DROPME: Test files for development (tmp)

Signed-off-by: Adolfo García Veytia (Puerco) <[email protected]>
anchore · Aug 5, 2023 · 4caa03e · 4caa03e
1 parent f36f6ba
commit 4caa03e
Show file tree

Hide file tree

Showing 7 changed files with 216 additions and 0 deletions.
diff --git a/tmp/config-justification.yaml b/tmp/config-justification.yaml
@@ -0,0 +1,4 @@
+---
+ignore:
+  - vex-status: not_affected
+    vex-justification: vulnerable_code_not_present
diff --git a/tmp/config-single.yaml b/tmp/config-single.yaml
@@ -0,0 +1,4 @@
+---
+ignore:
+  - vulnerability: CVE-2023-1255
+    vex-status: fixed
diff --git a/tmp/config-status.yaml b/tmp/config-status.yaml
@@ -0,0 +1,3 @@
+---
+ignore:
+  - vex-status: fixed
diff --git a/tmp/context.txt b/tmp/context.txt
@@ -0,0 +1,27 @@
+ &{
+    ID:c2ae15a90a5efa479c261e368e00f62630bf472b8973229dde4d70d1ed1c2d8a
+    Name:alpine@sha256:124c7d2707904eea7431fffe91522a01e5a861a624ee31d03372cc1d138a3126
+    Version:sha256:c2ae15a90a5efa479c261e368e00f62630bf472b8973229dde4d70d1ed1c2d8a
+    Metadata:{
+        UserInput:alpine@sha256:124c7d2707904eea7431fffe91522a01e5a861a624ee31d03372cc1d138a3126
+        ID:sha256:9ed4aefc74f6792b5a804d1d146fe4b4a2299147b0f50eaf2b08435d7b38c27
+        ManifestDigest:sha256:c2ae15a90a5efa479c261e368e00f62630bf472b8973229dde4d70d1ed1c2d8a
+        MediaType:application/vnd.docker.distribution.manifest.v2+json
+        Tags:[]
+        Size:7044859
+        Layers:[
+            {
+                MediaType:application/vnd.docker.image.rootfs.diff.tar.gzip
+                Digest:sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5
+                Size:7044859
+            }
+        ]
+        RawManifest:[123 34 115 99 104 101 109 97 86 101 114 115 105 111 110 34 58 50 44 34 109 101 100 105 97 84 121 112 101 34 58 34 97 112 112 108 105 99 97 116 105 111 110 47 118 110 100 46 100 111 99 107 101 114 46 100 105 115 116 114 105 98 117 116 105 111 110 46 109 97 110 105 102 101 115 116 46 118 50 43 106 115 111 110 34 44 34 99 111 110 102 105 103 34 58 123 34 109 101 100 105 97 84 121 112 101 34 58 34 97 112 112 108 105 99 97 116 105 111 110 47 118 110 100 46 100 111 99 107 101 114 46 99 111 110 116 97 105 110 101 114 46 105 109 97 103 101 46 118 49 43 106 115 111 110 34 44 34 115 105 122 101 34 58 49 52 55 48 44 34 100 105 103 101 115 116 34 58 34 115 104 97 50 53 54 58 57 101 100 52 97 101 102 99 55 52 102 54 55 57 50 98 53 97 56 48 52 100 49 100 49 52 54 102 101 52 98 52 97 50 50 57 57 49 52 55 98 48 102 53 48 101 97 102 50 98 48 56 52 51 53 100 55 98 51 56 99 50 55 101 34 125 44 34 108 97 121 101 114 115 34 58 91 123 34 109 101 100 105 97 84 121 112 101 34 58 34 97 112 112 108 105 99 97 116 105 111 110 47 118 110 100 46 100 111 99 107 101 114 46 105 109 97 103 101 46 114 111 111 116 102 115 46 100 105 102 102 46 116 97 114 46 103 122 105 112 34 44 34 115 105 122 101 34 58 55 51 51 55 57 56 52 44 34 100 105 103 101 115 116 34 58 34 115 104 97 50 53 54 58 102 49 52 49 55 102 102 56 51 98 51 49 57 102 98 100 97 101 54 100 100 57 99 100 54 100 56 99 57 99 56 56 48 48 50 100 99 100 55 53 101 99 102 54 101 99 50 48 49 99 56 99 54 56 57 52 54 56 49 99 102 50 98 53 34 125 93 125] RawConfig:[123 34 97 114 99 104 105 116 101 99 116 117 114 101 34 58 34 97 109 100 54 52 34 44 34 99 111 110 102 105 103 34 58 123 34 72 111 115 116 110 97 109 101 34 58 34 34 44 34 68 111 109 97 105 110 110 97 109 101 34 58 34 34 44 34 85 115 101 114 34 58 34 34 44 34 65 116 116 97 99 104 83 116 100 105 110 34 58 102 97 108 115 101 44 34 65 116 116 97 99 104 83 116 100 111 117 116 34 58 102 97 108 115 101 44 34 65 116 116 97 99 104 83 116 100 101 114 114 34 58 102 97 108 115 101 44 34 84 116 121 34 58 102 97 108 115 101 44 34 79 112 101 110 83 116 100 105 110 34 58 102 97 108 115 101 44 34 83 116 100 105 110 79 110 99 101 34 58 102 97 108 115 101 44 34 69 110 118 34 58 91 34 80 65 84 72 61 47 117 115 114 47 108 111 99 97 108 47 115 98 105 110 58 47 117 115 114 47 108 111 99 97 108 47 98 105 110 58 47 117 115 114 47 115 98 105 110 58 47 117 115 114 47 98 105 110 58 47 115 98 105 110 58 47 98 105 110 34 93 44 34 67 109 100 34 58 91 34 47 98 105 110 47 115 104 34 93 44 34 73 109 97 103 101 34 58 34 115 104 97 50 53 54 58 57 57 51 97 100 53 102 50 102 54 57 100 56 99 56 50 48 52 98 101 57 57 101 100 56 100 50 54 97 52 98 97 56 55 99 53 98 97 52 102 101 51 54 48 50 100 98 98 48 52 99 52 56 55 52 51 100 56 54 98 49 97 49 51 34 44 34 86 111 108 117 109 101 115 34 58 110 117 108 108 44 34 87 111 114 107 105 110 103 68 105 114 34 58 34 34 44 34 69 110 116 114 121 112 111 105 110 116 34 58 110 117 108 108 44 34 79 110 66 117 105 108 100 34 58 110 117 108 108 44 34 76 97 98 101 108 115 34 58 110 117 108 108 125 44 34 99 111 110 116 97 105 110 101 114 34 58 34 49 101 53 51 48 97 56 97 48 99 50 55 55 54 99 48 101 48 53 98 52 48 50 100 57 54 57 100 52 52 100 99 52 56 102 57 99 48 57 98 101 55 49 48 100 98 54 99 101 54 48 98 97 100 98 49 49 97 97 55 57 57 99 102 34 44 34 99 111 110 116 97 105 110 101 114 95 99 111 110 102 105 103 34 58 123 34 72 111 115 116 110 97 109 101 34 58 34 49 101 53 51 48 97 56 97 48 99 50 55 34 44 34 68 111 109 97 105 110 110 97 109 101 34 58 34 34 44 34 85 115 101 114 34 58 34 34 44 34 65 116 116 97 99 104 83 116 100 105 110 34 58 102 97 108 115 101 44 34 65 116 116 97 99 104 83 116 100 111 117 116 34 58 102 97 108 115 101 44 34 65 116 116 97 99 104 83 116 100 101 114 114 34 58 102 97 108 115 101 44 34 84 116 121 34 58 102 97 108 115 101 44 34 79 112 101 110 83 116 100 105 110 34 58 102 97 108 115 101 44 34 83 116 100 105 110 79 110 99 101 34 58 102 97 108 115 101 44 34 69 110 118 34 58 91 34 80 65 84 72 61 47 117 115 114 47 108 111 99 97 108 47 115 98 105 110 58 47 117 115 114 47 108 111 99 97 108 47 98 105 110 58 47 117 115 114 47 115 98 105 110 58 47 117 115 114 47 98 105 110 58 47 115 98 105 110 58 47 98 105 110 34 93 44 34 67 109 100 34 58 91 34 47 98 105 110 47 115 104 34 44 34 45 99 34 44 34 35 40 110 111 112 41 32 34 44 34 67 77 68 32 91 92 34 47 98 105 110 47 115 104 92 34 93 34 93 44 34 73 109 97 103 101 34 58 34 115 104 97 50 53 54 58 57 57 51 97 100 53 102 50 102 54 57 100 56 99 56 50 48 52 98 101 57 57 101 100 56 100 50 54 97 52 98 97 56 55 99 53 98 97 52 102 101 51 54 48 50 100 98 98 48 52 99 52 56 55 52 51 100 56 54 98 49 97 49 51 34 44 34 86 111 108 117 109 101 115 34 58 110 117 108 108 44 34 87 111 114 107 105 110 103 68 105 114 34 58 34 34 44 34 69 110 116 114 121 112 111 105 110 116 34 58 110 117 108 108 44 34 79 110 66 117 105 108 100 34 58 110 117 108 108 44 34 76 97 98 101 108 115 34 58 123 125 125 44 34 99 114 101 97 116 101 100 34 58 34 50 48 50 51 45 48 51 45 50 57 84 49 56 58 49 57 58 50 52 46 52 53 53 55 56 57 50 54 90 34 44 34 100 111 99 107 101 114 95 118 101 114 115 105 111 110 34 58 34 50 48 46 49 48 46 50 51 34 44 34 104 105 115 116 111 114 121 34 58 91 123 34 99 114 101 97 116 101 100 34 58 34 50 48 50 51 45 48 51 45 50 57 84 49 56 58 49 57 58 50 52 46 51 52 56 52 51 56 55 48 57 90 34 44 34 99 114 101 97 116 101 100 95 98 121 34 58 34 47 98 105 110 47 115 104 32 45 99 32 35 40 110 111 112 41 32 65 68 68 32 102 105 108 101 58 57 97 52 102 55 55 100 102 97 98 97 55 102 100 50 97 97 55 56 49 56 54 101 52 101 102 48 101 55 52 56 54 97 100 53 53 49 48 49 99 101 102 99 49 102 97 98 98 99 49 98 51 56 53 54 48 49 98 98 51 56 57 50 48 32 105 110 32 47 32 34 125 44 123 34 99 114 101 97 116 101 100 34 58 34 50 48 50 51 45 48 51 45 50 57 84 49 56 58 49 57 58 50 52 46 52 53 53 55 56 57 50 54 90 34 44 34 99 114 101 97 116 101 100 95 98 121 34 58 34 47 98 105 110 47 115 104 32 45 99 32 35 40 110 111 112 41 32 32 67 77 68 32 91 92 34 47 98 105 110 47 115 104 92 34 93 34 44 34 101 109 112 116 121 95 108 97 121 101 114 34 58 116 114 117 101 125 93 44 34 111 115 34 58 34 108 105 110 117 120 34 44 34 114 111 111 116 102 115 34 58 123 34 116 121 112 101 34 58 34 108 97 121 101 114 115 34 44 34 100 105 102 102 95 105 100 115 34 58 91 34 115 104 97 50 53 54 58 102 49 52 49 55 102 102 56 51 98 51 49 57 102 98 100 97 101 54 100 100 57 99 100 54 100 56 99 57 99 56 56 48 48 50 100 99 100 55 53 101 99 102 54 101 99 50 48 49 99 56 99 54 56 57 52 54 56 49 99 102 50 98 53 34 93 125 125]
+        RepoDigests:[
+            "alpine@sha256:124c7d2707904eea7431fffe91522a01e5a861a624ee31d03372cc1d138a3126"
+            "alpine@sha256:b6ca290b6b4cdcca5b3db3ffa338ee0285c11744b4a6abaa9627746ee3291d8d"
+        ]
+        Architecture:amd64
+        Variant: OS:linux
+    }
+} 
diff --git a/tmp/match.txt b/tmp/match.txt
@@ -0,0 +1,81 @@
+{
+ byFingerprint:map[
+  {
+    vulnerabilityID:CVE-2023-1255
+    vulnerabilityNamespace:alpine:distro:alpine:3.17
+    vulnerabilityFixes:3.0.8-r4
+    packageID:aadad53ca60752e4
+  }:{
+  Vulnerability:{
+    Constraint:{
+      raw:< 3.0.8-r4
+      expression:{
+        units:[[{rangeOperator:< version:3.0.8-r4}]]
+        comparators:[[0xc0006891b0]]
+      }
+    }
+    PackageQualifiers:[]
+    CPEs:[]
+    ID:CVE-2023-1255
+    Namespace:alpine:distro:alpine:3.17
+    Fix:{Versions:[3.0.8-r4] State:fixed}
+    Advisories:[]
+    RelatedVulnerabilities:[
+      {ID:CVE-2023-1255 Namespace:nvd:cpe}
+    ]
+  }
+  Package:{
+    ID:aadad53ca60752e4
+    Name:libssl3
+    Version:3.0.8-r3
+    Locations:{
+      set:map[
+        {
+          Coordinates:{
+            RealPath:/lib/apk/db/installed
+            FileSystemID:sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5
+          }
+          VirtualPath:/lib/apk/db/installed
+          ref:{id:173 RealPath:/lib/apk/db/installed}
+        }:{Annotations:map[evidence:primary]}
+      ]
+    }
+    Language:
+    Licenses:[Apache-2.0]
+    Type:apk
+    CPEs:[
+      {Part:a Vendor:libssl3 Product:libssl3 Version:3.0.8-r3 Update: Edition: SWEdition: TargetSW: TargetHW: Other: Language:}
+      {Part:a Vendor:libssl3 Product:libssl Version:3.0.8-r3 Update: Edition: SWEdition: TargetSW: TargetHW: Other: Language:}
+      {Part:a Vendor:libssl Product:libssl3 Version:3.0.8-r3 Update: Edition: SWEdition: TargetSW: TargetHW: Other: Language:}
+      {Part:a Vendor:libssl Product:libssl Version:3.0.8-r3 Update: Edition: SWEdition: TargetSW: TargetHW: Other: Language:}
+    ]
+    PURL:pkg:apk/alpine/[email protected]?arch=x86_64&upstream=openssl&distro=alpine-3.17.3
+    Upstreams:[{Name:openssl Version:}]
+    MetadataType:
+    Metadata:<nil>
+  }
+  Details:[
+   {
+     Type:exact-indirect-match
+     SearchedBy:map[
+       distro:map[
+         type:alpine version:3.17.3]
+         namespace:alpine:distro:alpine:3.17
+         package:map[name:openssl version:3.0.8-r3
+       ]
+     ]
+     Found:map[
+       versionConstraint:< 3.0.8-r4 (apk) 
+       vulnerabilityID:CVE-2023-1255
+     ]
+     Matcher:apk-matcher
+     Confidence:1
+   }
+  ]
+  }
+
+
+
+ {vulnerabilityID:CVE-2023-1255 vulnerabilityNamespace:alpine:distro:alpine:3.17 vulnerabilityFixes:3.0.8-r4 packageID:cc8f90662d91481d}:{Vulnerability:{Constraint:{raw:< 3.0.8-r4 expression:{units:[[{rangeOperator:< version:3.0.8-r4}]] comparators:[[0xc001f82920]]}} PackageQualifiers:[] CPEs:[] ID:CVE-2023-1255 Namespace:alpine:distro:alpine:3.17 Fix:{Versions:[3.0.8-r4] State:fixed} Advisories:[] RelatedVulnerabilities:[{ID:CVE-2023-1255 Namespace:nvd:cpe}]} Package:{ID:cc8f90662d91481d Name:libcrypto3 Version:3.0.8-r3 Locations:{set:map[{Coordinates:{RealPath:/lib/apk/db/installed FileSystemID:sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5} VirtualPath:/lib/apk/db/installed ref:{id:173 RealPath:/lib/apk/db/installed}}:{Annotations:map[evidence:primary]}]} Language: Licenses:[Apache-2.0] Type:apk CPEs:[{Part:a Vendor:libcrypto3 Product:libcrypto3 Version:3.0.8-r3 Update: Edition: SWEdition: TargetSW: TargetHW: Other: Language:} {Part:a Vendor:libcrypto3 Product:libcrypto Version:3.0.8-r3 Update: Edition: SWEdition: TargetSW: TargetHW: Other: Language:} {Part:a Vendor:libcrypto Product:libcrypto3 Version:3.0.8-r3 Update: Edition: SWEdition: TargetSW: TargetHW: Other: Language:} {Part:a Vendor:libcrypto Product:libcrypto Version:3.0.8-r3 Update: Edition: SWEdition: TargetSW: TargetHW: Other: Language:}] PURL:pkg:apk/alpine/[email protected]?arch=x86_64&upstream=openssl&distro=alpine-3.17.3 Upstreams:[{Name:openssl Version:}] MetadataType: Metadata:<nil>} Details:[{Type:exact-indirect-match SearchedBy:map[distro:map[type:alpine version:3.17.3] namespace:alpine:distro:alpine:3.17 package:map[name:openssl version:3.0.8-r3]] Found:map[versionConstraint:< 3.0.8-r4 (apk) vulnerabilityID:CVE-2023-1255] Matcher:apk-matcher Confidence:1}]} {vulnerabilityID:CVE-2023-2650 vulnerabilityNamespace:alpine:distro:alpine:3.17 vulnerabilityFixes:3.0.9-r0 packageID:aadad53ca60752e4}:{Vulnerability:{Constraint:{raw:< 3.0.9-r0 expression:{units:[[{rangeOperator:< version:3.0.9-r0}]] comparators:[[0xc000689250]]}} PackageQualifiers:[] CPEs:[] ID:CVE-2023-2650 Namespace:alpine:distro:alpine:3.17 Fix:{Versions:[3.0.9-r0] State:fixed} Advisories:[] RelatedVulnerabilities:[{ID:CVE-2023-2650 Namespace:nvd:cpe}]} Package:{ID:aadad53ca60752e4 Name:libssl3 Version:3.0.8-r3 Locations:{set:map[{Coordinates:{RealPath:/lib/apk/db/installed FileSystemID:sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5} VirtualPath:/lib/apk/db/installed ref:{id:173 RealPath:/lib/apk/db/installed}}:{Annotations:map[evidence:primary]}]} Language: Licenses:[Apache-2.0] Type:apk CPEs:[{Part:a Vendor:libssl3 Product:libssl3 Version:3.0.8-r3 Update: Edition: SWEdition: TargetSW: TargetHW: Other: Language:} {Part:a Vendor:libssl3 Product:libssl Version:3.0.8-r3 Update: Edition: SWEdition: TargetSW: TargetHW: Other: Language:} {Part:a Vendor:libssl Product:libssl3 Version:3.0.8-r3 Update: Edition: SWEdition: TargetSW: TargetHW: Other: Language:} {Part:a Vendor:libssl Product:libssl Version:3.0.8-r3 Update: Edition: SWEdition: TargetSW: TargetHW: Other: Language:}] PURL:pkg:apk/alpine/[email protected]?arch=x86_64&upstream=openssl&distro=alpine-3.17.3 Upstreams:[{Name:openssl Version:}] MetadataType: Metadata:<nil>} Details:[{Type:exact-indirect-match SearchedBy:map[distro:map[type:alpine version:3.17.3] namespace:alpine:distro:alpine:3.17 package:map[name:openssl version:3.0.8-r3]] Found:map[versionConstraint:< 3.0.9-r0 (apk) vulnerabilityID:CVE-2023-2650] Matcher:apk-matcher Confidence:1}]} {vulnerabilityID:CVE-2023-2650 vulnerabilityNamespace:alpine:distro:alpine:3.17 vulnerabilityFixes:3.0.9-r0 packageID:cc8f90662d91481d}:{Vulnerability:{Constraint:{raw:< 3.0.9-r0 expression:{units:[[{rangeOperator:< version:3.0.9-r0}]] comparators:[[0xc001f82970]]}} PackageQualifiers:[] CPEs:[] ID:CVE-2023-2650 Namespace:alpine:distro:alpine:3.17 Fix:{Versions:[3.0.9-r0] State:fixed} Advisories:[] RelatedVulnerabilities:[{ID:CVE-2023-2650 Namespace:nvd:cpe}]} Package:{ID:cc8f90662d91481d Name:libcrypto3 Version:3.0.8-r3 Locations:{set:map[{Coordinates:{RealPath:/lib/apk/db/installed FileSystemID:sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5} VirtualPath:/lib/apk/db/installed ref:{id:173 RealPath:/lib/apk/db/installed}}:{Annotations:map[evidence:primary]}]} Language: Licenses:[Apache-2.0] Type:apk CPEs:[{Part:a Vendor:libcrypto3 Product:libcrypto3 Version:3.0.8-r3 Update: Edition: SWEdition: TargetSW: TargetHW: Other: Language:} {Part:a Vendor:libcrypto3 Product:libcrypto Version:3.0.8-r3 Update: Edition: SWEdition: TargetSW: TargetHW: Other: Language:} {Part:a Vendor:libcrypto Product:libcrypto3 Version:3.0.8-r3 Update: Edition: SWEdition: TargetSW: TargetHW: Other: Language:} {Part:a Vendor:libcrypto Product:libcrypto Version:3.0.8-r3 Update: Edition: SWEdition: TargetSW: TargetHW: Other: Language:}] PURL:pkg:apk/alpine/[email protected]?arch=x86_64&upstream=openssl&distro=alpine-3.17.3 Upstreams:[{Name:openssl Version:}] MetadataType: Metadata:<nil>} Details:[{Type:exact-indirect-match SearchedBy:map[distro:map[type:alpine version:3.17.3] namespace:alpine:distro:alpine:3.17 package:map[name:openssl version:3.0.8-r3]] Found:map[versionConstraint:< 3.0.9-r0 (apk) vulnerabilityID:CVE-2023-2650] Matcher:apk-matcher Confidence:1}]}] byPackage:map[aadad53ca60752e4:[{vulnerabilityID:CVE-2023-1255 vulnerabilityNamespace:alpine:distro:alpine:3.17 vulnerabilityFixes:3.0.8-r4 packageID:aadad53ca60752e4} {vulnerabilityID:CVE-2023-2650 vulnerabilityNamespace:alpine:distro:alpine:3.17 vulnerabilityFixes:3.0.9-r0 packageID:aadad53ca60752e4}] cc8f90662d91481d:[{vulnerabilityID:CVE-2023-1255 vulnerabilityNamespace:alpine:distro:alpine:3.17 vulnerabilityFixes:3.0.8-r4 packageID:cc8f90662d91481d} {vulnerabilityID:CVE-2023-2650 vulnerabilityNamespace:alpine:distro:alpine:3.17 vulnerabilityFixes:3.0.9-r0 packageID:cc8f90662d91481d}]
+ ]
+} 
diff --git a/tmp/openvex-demo1.json b/tmp/openvex-demo1.json
@@ -0,0 +1,25 @@
+{
+  "@context": "https://openvex.dev/ns/0.1.0",
+  "@id": "https://openvex.dev/docs/public/vex-d4e9020b6d0d26f131d535e055902dd6ccf3e2088bce3079a8cd3588a4b14c78",
+  "author": "The OpenVEX Project <[email protected]>",
+  "role": "Demo Writer",
+  "timestamp": "2023-07-17T18:28:47.696004345-06:00",
+  "version": 1,
+  "statements": [
+    {
+      "vulnerability": {
+        "name": "CVE-2023-1255"
+      },
+      "products": [
+        {
+          "@id": "pkg:oci/alpine@sha256%3A124c7d2707904eea7431fffe91522a01e5a861a624ee31d03372cc1d138a3126",
+          "subcomponents": [
+            { "@id": "pkg:apk/alpine/[email protected]" },
+            { "@id": "pkg:apk/alpine/[email protected]" }
+          ]
+        }
+      ],
+      "status": "fixed"
+    }
+  ]
+}
diff --git a/tmp/openvex-demo2.json b/tmp/openvex-demo2.json
@@ -0,0 +1,72 @@
+{
+  "@context": "https://openvex.dev/ns/0.1.0",
+  "@id": "https://openvex.dev/docs/public/vex-d4e9020b6d0d26f131d535e055902dd6ccf3e2088bce3079a8cd3588a4b14c78",
+  "author": "The OpenVEX Project <[email protected]>",
+  "role": "Demo Writer",
+  "timestamp": "2023-07-17T18:28:47.696004345-06:00",
+  "version": 1,
+  "statements": [
+    {
+      "vulnerability": {
+        "name": "CVE-2023-1255"
+      },
+      "products": [
+        {
+          "@id": "pkg:oci/alpine@sha256%3A124c7d2707904eea7431fffe91522a01e5a861a624ee31d03372cc1d138a3126",
+          "subcomponents": [
+            { "@id": "pkg:apk/alpine/[email protected]" },
+            { "@id": "pkg:apk/alpine/[email protected]" }
+          ]
+        }
+      ],
+      "status": "fixed"
+    },
+    {
+      "vulnerability": {
+        "name": "CVE-2023-2650"
+      },
+      "products": [
+        {
+          "@id": "pkg:oci/alpine@sha256%3A124c7d2707904eea7431fffe91522a01e5a861a624ee31d03372cc1d138a3126",
+          "subcomponents": [
+            { "@id": "pkg:apk/alpine/[email protected]" },
+            { "@id": "pkg:apk/alpine/[email protected]" }
+          ]
+        }
+      ],
+      "status": "fixed"
+    },
+    {
+        "vulnerability": {
+          "name": "CVE-2023-2975"
+        },
+        "products": [
+          {
+            "@id": "pkg:oci/alpine@sha256%3A124c7d2707904eea7431fffe91522a01e5a861a624ee31d03372cc1d138a3126",
+            "subcomponents": [
+              { "@id": "pkg:apk/alpine/[email protected]" },
+              { "@id": "pkg:apk/alpine/[email protected]" }
+            ]
+          }
+        ],
+        "status": "fixed"
+      },
+      {
+        "vulnerability": {
+          "name": "CVE-2023-3446"
+        },
+        "products": [
+          {
+            "@id": "pkg:oci/alpine@sha256%3A124c7d2707904eea7431fffe91522a01e5a861a624ee31d03372cc1d138a3126",
+            "subcomponents": [
+              { "@id": "pkg:apk/alpine/[email protected]" },
+              { "@id": "pkg:apk/alpine/[email protected]" }
+            ]
+          }
+        ],
+        "status": "not_affected",
+        "justification": "vulnerable_code_not_present",
+        "impact_statement": "affected functions were removed before packaging"
+      }
+  ]
+}