name": "busybox-iproute2", "version": "1.37.0-150700.12.11.1", "source": "sles:15.7" }, { "name": "busybox-grep", "version": "1.37.0-150700.12.11.1", "source": "sles:15.7" }, { "name": "busybox-bind-utils", "version": "1.37.0-150700.12.11.1", "source": "sles:15.7" }, { "name": "busybox-attr", "version": "1.37.0-150700.12.11.1", "source": "sles:15.7" }, { "name": "libsepol2", "version": "3.5-150600.1.49", "source": "sles:15.7" }, { "name": "busybox-wget", "version": "1.37.0-150700.12.11.1", "source": "sles:15.7" }, { "name": "busybox-unzip", "version": "1.37.0-150700.12.11.1", "source": "sles:15.7" }, { "name": "busybox-tftp", "version": "1.37.0-150700.12.11.1", "source": "sles:15.7" }, { "name": "busybox-bc", "version": "1.37.0-150700.12.11.1", "source": "sles:15.7" }, { "name": "system-user-nobody", "version": "20170617-150400.24.2.1", "source": "sles:15.7" }, { "name": "busybox-whois", "version": "1.37.0-150700.12.11.1", "source": "sles:15.7" }, { "name": "busybox-syslogd", "version": "1.37.0-150700.12.11.1", "source": "sles:15.7" }, { "name": "busybox-procps", "version": "1.37.0-150700.12.11.1", "source": "sles:15.7" }, { "name": "skelcd-EULA-bci", "version": "20250430-150700.1.1", "source": "sles:15.7" }, { "name": "busybox-xz", "version": "1.37.0-150700.12.11.1", "source": "sles:15.7" }, { "name": "busybox-iputils", "version": "1.37.0-150700.12.11.1", "source": "sles:15.7" }, { "name": "busybox-sharutils", "version": "1.37.0-150700.12.11.1", "source": "sles:15.7" }, { "name": "busybox-adduser", "version": "1.37.0-150700.12.11.1", "source": "sles:15.7" } ], "checks": [ { "test_number": "I.4.1", "category": "image", "type": "image", "profile": "Level 1", "scored": true, "automated": false, "description": "Ensure a user for the container has been created", "remediation": "", "tags": [], "level": "WARN", "message": [] }, { "test_number": "I.4.6", "category": "image", "type": "image", "profile": "Level 1", "scored": false, "automated": false, "description": "Ensure that HEALTHCHECK instructions have been added to container images", "remediation": "", "tags": [], "level": "WARN", "message": [] } ], "envs": [ "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin" ], "labels": { "com.suse.bci.busybox.authors": "https://github.com/SUSE/bci/discussions", "com.suse.bci.busybox.created": "2026-04-03T08:58:31.721927786Z", "com.suse.bci.busybox.description": "15 SP7 BusyBox container based on the SUSE Linux Enterprise Base Container Image.", "com.suse.bci.busybox.disturl": "obs://build.opensuse.org/devel:BCI:SLE-15-SP7/containerfile/ad9859ff79b70d49773fb2de6bc77130-busybox-image", "com.suse.bci.busybox.eula": "sle-bci", "com.suse.bci.busybox.lifecycle-url": "https://www.suse.com/lifecycle#suse-linux-enterprise-server-15", "com.suse.bci.busybox.name": "15.7-299.1", "com.suse.bci.busybox.reference": "registry.suse.com/bci/bci-busybox:15.7-299.1", "com.suse.bci.busybox.release-stage": "released", "com.suse.bci.busybox.source": "https://build.opensuse.org/package/show/devel:BCI:SLE-15-SP7/busybox-image?rev=ad9859ff79b70d49773fb2de6bc77130", "com.suse.bci.busybox.supportlevel": "l3", "com.suse.bci.busybox.title": "SLE BCI 15 SP7 BusyBox", "com.suse.bci.busybox.until": "2031-07-31", "com.suse.bci.busybox.url": "https://www.suse.com/products/base-container-images/", "com.suse.bci.busybox.vendor": "SUSE LLC", "com.suse.bci.busybox.version": "15.7-299.1", "com.suse.eula": "sle-bci", "com.suse.lifecycle-url": "https://www.suse.com/lifecycle#suse-linux-enterprise-server-15", "com.suse.release-stage": "released", "com.suse.supportlevel": "l3", "com.suse.supportlevel.until": "2031-07-31", "io.artifacthub.package.logo-url": "https://opensource.suse.com/bci/SLE_BCI_logomark_green.svg", "io.artifacthub.package.readme-url": "https://build.opensuse.org/public/source/devel:BCI:SLE-15-SP7/busybox-image/README.md?rev=ad9859ff79b70d49773fb2de6bc77130", "org.openbuildservice.disturl": "obs://build.opensuse.org/devel:BCI:SLE-15-SP7/containerfile/ad9859ff79b70d49773fb2de6bc77130-busybox-image", "org.opencontainers.image.authors": "https://github.com/SUSE/bci/discussions", "org.opencontainers.image.created": "2026-04-03T08:58:31.721927786Z", "org.opencontainers.image.description": "15 SP7 BusyBox container based on the SUSE Linux Enterprise Base Container Image.", "org.opencontainers.image.ref.name": "15.7-299.1", "org.opencontainers.image.source": "https://build.opensuse.org/package/show/devel:BCI:SLE-15-SP7/busybox-image?rev=ad9859ff79b70d49773fb2de6bc77130", "org.opencontainers.image.title": "SLE BCI 15 SP7 BusyBox", "org.opencontainers.image.url": "https://www.suse.com/products/base-container-images/", "org.opencontainers.image.vendor": "SUSE LLC", "org.opencontainers.image.version": "15.7-299.1", "org.opensuse.reference": "registry.suse.com/bci/bci-busybox:15.7-299.1" }, "cmds": [ "", "LABEL org.openbuildservice.disturl=obs://build.opensuse.org/devel:BCI:SLE-15-SP7/containerfile/ad9859ff79b70d49773fb2de6bc77130-busybox-image", "RUN set -euo pipefail; rm -vf /usr/lib/sysimage/rpm/Index.db", "RUN set -euo pipefail; sed -i 's|/bin/bash|/bin/sh|' /etc/passwd", "CMD [\"/bin/sh\"]", "LABEL io.artifacthub.package.logo-url=https://opensource.suse.com/bci/SLE_BCI_logomark_green.svg", "LABEL io.artifacthub.package.readme-url=https://build.opensuse.org/public/source/devel:BCI:SLE-15-SP7/busybox-image/README.md?rev=ad9859ff79b70d49773fb2de6bc77130", "LABEL com.suse.release-stage=released", "LABEL com.suse.bci.busybox.release-stage=released", "LABEL com.suse.lifecycle-url=https://www.suse.com/lifecycle#suse-linux-enterprise-server-15", "LABEL com.suse.bci.busybox.lifecycle-url=https://www.suse.com/lifecycle#suse-linux-enterprise-server-15", "LABEL com.suse.eula=sle-bci", "LABEL com.suse.bci.busybox.eula=sle-bci", "LABEL com.suse.supportlevel.until=2031-07-31", "LABEL com.suse.bci.busybox.until=2031-07-31", "LABEL com.suse.supportlevel=l3", "LABEL com.suse.bci.busybox.supportlevel=l3", "LABEL org.openbuildservice.disturl=obs://build.opensuse.org/devel:BCI:SLE-15-SP7/containerfile/ad9859ff79b70d49773fb2de6bc77130-busybox-image", "LABEL com.suse.bci.busybox.disturl=obs://build.opensuse.org/devel:BCI:SLE-15-SP7/containerfile/ad9859ff79b70d49773fb2de6bc77130-busybox-image", "LABEL org.opensuse.reference=registry.suse.com/bci/bci-busybox:15.7-299.1", "LABEL com.suse.bci.busybox.reference=registry.suse.com/bci/bci-busybox:15.7-299.1", "LABEL org.opencontainers.image.ref.name=15.7-299.1", "LABEL com.suse.bci.busybox.name=15.7-299.1", "LABEL org.opencontainers.image.source=https://build.opensuse.org/package/show/devel:BCI:SLE-15-SP7/busybox-image?rev=ad9859ff79b70d49773fb2de6bc77130", "LABEL com.suse.bci.busybox.source=https://build.opensuse.org/package/show/devel:BCI:SLE-15-SP7/busybox-image?rev=ad9859ff79b70d49773fb2de6bc77130", "LABEL org.opencontainers.image.vendor=SUSE LLC", "LABEL com.suse.bci.busybox.vendor=SUSE LLC", "LABEL org.opencontainers.image.created=2026-04-03T08:58:31.721927786Z", "LABEL com.suse.bci.busybox.created=2026-04-03T08:58:31.721927786Z", "LABEL org.opencontainers.image.url=https://www.suse.com/products/base-container-images/", "LABEL com.suse.bci.busybox.url=https://www.suse.com/products/base-container-images/", "LABEL org.opencontainers.image.version=15.7-299.1", "LABEL com.suse.bci.busybox.version=15.7-299.1", "LABEL org.opencontainers.image.description=15 SP7 BusyBox container based on the SUSE Linux Enterprise Base Container Image.", "LABEL com.suse.bci.busybox.description=15 SP7 BusyBox container based on the SUSE Linux Enterprise Base Container Image.", "LABEL org.opencontainers.image.title=SLE BCI 15 SP7 BusyBox", "LABEL com.suse.bci.busybox.title=SLE BCI 15 SP7 BusyBox", "LABEL org.opencontainers.image.authors=https://github.com/SUSE/bci/discussions", "LABEL com.suse.bci.busybox.authors=https://github.com/SUSE/bci/discussions", "COPY dir:f5409f061f604c69b0e47e22c9cb7c93f5604731a1b083fba713057ac6917cfe in /" ], "signature_data": { "verification_timestamp": "" } } } }, "metadata": { "scanStartedOn": "2026-04-03T08:59:51.639918363+00:00", "scanFinishedOn": "2026-04-03T08:59:51.639918363+00:00" } } }