{
  "_type": "https://in-toto.io/Statement/v0.1",
  "predicateType": "https://cosign.sigstore.dev/attestation/vuln/v1",
  "subject": [
    {
      "name": "",
      "digest": {
        "sha256": ""
      }
    }
  ],
  "predicate": {
    "invocation": {
      "parameters": null,
      "uri": "",
      "event_id": "",
      "builder.id": ""
    },
    "scanner": {
      "uri": "pkg:github.com/neuvector/scanner@0212004",
      "version": "0212004",
      "db": {
        "uri": "pkg:github.com/neuvector/vul-dbgen@4.114",
        "version": "4.114"
      },
      "result": {
        "error_message": "",
        "report": {
          "image_id": "bd183f372e502de35ab2b9b688eb989b29eeefd7c59b3cdc4d749a13660dba95",
          "registry": "",
          "repository": "bci/bci-micro",
          "tag": "15.7-265.1",
          "digest": "",
          "size": 27735355,
          "author": "",
          "base_os": "sles:15.7",
          "created_at": "0001-01-01T00:00:00Z",
          "cvedb_version": "4.114",
          "cvedb_create_time": "2026-03-25T01:40:56Z",
          "layers": [],
          "vulnerabilities": [],
          "modules": [
            {
              "name": "filesystem",
              "version": "15.0-11.8.1",
              "source": "sles:15.7"
            },
            {
              "name": "libpcre2-8-0",
              "version": "10.42-150600.1.26",
              "source": "sles:15.7"
            },
            {
              "name": "libgcc_s1",
              "version": "15.2.0+git10201-150000.1.9.1",
              "source": "sles:15.7"
            },
            {
              "name": "libselinux1",
              "version": "3.5-150600.3.3.1",
              "source": "sles:15.7"
            },
            {
              "name": "libacl1",
              "version": "2.2.52-4.3.1",
              "source": "sles:15.7"
            },
            {
              "name": "libncurses6",
              "version": "6.1-150000.5.30.1",
              "source": "sles:15.7"
            },
            {
              "name": "terminfo-base",
              "version": "6.1-150000.5.30.1",
              "source": "sles:15.7"
            },
            {
              "name": "bash-sh",
              "version": "4.4-150400.27.6.1",
              "source": "sles:15.7"
            },
            {
              "name": "libgmp10",
              "version": "6.1.2-4.9.1",
              "source": "sles:15.7"
            },
            {
              "name": "libattr1",
              "version": "2.4.47-2.19",
              "source": "sles:15.7"
            },
            {
              "name": "ca-certificates-mozilla-prebuilt",
              "version": "2.84-150200.44.1",
              "source": "sles:15.7"
            },
            {
              "name": "system-user-root",
              "version": "20190513-3.3.1",
              "source": "sles:15.7"
            },
            {
              "name": "sles-release",
              "version": "15.7-150700.28.1",
              "source": "sles:15.7"
            },
            {
              "name": "skelcd-EULA-bci",
              "version": "20250430-150700.1.1",
              "source": "sles:15.7"
            },
            {
              "name": "glibc",
              "version": "2.38-150600.14.43.1",
              "source": "sles:15.7"
            },
            {
              "name": "libcap2",
              "version": "2.63-150400.3.3.1",
              "source": "sles:15.7"
            },
            {
              "name": "libstdc++6",
              "version": "15.2.0+git10201-150000.1.9.1",
              "source": "sles:15.7"
            },
            {
              "name": "libreadline7",
              "version": "7.0-150400.27.6.1",
              "source": "sles:15.7"
            },
            {
              "name": "bash",
              "version": "4.4-150400.27.6.1",
              "source": "sles:15.7"
            },
            {
              "name": "coreutils",
              "version": "8.32-150400.9.9.1",
              "source": "sles:15.7"
            }
          ],
          "checks": [
            {
              "test_number": "I.4.1",
              "category": "image",
              "type": "image",
              "profile": "Level 1",
              "scored": true,
              "automated": false,
              "description": "Ensure a user for the container has been created",
              "remediation": "",
              "tags": [],
              "level": "WARN",
              "message": []
            },
            {
              "test_number": "I.4.6",
              "category": "image",
              "type": "image",
              "profile": "Level 1",
              "scored": false,
              "automated": false,
              "description": "Ensure that HEALTHCHECK instructions have been added to container images",
              "remediation": "",
              "tags": [],
              "level": "WARN",
              "message": []
            }
          ],
          "envs": [
            "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
          ],
          "labels": {
            "com.suse.bci.micro.authors": "https://github.com/SUSE/bci/discussions",
            "com.suse.bci.micro.created": "2026-04-03T09:07:58.702075080Z",
            "com.suse.bci.micro.description": "A micro environment for containers based on the SUSE Linux Enterprise Base Container Image.",
            "com.suse.bci.micro.disturl": "obs://build.opensuse.org/devel:BCI:SLE-15-SP7/containerfile/b05519316cccecec8e2fa35d1fcf24c2-micro-image",
            "com.suse.bci.micro.eula": "sle-bci",
            "com.suse.bci.micro.lifecycle-url": "https://www.suse.com/lifecycle#suse-linux-enterprise-server-15",
            "com.suse.bci.micro.name": "15.7-265.1",
            "com.suse.bci.micro.reference": "registry.suse.com/bci/bci-micro:15.7-265.1",
            "com.suse.bci.micro.release-stage": "released",
            "com.suse.bci.micro.source": "https://build.opensuse.org/package/show/devel:BCI:SLE-15-SP7/micro-image?rev=b05519316cccecec8e2fa35d1fcf24c2",
            "com.suse.bci.micro.supportlevel": "l3",
            "com.suse.bci.micro.title": "SLE BCI 15 SP7 Micro",
            "com.suse.bci.micro.until": "2031-07-31",
            "com.suse.bci.micro.url": "https://www.suse.com/products/base-container-images/",
            "com.suse.bci.micro.vendor": "SUSE LLC",
            "com.suse.bci.micro.version": "15.7-265.1",
            "com.suse.eula": "sle-bci",
            "com.suse.lifecycle-url": "https://www.suse.com/lifecycle#suse-linux-enterprise-server-15",
            "com.suse.release-stage": "released",
            "com.suse.supportlevel": "l3",
            "com.suse.supportlevel.until": "2031-07-31",
            "io.artifacthub.package.logo-url": "https://opensource.suse.com/bci/SLE_BCI_logomark_green.svg",
            "io.artifacthub.package.readme-url": "https://build.opensuse.org/public/source/devel:BCI:SLE-15-SP7/micro-image/README.md?rev=b05519316cccecec8e2fa35d1fcf24c2",
            "org.openbuildservice.disturl": "obs://build.opensuse.org/devel:BCI:SLE-15-SP7/containerfile/b05519316cccecec8e2fa35d1fcf24c2-micro-image",
            "org.opencontainers.image.authors": "https://github.com/SUSE/bci/discussions",
            "org.opencontainers.image.created": "2026-04-03T09:07:58.702075080Z",
            "org.opencontainers.image.description": "A micro environment for containers based on the SUSE Linux Enterprise Base Container Image.",
            "org.opencontainers.image.ref.name": "15.7-265.1",
            "org.opencontainers.image.source": "https://build.opensuse.org/package/show/devel:BCI:SLE-15-SP7/micro-image?rev=b05519316cccecec8e2fa35d1fcf24c2",
            "org.opencontainers.image.title": "SLE BCI 15 SP7 Micro",
            "org.opencontainers.image.url": "https://www.suse.com/products/base-container-images/",
            "org.opencontainers.image.vendor": "SUSE LLC",
            "org.opencontainers.image.version": "15.7-265.1",
            "org.opensuse.reference": "registry.suse.com/bci/bci-micro:15.7-265.1"
          },
          "cmds": [
            "",
            "LABEL org.openbuildservice.disturl=obs://build.opensuse.org/devel:BCI:SLE-15-SP7/containerfile/b05519316cccecec8e2fa35d1fcf24c2-micro-image",
            "RUN set -euo pipefail; rm -vf /var/cache/ldconfig/aux-cache",
            "RUN set -euo pipefail; rm -vf /var/lib/zypp/AutoInstalled",
            "CMD [\"/bin/sh\"]",
            "LABEL io.artifacthub.package.logo-url=https://opensource.suse.com/bci/SLE_BCI_logomark_green.svg",
            "LABEL io.artifacthub.package.readme-url=https://build.opensuse.org/public/source/devel:BCI:SLE-15-SP7/micro-image/README.md?rev=b05519316cccecec8e2fa35d1fcf24c2",
            "LABEL com.suse.release-stage=released",
            "LABEL com.suse.bci.micro.release-stage=released",
            "LABEL com.suse.lifecycle-url=https://www.suse.com/lifecycle#suse-linux-enterprise-server-15",
            "LABEL com.suse.bci.micro.lifecycle-url=https://www.suse.com/lifecycle#suse-linux-enterprise-server-15",
            "LABEL com.suse.eula=sle-bci",
            "LABEL com.suse.bci.micro.eula=sle-bci",
            "LABEL com.suse.supportlevel.until=2031-07-31",
            "LABEL com.suse.bci.micro.until=2031-07-31",
            "LABEL com.suse.supportlevel=l3",
            "LABEL com.suse.bci.micro.supportlevel=l3",
            "LABEL org.openbuildservice.disturl=obs://build.opensuse.org/devel:BCI:SLE-15-SP7/containerfile/b05519316cccecec8e2fa35d1fcf24c2-micro-image",
            "LABEL com.suse.bci.micro.disturl=obs://build.opensuse.org/devel:BCI:SLE-15-SP7/containerfile/b05519316cccecec8e2fa35d1fcf24c2-micro-image",
            "LABEL org.opensuse.reference=registry.suse.com/bci/bci-micro:15.7-265.1",
            "LABEL com.suse.bci.micro.reference=registry.suse.com/bci/bci-micro:15.7-265.1",
            "LABEL org.opencontainers.image.ref.name=15.7-265.1",
            "LABEL com.suse.bci.micro.name=15.7-265.1",
            "LABEL org.opencontainers.image.source=https://build.opensuse.org/package/show/devel:BCI:SLE-15-SP7/micro-image?rev=b05519316cccecec8e2fa35d1fcf24c2",
            "LABEL com.suse.bci.micro.source=https://build.opensuse.org/package/show/devel:BCI:SLE-15-SP7/micro-image?rev=b05519316cccecec8e2fa35d1fcf24c2",
            "LABEL org.opencontainers.image.vendor=SUSE LLC",
            "LABEL com.suse.bci.micro.vendor=SUSE LLC",
            "LABEL org.opencontainers.image.created=2026-04-03T09:07:58.702075080Z",
            "LABEL com.suse.bci.micro.created=2026-04-03T09:07:58.702075080Z",
            "LABEL org.opencontainers.image.url=https://www.suse.com/products/base-container-images/",
            "LABEL com.suse.bci.micro.url=https://www.suse.com/products/base-container-images/",
            "LABEL org.opencontainers.image.version=15.7-265.1",
            "LABEL com.suse.bci.micro.version=15.7-265.1",
            "LABEL org.opencontainers.image.description=A micro environment for containers based on the SUSE Linux Enterprise Base Container Image.",
            "LABEL com.suse.bci.micro.description=A micro environment for containers based on the SUSE Linux Enterprise Base Container Image.",
            "LABEL org.opencontainers.image.title=SLE BCI 15 SP7 Micro",
            "LABEL com.suse.bci.micro.title=SLE BCI 15 SP7 Micro",
            "LABEL org.opencontainers.image.authors=https://github.com/SUSE/bci/discussions",
            "LABEL com.suse.bci.micro.authors=https://github.com/SUSE/bci/discussions",
            "COPY dir:5c8cc32aebf60278a2f36c146bbd61092fe8e0268583949092e764155a625f67 in /"
          ],
          "signature_data": {
            "verification_timestamp": ""
          }
        }
      }
    },
    "metadata": {
      "scanStartedOn": "2026-04-03T09:10:20.946505800+00:00",
      "scanFinishedOn": "2026-04-03T09:10:20.946505800+00:00"
    }
  }
}