{
    "schema_version": 1,
    "artifact_type": "release_security_evidence",
    "redacted": true,
    "workflow_identity": {
        "workflow": "release-build.yml",
        "run_number": 1562,
        "api_run_id": 1602,
        "source_sha": "f17a06657bf02dd1640272dc11264fba5ac317c7"
    },
    "release_version": "0.1.8",
    "image_digest": "sha256:18012e73a60ad5c728f8a87f27271e225e8ffe5b6812ebbfcd97e7438a979623",
    "image_fingerprint": "sha256:b55b3f50636667b60ce6e447e1d20173be247e2a700eb53ae8fa7645b98cbdea",
    "scanner": {
        "name": "trivy",
        "version": "0.63.0",
        "database_sha256": "34b25a779854bc84ff61b8b7e83c0d86d51e10e3fcb1b8fcbd71d608f794bea0",
        "database_updated_at": "2026-09-24T13:23:01.282626422Z",
        "source_report_sha256": "6a90ba55153567737f2402dc812652fdb5a3ca62ce84c35d03e57c1264af3b46"
    },
    "policy": {
        "status": "fail",
        "policy_errors": [],
        "blocking": {
            "critical_count": 1,
            "high_count": 79,
            "findings": [
                {
                    "id": "CVE-2026-76642",
                    "package": "bsdutils",
                    "installed_version": "1:2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-78408",
                    "package": "bsdutils",
                    "installed_version": "1:2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-78409",
                    "package": "bsdutils",
                    "installed_version": "1:2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-78410",
                    "package": "bsdutils",
                    "installed_version": "1:2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-12064",
                    "package": "curl",
                    "installed_version": "8.14.1-2+deb13u5",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-8286",
                    "package": "curl",
                    "installed_version": "8.14.1-2+deb13u5",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-8458",
                    "package": "curl",
                    "installed_version": "8.14.1-2+deb13u5",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-8927",
                    "package": "curl",
                    "installed_version": "8.14.1-2+deb13u5",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-54369",
                    "package": "libacl1",
                    "installed_version": "2.3.2-2+b1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-76642",
                    "package": "libblkid1",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-78408",
                    "package": "libblkid1",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-78409",
                    "package": "libblkid1",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-78410",
                    "package": "libblkid1",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-12064",
                    "package": "libcurl4t64",
                    "installed_version": "8.14.1-2+deb13u5",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-8286",
                    "package": "libcurl4t64",
                    "installed_version": "8.14.1-2+deb13u5",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-8458",
                    "package": "libcurl4t64",
                    "installed_version": "8.14.1-2+deb13u5",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-8927",
                    "package": "libcurl4t64",
                    "installed_version": "8.14.1-2+deb13u5",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-66046",
                    "package": "libexpat1",
                    "installed_version": "2.8.3-1~deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-76956",
                    "package": "libexpat1",
                    "installed_version": "2.8.3-1~deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-76957",
                    "package": "libexpat1",
                    "installed_version": "2.8.3-1~deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-93990",
                    "package": "libexpat1",
                    "installed_version": "2.8.3-1~deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-76642",
                    "package": "liblastlog2-2",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-78408",
                    "package": "liblastlog2-2",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-78409",
                    "package": "liblastlog2-2",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-78410",
                    "package": "liblastlog2-2",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-76642",
                    "package": "libmount1",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-78408",
                    "package": "libmount1",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-78409",
                    "package": "libmount1",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-78410",
                    "package": "libmount1",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2025-69720",
                    "package": "libncursesw6",
                    "installed_version": "6.5+20250216-2",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-9538",
                    "package": "libperl5.40",
                    "installed_version": "5.40.1-6+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-15308",
                    "package": "libpython3.13-minimal",
                    "installed_version": "3.13.5-2+deb13u5",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-7210",
                    "package": "libpython3.13-minimal",
                    "installed_version": "3.13.5-2+deb13u5",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-82049",
                    "package": "libpython3.13-minimal",
                    "installed_version": "3.13.5-2+deb13u5",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-15308",
                    "package": "libpython3.13-stdlib",
                    "installed_version": "3.13.5-2+deb13u5",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-7210",
                    "package": "libpython3.13-stdlib",
                    "installed_version": "3.13.5-2+deb13u5",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-82049",
                    "package": "libpython3.13-stdlib",
                    "installed_version": "3.13.5-2+deb13u5",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-76642",
                    "package": "libsmartcols1",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-78408",
                    "package": "libsmartcols1",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-78409",
                    "package": "libsmartcols1",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-78410",
                    "package": "libsmartcols1",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-16742",
                    "package": "libsystemd0",
                    "installed_version": "257.13-1~deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2025-69720",
                    "package": "libtinfo6",
                    "installed_version": "6.5+20250216-2",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-16742",
                    "package": "libudev1",
                    "installed_version": "257.13-1~deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-76642",
                    "package": "libuuid1",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-78408",
                    "package": "libuuid1",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-78409",
                    "package": "libuuid1",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-78410",
                    "package": "libuuid1",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-6653",
                    "package": "libxml2",
                    "installed_version": "2.12.7+dfsg+really2.9.14-2.1+deb13u3",
                    "severity": "CRITICAL"
                },
                {
                    "id": "CVE-2026-74860",
                    "package": "libxml2",
                    "installed_version": "2.12.7+dfsg+really2.9.14-2.1+deb13u3",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-86138",
                    "package": "libxml2",
                    "installed_version": "2.12.7+dfsg+really2.9.14-2.1+deb13u3",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-86139",
                    "package": "libxml2",
                    "installed_version": "2.12.7+dfsg+really2.9.14-2.1+deb13u3",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-86140",
                    "package": "libxml2",
                    "installed_version": "2.12.7+dfsg+really2.9.14-2.1+deb13u3",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-86142",
                    "package": "libxml2",
                    "installed_version": "2.12.7+dfsg+really2.9.14-2.1+deb13u3",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-86143",
                    "package": "libxml2",
                    "installed_version": "2.12.7+dfsg+really2.9.14-2.1+deb13u3",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-86144",
                    "package": "libxml2",
                    "installed_version": "2.12.7+dfsg+really2.9.14-2.1+deb13u3",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-76642",
                    "package": "login",
                    "installed_version": "1:4.16.0-2+really2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-78408",
                    "package": "login",
                    "installed_version": "1:4.16.0-2+really2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-78409",
                    "package": "login",
                    "installed_version": "1:4.16.0-2+really2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-78410",
                    "package": "login",
                    "installed_version": "1:4.16.0-2+really2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-76642",
                    "package": "mount",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-78408",
                    "package": "mount",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-78409",
                    "package": "mount",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-78410",
                    "package": "mount",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2025-69720",
                    "package": "ncurses-base",
                    "installed_version": "6.5+20250216-2",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2025-69720",
                    "package": "ncurses-bin",
                    "installed_version": "6.5+20250216-2",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-9538",
                    "package": "perl",
                    "installed_version": "5.40.1-6+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-9538",
                    "package": "perl-base",
                    "installed_version": "5.40.1-6+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-9538",
                    "package": "perl-modules-5.40",
                    "installed_version": "5.40.1-6+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-23949",
                    "package": "python3-pkg-resources",
                    "installed_version": "78.1.1-0.1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-15308",
                    "package": "python3.13",
                    "installed_version": "3.13.5-2+deb13u5",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-7210",
                    "package": "python3.13",
                    "installed_version": "3.13.5-2+deb13u5",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-82049",
                    "package": "python3.13",
                    "installed_version": "3.13.5-2+deb13u5",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-15308",
                    "package": "python3.13-minimal",
                    "installed_version": "3.13.5-2+deb13u5",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-7210",
                    "package": "python3.13-minimal",
                    "installed_version": "3.13.5-2+deb13u5",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-82049",
                    "package": "python3.13-minimal",
                    "installed_version": "3.13.5-2+deb13u5",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-76642",
                    "package": "util-linux",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-78408",
                    "package": "util-linux",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-78409",
                    "package": "util-linux",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-78410",
                    "package": "util-linux",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                }
            ]
        },
        "excepted": {
            "critical_count": 0,
            "high_count": 0,
            "findings": []
        }
    }
}
