{
    "schema_version": 1,
    "artifact_type": "release_security_evidence",
    "redacted": true,
    "workflow_identity": {
        "workflow": "release-build.yml",
        "run_number": 2041,
        "api_run_id": 2082,
        "source_sha": "4886a4a10588f5c150b9e4118e761058a401eb16"
    },
    "release_version": "0.1.19",
    "image_digest": "sha256:a5a1a4aa51633f51a142b9dc39aca327f2efdf00b095657f1aea65d96a891b22",
    "image_fingerprint": "sha256:11809b3489ae1bd7f4dcb3e99232dc23867dee4eaefbd9a29f432a52a92e5626",
    "scanner": {
        "name": "trivy",
        "version": "0.63.0",
        "database_sha256": "77f1a0c2fb8e45cdd0732e144cdf2b5527a3abdeccef16439eba399b334bf62e",
        "database_updated_at": "2026-10-22T01:15:55.263770788Z",
        "source_report_sha256": "571353bc71d16f4ce7688eb040dcdb7004d3c999119a69c1939f1c2b4a50bc58"
    },
    "policy": {
        "status": "pass",
        "policy_errors": [],
        "blocking": {
            "critical_count": 0,
            "high_count": 0,
            "findings": []
        },
        "excepted": {
            "critical_count": 1,
            "high_count": 95,
            "findings": [
                {
                    "id": "CVE-2026-76642",
                    "package": "bsdutils",
                    "installed_version": "1:2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-78408",
                    "package": "bsdutils",
                    "installed_version": "1:2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-78409",
                    "package": "bsdutils",
                    "installed_version": "1:2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-78410",
                    "package": "bsdutils",
                    "installed_version": "1:2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-12064",
                    "package": "curl",
                    "installed_version": "8.14.1-2+deb13u7",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-8458",
                    "package": "curl",
                    "installed_version": "8.14.1-2+deb13u7",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-54369",
                    "package": "libacl1",
                    "installed_version": "2.3.2-2+b1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-76642",
                    "package": "libblkid1",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-78408",
                    "package": "libblkid1",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-78409",
                    "package": "libblkid1",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-78410",
                    "package": "libblkid1",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-34980",
                    "package": "libcups2t64",
                    "installed_version": "2.4.10-3+deb13u2",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-55453",
                    "package": "libcups2t64",
                    "installed_version": "2.4.10-3+deb13u2",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-12064",
                    "package": "libcurl4t64",
                    "installed_version": "8.14.1-2+deb13u7",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-8458",
                    "package": "libcurl4t64",
                    "installed_version": "8.14.1-2+deb13u7",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-76642",
                    "package": "liblastlog2-2",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-78408",
                    "package": "liblastlog2-2",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-78409",
                    "package": "liblastlog2-2",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-78410",
                    "package": "liblastlog2-2",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-76642",
                    "package": "libmount1",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-78408",
                    "package": "libmount1",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-78409",
                    "package": "libmount1",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-78410",
                    "package": "libmount1",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2025-69720",
                    "package": "libncursesw6",
                    "installed_version": "6.5+20250216-2",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-9538",
                    "package": "libperl5.40",
                    "installed_version": "5.40.1-6+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-15308",
                    "package": "libpython3.13-minimal",
                    "installed_version": "3.13.5-2+deb13u5",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-19445",
                    "package": "libpython3.13-minimal",
                    "installed_version": "3.13.5-2+deb13u5",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-19553",
                    "package": "libpython3.13-minimal",
                    "installed_version": "3.13.5-2+deb13u5",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-7210",
                    "package": "libpython3.13-minimal",
                    "installed_version": "3.13.5-2+deb13u5",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-82049",
                    "package": "libpython3.13-minimal",
                    "installed_version": "3.13.5-2+deb13u5",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-15308",
                    "package": "libpython3.13-stdlib",
                    "installed_version": "3.13.5-2+deb13u5",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-19445",
                    "package": "libpython3.13-stdlib",
                    "installed_version": "3.13.5-2+deb13u5",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-19553",
                    "package": "libpython3.13-stdlib",
                    "installed_version": "3.13.5-2+deb13u5",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-7210",
                    "package": "libpython3.13-stdlib",
                    "installed_version": "3.13.5-2+deb13u5",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-82049",
                    "package": "libpython3.13-stdlib",
                    "installed_version": "3.13.5-2+deb13u5",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-76642",
                    "package": "libsmartcols1",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-78408",
                    "package": "libsmartcols1",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-78409",
                    "package": "libsmartcols1",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-78410",
                    "package": "libsmartcols1",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-16742",
                    "package": "libsystemd0",
                    "installed_version": "257.13-1~deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2025-69720",
                    "package": "libtinfo6",
                    "installed_version": "6.5+20250216-2",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-16742",
                    "package": "libudev1",
                    "installed_version": "257.13-1~deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-76642",
                    "package": "libuuid1",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-78408",
                    "package": "libuuid1",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-78409",
                    "package": "libuuid1",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-78410",
                    "package": "libuuid1",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-88806",
                    "package": "libx11-6",
                    "installed_version": "2:1.8.12-1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-88806",
                    "package": "libx11-data",
                    "installed_version": "2:1.8.12-1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-88806",
                    "package": "libx11-xcb1",
                    "installed_version": "2:1.8.12-1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-6653",
                    "package": "libxml2",
                    "installed_version": "2.12.7+dfsg+really2.9.14-2.1+deb13u3",
                    "severity": "CRITICAL"
                },
                {
                    "id": "CVE-2026-74860",
                    "package": "libxml2",
                    "installed_version": "2.12.7+dfsg+really2.9.14-2.1+deb13u3",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-86138",
                    "package": "libxml2",
                    "installed_version": "2.12.7+dfsg+really2.9.14-2.1+deb13u3",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-86139",
                    "package": "libxml2",
                    "installed_version": "2.12.7+dfsg+really2.9.14-2.1+deb13u3",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-86140",
                    "package": "libxml2",
                    "installed_version": "2.12.7+dfsg+really2.9.14-2.1+deb13u3",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-86142",
                    "package": "libxml2",
                    "installed_version": "2.12.7+dfsg+really2.9.14-2.1+deb13u3",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-86143",
                    "package": "libxml2",
                    "installed_version": "2.12.7+dfsg+really2.9.14-2.1+deb13u3",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-86144",
                    "package": "libxml2",
                    "installed_version": "2.12.7+dfsg+really2.9.14-2.1+deb13u3",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-88807",
                    "package": "libxrender1",
                    "installed_version": "1:0.9.12-1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-76642",
                    "package": "login",
                    "installed_version": "1:4.16.0-2+really2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-78408",
                    "package": "login",
                    "installed_version": "1:4.16.0-2+really2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-78409",
                    "package": "login",
                    "installed_version": "1:4.16.0-2+really2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-78410",
                    "package": "login",
                    "installed_version": "1:4.16.0-2+really2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-76642",
                    "package": "mount",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-78408",
                    "package": "mount",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-78409",
                    "package": "mount",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-78410",
                    "package": "mount",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2025-69720",
                    "package": "ncurses-base",
                    "installed_version": "6.5+20250216-2",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2025-69720",
                    "package": "ncurses-bin",
                    "installed_version": "6.5+20250216-2",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-9538",
                    "package": "perl",
                    "installed_version": "5.40.1-6+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-9538",
                    "package": "perl-base",
                    "installed_version": "5.40.1-6+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-9538",
                    "package": "perl-modules-5.40",
                    "installed_version": "5.40.1-6+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-23949",
                    "package": "python3-pkg-resources",
                    "installed_version": "78.1.1-0.1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-15308",
                    "package": "python3.13",
                    "installed_version": "3.13.5-2+deb13u5",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-19445",
                    "package": "python3.13",
                    "installed_version": "3.13.5-2+deb13u5",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-19553",
                    "package": "python3.13",
                    "installed_version": "3.13.5-2+deb13u5",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-7210",
                    "package": "python3.13",
                    "installed_version": "3.13.5-2+deb13u5",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-82049",
                    "package": "python3.13",
                    "installed_version": "3.13.5-2+deb13u5",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-15308",
                    "package": "python3.13-minimal",
                    "installed_version": "3.13.5-2+deb13u5",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-19445",
                    "package": "python3.13-minimal",
                    "installed_version": "3.13.5-2+deb13u5",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-19553",
                    "package": "python3.13-minimal",
                    "installed_version": "3.13.5-2+deb13u5",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-7210",
                    "package": "python3.13-minimal",
                    "installed_version": "3.13.5-2+deb13u5",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-82049",
                    "package": "python3.13-minimal",
                    "installed_version": "3.13.5-2+deb13u5",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-76642",
                    "package": "util-linux",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-78408",
                    "package": "util-linux",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-78409",
                    "package": "util-linux",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-78410",
                    "package": "util-linux",
                    "installed_version": "2.41.5-0+deb13u1",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2023-5574",
                    "package": "xserver-common",
                    "installed_version": "2:21.1.16-1.3+deb13u4",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-88812",
                    "package": "xserver-common",
                    "installed_version": "2:21.1.16-1.3+deb13u4",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-93516",
                    "package": "xserver-common",
                    "installed_version": "2:21.1.16-1.3+deb13u4",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-93521",
                    "package": "xserver-common",
                    "installed_version": "2:21.1.16-1.3+deb13u4",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-93523",
                    "package": "xserver-common",
                    "installed_version": "2:21.1.16-1.3+deb13u4",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2023-5574",
                    "package": "xvfb",
                    "installed_version": "2:21.1.16-1.3+deb13u4",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-88812",
                    "package": "xvfb",
                    "installed_version": "2:21.1.16-1.3+deb13u4",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-93516",
                    "package": "xvfb",
                    "installed_version": "2:21.1.16-1.3+deb13u4",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-93521",
                    "package": "xvfb",
                    "installed_version": "2:21.1.16-1.3+deb13u4",
                    "severity": "HIGH"
                },
                {
                    "id": "CVE-2026-93523",
                    "package": "xvfb",
                    "installed_version": "2:21.1.16-1.3+deb13u4",
                    "severity": "HIGH"
                }
            ]
        }
    }
}
