{
  "_type": "https://in-toto.io/Statement/v0.1",
  "predicateType": "https://cosign.sigstore.dev/attestation/vuln/v1",
  "subject": [
    {
      "name": "",
      "digest": {
        "sha256": ""
      }
    }
  ],
  "predicate": {
    "invocation": {
      "parameters": null,
      "uri": "",
      "event_id": "",
      "builder.id": ""
    },
    "scanner": {
      "uri": "pkg:github.com/neuvector/scanner@0212004",
      "version": "0212004",
      "db": {
        "uri": "pkg:github.com/neuvector/vul-dbgen@4.114",
        "version": "4.114"
      },
      "result": {
        "error_message": "",
        "report": {
          "image_id": "db68db091c20370c147c783c33fdafbc54466d694cc6760dd111c7a3c65c4aa3",
          "registry": "",
          "repository": "bci/bci-micro-fips",
          "tag": "15.7-153.1",
          "digest": "",
          "size": 35889052,
          "author": "",
          "base_os": "sles:15.7",
          "created_at": "0001-01-01T00:00:00Z",
          "cvedb_version": "4.114",
          "cvedb_create_time": "2026-03-25T01:40:56Z",
          "layers": [],
          "vulnerabilities": [],
          "modules": [
            {
              "name": "bash",
              "version": "4.4-150400.27.6.1",
              "source": "sles:15.7"
            },
            {
              "name": "libgmp10",
              "version": "6.1.2-4.9.1",
              "source": "sles:15.7"
            },
            {
              "name": "libcap2",
              "version": "2.63-150400.3.3.1",
              "source": "sles:15.7"
            },
            {
              "name": "libopenssl3",
              "version": "3.2.3-150700.5.24.1",
              "source": "sles:15.7"
            },
            {
              "name": "bash-sh",
              "version": "4.4-150400.27.6.1",
              "source": "sles:15.7"
            },
            {
              "name": "sles-release",
              "version": "15.7-150700.28.1",
              "source": "sles:15.7"
            },
            {
              "name": "skelcd-EULA-bci",
              "version": "20250430-150700.1.1",
              "source": "sles:15.7"
            },
            {
              "name": "filesystem",
              "version": "15.0-11.8.1",
              "source": "sles:15.7"
            },
            {
              "name": "glibc",
              "version": "2.38-150600.14.43.1",
              "source": "sles:15.7"
            },
            {
              "name": "libz1",
              "version": "1.2.13-150500.4.6.1",
              "source": "sles:15.7"
            },
            {
              "name": "libjitterentropy3",
              "version": "3.4.1-150000.1.12.1",
              "source": "sles:15.7"
            },
            {
              "name": "libstdc++6",
              "version": "15.2.0+git10201-150000.1.9.1",
              "source": "sles:15.7"
            },
            {
              "name": "libncurses6",
              "version": "6.1-150000.5.30.1",
              "source": "sles:15.7"
            },
            {
              "name": "coreutils",
              "version": "8.32-150400.9.9.1",
              "source": "sles:15.7"
            },
            {
              "name": "libpcre2-8-0",
              "version": "10.42-150600.1.26",
              "source": "sles:15.7"
            },
            {
              "name": "libgcc_s1",
              "version": "15.2.0+git10201-150000.1.9.1",
              "source": "sles:15.7"
            },
            {
              "name": "libacl1",
              "version": "2.2.52-4.3.1",
              "source": "sles:15.7"
            },
            {
              "name": "libopenssl-3-fips-provider",
              "version": "3.2.3-150700.5.24.1",
              "source": "sles:15.7"
            },
            {
              "name": "patterns-base-fips",
              "version": "20200124-150700.36.1",
              "source": "sles:15.7"
            },
            {
              "name": "ca-certificates-mozilla-prebuilt",
              "version": "2.84-150200.44.1",
              "source": "sles:15.7"
            },
            {
              "name": "crypto-policies",
              "version": "20230920.570ea89-150600.3.16.1",
              "source": "sles:15.7"
            },
            {
              "name": "system-user-root",
              "version": "20190513-3.3.1",
              "source": "sles:15.7"
            },
            {
              "name": "libattr1",
              "version": "2.4.47-2.19",
              "source": "sles:15.7"
            },
            {
              "name": "libselinux1",
              "version": "3.5-150600.3.3.1",
              "source": "sles:15.7"
            },
            {
              "name": "terminfo-base",
              "version": "6.1-150000.5.30.1",
              "source": "sles:15.7"
            },
            {
              "name": "libreadline7",
              "version": "7.0-150400.27.6.1",
              "source": "sles:15.7"
            }
          ],
          "checks": [
            {
              "test_number": "I.4.1",
              "category": "image",
              "type": "image",
              "profile": "Level 1",
              "scored": true,
              "automated": false,
              "description": "Ensure a user for the container has been created",
              "remediation": "",
              "tags": [],
              "level": "WARN",
              "message": []
            },
            {
              "test_number": "I.4.6",
              "category": "image",
              "type": "image",
              "profile": "Level 1",
              "scored": false,
              "automated": false,
              "description": "Ensure that HEALTHCHECK instructions have been added to container images",
              "remediation": "",
              "tags": [],
              "level": "WARN",
              "message": []
            }
          ],
          "envs": [
            "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
            "GNUTLS_FORCE_FIPS_MODE=1",
            "LIBGCRYPT_FORCE_FIPS_MODE=1",
            "LIBICA_FIPS_FLAG=1",
            "NSS_FIPS=1",
            "OPENSSL_FIPS=1",
            "OPENSSL_FORCE_FIPS_MODE=1"
          ],
          "labels": {
            "com.suse.bci.micro-fips.authors": "https://github.com/SUSE/bci/discussions",
            "com.suse.bci.micro-fips.created": "2026-04-03T09:09:24.161530240Z",
            "com.suse.bci.micro-fips.description": "A micro container in FIPS-140-3 mode for containers based on the SUSE Linux Enterprise Base Container Image.",
            "com.suse.bci.micro-fips.disturl": "obs://build.opensuse.org/devel:BCI:SLE-15-SP7/containerfile/c00d61b3106c74a059a73fc1f139a3b9-micro-fips-image",
            "com.suse.bci.micro-fips.eula": "sle-bci",
            "com.suse.bci.micro-fips.lifecycle-url": "https://www.suse.com/lifecycle#suse-linux-enterprise-server-15",
            "com.suse.bci.micro-fips.name": "15.7-153.1",
            "com.suse.bci.micro-fips.reference": "registry.suse.com/bci/bci-micro-fips:15.7-153.1",
            "com.suse.bci.micro-fips.release-stage": "released",
            "com.suse.bci.micro-fips.source": "https://build.opensuse.org/package/show/devel:BCI:SLE-15-SP7/micro-fips-image?rev=c00d61b3106c74a059a73fc1f139a3b9",
            "com.suse.bci.micro-fips.supportlevel": "l3",
            "com.suse.bci.micro-fips.title": "SLE BCI Micro 15 SP7 FIPS-140-3 mode",
            "com.suse.bci.micro-fips.until": "2031-07-31",
            "com.suse.bci.micro-fips.url": "https://www.suse.com/products/base-container-images/",
            "com.suse.bci.micro-fips.vendor": "SUSE LLC",
            "com.suse.bci.micro-fips.version": "15.7-153.1",
            "com.suse.eula": "sle-bci",
            "com.suse.lifecycle-url": "https://www.suse.com/lifecycle#suse-linux-enterprise-server-15",
            "com.suse.release-stage": "released",
            "com.suse.supportlevel": "l3",
            "com.suse.supportlevel.until": "2031-07-31",
            "io.artifacthub.package.logo-url": "https://opensource.suse.com/bci/SLE_BCI_logomark_green.svg",
            "io.artifacthub.package.readme-url": "https://build.opensuse.org/public/source/devel:BCI:SLE-15-SP7/micro-fips-image/README.md?rev=c00d61b3106c74a059a73fc1f139a3b9",
            "org.openbuildservice.disturl": "obs://build.opensuse.org/devel:BCI:SLE-15-SP7/containerfile/c00d61b3106c74a059a73fc1f139a3b9-micro-fips-image",
            "org.opencontainers.image.authors": "https://github.com/SUSE/bci/discussions",
            "org.opencontainers.image.created": "2026-04-03T09:09:24.161530240Z",
            "org.opencontainers.image.description": "A micro container in FIPS-140-3 mode for containers based on the SUSE Linux Enterprise Base Container Image.",
            "org.opencontainers.image.ref.name": "15.7-153.1",
            "org.opencontainers.image.source": "https://build.opensuse.org/package/show/devel:BCI:SLE-15-SP7/micro-fips-image?rev=c00d61b3106c74a059a73fc1f139a3b9",
            "org.opencontainers.image.title": "SLE BCI Micro 15 SP7 FIPS-140-3 mode",
            "org.opencontainers.image.url": "https://www.suse.com/products/base-container-images/",
            "org.opencontainers.image.vendor": "SUSE LLC",
            "org.opencontainers.image.version": "15.7-153.1",
            "org.opensuse.reference": "registry.suse.com/bci/bci-micro-fips:15.7-153.1"
          },
          "cmds": [
            "",
            "LABEL org.openbuildservice.disturl=obs://build.opensuse.org/devel:BCI:SLE-15-SP7/containerfile/c00d61b3106c74a059a73fc1f139a3b9-micro-fips-image",
            "ENV OPENSSL_FORCE_FIPS_MODE=1",
            "ENV OPENSSL_FIPS=1",
            "ENV NSS_FIPS=1",
            "ENV LIBICA_FIPS_FLAG=1",
            "ENV LIBGCRYPT_FORCE_FIPS_MODE=1",
            "ENV GNUTLS_FORCE_FIPS_MODE=1",
            "CMD [\"/bin/sh\"]",
            "LABEL io.artifacthub.package.logo-url=https://opensource.suse.com/bci/SLE_BCI_logomark_green.svg",
            "LABEL io.artifacthub.package.readme-url=https://build.opensuse.org/public/source/devel:BCI:SLE-15-SP7/micro-fips-image/README.md?rev=c00d61b3106c74a059a73fc1f139a3b9",
            "LABEL com.suse.release-stage=released",
            "LABEL com.suse.bci.micro-fips.release-stage=released",
            "LABEL com.suse.lifecycle-url=https://www.suse.com/lifecycle#suse-linux-enterprise-server-15",
            "LABEL com.suse.bci.micro-fips.lifecycle-url=https://www.suse.com/lifecycle#suse-linux-enterprise-server-15",
            "LABEL com.suse.eula=sle-bci",
            "LABEL com.suse.bci.micro-fips.eula=sle-bci",
            "LABEL com.suse.supportlevel.until=2031-07-31",
            "LABEL com.suse.bci.micro-fips.until=2031-07-31",
            "LABEL com.suse.supportlevel=l3",
            "LABEL com.suse.bci.micro-fips.supportlevel=l3",
            "LABEL org.openbuildservice.disturl=obs://build.opensuse.org/devel:BCI:SLE-15-SP7/containerfile/c00d61b3106c74a059a73fc1f139a3b9-micro-fips-image",
            "LABEL com.suse.bci.micro-fips.disturl=obs://build.opensuse.org/devel:BCI:SLE-15-SP7/containerfile/c00d61b3106c74a059a73fc1f139a3b9-micro-fips-image",
            "LABEL org.opensuse.reference=registry.suse.com/bci/bci-micro-fips:15.7-153.1",
            "LABEL com.suse.bci.micro-fips.reference=registry.suse.com/bci/bci-micro-fips:15.7-153.1",
            "LABEL org.opencontainers.image.ref.name=15.7-153.1",
            "LABEL com.suse.bci.micro-fips.name=15.7-153.1",
            "LABEL org.opencontainers.image.source=https://build.opensuse.org/package/show/devel:BCI:SLE-15-SP7/micro-fips-image?rev=c00d61b3106c74a059a73fc1f139a3b9",
            "LABEL com.suse.bci.micro-fips.source=https://build.opensuse.org/package/show/devel:BCI:SLE-15-SP7/micro-fips-image?rev=c00d61b3106c74a059a73fc1f139a3b9",
            "LABEL org.opencontainers.image.vendor=SUSE LLC",
            "LABEL com.suse.bci.micro-fips.vendor=SUSE LLC",
            "LABEL org.opencontainers.image.created=2026-04-03T09:09:24.161530240Z",
            "LABEL com.suse.bci.micro-fips.created=2026-04-03T09:09:24.161530240Z",
            "LABEL org.opencontainers.image.url=https://www.suse.com/products/base-container-images/",
            "LABEL com.suse.bci.micro-fips.url=https://www.suse.com/products/base-container-images/",
            "LABEL org.opencontainers.image.version=15.7-153.1",
            "LABEL com.suse.bci.micro-fips.version=15.7-153.1",
            "LABEL org.opencontainers.image.description=A micro container in FIPS-140-3 mode for containers based on the SUSE Linux Enterprise Base Container Image.",
            "LABEL com.suse.bci.micro-fips.description=A micro container in FIPS-140-3 mode for containers based on the SUSE Linux Enterprise Base Container Image.",
            "LABEL org.opencontainers.image.title=SLE BCI Micro 15 SP7 FIPS-140-3 mode",
            "LABEL com.suse.bci.micro-fips.title=SLE BCI Micro 15 SP7 FIPS-140-3 mode",
            "LABEL org.opencontainers.image.authors=https://github.com/SUSE/bci/discussions",
            "LABEL com.suse.bci.micro-fips.authors=https://github.com/SUSE/bci/discussions",
            "COPY dir:de369b6a9ab9e0ea8d32a1f370ce0bfb545416570d82f3ca3440d2fe9dfef16f in /"
          ],
          "signature_data": {
            "verification_timestamp": ""
          }
        }
      }
    },
    "metadata": {
      "scanStartedOn": "2026-04-03T09:11:55.641329200+00:00",
      "scanFinishedOn": "2026-04-03T09:11:55.641329200+00:00"
    }
  }
}